SRL Archive - RuneScape News and General

So, I'm bored… I went to see powerbot.org for the hell of it. After it didn't load, I was like "To the TWIT-cave!".

I look on there twitter and this was said less than 25 seconds of me checking out rsbots twitter:
"A hacker by the name of Gh0$T found an exploit in our bot and obtained access to all accounts. Please change your passwords!"

HAHAHAHAHAHAHAHA!!! That has to be the funniest thing I have ever read!

A "hacker" found an "exploit."
Interesting…

As far as I know, this "exploit" is just the code used to decrypt account data in RSBot. He distributes some program that claims to do something and it grabs your account data and sends it somewhere else.

Man, they are having some issues over there atm. This really sucks for them.

It's like the third time I've had to change my account passwords this week. Not amused.

Man twitter is annoying. Any way I can only see posts that powerbot has made, and not all of the @XPersonHere posts?!

Right when they are trying to fix up the client to work with Jagex' s new system, this happens. Sucks for them I guess.

and this is why ill never use RSbot.

One of the head scripters of powerbot left and made his own site and they're ddosing each other.. and the guy had keyloggers in all of his scripts which is why hundreds of people are losing their accounts etc – from what I heard (from a friend who is active on powerbot)

Same thing happened to iBot a few years back.

Shows you we are the only true form of secure botting.

From: grats
and the guy had keyloggers in all of his scripts which is why hundreds of people are losing their accounts etc – from what I heard (from a friend who is active on powerbot)

No, that's just propaganda designed to scare people away from Arbiter and RSBuddy. His scripts are not and were not infected.

From: Method
No, that's just propaganda designed to scare people away from Arbiter and RSBuddy. His scripts are not and were not infected.

Ah I see, that was the guy who left and made his own site?
Are they dosing each other or is that made up too? :confused:

From: grats
Ah I see, that was the guy who left and made his own site?
Are they dosing each other or is that made up too? :confused:

Yes, he is one of the owners of RSBuddy (Jacmob is the other).

I don't know who the attacks are coming from.

why the hell did they store user's info in the first place?

From: Main Ftw
why the hell did they store user's info in the first place?

Just so they knew they had an opportunity to make a quick buck.

Rsbot stores you account info to log you in…

From: Method
No, that's just propaganda designed to scare people away from Arbiter and RSBuddy. His scripts are not and were not infected.

You extensively looked through the source code your self?

Just don't use RSBot, and you'll all be fine :rolleyes:

From: Zyt3x
Just don't use RSBot, and you'll all be fine :rolleyes:

^:garfield:

Good.

A hacker by the name of Gh0$T found an exploit in our bot and obtained access to all accounts. Please change your passwords!

Does this mean the runescape passwords are saved on rsbot server?

From: bevardis
Does this mean the runescape passwords are saved on rsbot server?

No it means your account on powerbot.org is stored. Your passwords that you save in "accounts" is saved in a local file, not on the powerbot website

From: cycrosism
No it means your account on powerbot.org is stored. Your passwords that you save in "accounts" is saved in a local file, not on the powerbot website

That's what I thought.

But it was a bit strange, when they said to change passwords on a site that is down, so I thought it's on runescape.

From: cycrosism
No it means your account on powerbot.org is stored. Your passwords that you save in "accounts" is saved in a local file, not on the powerbot website

From: bevardis
That's what I thought.

But it was a bit strange, when they said to change passwords on a site that is down, so I thought it's on runescape.

No, Ghost hacked runescape accounts, not powerbot accounts

What last version should I have ran to be at risk?

2.22

Small question, does anyone have the IP of GHO$T? Does it happen to be some qwest.com one?

Then I'm fine. Haven't used it for a month.

This is why I don't auto. I have the time to waste life =P

Lol true that RUnescape Pro, I'm the same way now, and I enjoy playing the game for just that, the game.

From: HyperSecret
Man, they are having some issues over there atm. This really sucks for them.

That's what you get when money is involved. :)

From: Markus
Small question, does anyone have the IP of GHO$T? Does it happen to be some qwest.com one?

He came on IRC (another server, not Rizon) a few weeks ago, and he said he was Jethr0x. That name should ring a bell to anyone familiar with Sythe. He has an account here from what I remember, so you could probably grab it from that account.

Jethr0x indeed rings a bell, but the IP over here is from Road Runner.
Didn't he mass-scam around 500m or so?

I only use rsbot for killing giant spiders, and ape atoll agility (the built in one).

Didn't get my account hacked (It is nooby). Changed the password anyways.

I guess its good that RSBot has been down for updates, it made more people check the forum and see that there were issues with password stealing scripts. If this were to have happened during a period of time with no big RS updates, alot more people would have lost their accounts.

From: Wizzup?
That's what you get when money is involved. :)

This is exactly right. People will do just about anything to make profit off others, which is great thing about SRL with it's unique style in RS botting, it's all open-source and there's no money involved. And the fact that usernames and passwords are stored within the script itself and only the script, makes Scar/Simba macroing over all the safest there is.

Im glad i stopped botting since December. The only thing i ever do closest to botting is scripting some bots for Simba. It's small things tho like GE Handler for merchanting and etc.

@Above

Your right, I never liked Powerbot the moment they asked for my password and username which was stored universal for scripts to access.

And true, us humans exploit ourselves for the benefit of our own. Human nature got the best of whoever hacked those accounts. Anyone who were to have power over every single botter and their accounts would do the same no different.

@Markus

Well if you ever find his true identity, i hope you put a hit on him. Id like to see that bastard drown in his own blood. And piss.

2.24

From: cycrosism
2.24

2.24 was clean. In the other thread in the General section about ArbiBots there's a picture of one of Gh0$t's posts saying that it was only 2.22 which was infected.

Oh, I thought 2.24 was infected too because they just released 2.25 which they are saying is clean.

I only ever used 2.20 and I also compiled it myself, not downloaded so it would have been clean anyway

They probably just released 2.25 as a precautionary measure.

So would you guys say 2.25 is safe to use? I want to run zr0k5's script some more :p

Yes, 2.25 is safe to use.

Where can I get 2.25 I can only find 2.24 :S

From: Dynamite
Where can I get 2.25 I can only find 2.24 :S

Download it through the SVN :)

2.25 looks safe, I have used it without any problems for a few days now.

So uh I am really confused. Did they just upload an edited jar, or what? I checked the code of all the past revisions and I saw nothing that could steal passwords.

Apparently there was a hacked rev 2.22 or something that was uploaded and then taken down secretly by ghost and his people.

2.22-2.24 was infected. Any releases before or after this are safe. I.E. 2.25 is safe to use

Harry was talking about how they would've had to upload them to the google code repo and it would've saved any malicious work done if that happened, and he didn't see any or something?

From: i luffs yeww
Harry was talking about how they would've had to upload them to the google code repo and it would've saved any malicious work done if that happened, and he didn't see any or something?

Why would that have to be done? Only the download link at the top of RSBot's forum needed to be changed (and was changed, from what gh0st has said).

From: Markus
Jethr0x indeed rings a bell, but the IP over here is from Road Runner.
Didn't he mass-scam around 500m or so?

something like that but it was a while back and i cant remember what really had happened

That forum and bot went to shit so fast after Speljohan was out.

From: Markus
Jethr0x indeed rings a bell, but the IP over here is from Road Runner.
Didn't he mass-scam around 500m or so?

I don't believe Jethr0x ever scammed (at least he didn't on Sythe), but he did/does have quite a large 'net.

What did Speljohan go on to do?