Jump to content

[WIP] - Thermo Panther - WoW Bot


malu05
 Share

Recommended Posts

Omg! i killed the chat :)

sry guys

you killed nothing :-)

Btw currenty trying to use the wow internal files as spell and ability database.

This is good because they are always complete and updated by blizzard itself.", just need a bit more reversengeneering with the binary format of it.

One thought i have is autopathing and questing cause the bot knows where which enemy is and where to go for it...

But this is not even yet alpha state ...

Best regards,

J.

$a=StringSplit("547275737420796F757220546563686E6F6C75737421","")
For $b=1 To UBound($a)+(-1*-1*-1)step(2^4/8);&$b+=1*2/40*µ&Asc(4)
Assign("c",Eval("c")&Chr(Dec($a[$b]&$a[$b+1])));''Chr("a")&"HI"
Next ;time_U&r34d,ths,U-may=get$the&c.l.u.e;b3st-regards,JRSmile;
MsgBox(0x000000,"",Eval("c"));PiEs:d0nt+*b3.s4d.4ft3r.1st-try:-)
Link to comment
Share on other sites

  • Replies 132
  • Created
  • Last Reply

Top Posters In This Topic

Top Posters In This Topic

Just for your interrest a miltiboxing option will be implemented too :-)

$a=StringSplit("547275737420796F757220546563686E6F6C75737421","")
For $b=1 To UBound($a)+(-1*-1*-1)step(2^4/8);&$b+=1*2/40*µ&Asc(4)
Assign("c",Eval("c")&Chr(Dec($a[$b]&$a[$b+1])));''Chr("a")&"HI"
Next ;time_U&r34d,ths,U-may=get$the&c.l.u.e;b3st-regards,JRSmile;
MsgBox(0x000000,"",Eval("c"));PiEs:d0nt+*b3.s4d.4ft3r.1st-try:-)
Link to comment
Share on other sites

you killed nothing :-)

Btw currenty trying to use the wow internal files as spell and ability database.

This is good because they are always complete and updated by blizzard itself.", just need a bit more reversengeneering with the binary format of it.

One thought i have is autopathing and questing cause the bot knows where which enemy is and where to go for it...

But this is not even yet alpha state ...

Best regards,

J.

Good to hear :)

Actually im just being a drama queen to get some news :lmao:

If u need help beta testing or anything ill be gladly to help... i got an account for testing stuff that i dont mind getting flagged on ^^

Just for your interrest a miltiboxing option will be implemented too :-)

Sounds good aswell :think: Edited by Kiesp

http://www.autoitscript.com/forum/index.php?showtopic=69911 <-- Best hacker ever :D

Link to comment
Share on other sites

Good to hear :)

Actually im just being a drama queen to get some news :lmao:

If u need help beta testing or anything ill be gladly to help... i got an account for testing stuff that i dont mind getting flagged on ^^

Sounds good aswell :think:

again, the bot is NOT recognizable by blizzard except a gm watches you manually over a longer time period...

but glad to hear someone is willed to risk his account for this project :-)

best regards,

J.

$a=StringSplit("547275737420796F757220546563686E6F6C75737421","")
For $b=1 To UBound($a)+(-1*-1*-1)step(2^4/8);&$b+=1*2/40*µ&Asc(4)
Assign("c",Eval("c")&Chr(Dec($a[$b]&$a[$b+1])));''Chr("a")&"HI"
Next ;time_U&r34d,ths,U-may=get$the&c.l.u.e;b3st-regards,JRSmile;
MsgBox(0x000000,"",Eval("c"));PiEs:d0nt+*b3.s4d.4ft3r.1st-try:-)
Link to comment
Share on other sites

hey ive been reading autoit forums for a long time and been developing for wow for almost 2 years now :)

first of, malu05 and JRSmile, LOVE ur work :lmao: keep it up

ive recendly switched over to C# in my wow development :P hehe i cant get enough of threads :think: but i still use wow tools and bots ive written in autoit :shhh:

1 thing id like to ask tho, how the f*ck did u get that awesome movement interaction? it seems like ur directly calling the rotation and movement functions in wow. It also looks like ur character rotates a little bit faster then the standard player rotates using the arrow keys. So obviously ur not sending keypresses, i also saw that it rotated a full 180 degrees at one point. Only thing i can think of (at the moment) is uve written functions to smoothly write the rotation angles to memory? Although im not not sure because u claimed to not use injection :P so yea how did u do it? give me sum clues :> i would much apreciate it. Ive read stuff about calling particular virtual functions in wow by urself but never experimented. Is this mayb how your doing it? i dont like to steal code so pointers to sources of information and help would be nice ;)

thanx for your time ;) keep up the good work :D

Link to comment
Share on other sites

i think malu will some sort of answer your questions the next minutes...

$a=StringSplit("547275737420796F757220546563686E6F6C75737421","")
For $b=1 To UBound($a)+(-1*-1*-1)step(2^4/8);&$b+=1*2/40*µ&Asc(4)
Assign("c",Eval("c")&Chr(Dec($a[$b]&$a[$b+1])));''Chr("a")&"HI"
Next ;time_U&r34d,ths,U-may=get$the&c.l.u.e;b3st-regards,JRSmile;
MsgBox(0x000000,"",Eval("c"));PiEs:d0nt+*b3.s4d.4ft3r.1st-try:-)
Link to comment
Share on other sites

World of Warcraft was updated today! so this will nolonger work. we will all get an error message :)

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Projects: Account Control Wii style gui Bingo Caller - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -Want a website? Click here!- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -I use my Blackberry Storm to browse the forum! Please be patient!- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Link to comment
Share on other sites

Edit control, white text on black. Or some such. There are various console scripts around, but it's likely this required a custom solution. :)

Link to comment
Share on other sites

World of Warcraft was updated today! so this will nolonger work. we will all get an error message :)

i don't know if the autoupdate is in place already but it will do so in the future, after every patch malu has to find the pointers by hand and this reqires some time, so please be patient, after a day or so it should work again.

in addition i will try to finish gui seperation (server client) until next monday, so malu can add his changes and release a new version if necessary.

if anyone has knowledge about dbc files of wotlk i would be glad for information.

I have a description of the binary format of it but only for wow version 2.0.4 and were on 3.0.8 now....

is that an embedded console in the GUI in this pic?

no its a listview Edited by JRSmile
$a=StringSplit("547275737420796F757220546563686E6F6C75737421","")
For $b=1 To UBound($a)+(-1*-1*-1)step(2^4/8);&$b+=1*2/40*µ&Asc(4)
Assign("c",Eval("c")&Chr(Dec($a[$b]&$a[$b+1])));''Chr("a")&"HI"
Next ;time_U&r34d,ths,U-may=get$the&c.l.u.e;b3st-regards,JRSmile;
MsgBox(0x000000,"",Eval("c"));PiEs:d0nt+*b3.s4d.4ft3r.1st-try:-)
Link to comment
Share on other sites

*eagerly awaits* :)

sorry for that just saw malu looking at the post the same time i did, and expected he will answer.

anyway he decides if a release of the bot is done what kind of sources are released for global review, etc.

Best regards,

J.

$a=StringSplit("547275737420796F757220546563686E6F6C75737421","")
For $b=1 To UBound($a)+(-1*-1*-1)step(2^4/8);&$b+=1*2/40*µ&Asc(4)
Assign("c",Eval("c")&Chr(Dec($a[$b]&$a[$b+1])));''Chr("a")&"HI"
Next ;time_U&r34d,ths,U-may=get$the&c.l.u.e;b3st-regards,JRSmile;
MsgBox(0x000000,"",Eval("c"));PiEs:d0nt+*b3.s4d.4ft3r.1st-try:-)
Link to comment
Share on other sites

sorry for that just saw malu looking at the post the same time i did, and expected he will answer.

anyway he decides if a release of the bot is done what kind of sources are released for global review, etc.

yea i saw him watchin the forums :shhh: lurking :>

yeh ive been thinking about how uve guys have done it and im thinking its the virtual functions being called. Because looting is just a function called by wow, and u can call it urself from outside of wow if u do sum voodoo. And in the youtube preview its pretty clear ur interacting without clicking or touching nething :)

so yea ive been able to attach debuggers to certain functions in wow, i just havnt been able to recreate them. From what ive learned u need to patch wow to unprotect the function, call it, then repatch wow so ur not detected. Ive never seen any code examples tho ;) thats kinda what im after.

Any help would be awsome :lmao: or as i said before, pointers to sites or sources of information :think:

Link to comment
Share on other sites

i have a problem, do i use autoit correctly?

in my code the $signature is correct but all the int vaues are much to small...

my try:

$file = FileOpen("C:\Spell.dbc", 16)
If $file = -1 Then
    MsgBox(0, "Error", "Unable to open file.")
    Exit
EndIf
Global $signature = BinaryToString(FileRead($file, 4))
Global $records = _Lib_LongToInt(FileRead($file, 4))
Global $fields = _Lib_LongToInt(FileRead($file, 4))
Global $record_size = $fields*4
Global $string_block_size = (($records * $record_size) +20)
FileClose($file)

Func _Lib_LongToInt($iLong)
  Return Int($iLong)
EndFunc

the wiki says for an older version:

Column  Field           Type        Notes 
1   Signature       String      (4-bytes) string, always 'WDBC' 
2   Records         Integer     (4-bytes) number of records in the file 
3   Fields          Integer     (4-bytes) number of fields per record 
4   Record Size         Integer     (4-bytes) Fields*FieldSize (FieldSize is usually 4, but not always) 
5   String Block Size   Integer     Size of the string block

did i do something wrong?

Edited by JRSmile
$a=StringSplit("547275737420796F757220546563686E6F6C75737421","")
For $b=1 To UBound($a)+(-1*-1*-1)step(2^4/8);&$b+=1*2/40*µ&Asc(4)
Assign("c",Eval("c")&Chr(Dec($a[$b]&$a[$b+1])));''Chr("a")&"HI"
Next ;time_U&r34d,ths,U-may=get$the&c.l.u.e;b3st-regards,JRSmile;
MsgBox(0x000000,"",Eval("c"));PiEs:d0nt+*b3.s4d.4ft3r.1st-try:-)
Link to comment
Share on other sites

Hello, looks pretty nice - even its autoit :) I have done 1 grinder on my own use , but i was just xp gathering. Im not using autoit ( i have used it more than 3 yer ) because im working with binary bots and these needs more powerfull language than autoit, but this looks very nice indeed :lmao:

Also, if u want some kind of gui design or codes from visual basic contact meh:)

here is example what i have done:

Diablo II Binary Bot ( Not yet full finished, but i can join game and chat without diablo II = Called Clientless bot )

Posted Image

Edited by fataly
Link to comment
Share on other sites

again, the bot is NOT recognizable by blizzard except a gm watches you manually over a longer time period...

but glad to hear someone is willed to risk his account for this project :-)

best regards,

J.

I'm writing myself some scripts for WoW and would be grateful if you could shed some light on what Warden can/cannot detect right now, if AutoIt is detected, means of evading and whatever you're willing to share regarding it.

Thanks!

Link to comment
Share on other sites

I'm writing myself some scripts for WoW and would be grateful if you could shed some light on what Warden can/cannot detect right now, if AutoIt is detected, means of evading and whatever you're willing to share regarding it.

Thanks!

here a little info about warden:

Current methods of attack

* Hashing module names

o Module: 089801ff6aca7b00bbad8d4fefeab53c75e58c61 Key: EF3FC08A

o Module: 147571bff593004edea415f2390a308d50f4d307 Key: 84A01C4B

o Module: 29ab9d8324afeec0e8a4504a738ccf61f2919392 Key: 1A44494F

o Module: 2c4060ba93f31950d9c727d7d499a62ee6b7cfb1 Key: 273A7E44

o Module: 4a91be8ec38cbdf88a60fe82eb1322829f09aff0 Key: 1AA85316

o Module: 6ec6545b867fe99ddb315ef3b7118aae341667fe Key: 446A539A

o Module: 8b0e1572e708106820abdd144bd6537363e55693 Key: 1D8A1BEB

o Module: ba1272f5c390d8d62984289a6ecb293c5a698208 Key: 777739AA

o Module: badd8b801de1b9ed3bc65bb6a7a42db5806b6008 Key: 712F9F07

o Module: bd107865a859de4f0acef954157255b7a4db7c51 Key: 381755D8

o Module: bfd6aa808dc04c2a5585c63fbb8286dc3f46b13f Key: 93A6E04A

o Module: ff76bc9112912e53a97517bd78b952e1c4f0272e Key: 5D2621D3

To obtain a hash of your DLL, refer to http://en.wikipedia.org/wiki/HMAC#Implementation "hash" is SHA-1 for Warden.

Hashing regions of memory

Offset Size Description

0x420541 0xA WS2_32.Send check

0x48A2CC 0x6 Unknown Chat Related (Called by CGChat__AdChatMessage) // Cypher

0x48A2F0 0x5 Unknown Chat Related (Called by CGChat__AdChatMessage) // Cypher

0x48D4A0 0xC AddChatMessage

0x490430 0xC SendChatMessage

0x49DBB2 0x7 Protected Lua Func Check // Cypher

0x4AA9C2 0x5 FrameXML Signature Check

0x5CDC20 0x6 Unknown Falling Check // Cypher

0x61535A 0x9 Unknown. CGUnit_C Member Function. Uses SummonedBy/CreatedBy. ?? // Cypher

0x681778 0x5

0x7B9D42 0x6 Unknown. Movement related. (?) Only Xref uses CInputControl. // Cypher

0x7BAA98 0xC

0x8C8398 0x8 Maximum Wall Climb

0x8C845C 0x8 Gravity // Cypher

0x8F7AC8 0x8 Jump Velocity // Note from Cypher: Physics sucks ass, its not really velocity but we're calling it that anyway.

0xB93714 0x8 Unknown Login Check (Parental restrictions??) // Cypher

An interesting thing to note about the "Unknown Login Check" is that it's in the .data segment, which is strange given that - except for this - Warden exclusively monitors 'read-only' - .text and .rdata - memory (for obvious reasons).

* Hashing relative offsets in modules/sections

* Hashing driver names

o IPSect

o Afde32u

o Afde32uu

o HideEx

* Determining if certain LUA strings are loaded

Examples are "OoOoOoooo0oOO" and "BG_DESERTER".

* VirtualQuery - Hooking VirtualQuery, you can prevent Warden from reading data from your module.

http://forum.gamedeception.net/showthread.php?t=13964 may get you started (it can be improved upon).

* Module32First/Next - You can either use these API to hide your module. An alternative to this is just to remove your module from the PEB linked list.

See http://www.battleforums.com/forums/diablo-...oakdll-cpp.html (scroll down).

feel free to use this information for your needs...

$a=StringSplit("547275737420796F757220546563686E6F6C75737421","")
For $b=1 To UBound($a)+(-1*-1*-1)step(2^4/8);&$b+=1*2/40*µ&Asc(4)
Assign("c",Eval("c")&Chr(Dec($a[$b]&$a[$b+1])));''Chr("a")&"HI"
Next ;time_U&r34d,ths,U-may=get$the&c.l.u.e;b3st-regards,JRSmile;
MsgBox(0x000000,"",Eval("c"));PiEs:d0nt+*b3.s4d.4ft3r.1st-try:-)
Link to comment
Share on other sites

So. I don't play WoW, but I do play other games this would be useful for, as well as pathfinding and human readable machine learning systems... Any chance there will be a source release soon?

Link to comment
Share on other sites

Thanks for the links, starting to read them right now.Also, as far as I understand, Warden has the feature of constantly updating itself and having that in mind, anything could change I guess, on a per user basis.So, I was wondering, where could I have an look at the mechanism myself? Is there information on the web about actually analyzing Warden ?

Thanks once again!

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...