Legit User OPcodes

08/31/2016 16:34 B13.#1
hey guys im not sure if this is the right section to ask,
any ways any one knows opcodes that a normal user will send
[ a user who started the game from Silkroad.exe]
and opcodes that a BOT user will send ?
is there is a way to know the difference between these 2 users and how to detect them

thx in advance

Sorry for;
bad english, wrong section?
08/31/2016 18:43 Anonymous-9238#2
I don't think the "start" button on the launcher sends a packet.

But you can make your own dll and hook it to the launcher and make it send an opcode, i don't see how that is going to help you though since it can be easy to crack if people know what they're doing
08/31/2016 19:38 qoaway#3
if player logins with launcher, he disconnects from gateway after pressing start and creating new connection to gateway again, so you cant track if player started game with launcher or not.
08/31/2016 20:10 B13.#4
Quote:
Originally Posted by qoaway View Post
if player logins with launcher, he disconnects from gateway after pressing start and creating new connection to gateway again, so you cant track if player started game with launcher or not.
thank you for that note.
so how does filters lets say k-guard detects mbot users and shuts them down ?
08/31/2016 20:21 LastThief*#5
Okay first of all the launcher is just literally a launcher and serves absolutely no purpose except for updates. what it does is launching sro_client.exe with the following parameters /locale 0 0 in case of vsro the locale is 22 so the launcher launches the sro_client.exe as the following sro_client.exe /22 0 0 so the bot just skips the "updating" and just launches the client with corresponding parameters and now regarding to your question about shutting down the bots it's all about SilkroadSecurityAPI while sending the handshake you can set the two parameters of sending to true,true (which are encrypted, massive)
As far as I recall if you set the handshake packet to be both encrypted and massive the bot won't handle it and it'll terminate. The filter aka "k-guard" serves as a intermediary between the client and server and it works as the following if you are NOT using a filter

Bot : Hi, I'm starting please handshake me
Server : Okay there you go the handshake packet which is encrypted but not massive.
Client : Thank you so much I started.

And in this case you can't control what's going on. But if you have a filter between the client and server it'll go as following

Bot : Hi, I'm starting please handshake me
Server : Okay there you go the handshake packet which is encrypted but not massive.
Filter : Surprise motherfucker *proceeds to recreate the packet which is encrypted and massive using the bytes from the server*
Filter : There you go a packet which won't make you work.
Bot : DAFUQ IS THIS SHIT ? *crashes in Spanish*

Annnd, that's it :D
08/31/2016 20:37 Finsterlord#6
So it's possible to shutdown bots connecting to the server completely? Or will there still be any backdoors for them to connect?

@[Only registered and activated users can see links. Click Here To Register...] You want to create a botfree server?
08/31/2016 20:38 LastThief*#7
Quote:
Originally Posted by Finsterlord View Post
So it's possible to shutdown bots connecting to the server completely? Or will there still be any backdoors for them to connect?

@[Only registered and activated users can see links. Click Here To Register...] You want to create a botfree server?
Nope there's no work around if you set both parameters to true while creating packet.
I.E : Packet p = new Packet(someOpcodeHere,true,true)
08/31/2016 20:46 rares495#8
Quote:
Originally Posted by LastThief* View Post
Nope there's no work around if you set both parameters to true while creating packet.
I.E : Packet p = new Packet(someOpcodeHere,true,true)
So basically k-guard already does that?
08/31/2016 20:47 LastThief*#9
Quote:
Originally Posted by rares495 View Post
So basically k-guard already does that?
Yes but k-guard suck balls so bad and the code base is hideous
08/31/2016 20:47 B13.#10
Quote:
Originally Posted by LastThief* View Post
Okay first of all the launcher is just literally a launcher and serves absolutely no purpose except for updates. what it does is launching sro_client.exe with the following parameters /locale 0 0 in case of vsro the locale is 22 so the launcher launches the sro_client.exe as the following sro_client.exe /22 0 0 so the bot just skips the "updating" and just launches the client with corresponding parameters and now regarding to your question about shutting down the bots it's all about SilkroadSecurityAPI while sending the handshake you can set the two parameters of sending to true,true (which are encrypted, massive)
As far as I recall if you set the handshake packet to be both encrypted and massive the bot won't handle it and it'll terminate. The filter aka "k-guard" serves as a intermediary between the client and server and it works as the following if you are NOT using a filter

Bot : Hi, I'm starting please handshake me
Server : Okay there you go the handshake packet which is encrypted but not massive.
Client : Thank you so much I started.

And in this case you can't control what's going on. But if you have a filter between the client and server it'll go as following

Bot : Hi, I'm starting please handshake me
Server : Okay there you go the handshake packet which is encrypted but not massive.
Filter : Surprise motherfucker *proceeds to recreate the packet which is encrypted and massive using the bytes from the server*
Filter : There you go a packet which won't make you work.
Bot : DAFUQ IS THIS SHIT ? *crashes in Spanish*

Annnd, that's it :D
what you said sure explains this in a great way :D
PHP Code:
    if (Form1.mbotlogin != "Close")
                    
this.lg_local_security.GenerateSecurity(truetruetrue);
                else
                    
this.lg_local_security.GenerateSecurity(truefalsefalse); 
i have 2 questions tho
1.sbot can handle those ?
as i worked with kguard befor when closing mbot , sbot users act like nothing happend
2.can i change the locale 22 to any thing ?
08/31/2016 20:52 LastThief*#11
Quote:
Originally Posted by B13. View Post
what you said sure explains this in a great way :D
PHP Code:
    if (Form1.mbotlogin != "Close")
                    
this.lg_local_security.GenerateSecurity(truetruetrue);
                else
                    
this.lg_local_security.GenerateSecurity(truefalsefalse); 
i have 2 questions tho
1.sbot can handle those ?
as i worked with kguard befor when closing mbot , sbot users act like nothing happend
2.can i change the locale 22 to any thing ?
1-Nope all bots will be disabled
2-Techincally yes, production-wise ? nope
08/31/2016 21:37 B13.#12
Quote:
Originally Posted by LastThief* View Post
1-Nope all bots will be disabled
2-Techincally yes, production-wise ? nope
can't be done throw srblabal.ini from the cert files ?
or the server files will have some changes as well the blabalserver.exe and stuff ?

Quote:
Originally Posted by Finsterlord View Post
So it's possible to shutdown bots connecting to the server completely? Or will there still be any backdoors for them to connect?

@[Only registered and activated users can see links. Click Here To Register...] You want to create a botfree server?
yes i do, bots are so annoying beside the system i have in my mind wont need a single bot task or take too much time so the users dont just leave the pc and come back after a day see if its done, the answer LastThief provided solves every thing but still looking for every way to do it.
08/31/2016 22:13 Finsterlord#13
Will these measures prevent from other 3rd party programs like multiclients and alchemy tools, too?

I'm sorry to ask, but I never used (and never will) any of these bot programs and thus I don't know how they work. I prefer playing in an environment with human beings playing the game. :)
08/31/2016 23:39 LastThief*#14
Quote:
Originally Posted by Finsterlord View Post
Will these measures prevent from other 3rd party programs like multiclients and alchemy tools, too?

I'm sorry to ask, but I never used (and never will) any of these bot programs and thus I don't know how they work. I prefer playing in an environment with human beings playing the game. :)
Yes as they will prevent everything that's 3rd party.

Quote:
Originally Posted by B13. View Post
can't be done throw srblabal.ini from the cert files ?
or the server files will have some changes as well the blabalserver.exe and stuff ?



yes i do, bots are so annoying beside the system i have in my mind wont need a single bot task or take too much time so the users dont just leave the pc and come back after a day see if its done, the answer LastThief provided solves every thing but still looking for every way to do it.
Not really sure, I did not go deep into file structure so not really sure.
09/01/2016 12:03 B13.#15
Small Update
PHP Code:
   this.lg_local_security.GenerateSecurity(truefalsefalse); 
worked
and mbot client didn't run
how ever some tools are still able to run
vSro Alchemy worked.

so i tried to change the locale every server file worked fine but
smc fail to load plugins tho , and idea ?
.can login
.when loads plugins stops working.