[dev] Toshinou � open-source DarkOrbit tool/bot

Toshinou/としのう

Hi,
since few days I'm working on a great tool for the well known browser game DarkOrbit. The tool uses ExternalInterface API to communicate directly with the main.swf through JavaScript events.

Warning: I don't think it's a good bot/tool for daily usage. It's still under heavy development and mistakes happen. Don't use it on big accounts! I warned you!

So why do I publish it? I'm looking for people who can test it and contribute to the GitHub repo.

You can contribute to/download the tool on [Only registered and activated users can see links. Click Here To Register...].

Related Discord (development + questions): [Only registered and activated users can see links. Click Here To Register...]

How to setup on Chromium/Chrome on Linux Kubuntu:

Spoiler

Windows & English tutorial by @[Only registered and activated users can see links. Click Here To Register...]

Spoiler

[Only registered and activated users can see links. Click Here To Register...]

10/14/2017 14:41 lollo900#2

Thank you for the release! I'll test it :)

10/14/2017 14:48 Sydno#3

amazing :P

10/14/2017 14:51 NoCheatImPGM#4

This is truly amazing! Well done!

10/14/2017 16:08 oleg-19952008#5

Hello ! So this is not a batch bot? How accurate will he be able to work and beat mobs? What are its advantages? Can it work just as accurately as batch bots?

10/14/2017 16:17 Freshek#6

Quote:

Originally Posted by oleg-19952008

Hello ! So this is not a batch bot? How accurate will he be able to work and beat mobs? What are its advantages? Can it work just as accurately as batch bots?

It's as accurate as packetbots, because it can have all the data that a real client does.
The main advantage is fact that it can work on Linux/Mac OS/Windows. No bot (except Golem) runs on every platform.

10/14/2017 16:28 oleg-19952008#7

Quote:

Originally Posted by Freshek

It's as accurate as packetbots, because it can have all the data that a real client does.
The main advantage is fact that it can work on Linux/Mac OS/Windows. No bot (except Golem) runs on every platform.

I compared preloader.swf files with the original and yours, in the original 88 classes, in your 93, you changed the code in it and now have access to all the game variables? How much will the introduction of new encryption (if the developers do it) affect this bot?

10/14/2017 16:31 Freshek#8

Quote:

Originally Posted by oleg-19952008

I compared preloader.swf files with the original and yours, in the original 88 classes, in your 93, you changed the code in it and now have access to all the game variables? How much will the introduction of new encryption (if the developers do it) affect this bot?

I simply patched preloader.swf to load unencrypted main.swf. Don't know why it says 93 classes, but I guess it's JPEXS' job.

A new encryption would do nothing. We just have to keep up variable names and swf files up to date.

The main.swf communicats with the JS side by executing JS events. Take a look at EventManager.

10/14/2017 16:34 oleg-19952008#9

Quote:

Originally Posted by Freshek

It's as accurate as packetbots, because it can have all the data that a real client does.
The main advantage is fact that it can work on Linux/Mac OS/Windows. No bot (except Golem) runs on every platform.

Quote:

Originally Posted by Freshek

I simply patched preloader.swf to load unencrypted main.swf. Don't know why it says 93 classes, but I guess it's JPEXS' job.

A new encryption would do nothing. We just have to keep up variable names and swf files up to date.

The main.swf communicats with the JS side by executing JS events. Take a look at EventManager.

[Only registered and activated users can see links. Click Here To Register...]

10/14/2017 16:36 Freshek#10

Quote:

Originally Posted by oleg-19952008

[Only registered and activated users can see links. Click Here To Register...]

Main.swf encryption got changed in past few days� and preloader changed too.

→ [Only registered and activated users can see links. Click Here To Register...]

10/14/2017 16:37 Petyaking2#11

The setup is too complicated for me lol. But anyway I love this and looks really good. Nice job :D

10/14/2017 16:38 Freshek#12

Quote:

Originally Posted by Petyaking2

The setup is too complicated for me lol. But anyway I love this and looks really good. Nice job :D

You can join the Discord server. We will try our best to help you. I'll add Windows tutorial later or so.

10/14/2017 16:53 oleg-19952008#13

Quote:

Originally Posted by Freshek

You can join the Discord server. We will try our best to help you. I'll add Windows tutorial later or so.

That is, you found a vulnerability? I do not think that the developers wanted to leave the opportunity to work through api js directly with the flash.

10/14/2017 17:06 Freshek#14

Quote:

Originally Posted by oleg-19952008

That is, you found a vulnerability? I do not think that the developers wanted to leave the opportunity to work through api js directly with the flash.

Content script sandbox, in fact, isolates the script, we can't access the Flash DOM object directly. Take a look at Injector.js. A simple hack that works.

And well, ExternalInterface is just a part of the Flash API, not a vulnerability.

10/14/2017 17:41 Petyaking2#15

Quote:

Originally Posted by Freshek

You can join the Discord server. We will try our best to help you. I'll add Windows tutorial later or so.

Can you send me a discord link?

Page 1 of 34

Last »