Hi,
since few days I'm working on a great tool for the well known browser game DarkOrbit. The tool uses ExternalInterface API to communicate directly with the main.swf through JavaScript events.
Warning: I don't think it's a good bot/tool for daily usage. It's still under heavy development and mistakes happen. Don't use it on big accounts! I warned you!
So why do I publish it? I'm looking for people who can test it and contribute to the GitHub repo.
Hello ! So this is not a batch bot? How accurate will he be able to work and beat mobs? What are its advantages? Can it work just as accurately as batch bots?
Hello ! So this is not a batch bot? How accurate will he be able to work and beat mobs? What are its advantages? Can it work just as accurately as batch bots?
It's as accurate as packetbots, because it can have all the data that a real client does.
The main advantage is fact that it can work on Linux/Mac OS/Windows. No bot (except Golem) runs on every platform.
It's as accurate as packetbots, because it can have all the data that a real client does.
The main advantage is fact that it can work on Linux/Mac OS/Windows. No bot (except Golem) runs on every platform.
I compared preloader.swf files with the original and yours, in the original 88 classes, in your 93, you changed the code in it and now have access to all the game variables? How much will the introduction of new encryption (if the developers do it) affect this bot?
I compared preloader.swf files with the original and yours, in the original 88 classes, in your 93, you changed the code in it and now have access to all the game variables? How much will the introduction of new encryption (if the developers do it) affect this bot?
I simply patched preloader.swf to load unencrypted main.swf. Don't know why it says 93 classes, but I guess it's JPEXS' job.
A new encryption would do nothing. We just have to keep up variable names and swf files up to date.
The main.swf communicats with the JS side by executing JS events. Take a look at EventManager.
It's as accurate as packetbots, because it can have all the data that a real client does.
The main advantage is fact that it can work on Linux/Mac OS/Windows. No bot (except Golem) runs on every platform.
Quote:
Originally Posted by Freshek
I simply patched preloader.swf to load unencrypted main.swf. Don't know why it says 93 classes, but I guess it's JPEXS' job.
A new encryption would do nothing. We just have to keep up variable names and swf files up to date.
The main.swf communicats with the JS side by executing JS events. Take a look at EventManager.
That is, you found a vulnerability? I do not think that the developers wanted to leave the opportunity to work through api js directly with the flash.
Content script sandbox, in fact, isolates the script, we can't access the Flash DOM object directly. Take a look at Injector.js. A simple hack that works.
And well, ExternalInterface is just a part of the Flash API, not a vulnerability.
[DEV] ProjectExodus Open-Source 06/01/2010 - CO2 Private Server - 84 Replies Heya,
I kinda stopped doing projects on my own and I decided this is the last project I'm gonna do for myself and so I thought why not share it with the community.
Details:
-Coded from scratch
-Patch 4267
-Database type: Oracle
This source will be publiziced when the first revision is done. Comments are appreciated.