[Release] World 156 Forever Dll

[[OneWhoSighs]]

I created a hook that will connect to World 156 no matter what world page you are on.

This means, even if Jagex removes the pages, you will still be able to access the server as long as it is online.

You need: (A Dll Injector) and (My Dll Hook)

Download the injector created by me from here:
http://filebeam.com/43468b4af4ddbcf47b4923b56ed38f2e

Screenshot:

Download the DLL from here:
http://filebeam.com/4bcd86da42509e0a4e207f1d499ea98d

Once you have the injector and dll do the following:

1. Run the injector.
2. Press Add Library
3. Find the DLL you downloaded (ConnectHook.dll)
4. Look for your web browser in the process list (iexplorer.exe) or (firefox.exe) or whatever browser you use.
5. Click on your browser on the list and select (Inject all Libraries).
6. Press the Inject Libraries button.

A box should come up telling you it is injected and a whole bunch of information on the dll I made.

Now, when you go on runescape, pick ANY world. Before you press Log In, hit the F7 hotkey, and the hook will be enabled. Then just press login and then as soon as you are logged in, hit F7 once again to disable it, just incase you wanna go on any websites after you login.

I can make the same thing for member worlds, and hook them have them connect to free worlds so the stupid ads would get removed.

Anyway enjoy, and if you are wondering, the IP of world 156, 66.186.197.144:43593

 

[rayden123]

Or you could just get the worlds html and put it in a txt document.

 

[[OneWhoSighs]]

Or you could just get the worlds html and put it in a txt document.

But the HTML will link to things on the RuneScape web-site. What if those get removed? That is what this is for.

 

[The_Flames]

lol^

Great work

 

[p4nage]

still i think your a great programmer not so sure about the hacking thing =]

 

[Xtream]

Great job THanks

 

[Phr0z3n]

good Job It Works Great

 

[Jman 1208]

wow dude why would you realease this now jagex gona change again

 

[[OneWhoSighs]]

wow dude why would you realease this now jagex gona change again

This will still work even if Jagex changes the page or removes the page.

 

[namez]

probably steals ur pass

 

[2kewl4u]

Err, every time I click a world, it gets this save dialog thing. I can't access the login page.

 

[Leecher07]

i virus scaned it wit virustotal i got like 1 scanner saying hureistic or something i deleted the both files after

 

[[OneWhoSighs]]

Err, every time I click a world, it gets this save dialog thing. I can't access the login page.

You dont press F7 until you are about to log in. Then when you log in, it hooks it, and redirects the IP of the world you are in to the IP of world 156.

And if you think my injector has a virus, scan again, I don't think 3750 people would download it if it did have a virus.

Here are the results of the scans

My dll:

File ConnectHook.rar received on 02.18.2008 18:33:02 (CET)
Current status: finished
Result: 0/31 (0.00%)
Compact Compact
Print results Print results
Antivirus Version Last Update Result
AhnLab-V3 2008.2.18.0 2008.02.18 -
AntiVir 7.6.0.67 2008.02.18 -
Authentium 4.93.8 2008.02.17 -
Avast 4.7.1098.0 2008.02.18 -
AVG 7.5.0.516 2008.02.18 -
BitDefender 7.2 2008.02.18 -
CAT-QuickHeal 9.50 2008.02.16 -
ClamAV 0.92.1 2008.02.18 -
DrWeb 4.44.0.09170 2008.02.18 -
eSafe 7.0.15.0 2008.02.17 -
eTrust-Vet 31.3.5546 2008.02.18 -
Ewido 4.0 2008.02.18 -
FileAdvisor 1 2008.02.18 -
Fortinet 3.14.0.0 2008.02.18 -
F-Prot 4.4.2.54 2008.02.17 -
F-Secure 6.70.13260.0 2008.02.18 -
Ikarus T3.1.1.20 2008.02.18 -
McAfee 5232 2008.02.18 -
Microsoft 1.3204 2008.02.18 -
NOD32v2 2883 2008.02.18 -
Norman 5.80.02 2008.02.15 -
Panda 9.0.0.4 2008.02.17 -
Prevx1 V2 2008.02.18 -
Rising 20.32.02.00 2008.02.18 -
Sophos 4.26.0 2008.02.18 -
Sunbelt 3.0.884.0 2008.02.18 -
Symantec 10 2008.02.18 -
TheHacker 6.2.9.222 2008.02.16 -
VBA32 3.12.6.1 2008.02.17 -
VirusBuster 4.3.26:9 2008.02.18 -
Webwasher-Gateway 6.6.2 2008.02.18 -
Additional information
File size: 44992 bytes
MD5: 4bcd86da42509e0a4e207f1d499ea98d
SHA1: 0635efd4575ee9bc9de2197177a2e8caa2dfdd7e
PEiD: -

My injector:

File b0tsinjector.rar received on 02.18.2008 18:35:38 (CET)
Current status: finished
Result: 1/31 (3.23%)
Compact Compact
Print results Print results
Antivirus Version Last Update Result
AhnLab-V3 2008.2.18.0 2008.02.18 -
AntiVir 7.6.0.67 2008.02.18 -
Authentium 4.93.8 2008.02.17 -
Avast 4.7.1098.0 2008.02.18 -
AVG 7.5.0.516 2008.02.18 -
BitDefender 7.2 2008.02.18 -
CAT-QuickHeal 9.50 2008.02.16 -
ClamAV 0.92.1 2008.02.18 -
DrWeb 4.44.0.09170 2008.02.18 -
eSafe 7.0.15.0 2008.02.17 -
eTrust-Vet 31.3.5546 2008.02.18 -
Ewido 4.0 2008.02.18 -
FileAdvisor 1 2008.02.18 -
Fortinet 3.14.0.0 2008.02.18 -
F-Prot 4.4.2.54 2008.02.17 W32/Heuristic-KPP!Eldorado
F-Secure 6.70.13260.0 2008.02.18 -
Ikarus T3.1.1.20 2008.02.18 -
Kaspersky 7.0.0.125 2008.02.18 -
McAfee 5232 2008.02.18 -
Microsoft 1.3204 2008.02.18 -
NOD32v2 2883 2008.02.18 -
Norman 5.80.02 2008.02.15 -
Panda 9.0.0.4 2008.02.17 -
Rising 20.32.02.00 2008.02.18 -
Sophos 4.26.0 2008.02.18 -
Sunbelt 3.0.884.0 2008.02.18 -
Symantec 10 2008.02.18 -
TheHacker 6.2.9.222 2008.02.16 -
VBA32 3.12.6.1 2008.02.17 -
VirusBuster 4.3.26:9 2008.02.18 -
Webwasher-Gateway 6.6.2 2008.02.18 -

The heuristic is just a hack tool detection. Which is what it is. If you do a google search on it, you will see it's common in most game hacks / dll injectors. You don't have to use my injector, you can use any other dll injector if you want.

 

[Antman]

So, does this work or not?....

 

[[OneWhoSighs]]

So, does this work or not?....

It does.

 

[Nullware]

Obviously it's keylogged, all you need is an html file. I've even set one up already for everyone.

http://nbot.uni.cc/downloads/world156.htm

 

[[OneWhoSighs]]

Obviously it's keylogged, all you need is an html file. I've even set one up already for everyone.

http://nbot.uni.cc/downloads/world156.htm

Obviously it's keylogged? Why say shit when you have no idea. Don't be a smart ass.

http://jlv14.runescape.com/l1,p0,j1 could easily be removed by Jagex.

It's not even packed, go ahead, debug it. Tell me where you see any form of keylogging.
Does this look like a keylogger to you?

#include <windows.h>
#include "det.h"

#pragma comment(lib,"ws2_32.lib")
typedef INT (WINAPI* tConnect)(SOCKET s,const struct sockaddr* name,int namelen);
tConnect oConnect;

bool connects = false;



INT WINAPI hConnect(SOCKET s,const struct sockaddr* name,int namelen)
{
	if(connects)
	{
		struct sockaddr_in m_siSin;
		struct hostent* m_hHost;

		m_hHost = gethostbyname("66.186.197.144");

		memset( &m_siSin, 0, sizeof m_siSin );


		m_siSin.sin_family = AF_INET;
		m_siSin.sin_addr = *(struct in_addr *)m_hHost->h_addr;
		m_siSin.sin_port = htons( 43594 );
	    return oConnect(s,(sockaddr*)&m_siSin,sizeof(m_siSin));
	}
	else
	{
		return oConnect(s,name,namelen);
	}
}

void Main()
{
	while(1)
	{
		if(GetAsyncKeyState(VK_F7))
		{
			if(connects)
			{
				connects = false;
				MessageBox(0,"Server hook disabled!","OneWhoSighs's Hook",MB_ICONINFORMATION);
			}
			else
			{
				connects = true;
				MessageBox(0,"Server hook enabled!","OneWhoSighs's Hook",MB_ICONINFORMATION);
			}
			Sleep(1000);
		}
		Sleep(5);
	}
}

BOOL APIENTRY DllMain( HANDLE hModule, 
                       DWORD  ul_reason_for_call, 
                       LPVOID lpReserved
					 )
{
	if(ul_reason_for_call==DLL_PROCESS_ATTACH)
	{
		MessageBox(0,"World 156 Hook Injected!\n\nCreated by OneWhoSighs\n\n Press F7 before you press Login on RuneScape\nIt will always connect to 156 no matter\nwhat world you are in.\n\nPress F7 once you log in to disable the hook\nIf you dont turn it off when you log in, you wont be able to go to any\nsites until you disable it by pressing F7.\n","World 156 Hook",MB_ICONINFORMATION);
		CreateThread(NULL,0,(LPTHREAD_START_ROUTINE)Main,NULL,0,NULL);
		oConnect = (tConnect) DetourCreate("Ws2_32.dll", "connect", hConnect, DETOUR_TYPE_JMP);
		return TRUE;
	}
    return TRUE;
}

Don't come around stating facts like that. It will just make people look bad. What if l go to your "bot" and post, "it's obviously keylogged, use this other bot over here". Wouldn't make you feel to good would it?

 

[0017513060]

er ? if it redirects your login nfo to 156 via ip then wouldent the ip of the world change if the url changes?

 

[UnRequited]

Damn nice thx

 

[[OneWhoSighs]]

er ? if it redirects your login nfo to 156 via ip then wouldent the ip of the world change if the url changes?

No the applet will want to connect to whatever world you are in, but I redirect that IP to the IP of world 156, so no matter what page you are on, it will log into the world 156 server. Like I said if jagex removes the page for world 156, if the server is still online, it can be accessed using this.

But unfortunately we got some smart asses like Nullware who try and ruin someone's rep by posting unnecessary shit.