Runescape Hacking

[Covey]

Actually, it's a connection hook, and the socket is run through proxy, and that's where the network interception happens. When you log in, server sends the handshake, used to decrypt the packets, that's when you recv the client information, (Levels, X Position, Y Position, floor, etc). Then a series of pointers which point to the applet, and if you dump the memory, you can find the different areas where the same pointer (floor level) is checked, for example,

mov eax,dword ptr ds:[eax+0x1CC]
cmp eax,2

This is modified,

mov eax,2
cmp eax,2

This way, you are always there, and can interact with NPC both from bottom floor, and top floor.

I think the point speedster was making is that you are not actually "hacking" RuneScape.
You are just manipulating it clientside, which many people have been doing for a long time.

 

[The_Flames]

Does look pretty smexy.

 

[SuF]

Well, it should not be called hacking because your not like changing the server and stuff...

 

[|0|]

Its a hack alright... Infact he made a Runescape packet editor to do that and other things....

He;s manipulating client side to make server think he is on all levels of the game so he's basicly on top floor (flag room) and in basement under that and all other floors.

 

[speljohan]

If this is possible, then i'm pretty sure Jagex will fix it soon. Oh, in one of your posts you showed Assembly code. That's a lie, because Java doesn't run on assembly at all. It runs on bytecode.

Packet editing is possible, but you'll need to find the key for decrypting on every release. It's too much trouble. I have a friend who made a packet bot for RS2 about 6 months ago, it could mine and bank in rimmington flawlessly.

 

[|0|]

Well [OneWhoSighs] said he made one and it took him lots of work..

Hope they don't fix..

 

[[OneWhoSighs]]

If this is possible, then i'm pretty sure Jagex will fix it soon. Oh, in one of your posts you showed Assembly code. That's a lie, because Java doesn't run on assembly at all. It runs on bytecode.

Packet editing is possible, but you'll need to find the key for decrypting on every release. It's too much trouble. I have a friend who made a packet bot for RS2 about 6 months ago, it could mine and bank in rimmington flawlessly.

That's the dumbest thing I have heard. Assembly is created FROM the bytecodes. Every process on your computer is just a series of bytes, with a regular entry point, and everything. In the Java Virtual Machine, there are custom debuggers. If you attach a debugger to a process that has executed applet memory, these bytes will convert to assembly, so you can read each instruction. That was a very very very stupid comment, especially coming from a PROGRAMMING mod, you should know this.

The packet editor is just done through library injection. The emulator on the other hand, is much more difficult. X0X runs completely off packets, as it completely emulates the client.

And they cannot fix "packet-editing". Unless their algorithm changes drastically, and is very hard to reverse or find. Or if they completely change their protocol, of course.

 

[speljohan]

That's the dumbest thing I have heard. Assembly is created FROM the bytecodes. Every process on your computer is just a series of bytes, with a regular entry point, and everything. In the Java Virtual Machine, there are custom debuggers. If you attach a debugger to a process that has executed applet memory, these bytes will convert to assembly, so you can read each instruction. That was a very very very stupid comment, especially coming from a PROGRAMMING mod, you should know this.

The packet editor is just done through library injection. The emulator on the other hand, is much more difficult. X0X runs completely off packets, as it completely emulates the client.

And they cannot fix "packet-editing". Unless their algorithm changes drastically, and is very hard to reverse or find. Or if they completely change their protocol, of course.

I didn't think that far really. I'm just wondering why you go through all this crap with packet editing when you could just modify the actual rs client using bytecode injections?

And yeah, i was thinking about a rewriting of the protocol.

 

[[OneWhoSighs]]

I didn't think that far really. I'm just wondering why you go through all this crap with packet editing when you could just modify the actual rs client using bytecode injections?

And yeah, i was thinking about a rewriting of the protocol.

Client modification is different from packet interception. Theres a series of things you can do with packets, that you cannot do with Client modding. Client modding is also useless.

But since I have experience with Packets, that's why I use it.

 

[benjamin51]

well done

 

[SuF]

This turned into a smart person war for a bit. This just makes me think One is more smart than i thought before. I hope your Cliente Emulater is done soon. =o

 

[luring2live]

nice vids. they are legit. i wish i could of got those bloods lol.

 

[Larry]

That's the dumbest thing I have heard. Assembly is created FROM the bytecodes. Every process on your computer is just a series of bytes, with a regular entry point, and everything. In the Java Virtual Machine, there are custom debuggers. If you attach a debugger to a process that has executed applet memory, these bytes will convert to assembly, so you can read each instruction. That was a very very very stupid comment, especially coming from a PROGRAMMING mod, you should know this.

The packet editor is just done through library injection. The emulator on the other hand, is much more difficult. X0X runs completely off packets, as it completely emulates the client.

And they cannot fix "packet-editing". Unless their algorithm changes drastically, and is very hard to reverse or find. Or if they completely change their protocol, of course.

I didn't think that far really. I'm just wondering why you go through all this crap with packet editing when you could just modify the actual rs client using bytecode injections?

And yeah, i was thinking about a rewriting of the protocol.

We're reaching a paroxism of the mystical sphere.

What's the modification at the end ? byte code or the supposedly generated asm off the bytecode or the jvm or what ??

You wrote a packet intercepting proxy ? ok gratz (this doesn't really need a huge technical knowledge nor does it need deep assembly knowledge), now, did you end up decypting it ? if so , you could help the community posting the decryption process you ended up with.

Spelljohan question wasn't "stupid", you said it was easy to modify 1 thing in the assembly BUT there was an error in your description lemme analyse it

you said :
modify
mov eax,dword ptr ds:[eax+0x1CC]
cmp eax,2
into
mov eax,2
cmp eax,2

Which is cannot run, because the length of (mov eax,dword ptr ds:[eax+0x1CC]) is bigger than (mov eax,2) which will lead you to a gap in the machine code translation.

mov eax,dword ptr ds:[eax+0x1CC] => 66678B80CC010000
mov eax,2 => 66B802000000

to fill these in order to keep consistency you'd need to add some "NOP" (90) at the end so that the code do not get stuck with the old "00"

so at the end you shall end up with :
mov eax,2
nop
nop
cmp eax,2



I still do not fully understand your aim, and i do not see ANY kind of help to the community , i'm all hope this isn't some kind of "Hail me back !", none of the good people here are doing that.

I invite you to rewrite the whole thing in a more appropriate manner avoiding (i did and i'll be doing) and going into facts : Here are the packets , here is how i am decrypting them etc ...

 

[SpZaTT]

Client sided all of it.

 

[nirvana023]

I may not know anything about programming but I can tell you this. Jagex gets about like what 5 million dollars a month? This is not even including the tens of millions they get from ads. Thats over 60 million dollars a year. I bet they spend millions upon millions on security. I doubt anyone, yes anyone, on this site or any other cheat site for that matter could in fact hack Runescape. I have a feeling everyone on this site are nerds sitting in their basement eating Twinkies or teenagers looking to cheat on Runescape. I know none of you have the resources to break a security system that has millions spend on it each year.

 

[[OneWhoSighs]]

I may not know anything about programming but I can tell you this. Jagex gets about like what 5 million dollars a month? This is not even including the tens of millions they get from ads. Thats over 60 million dollars a year. I bet they spend millions upon millions on security. I doubt anyone, yes anyone, on this site or any other cheat site for that matter could in fact hack Runescape. I have a feeling everyone on this site are nerds sitting in their basement eating Twinkies or teenagers looking to cheat on Runescape. I know none of you have the resources to break a security system that has millions spend on it each year.

I take it you do not know of the government (.gov) web-sites that are hacked regularly by many people. Zone-H for the win?

And Larry, the code was an example, why would I write out a no-operation instruction in the example? To further confuse the people who don't understand very well?

 

[Larry]

I take it you do not know of the government (.gov) web-sites that are hacked regularly by many people. Zone-H for the win?

And Larry, the code was an example, why would I write out a no-operation instruction in the example? To further confuse the people who don't understand very well?

Your exemple was actually my exemple, i was hoping you answer the main question: What is the aim of the thread ?

Skip the exemple on your exemple, and try to answer something out the rest

 

[Brody]

First off, he never said he was trying to help the community.

Second off, if he was trying to help the community, I bet now he's thought twice about that. All he was trying to do was show you the progress of his development only to get doubted by a whole bunch of kids who know nothing about programming?

All I'm saying is - I wouldn't want to help this community for all of the ungrateful little kids around here. All the leechers, yeah, my title may be "Leecher", that doesn't mean I am a leecher.

We've already proven that OWS can and will hack, I don't think it matters to him if you think otherwise.

 

[ganster82]

lol are u guys that much of idiots, its a ring of health glitch..... =/ done it like 5 times.

 

[TheAP3G]

thats really weird lol