SRL Archive - General

Reflection Bot 2.5


_sw

2012-02-28 17:25:52

OE sux

Sin

2012-02-28 17:29:33

E*
Nvm, saw it was for RSC.

'Toxin

2012-02-28 17:30:21

First off, don't download anything even if virustotal says it's clean.

a) unzip the file and scan your .exe that you're running, don't scan zip please.
b) how many scripts are there actually ? the image isn't loading

_sw

2012-02-28 17:33:00

From: XxX Toxin XxX
First off, don't download anything even if virustotal says it's clean.

a) unzip the file and scan your .exe that you're running, don't scan zip please.
b) how many scripts are there actually ? the image isn't loading


Yeah, if you're downloading it, please scan it yourself if you want to be sure.

Here's a mirror of the scripts image: http://upit.cc/i/c463a90e.png

Scan of the OCR exe it uses: http://virusscan.jotti.org/en-gb/scanresult/3011c43abdb7a6a60ae2f1e65ce95ee0c86a29ee/d928031e5d401c5462e556bb5f1c53fbc7570b5e

Second scar of the OCR exe it uses: http://virusscan.jotti.org/en-gb/scanresult/b144e6d15daec1e9ec43d699b938cfd494b446e5/2f69f387b059422275352870f92b33f3fe712487

'Toxin

2012-02-28 17:34:38

Interesting. Will check out perhaps, see what other peoples opinion is.

xtrapsp

2012-02-28 17:41:39

Can someone verify this?

Erke

2012-02-29 15:58:00

It does work :o

Scaper

2012-02-29 16:00:29

solarwind?

P1nky

2012-03-01 01:19:48

From: Scaper
solarwind?


Exactly what came up in my mind.

_sw

2012-03-01 07:11:06

From: P1nky
Exactly what came up in my mind.


sw are my initials, I'm not Solarwind. I think he's from Canada, I'm from the UK. :)

the flea

2012-03-01 07:31:45

post the source? you will be a lot more trustworthy if you do that.

weequ

2012-03-01 08:42:02

Does this script actually use your mouse? I haven't seen a single rsc bot yet that does :p
How do you send the commands to the server without using mouse?

Edit: Could such techniques be implemented in rs2 bots?

_sw

2012-03-01 09:39:39

From: weequ
Does this script actually use your mouse? I haven't seen a single rsc bot yet that does :p
How do you send the commands to the server without using mouse?

Edit: Could such techniques be implemented in rs2 bots?


It doesn't move the mouse except to log in, where it manipulates the MOUSE_X and MOUSE_Y fields in the client to "click" the log in buttons.


public void attackNpc(int[] ids) throws Exception {
int[] npcInfo = getNpcIndex(ids);
if (npcInfo[0] < 0 || npcInfo[1] < 0) {
return;
}
if (!inCombat()) {
walkTo(getNpcRealX(npcInfo[1]), getNpcRealY(npcInfo[1]), false);
createPacket(190, (byte)95);
add2ByteInt(npcInfo[0], (byte)122);
finishPacket(0);
}
}

private void createPacket(int packetId, Object offset) throws Exception {
Method m = getPacketC().getClass().getSuperclass().getDeclaredMethod(Fields.CREATE_PACKET, new Class[] { Integer.TYPE, Byte.TYPE });
m.setAccessible(true);
Object pid = Integer.valueOf(packetId);
m.invoke(getPacketC(), pid, offset);
}

public int[] getNpcIndex(int[] ids) throws Exception {
int min = Integer.MAX_VALUE;
int minNpc = -1;
int minNpcIndex = -1;
for (int i = 0; i < ids.length; i++) {
for (int j = 0; j < getNpcCount(); j++) {
if (getNpcID(j) == ids[i] && !npcInCombat(j)) {
int temp = getNearestDistance(getNpcRealX(j), getNpcRealY(j));
if (temp < min) {
min = temp;
minNpc = getNpcIndexAt(j);
minNpcIndex = j;
}
}
}
}
return new int[] { minNpc, minNpcIndex };
}

No, RS2 has a number of measures implemented to stop bots that send action commands this way.

'Toxin

2012-03-01 09:42:02

From: weequ

Edit: Could such techniques be implemented in rs2 bots?


Probably not, we'd be auto logged out or something, jagex must have ways to detect that.

weequ

2012-03-01 09:49:19

Very nice. I think there has to be a way around it in rs2 too though because of this: http://www.youtube.com/watch?v=Ihpw1eF7Ep4

_sw

2012-03-01 09:53:47

From: weequ
Very nice. I think there has to be a way around it in rs2 too though because of this: http://www.youtube.com/watch?v=Ihpw1eF7Ep4


I don't know much about RS2 bots or the RS2 client (post-2006 RS2 client anyway :P) but I assumed that recent RS2 bots that aren't colour or OpenGL based use reflection to get fields in the client for various entities (NPCs, objects, ground items) and then calculate their X and Y position on the screen or minimap and then send a mouse movement and click. My bot does the same thing, except replace send a mouse click with invoke a method in the client to send a packet.

I believe that the last and only(?) RS2 packet bot was called RSDemon and existed a few years ago due to an oversight by Jagex.

weequ

2012-03-01 09:59:48

_sw in that video however the bones are not visible on their mainscreen (Unless they use some sort of zoom hack). And when the bones were picked up they instantly stopped, meaning they have somehow clicked the object itself.

Ashaman88

2012-03-01 10:05:18

This looks pretty cool, maybe I'll go back and bot up some rsc stats!

_sw

2012-03-01 10:06:57

From: weequ
_sw in that video however the bones are not visible on their mainscreen (Unless they use some sort of zoom hack). And when the bones were picked up they instantly stopped, meaning they have somehow clicked the object itself.


When you drop an item in RS2, does it appear instantly to other players? If it doesn't, then it's very interesting that they could still see that it was there because it wouldn't make sense for the server to tell the client that the bones are there when they haven't appeared yet. (video is sped up, so it's hard to tell what the actual delay was between the item being dropped and them running towards it)

I believe that entities are loaded by the area, so when a new area loads you get all of the objects, NPCs and ground items in that area, so the bones would be added to the client's item array even if they weren't visible on the screen. This is why when you walk the dots on the mini-map are loaded without any obvious delay.

My guess is that those bots saw that the bones had been added to the item array, and their script walks to the item by clicking on the mini-map before picking them up.

Though I remember Chinese gold-farmers using some kind of private packet bot years ago, so it's possible that you are correct.

weequ

2012-03-01 10:15:52

_sw items spawn instantly in the wilderness nowdays (when you drop). I made the video myself (Didn't speed it up but my screen recorder might have a bit). And the thing is that when you walk to the items you wouldn't stop instantly when they disappear.

And yeah the bot was private for sure.

_sw

2012-03-01 10:22:47

Ah, I see what you mean.That means there's a chance that RSDemon is back, which is pretty worrying.

Anything is possible if you are prepared to put time and hard work in to it. It's completely possible to make a bot which bypasses the client and requires no graphics at all. If you go to Moparisthebest, in the past people have released simple proof of concept bots which do exactly that, only they were broken due to having no easy way to update them and frequent changes to the RS protocol.

If you have the finances to employ a team of skilled programmers, there's no reason why it wouldn't be possible to write a bot for RS2 that sends action commands in this way and can be easily updated.

What is interesting to me is how they are doing it without getting banned. Fake mouse movement packets?

Ashaman88

2012-03-01 10:24:08

From: weequ
Very nice. I think there has to be a way around it in rs2 too though because of this: http://www.youtube.com/watch?v=Ihpw1eF7Ep4


That video is actually pretty funny!

Flight

2012-03-01 10:26:39

Oh I sure had fun working with the early RSC bots… So if I'm understanding this right, this gathers information via reflection but sends packets to handle actions from the user?

_sw

2012-03-01 10:28:56

From: Flight
Oh I sure had fun working with the early RSC bots… So if I'm understanding this right, this gathers information via reflection but sends packets to handle actions from the user?


Yes, it doesn't send actions directly to the server like AutoRune did, but uses reflection to invoke methods that send packets in the client, basically telling the client to tell the server that it's done something.

weequ

2012-03-01 11:40:35

From: _sw
Yes, it doesn't send actions directly to the server like AutoRune did, but uses reflection to invoke methods that send packets in the client, basically telling the client to tell the server that it's done something.
Yeah that way you can bypass the encryption in the packets I can imagine.

So does jagex have something to stop you doing that in rs2 or is it just extremely detectable?

_sw

2012-03-01 12:30:25

From: weequ
Yeah that way you can bypass the encryption in the packets I can imagine.

So does jagex have something to stop you doing that in rs2 or is it just extremely detectable?


I have no idea. I know they have lots to protect against proxy or client-replacement bots. Aryan sent commands in a way similar to mine, but that was a long time ago. You would probably get a better response asking that question on RS-Hacking or Moparisthebest.

_sw

2012-03-03 17:11:33

New scripts - TradeTest, CraftingGuildGold
Fixed scripts - VarrockPlatebodySmith, YanilleDruids, NatureThief, BloodChest

New script methods -

void useItemOnWall(int x, int y, int itemID)
void tradePlayer(int pid)
boolean inTradeOfferWindow()
boolean inTradeConfirmWindow()
void acceptTrade1()
void acceptTrade2()
void tradeOfferItem(int id, int amount)
void equipItem(int id)
boolean itemEquipped(int id)

http://uppit.com/mqaa3oq0iu1p/reflectionbot.zip

doublex8

2012-03-12 15:57:52

Probably a dumb question but does this only work for Jagex's RSC?

Home

2012-03-12 15:58:48

From: doublex8
Probably a dumb question but does this only work for Jagex's RSC?


Yes. From what I understand.

~Home

jormatar

2012-05-26 11:16:14

Works great, thanks man! Misses couple of scripts / certer doesn't support steel, nat/blood chest doesn't seem to work for me at all but otherwise perfect!

Sirenia

2012-05-26 18:01:22

Tried it and it worked pretty nice, nice release

MrClifford

2012-06-07 13:38:01

Looks very nice… Havnt tested yet as no membs, just seen theres alot of people on rsc at the mo and thought hmm… Some bots been released and heres one of 2 i have found!

Would you be able to add a smelting script at any point? Would rather like to bump the 93 smither to 98 or 99 :) and does leosleep work automatically with the bot?(as it loads up with it)

Cheers again man

Neros

2012-06-08 21:03:59

im really considering this, i lost my old rsc staker years ago, always wanted to rebuild him, depending on how much attention this gets, i may well like to be in on the actual project, maybe we could revive rsc staking :3

exilednoob

2012-06-10 09:42:42

dude thank you so much _SW
I have a level 90 classic account with good stats, been looking for a real bot for a while now (years)

thanks a million..

EDIT: Alas, go figure.. after all this time, i cant get it to work.
"Invalid or corrupt jarfile
C:\Users\Admin\Downloads\reflectionbot\rsclassic.jar"

:(

furikazashi

2012-06-22 15:27:15

First I would like to congratulate you on the Scripts, I've used half of them already and they are wonderful, thus far I do only have a single question and possible request if that is alright? On the Powerfletch script It fletches all the bows and then drops and stops there. Can we make an option to continuously loop instead of having to start it over and over? Thanks a bunch -Furi

Note: also I'd be very interested in helping scripting if you can post a link to a tutorial on new scripters. Thanks

turner850

2012-10-29 01:58:22

Is there an easy way to modify this for a private server?