Free Lineage 2 Revolution Bot (DJMBot)

starbreeze111 · 03/19/2018, 23:17

Quote:

Originally Posted by ZanTir

Sry but i have no idea what you are talking about @
Any chance to get your workaround for noobs

WARNING: This way I can technically see your password, you have to trust me I won't look or create new acc.

edit your hosts:
79.120.77.14

Then you'll have to visit

with IE and add my cert for djmbot.com to trusted (If IE does not complain, bot will work too)
Some AV might protect your hosts/dns, I won't help there.

Login with valid login/pass, it should give you Haxx account instead or Free and full features.

greatpanda1k · 03/20/2018, 23:21

Quote:

Originally Posted by starbreeze111

WARNING: This way I can technically see your password, you have to trust me I won't look or create new acc.

edit your hosts:
79.120.77.14

Then you'll have to visit with IE and add my cert for djmbot.com to trusted (If IE does not complain, bot will work too)
Some AV might protect your hosts/dns, I won't help there.

Login with valid login/pass, it should give you Haxx account instead or Free and full features.

i have already bought a license but feels scammed by the developer as you can't multi-instance unless you buy a license for each of your characters: i have 3. i tried your method but unfortunately mitmproxy doesn't work on my network and your host just says "booooo"? if you can show me how to do it on my own, that would be awesome.

b0dyguard · 03/21/2018, 03:54

Quote:

Originally Posted by starbreeze111

WARNING: This way I can technically see your password, you have to trust me I won't look or create new acc.

edit your hosts:
79.120.77.14

Then you'll have to visit with IE and add my cert for djmbot.com to trusted (If IE does not complain, bot will work too)
Some AV might protect your hosts/dns, I won't help there.

Login with valid login/pass, it should give you Haxx account instead or Free and full features.

-solve, my vpn is on

starbreeze111 · 03/21/2018, 06:05

Quote:

Originally Posted by greatpanda1k

i have already bought a license but feels scammed by the developer as you can't multi-instance unless you buy a license for each of your characters: i have 3. i tried your method but unfortunately mitmproxy doesn't work on my network and your host just says "booooo"? if you can show me how to do it on my own, that would be awesome.

"booo" means you are connecting to wrong apache "host", i.e. just connecting by IP, not to

.

Actual check URL is:

For the mitmproxy, bot seems to ignore proxy settings when it does auth, so you can't just run mitmproxy and change IE proxy setting to point to it.
I had to run it on another pc (or in virtualbox), that can connect to real

. On bot PC you edit hosts file to point to it, then it will work.

greatpanda1k · 03/21/2018, 08:04

Quote:

Originally Posted by starbreeze111

"booo" means you are connecting to wrong apache "host", i.e. just connecting by IP, not to .

Actual check URL is:

For the mitmproxy, bot seems to ignore proxy settings when it does auth, so you can't just run mitmproxy and change IE proxy setting to point to it.
I had to run it on another pc (or in virtualbox), that can connect to real . On bot PC you edit hosts file to point to it, then it will work.

thank you. i got it working on your ip for now. will try to set up my own. i have never used mitmproxy before so it's kinda hard for me.

starbreeze111 · 03/22/2018, 07:24

It has to be on another pc, can be virtualbox, because you need to redirect bot to your own ip in hosts.
Needs apache, php, php-curl and generate your own ssl-cert for

apisys/lin2rev/index.php:

Code:

<?php
$url = "https://www.djmbot.com".$_SERVER['REQUEST_URI'];
$postfields = array('data'=>$_POST['data']);
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $postfields);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0); 
$result = curl_exec($ch);
$free = '323237303732363937363639366336353637363532323361323233303330333132323263323237303732363937363639366336353637363534343635373336333232336132323436373236353635323034313633363336663735366537343232';
$haxx = '323237303732363937363639366336353637363532323361323233393339333932323263323237303732363937363639366336353637363534343635373336333232336132323438363137383738323034313633363336663735366537343232';
echo str_replace($free,$haxx,$result);
?>

My rewrite rules:

Code:

RewriteEngine on
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule ^/apisys/lin2rev/.*$ /apisys/lin2rev/index.php [NC,L,QSA]

splinterz · 03/22/2018, 07:47

Quote:

Originally Posted by starbreeze111

It has to be on another pc, can be virtualbox, because you need to redirect bot to your own ip in hosts.
Needs apache, php, php-curl and generate your own ssl-cert for

apisys/lin2rev/index.php:

Code:

<?php
$url = "https://www.djmbot.com".$_SERVER['REQUEST_URI'];
$postfields = array('data'=>$_POST['data']);
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $postfields);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0); 
$result = curl_exec($ch);
$free = '323237303732363937363639366336353637363532323361323233303330333132323263323237303732363937363639366336353637363534343635373336333232336132323436373236353635323034313633363336663735366537343232';
$haxx = '323237303732363937363639366336353637363532323361323233393339333932323263323237303732363937363639366336353637363534343635373336333232336132323438363137383738323034313633363336663735366537343232';
echo str_replace($free,$haxx,$result);
?>

My rewrite rules:

Code:

RewriteEngine on
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule ^/apisys/lin2rev/.*$ /apisys/lin2rev/index.php [NC,L,QSA]

hi,
can i do this on my own pc?
and how do i get this $free and $haxx code?

and what should i do if i want to connect to your server?

thank you

starbreeze111 · 03/26/2018, 03:11

Quote:

Originally Posted by splinterz

can i do this on my own pc?

Yes, but you need to trick djmbot to not connect directly despite any IE/OS proxy settings.
Edititng hosts file works, but when you do that, you either need to host that proxy on another pc/virtualbox (my way, I have a nas for that) or you can change php script to connect to real

by IP and set Host header manually.

Quote:

and how do i get this $free and $haxx code?

$free is just '"privilege":"001","privilegeDesc":"Free Account"' hex encoded twice, $haxx is same, but "999" and "Haxx Account". This should be good for everyone until something has changed.

Quote:

and what should i do if i want to connect to your server?

1) edit your hosts file and add 79.120.77.14

(Antiviruses might block that - deal with it yourself)
2) open IE, go to

- ignore warnings, should get a simple text that you are on the right track.
3) Last you need to import that certificate, IE is complaining about as trusted.
(after restarting browser and connecting again you should get no warning)
4) Run bot with any free account login/pass and bot will think you have paid account.

splinterz · 03/26/2018, 08:05

Quote:

Originally Posted by starbreeze111

Yes, but you need to trick djmbot to not connect directly despite any IE/OS proxy settings.
Edititng hosts file works, but when you do that, you either need to host that proxy on another pc/virtualbox (my way, I have a nas for that) or you can change php script to connect to real by IP and set Host header manually.

$free is just '"privilege":"001","privilegeDesc":"Free Account"' hex encoded twice, $haxx is same, but "999" and "Haxx Account". This should be good for everyone until something has changed.

1) edit your hosts file and add 79.120.77.14
(Antiviruses might block that - deal with it yourself)
2) open IE, go to - ignore warnings, should get a simple text that you are on the right track.
3) Last you need to import that certificate, IE is complaining about as trusted.
(after restarting browser and connecting again you should get no warning)
4) Run bot with any free account login/pass and bot will think you have paid account.

ah ok i get it now thanks

starbreeze111 · 03/26/2018, 08:14

Quote:

Originally Posted by splinterz

ah ok i get it now..
is there any way to limit which username can connect to my host?
cause i dont want everyone to connect to my host

Just bind webserver to local, not a public IP. Or otherwise limit connections to your own network. You can decode auth request/response and limit based on that too - details in my first post.
Response decoding - strip "z", then decode hex twice.

skm1782 · 03/26/2018, 22:38

Quote:

Originally Posted by starbreeze111

Just bind webserver to local, not a public IP. Or otherwise limit connections to your own network. You can decode auth request/response and limit based on that too - details in my first post.
Response decoding - strip "z", then decode hex twice.

Hi thanks for your share, the publisher scammed me recently and I would like to use your mitm proxy but I can't get it to work, can you add me on discord so i can ask a few quick question what I do wrong

Scratch that, i fixed it. Thanks for your contribution starbreeze

kaiserxoxe · 03/31/2018, 12:49

How can i import certificate? i have plain text but error in certificate and i dont know how to import a valid one. Thanks

aeonschen · 04/01/2018, 20:24

starbreeze server doesn't seem to work anymore

and i dont have another PC/way to run that stuff myself

b0dyguard · 04/01/2018, 21:25

Quote:

Originally Posted by starbreeze111

Just bind webserver to local, not a public IP. Or otherwise limit connections to your own network. You can decode auth request/response and limit based on that too - details in my first post.
Response decoding - strip "z", then decode hex twice.

can u refresh the certificate? the certificate in your server is expired,, thx a lot for your contribution to make the bot free

skm1782 · 04/01/2018, 22:42

Not working anymore @