Forums WoW Modding Support Archives WoWModding Support Archives [DiscordArchive] Speaking of WRobot, is there any funny things you can do to fuck with it serverside to reduce bottin

[DiscordArchive] Speaking of WRobot, is there any funny things you can do to fuck with it serverside to reduce bottin

[DiscordArchive] Speaking of WRobot, is there any funny things you can do to fuck with it serverside to reduce bottin

Pages (3): 1 2 3 Next
rektbyfaith
Administrator
0
08-11-2024, 07:39 PM
#1
Archived author: Crow • Posted: 2024-08-11T19:39:19.798000+00:00
Original source

Speaking of WRobot, is there any funny things you can do to fuck with it serverside to reduce botting?
rektbyfaith
08-11-2024, 07:39 PM #1

Archived author: Crow • Posted: 2024-08-11T19:39:19.798000+00:00
Original source

Speaking of WRobot, is there any funny things you can do to fuck with it serverside to reduce botting?

rektbyfaith
Administrator
0
08-11-2024, 07:44 PM
#2
Archived author: HelloKitty • Posted: 2024-08-11T19:44:56.511000+00:00
Original source

Look for resources about like reverse engineering byte pattern matching or something, maybe that's the term. As for detecting WRobot well that's abit tough nowadays with just Warden. For Blizzlike servers the only way would be to use some techniques Warmane does to ship custom code to the client. When working at Ascension, to defeat WRobot there were afew approaches I took but the most effective general solution which hit most bots was to ship a custom DLL, load it through Warden (to avoid Droidz simply diffing the wow.exe was the hope) and detouring functions like FrameScript::Execute and stuff like IsOutDoors which bots generally call. Once you hook these you can then use MSVC compiler intrinsic <https://learn.microsoft.com/en-us/cpp/intrinsics/addressofreturnaddress?view=msvc-170> _AddressOfReturnAddress to detect external calls to these commonly used functions by bots. Send a custom packet to the server to flag these accounts or just don't call the rest of the detoured function to have it silently fail. This is a general enough solution to stopping most sophisticated bots unless they're actively developing for your server and will take the time to reverse engineer your custom anticheat. Which Droidz did not bother for Ascension.
rektbyfaith
08-11-2024, 07:44 PM #2

Archived author: HelloKitty • Posted: 2024-08-11T19:44:56.511000+00:00
Original source

Look for resources about like reverse engineering byte pattern matching or something, maybe that's the term. As for detecting WRobot well that's abit tough nowadays with just Warden. For Blizzlike servers the only way would be to use some techniques Warmane does to ship custom code to the client. When working at Ascension, to defeat WRobot there were afew approaches I took but the most effective general solution which hit most bots was to ship a custom DLL, load it through Warden (to avoid Droidz simply diffing the wow.exe was the hope) and detouring functions like FrameScript::Execute and stuff like IsOutDoors which bots generally call. Once you hook these you can then use MSVC compiler intrinsic <https://learn.microsoft.com/en-us/cpp/intrinsics/addressofreturnaddress?view=msvc-170> _AddressOfReturnAddress to detect external calls to these commonly used functions by bots. Send a custom packet to the server to flag these accounts or just don't call the rest of the detoured function to have it silently fail. This is a general enough solution to stopping most sophisticated bots unless they're actively developing for your server and will take the time to reverse engineer your custom anticheat. Which Droidz did not bother for Ascension.

rektbyfaith
Administrator
0
08-11-2024, 07:46 PM
#3
Archived author: HelloKitty • Posted: 2024-08-11T19:46:08.343000+00:00
Original source

Detouring them alone would break the byte pattern matching of something like WRobot. For bots that hardcode these offsets calling them externally will be detectable using _AddressOfReturnAddress.
rektbyfaith
08-11-2024, 07:46 PM #3

Archived author: HelloKitty • Posted: 2024-08-11T19:46:08.343000+00:00
Original source

Detouring them alone would break the byte pattern matching of something like WRobot. For bots that hardcode these offsets calling them externally will be detectable using _AddressOfReturnAddress.

rektbyfaith
Administrator
0
08-11-2024, 07:46 PM
#4
Archived author: Crow • Posted: 2024-08-11T19:46:35.770000+00:00
Original source

if you dont mind me asking, you keep mentioning Droidz. Whats the general attitude towards him?
rektbyfaith
08-11-2024, 07:46 PM #4

Archived author: Crow • Posted: 2024-08-11T19:46:35.770000+00:00
Original source

if you dont mind me asking, you keep mentioning Droidz. Whats the general attitude towards him?

rektbyfaith
Administrator
0
08-11-2024, 07:46 PM
#5
Archived author: Nix • Posted: 2024-08-11T19:46:41.994000+00:00
Original source

Couldn't he just detect your hook, and "remove it" avoiding your hook all together <TongueES_Think:639363477458255874>
rektbyfaith
08-11-2024, 07:46 PM #5

Archived author: Nix • Posted: 2024-08-11T19:46:41.994000+00:00
Original source

Couldn't he just detect your hook, and "remove it" avoiding your hook all together <TongueES_Think:639363477458255874>

rektbyfaith
Administrator
0
08-11-2024, 07:47 PM
#6
Archived author: Crow • Posted: 2024-08-11T19:47:57.734000+00:00
Original source

I guess the cheapest solution is active gamemasters that just ban bots
rektbyfaith
08-11-2024, 07:47 PM #6

Archived author: Crow • Posted: 2024-08-11T19:47:57.734000+00:00
Original source

I guess the cheapest solution is active gamemasters that just ban bots

rektbyfaith
Administrator
0
08-11-2024, 07:47 PM
#7
Archived author: HelloKitty • Posted: 2024-08-11T19:47:58.195000+00:00
Original source

He could, but then I would just keep adding stuff. Instead he decided to stop bothering after afew, this was the latest in like a series of anticheat additions that continued to get more and more sophisticated. You *can* do anything but why bother when you can keep your bot business on autopilot for blizzlike servers.
rektbyfaith
08-11-2024, 07:47 PM #7

Archived author: HelloKitty • Posted: 2024-08-11T19:47:58.195000+00:00
Original source

He could, but then I would just keep adding stuff. Instead he decided to stop bothering after afew, this was the latest in like a series of anticheat additions that continued to get more and more sophisticated. You *can* do anything but why bother when you can keep your bot business on autopilot for blizzlike servers.

rektbyfaith
Administrator
0
08-11-2024, 07:48 PM
#8
Archived author: Nix • Posted: 2024-08-11T19:48:26.853000+00:00
Original source

Of course, but its always been a losing battle for the servers, if he wants to stop that is his choice
rektbyfaith
08-11-2024, 07:48 PM #8

Archived author: Nix • Posted: 2024-08-11T19:48:26.853000+00:00
Original source

Of course, but its always been a losing battle for the servers, if he wants to stop that is his choice

rektbyfaith
Administrator
0
08-11-2024, 07:49 PM
#9
Archived author: HelloKitty • Posted: 2024-08-11T19:49:14.305000+00:00
Original source

I don't know him outside of WRobot, just funny to treat him like an anime villian for fun. Have to entertain yourself while working fulltime on WoW private server stuff . But in general I hate botters/cheaters.
rektbyfaith
08-11-2024, 07:49 PM #9

Archived author: HelloKitty • Posted: 2024-08-11T19:49:14.305000+00:00
Original source

I don't know him outside of WRobot, just funny to treat him like an anime villian for fun. Have to entertain yourself while working fulltime on WoW private server stuff . But in general I hate botters/cheaters.

rektbyfaith
Administrator
0
08-11-2024, 07:49 PM
#10
Archived author: Crow • Posted: 2024-08-11T19:49:38.292000+00:00
Original source

Im just curious.
rektbyfaith
08-11-2024, 07:49 PM #10

Archived author: Crow • Posted: 2024-08-11T19:49:38.292000+00:00
Original source

Im just curious.

Pages (3): 1 2 3 Next
Recently Browsing
 1 Guest(s)
Recently Browsing
 1 Guest(s)