[dev] Toshinou – open-source DarkOrbit tool/bot

[Freshek]

Toshinou/としのう

Hi,
since few days I'm working on a great tool for the well known browser game DarkOrbit. The tool uses ExternalInterface API to communicate directly with the main.swf through JavaScript events.

Warning: I don't think it's a good bot/tool for daily usage. It's still under heavy development and mistakes happen. Don't use it on big accounts! I warned you!

So why do I publish it? I'm looking for people who can test it and contribute to the GitHub repo.

You can contribute to/download the tool on .

Related Discord (development + questions):

How to setup on Chromium/Chrome on Linux Kubuntu:

 Spoiler

(on Windows you can skip the proxy settings part)

Windows & English tutorial by @

 Spoiler

Community-made banners:

 Spoiler

[lollo900]

Thank you for the release! I'll test it

[Sydno]

amazing :P

[NoCheatImPGM]

This is truly amazing! Well done!

[oleg-19952008]

Hello ! So this is not a batch bot? How accurate will he be able to work and beat mobs? What are its advantages? Can it work just as accurately as batch bots?

[Freshek]

Originally Posted by oleg-19952008

Hello ! So this is not a batch bot? How accurate will he be able to work and beat mobs? What are its advantages? Can it work just as accurately as batch bots?

It's as accurate as packetbots, because it can have all the data that a real client does.
The main advantage is fact that it can work on Linux/Mac OS/Windows. No bot (except Golem) runs on every platform.

[oleg-19952008]

Originally Posted by Freshek

It's as accurate as packetbots, because it can have all the data that a real client does.
The main advantage is fact that it can work on Linux/Mac OS/Windows. No bot (except Golem) runs on every platform.

I compared preloader.swf files with the original and yours, in the original 88 classes, in your 93, you changed the code in it and now have access to all the game variables? How much will the introduction of new encryption (if the developers do it) affect this bot?

[Freshek]

Originally Posted by oleg-19952008

I compared preloader.swf files with the original and yours, in the original 88 classes, in your 93, you changed the code in it and now have access to all the game variables? How much will the introduction of new encryption (if the developers do it) affect this bot?

I simply patched preloader.swf to load unencrypted main.swf. Don't know why it says 93 classes, but I guess it's JPEXS' job.

A new encryption would do nothing. We just have to keep up variable names and swf files up to date.

The main.swf communicats with the JS side by executing JS events. Take a look at EventManager.

[oleg-19952008]

Originally Posted by Freshek

It's as accurate as packetbots, because it can have all the data that a real client does.
The main advantage is fact that it can work on Linux/Mac OS/Windows. No bot (except Golem) runs on every platform.

Originally Posted by Freshek

I simply patched preloader.swf to load unencrypted main.swf. Don't know why it says 93 classes, but I guess it's JPEXS' job.

A new encryption would do nothing. We just have to keep up variable names and swf files up to date.

The main.swf communicats with the JS side by executing JS events. Take a look at EventManager.

[Freshek]

Originally Posted by oleg-19952008

Main.swf encryption got changed in past few days… and preloader changed too.

→

[Petyaking2]

The setup is too complicated for me lol. But anyway I love this and looks really good. Nice job

[Freshek]

Originally Posted by Petyaking2

The setup is too complicated for me lol. But anyway I love this and looks really good. Nice job

You can join the Discord server. We will try our best to help you. I'll add Windows tutorial later or so.

[oleg-19952008]

Originally Posted by Freshek

You can join the Discord server. We will try our best to help you. I'll add Windows tutorial later or so.

That is, you found a vulnerability? I do not think that the developers wanted to leave the opportunity to work through api js directly with the flash.

[Freshek]

Originally Posted by oleg-19952008

That is, you found a vulnerability? I do not think that the developers wanted to leave the opportunity to work through api js directly with the flash.

Content script sandbox, in fact, isolates the script, we can't access the Flash DOM object directly. Take a look at Injector.js. A simple hack that works.

And well, ExternalInterface is just a part of the Flash API, not a vulnerability.

[Petyaking2]

Originally Posted by Freshek

You can join the Discord server. We will try our best to help you. I'll add Windows tutorial later or so.

Can you send me a discord link?