[EUREKA] Solution to bypassing the Log in sytem

07/17/2009 02:08 6Drako9#1

Ok my idea is having a client less program that is always running on your computer. this program is constantly trying to connect to the server.
eventualy this program will go down the query and log in to the character selection screen. (ideally it will do this over night)
Then when we run the client it should connect to our program (thinking that our program is the server) and will be able to log in on the first try.

The system is similar to how nuConnect works.

the only problem is that have no idea how to do this so I'm just posting it so that people who can make this kind of program are aware of this method

btw what is the decryption algorithm for SRO packets?

07/17/2009 02:20 xxbrentonxx#2

SRO uses blowfish encryption, download Drew Bentons Silkroad Security for more information. It wouldnt work properly btw, i dont think you can have more then one client/clientless logging in/logged in at once to the same user. So this would only be of use to people who dont (try to) bot 24/7, and is not a solution to logging back in after you are dced.

07/17/2009 02:35 6Drako9#3

Quote:

Originally Posted by xxbrentonxx

SRO uses blowfish encryption, download Drew Bentons Silkroad Security for more information. It wouldnt work properly btw, i dont think you can have more then one client/clientless logging in/logged in at once to the same user. So this would only be of use to people who dont (try to) bot 24/7, and is not a solution to logging back in after you are dced.

yea I thought about both those things.
I know you would be able to request log in while playing
and also if you get DCed you will have to go to the top of the que.
but for example if the entire server goes down, the program will notice this and when the server is back up again you will have one of the first slots.

and thank you for the decryption help

07/17/2009 02:42 xxbrentonxx#4

Quote:

Originally Posted by 6Drako9

yea I thought about both those things.
I know you would be able to request log in while playing
and also if you get DCed you will have to go to the top of the que.
but for example if the entire server goes down, the program will notice this and when the server is back up again you will have one of the first slots.

and thank you for the decryption help

Yeah but the entire server goes down thing is what autologin programs are useful for, so if your using like sbot or isrobot a program like this wouldnt be much use.

07/17/2009 10:57 recking#5

yeah whatever... i dont want to take your dream...

so go ahead, start some programming.

07/17/2009 12:02 pushedx#6

[Only registered and activated users can see links. Click Here To Register...] already uses this idea for their system. I don't know if it's been updated yet or not since the new version, but before this login system, you would login via Clientless fast and then attach the client and have it up and running fine. It was a pretty clever idea actually. I didn't think it would be easily doable but bot90210/backo got it done nicely.

There is no feasible theory to bypass the current login system though as far as I can tell. Joymax finally got smart and started doing things server sided with the timings, which is the only way to prevent people from abusing the system. There's not much you can really do except maybe create more connections to try and login just in case you get the login bug, one of your connections should make it, but even that isn't going to provide much benefit since you still have to wait for a slot. That's also assuming they don't mark your account as being in queue and disallow simultaneous logins, which could also be implemented.

07/17/2009 17:23 Low_Riders#7

JOYMAX is addicted to our money, now let us make them work for our money!
We have the money - we have the power!

1. How to Ban Bots on Your Server:

Spoiler

Quote:

Quote:

[Game Play] Level 1 characters
05:13:06 09/06/2009 [Silkroad Online Standard Time]

[Only registered and activated users can see links. Click Here To Register...]
[Only registered and activated users can see links. Click Here To Register...]
[Only registered and activated users can see links. Click Here To Register...]
[Only registered and activated users can see links. Click Here To Register...]
[Only registered and activated users can see links. Click Here To Register...]

What are these characters doing there? They just stand there, doing nothing which doesn''t allow us to log in. Get rid of these or my friends are going to stop play the game (we buy silks, worth 200$ a month).

Quote:

Hello. this is Silkroad Online.

Dear Valued Customer,

Greetings from Joymax Customer Support Team!
We have received your email today regarding a bot report. We apologize for any inconvenience that this has caused you and we really understand your frustration about the matter however we assure you that we will always do our best to cleanse the game of bots and other illegal program abusers. What we are going to do is submit this report of yours directly to our Game Operations team for further investigation.

Thank you very much for your continued support and have a great day!

* Joymax will NEVER ask players about personal & account information, password, and credit card numbers, nor will they ever ask a player for a trade.

* To prevent the loss of accounts, we strongly recommend our users change password frequently.

Thank you for emailing Joymax Customer Support.

For further details and support, kindly visit our website at [Only registered and activated users can see links. Click Here To Register...].

Sincerely yours,

Joymax Customer Support Team

[Only registered and activated users can see links. Click Here To Register...]

Quote:

Do you actually get it, how gold bots can be easily banned? All you have to do it to cry at them how you'll stop buying silk if they won't ban gold bots, they'll log in on the server, check the characters and put them on the ban list. Easy as pie. Just provide them with screen shots.

Also, if you're waiting for Silkroad to get better you're wrong. The more you wait, the more you'll see how fcked up it's getting. Get on work, make some screen shots of gold bots and report them!

I still have to wait for the current report to be checked and till Tuesday it's still a few days, but we'll see if this help, on Tuesday.

2. Spamming JOYMAX Email Support:

Spoiler

3.Spamming JOYMAX official iSRO Forums:

Spoiler

Just do it god dammit!

07/17/2009 19:12 Julian2008#8

Low_RIders you shouldnt be spamming.If you want help to improve the game open a thread and discuss there.I'm not against you and I do consider it a good idea but dont spam other threads.

07/17/2009 20:01 Low_Riders#9

Quote:

Originally Posted by Julian2008

Low_RIders you shouldnt be spamming.If you want help to improve the game open a thread and discuss there.I'm not against you and I do consider it a good idea but dont spam other threads.

Sorry, It wasnt my intention to spam.
:)

07/18/2009 00:08 6Drako9#10

Low Rider your posts will have more effect on SRO Forum

I bet that there are way more angry people that have no advantage on loging in whatsoever on that forum than on this Sirlkroad hacking forum
:D