Runescape Hacking

[nickfizzle1225]

hmm...

 

[joostis]

Semaphore, a very knowledgeable person, has proved you wrong.
Quoted from MITB:

I would venture a guess that this clever dimwit wants people to download and run his client or to use some service that he offers. None of the things he mentioned have anything whatsoever to do with anything that he said. His wordmanship was classic. I cannot believe he actually talked about the 'pointer to the applet'... what's more, it's truly amazing that people fell / contemplated falling for it.

Is it possible to do the things that he says he is doing? I don't think so. Even if his <sarcasm>amazing</sarcasm> hack above actually changed anything on the client, it would do exactly dill on the server. The fact is, there is a server-side check for what I call mainRenderedFloorLevel when interaction commands are processed. It appears that all this scammer has done is cut-pasted some random assembly instructions and spewed some intelligent-sounding-speak in hopes that people would lend credibility to his statements.

Furthermore, his comments about network interception and an injected library into firefox have little to do with reality and more to do with what magicians call banter. Banter is used by magicians to lull the crowd into paying less attention to what their hands are doing and more attention to what is being said. This gives the magician the ability to perform the sleight-of-hand. Then, coupled with the prestige, the audience really thinks the magician performed magic. Just remember, in reality, magicians are charlatans.

Though network interception could give you access to the underlying packets. Once you have access to them, then what? Fantastic you have access to encrypted packets with ids that rotate synchronized between client and server. Best case scenario? You can give yourself a nice HUD of various in-game objects/npcs/items. Back when PVP was actually possible, this could have some fun implications, but could have been performed just as simply by injecting code into the client; no need for fancy schmancy assembly. Furthermore, the actual decrypted packet ids change from release to release. Defining the packets themselves from release to release is tedious. Finally, there are enough checks in the server-side logic to make hacks or exploits of this nature fairly useless. Speaking of fancy, schmancy, his crap-talk about assembly reminds me of one other thing. This app is run within a virtual machine. It would annoying to find that snippet he inanely pasted inside the running vm.

The guy is a moron trying to scam people.

 

[elf5380]

really interesting find, if one day you ever come out with that client id love to test it or anything, great skills for a great cause eh

 

[joostis]

Elf, read my post.

 

[Scorpionz]

For all those that are flaming OWS, shut the hell up.

He is the one of the best REAL hackers out there. Seriously, You think that injecting a library into a JAVA game, which doesn't have many loopholes is a mere glitch?

Get over yourselves.

 

[Larry]

For all those that are flaming OWS, shut the hell up.

He is the one of the best REAL hackers out there. Seriously, You think that injecting a library into a JAVA game, which doesn't have many loopholes is a mere glitch?

Get over yourselves.

Injecting what you said ? you obviously didn't really see what he did, he took the connection hook off the JVM itself and proxied the whole thing, nothing to do with the java game !!!

I think there are a lot out there who didn't see the difference between browser, jvm, bytecode etc

He said he "decrypted" the protocol, no flaming i see in asking him to POST some of this decryption !

Elf, read my post.

None reads others posts, as reading others posts does't increase the number of posts

Always be careful of charismatic people, who tend to talk a lot, but no real tangible facts.

 

[Scorpionz]

If you are wondering how this is done, network interception within an injected library (into firefox). Thanks microsoft for createremotethread()

I didn't want to go in details, lest people ask me what I'm talking about. >_>


Oh, I wrote it in the wrong way too. Sorry.

 

[TheMasterpiece]

Oh My god , The castle wars thing is really impressive.

 

[joostis]

Oh My god , The castle wars thing is really impressive.

He is a fake, most likely.

 

[dgameman1]

lol are u guys that much of idiots, its a ring of health glitch..... =/ done it like 5 times.

Lol? Owned?

 

[joostis]

Lol? Owned?

What is a ring of health?

 

[mystic-own]

Could be easily a glitch

 

[Rsismyname]

Thats not a hack

 

[dgameman1]

What is a ring of health?

A ring of health..
lol ok while your wearing it and you get 10 hp it heals you

 

[joostis]

I do not understand your reply, please rephrase it.

 

[EBOLA]

Why is it so important to you people that other people are "disproven"?
Not everyone has to believe what you do, who cares if he edited it?

 

[joostis]

Why is it so important to you people that other people are "disproven"?
Not everyone has to believe what you do, who cares if he edited it?

By edited, you mean faked? [serious question, I do not understand your post].

 

[speljohan]

If Semaphore says it's fake then it is fake. He's probably the most knowledgeable person in runescape cheating right now. He's refactored the whole rs client and understands every part of it. He's also been working professionally as a programmer for 7 years.

 

[Purple 0wnz]

You cannot hack Runescape unless your a formal owner/co-owner/administrator with the files. Sorry but this is NOT true, and theres proof above.

 

[lollerman]

ok , to stop all these haters that have no clue about hacking (witch i dont have much of) but i wondered if this would ever be possibe again ... take a trip back to autorune (take a look at xxjutxx site ) what they did was use a socks proxy and modify packets to able a program to control the character. what OWS is doing is basically an updated version on autorune ( well what it seems like) i have reason to belive everything is hackable some systems maybe ultra-tight to hack but people will always invent new ways to get round it ( why antivirus ect updates alot) if you read the autorune creators "biography" he explains how he couldnt be botherd to spend the time updating autorune to jagex's regular server updates the one who sighs is achieving this now a few months after X0x comes out there will be chance's of editing packets for possibley duping.. stat editing .... if it is advanced enough to edit the inforamtion that is stored on the server side ... so far that it is undetectable or there will be MASS bans the worse thing he could do is release the program to the public but i am behind him 100%
gl with your work