Legit User OPcodes

B13. · 08/31/2016, 16:34

hey guys im not sure if this is the right section to ask,
any ways any one knows opcodes that a normal user will send
[ a user who started the game from Silkroad.exe]
and opcodes that a BOT user will send ?
is there is a way to know the difference between these 2 users and how to detect them

thx in advance

Sorry for;
bad english, wrong section?

~~Anonymous-9238~~ · 08/31/2016, 18:43

I don't think the "start" button on the launcher sends a packet.

But you can make your own dll and hook it to the launcher and make it send an opcode, i don't see how that is going to help you though since it can be easy to crack if people know what they're doing

qoaway · 08/31/2016, 19:38

if player logins with launcher, he disconnects from gateway after pressing start and creating new connection to gateway again, so you cant track if player started game with launcher or not.

B13. · 08/31/2016, 20:10

Quote:

Originally Posted by qoaway

if player logins with launcher, he disconnects from gateway after pressing start and creating new connection to gateway again, so you cant track if player started game with launcher or not.

thank you for that note.
so how does filters lets say k-guard detects mbot users and shuts them down ?

LastThief* · 08/31/2016, 20:21

Okay first of all the launcher is just literally a launcher and serves absolutely no purpose except for updates. what it does is launching sro_client.exe with the following parameters /locale 0 0 in case of vsro the locale is 22 so the launcher launches the sro_client.exe as the following sro_client.exe /22 0 0 so the bot just skips the "updating" and just launches the client with corresponding parameters and now regarding to your question about shutting down the bots it's all about SilkroadSecurityAPI while sending the handshake you can set the two parameters of sending to true,true (which are encrypted, massive)
As far as I recall if you set the handshake packet to be both encrypted and massive the bot won't handle it and it'll terminate. The filter aka "k-guard" serves as a intermediary between the client and server and it works as the following if you are NOT using a filter

Bot : Hi, I'm starting please handshake me
Server : Okay there you go the handshake packet which is encrypted but not massive.
Client : Thank you so much I started.

And in this case you can't control what's going on. But if you have a filter between the client and server it'll go as following

Bot : Hi, I'm starting please handshake me
Server : Okay there you go the handshake packet which is encrypted but not massive.
Filter : Surprise ************ *proceeds to recreate the packet which is encrypted and massive using the bytes from the server*
Filter : There you go a packet which won't make you work.
Bot : DAFUQ IS THIS **** ? *crashes in Spanish*

Annnd, that's it

Finsterlord · 08/31/2016, 20:37

So it's possible to shutdown bots connecting to the server completely? Or will there still be any backdoors for them to connect?

@

You want to create a botfree server?

LastThief* · 08/31/2016, 20:38

Quote:

Originally Posted by Finsterlord

So it's possible to shutdown bots connecting to the server completely? Or will there still be any backdoors for them to connect?

@ You want to create a botfree server?

Nope there's no work around if you set both parameters to true while creating packet.
I.E : Packet p = new Packet(someOpcodeHere,true,true)

rares495 · 08/31/2016, 20:46

Quote:

Originally Posted by LastThief*

Nope there's no work around if you set both parameters to true while creating packet.
I.E : Packet p = new Packet(someOpcodeHere,true,true)

So basically k-guard already does that?

LastThief* · 08/31/2016, 20:47

Quote:

Originally Posted by rares495

So basically k-guard already does that?

Yes but k-guard suck ***** so bad and the code base is hideous

B13. · 08/31/2016, 20:47

Quote:

Originally Posted by LastThief*

Okay first of all the launcher is just literally a launcher and serves absolutely no purpose except for updates. what it does is launching sro_client.exe with the following parameters /locale 0 0 in case of vsro the locale is 22 so the launcher launches the sro_client.exe as the following sro_client.exe /22 0 0 so the bot just skips the "updating" and just launches the client with corresponding parameters and now regarding to your question about shutting down the bots it's all about SilkroadSecurityAPI while sending the handshake you can set the two parameters of sending to true,true (which are encrypted, massive)
As far as I recall if you set the handshake packet to be both encrypted and massive the bot won't handle it and it'll terminate. The filter aka "k-guard" serves as a intermediary between the client and server and it works as the following if you are NOT using a filter

Bot : Hi, I'm starting please handshake me
Server : Okay there you go the handshake packet which is encrypted but not massive.
Client : Thank you so much I started.

And in this case you can't control what's going on. But if you have a filter between the client and server it'll go as following

Bot : Hi, I'm starting please handshake me
Server : Okay there you go the handshake packet which is encrypted but not massive.
Filter : Surprise motherfucker *proceeds to recreate the packet which is encrypted and massive using the bytes from the server*
Filter : There you go a packet which won't make you work.
Bot : DAFUQ IS THIS SHIT ? *crashes in Spanish*

Annnd, that's it

what you said sure explains this in a great way

PHP Code:


			
    if (Form1.mbotlogin != "Close")

                    this.lg_local_security.GenerateSecurity(true, true, true);

                else

                    this.lg_local_security.GenerateSecurity(true, false, false);

i have 2 questions tho
1.sbot can handle those ?
as i worked with kguard befor when closing mbot , sbot users act like nothing happend
2.can i change the locale 22 to any thing ?

LastThief* · 08/31/2016, 20:52

Quote:

Originally Posted by B13.

what you said sure explains this in a great way

PHP Code:

if (Form1.mbotlogin != "Close") this.lg_local_security.GenerateSecurity(true, true, true); else this.lg_local_security.GenerateSecurity(true, false, false);

i have 2 questions tho
1.sbot can handle those ?
as i worked with kguard befor when closing mbot , sbot users act like nothing happend
2.can i change the locale 22 to any thing ?

1-Nope all bots will be disabled
2-Techincally yes, production-wise ? nope

B13. · 08/31/2016, 21:37

Quote:

Originally Posted by LastThief*

1-Nope all bots will be disabled
2-Techincally yes, production-wise ? nope

can't be done throw srblabal.ini from the cert files ?
or the server files will have some changes as well the blabalserver.exe and stuff ?

Quote:

Originally Posted by Finsterlord

So it's possible to shutdown bots connecting to the server completely? Or will there still be any backdoors for them to connect?

@ You want to create a botfree server?

yes i do, bots are so annoying beside the system i have in my mind wont need a single bot task or take too much time so the users dont just leave the pc and come back after a day see if its done, the answer LastThief provided solves every thing but still looking for every way to do it.

Finsterlord · 08/31/2016, 22:13

Will these measures prevent from other 3rd party programs like multiclients and alchemy tools, too?

I'm sorry to ask, but I never used (and never will) any of these bot programs and thus I don't know how they work. I prefer playing in an environment with human beings playing the game.

LastThief* · 08/31/2016, 23:39

Quote:

Originally Posted by Finsterlord

Will these measures prevent from other 3rd party programs like multiclients and alchemy tools, too?

I'm sorry to ask, but I never used (and never will) any of these bot programs and thus I don't know how they work. I prefer playing in an environment with human beings playing the game.

Yes as they will prevent everything that's 3rd party.

Quote:

Originally Posted by B13.

can't be done throw srblabal.ini from the cert files ?
or the server files will have some changes as well the blabalserver.exe and stuff ?

yes i do, bots are so annoying beside the system i have in my mind wont need a single bot task or take too much time so the users dont just leave the pc and come back after a day see if its done, the answer LastThief provided solves every thing but still looking for every way to do it.

Not really sure, I did not go deep into file structure so not really sure.

B13. · 09/01/2016, 12:03

Small Update

PHP Code:


			
   this.lg_local_security.GenerateSecurity(true, false, false);

worked
and mbot client didn't run
how ever some tools are still able to run
vSro Alchemy worked.

so i tried to change the locale every server file worked fine but
smc fail to load plugins tho , and idea ?
.can login
.when loads plugins stops working.