Clearing the Air with Powerbot and Arbi

I posted proof on another thread
actual code

 

http://sythe.org/showthread.php?t=1000190

 

Thanks for this thread, changed pass just in case.

 

i really used both bots a lot and im fine. kinda confused about both though they were legit =/

 

I only read OP but it is Bullshit.

Neither ArbitBots nor Powerbot is sending ur Data to their Servers.
Powerbot is only doing ONE connection to their Server and that is the update check. You can check it by using wireshark or just looking at the source(it is open source).
Most Arbibots are cracked, and those who cracked it, havent found any data stealer(also if you use wireshark, you wont see that he sending your pw)

I dont know much about rsbuddy and newest Arbibots, but powerbot 100% safe.

http://recoders.org/index.php There you can find cracked Arbibots, btw.
Rsbot is under the GPL and Arbibots too, so everyone is allowed to distribute it, so dont ban me.

Yourgramma Proof is false too, there is no method Sending the passwords.

How the accounts were hacked:
Some scripts on powerbot were most probably infected by "Stealthbot" by Ghost.

 

Me and my IRL friends (many of them) used powerbots for ages, we've wealthy accounts // normal accounts and none of us got hacked. I would say it's Arbiter.
POWERBOT CLIENT IS CLEAN, if you get hacked, it's probably because you use an script that has malicious code.
Best thing to do? Write your own scripts.
OR;
Check scripts if they contain malicious code / Don't allow scripts to auto-update if they ask, do it manually.

 

I used arbibots but didn't got hacked. Changed my passwords quickly tho.

 

just LOL at all this, it was neither of them. It was a thing called StealthBot made by a friend Ghost :] but hahah at all the diversion this has caused

 

Right, and I have no intentions to fight with either developer. I just think that the community should know that someone from the previous site has been loading up on others wealth.

I can't seem to find this? =\ BUT I did find this:



^This is what ANY BOT uses to start the scripts, so that way it can auto login and work without manually logging in. The ArbiBots, or Powerbots, just said sent this information to a website, which hold the text file. It's how basic phishing websites work. It's how anything that asks you to log in works. They just took advantage of it.

It would need to be unlocked scripts, since all of the scripts that used the "get" script were auth only.

Someone linked unlocked Arbi scripts, but it doesn't matter because those could have been altered.

This could have been easily done with ANY of your free scripts as well. It is just easier since you can't see their script preventing them from developer infringement and from you seeing that code.

Just for clarification, the clients are CLEAN CLEAN CLEAN CLEAN it is the actual scripts that is gathering. They pick up from your bot list. The accounts you put into ANY ONES CLIENT for the password saving information. You can use rsbotting's client, it doesn't matter! It's using the scripts!

 

Anyhow;

Starting rsbot 224 - logging in just in runescape
Filling in random name and password in 'Account'
Run script - running FleshCrawlerPRO ( any bad script with for gathering my login info would not be able to steal it since i already logged in before i started the script, right?)

There is no way to detect my real log in name and pass?
Yes I know it won't be able to log me back in but for a temporary solution this works right?

 

I'm gonna give you a simple version

There is a client, the client can log in the account for you, or you can enter in the info and it works. The client DOES NOT send off your information. The SCRIPTS CAN gather information, if they are coded to do so. If you have 20 accounts in the account manager for your client. And you use a potentially "gathering" script, all 20 accounts are at risk. It grabs all of the information directly out of your account handler. Manuals should be fine, because then that would be a keylog.

 

Ok,
but the random name I filled in, was the only one - I removed the others and changed passes after that.

So my account info is nowhere in the account section.
And from your example, I get that they can only 'gather' it from that section?

 

Right, UNLESS it is a backdoor, which still is possible, but unlikely.

 

Rsbot is back online , and they claim that it was arbiter

 

And Arbi claims it was Powerbot. Lol. Who are going to believe? Two messed up divisions.

 

I could indeed find that file with the 3 usernames i've botted on and also encoded passwords i suppose?

Anyway, will change my passwords ^^

 

In theory yeah, but I have been looking in the javadocs I can't find anything there.

 

On NeXus...

The methods you circled to not produce any usable information..

Unlike other bots the only item which has access to your password and bankpin is the login random and the builtin nexus banking method.

This random can also only be edited by the nexus team.

 

Right, but can't you send the information that is already "getting" to somewhere else as well.

 

No.. From the script side it is "impossible" to gain access to the password and pin. (I quote impossible as something is never impossible)

Our database file which stores usernames,passowrd, and pins have been very harden over time do to public issues of viruses stealing thoes local files..

One other thing we have going for us is the fact that we are a paid bot and the bots used on auths are from highly trusted scripters which have ZERO reasons to steal accounts..