Pirox pvpTool 2.1.1 account stealing code is present

[PiroX]

I will remove that anticrack method in upcoming versions!
I didn't thought about such a negative effect

[Apoc]

There are hundreds of thousands of other ways. This one is just plain stupid.

[Seifer]

also as a quick addition to daknies irc logs:

pirox and botoperator is talking cross.. pirox is saying that they receive account names of the ones who crack it
and botop is saying they dont.. and that they dont store it anywhere...

It has been hinted many times that BotOperator and PiroX are the same person.

With the first cracked pvptool 2.0.8 i added a anti crack method to the bot. There are different parts what makes the bot secure for simple cracking (i dont explain what trigger this anticrack)

If the cracker cracks pvptool and use it, the anticrack routine gets active. This part of the code send the set entered acc date to our server to get the info about the cracker and we can report them to blizzard or cancel his wow account.

So basically, this "anti cracking" routine is active until your netcheck has verified that the user is using a legitimate copy of PiroX bot, which deactivates it?

Also, it's quite hypocritical to report users who have cracked your bot (which is against Blizzard's EULA) their account names to Blizzard and say "ban plz".
There are much more secure, and probably less dodgy methods to protect your bot from these crackers, and I think - personally - that the code the OP posted is in fact dodgy, I wouldn't blame it onto him "hating PiroxBots".

[fishy_]

There are hundreds of thousands of other ways. This one is just plain stupid.

Not my business but may you can tell PiroX some ways. *hehe
thanx for not beeing angry to us.

@Seifer
the routine get activated when the Bot does not get a valid Variable. (because the cracker removed it (for the key)). If the variable exists the route is still deactivated so no account data will send to our server.

[KuRIoS]

Not my business but may you can tell PiroX some ways. *hehe
thanx for not beeing angry to us.

we have no reason to be angry

[zutto]

So i am here to clear this out

With the first cracked pvptool 2.0.8 i added a anti crack method to the bot. There are different parts what makes the bot secure for simple cracking (i dont explain what trigger this anticrack)

If the cracker cracks pvptool and use it, the anticrack routine gets active. This part of the code send the set entered acc date to our server to get the info about the cracker and we can report them to blizzard or cancel his wow account.

original pvpTool users of PiroxBots.com never see anything of this part because it will never be activated. You can test this with a network sniffer. The bot will never transfer any acc data.


I say again. We do NOT steal any account data from OUR users! We love our community and there is absolutly NO reason for us to steal acc data!

FEUP is just a loser who hates PiroxBots and its users


I am sorry that my community get this info this way and i hope you dont understand it wrong

This part of the code is now explained and i hope you can understand it
I request a close of this thread.

anyone with bit expirience in autoit can bypass that with removing few lines


if it doesnt get activated, why are you FORCED to put your account password? [you could simply type 1, but without it you would get crash.]

[Seifer]

@Seifer
the routine get activated when the Bot does not get a valid Variable. (because the cracker removed it (for the key)). If the variable exists the route is still deactivated so no account data will send to our server.

I see, but just closing down the bot if it doesn't get this variable passed from the server would be the first thing to cross my mind, assuming there is no getting around of this variable you speak off.

You could also set some crucial offsets to 0x0 and change them once the netcheck has passed, and you obtain the value you change it to from your server, not saying that's the most secure way, but it's a less dodgy way at least, I think

[PiroX]

you are not forced to enter any acc data

[evil2]

thanks for FEUP bringing this up.

i still cannot believe the words i read from Pirox.
this was the most untrusted action i ever seen from a known bot author,
and his words "... we can report them to blizzard ..." really shocked me.

[fishy_]

we can - that does not mean that we actually did it or would do it. Its just a Pressure ("Druckmittel" in german, sorry if the word is wrong).

[Cypher]

So i am here to clear this out

With the first cracked pvptool 2.0.8 i added a anti crack method to the bot. There are different parts what makes the bot secure for simple cracking (i dont explain what trigger this anticrack)

If the cracker cracks pvptool and use it, the anticrack routine gets active. This part of the code send the set entered acc date to our server to get the info about the cracker and we can report them to blizzard or cancel his wow account.

original pvpTool users of PiroxBots.com never see anything of this part because it will never be activated. You can test this with a network sniffer. The bot will never transfer any acc data.


I say again. We do NOT steal any account data from OUR users! We love our community and there is absolutly NO reason for us to steal acc data!

FEUP is just a loser who hates PiroxBots and its users


I am sorry that my community get this info this way and i hope you dont understand it wrong

This part of the code is now explained and i hope you can understand it
I request a close of this thread.

"FEUP is just a loser who hates PiroxBots and its users"

I'm sorry, but right now YOU are the one who looks like an *******. Going on the offense for a situation where you should clearly be on the defense.

If I came across what FEUP came across I would post about it too. You'll note he explicitly said that he didn't see it activated, that it was "present" not used, and that he wanted an explanation.

I think that's quite reasonable, though the tone of the post is probably a bit harsh due to what I assume are a lack of English skills. Something which isn't really his fault.

In short: YOU ****ed up. Stop trying to pass it off as someone having it in for you. YOU put the code there. YOU made the decision to use it as 'protection'. Acknowledge your mistake, apologize, and try to move on.

[An7hrax]

It's a flaw in this mechanism of protection, ever since you forced me to put in my PW (which i even then thought was "fishy") i just put in account: 0 and password 1.

If i would crack the bot all you would get is that, and with that you could not send my info to a GM and ban me.

[Seifer]

we can - that does not mean that we actually did it or would do it. Its just a Pressure ("Druckmittel" in german, sorry if the word is wrong).

I think the intentions are clear, it's just the way you are trying to put the pressure on the people who use cracked software from your company is a bit wrong.

When you are running a company like you are - in size, I mean - I think your number one concern should be your customer's safety, not the way you can track down and punish people who use cracked versions of your software.

And again, I gave you an example of how you could protect your bot from these crackers without too much hassle, but doing it this way will lose you customers in the long run.

[valiliv]

dear pirox: some feedback from a customer looks like everything is solved and this will be removed.

But

what you did is scary and CRAZY and I will never trust you again and will never fire up piroxbot again.

HOW on earth could you not understand that "get the info about the cracker and we can report them to blizzard or cancel his wow account" is never a solution to seeing your bot cracked or copied on some other website? even if that just involves the actual cracker only - you still have zero right to destroy his account, that just makes you a criminal and a thief except you are stealing something worth $100s, hey why not steal his bank info too and empty his savings as "punishment". more important the actual reality will be 1000s of people ending up with this program without even knowing it's cracked, opening it for 5 min and losing accounts. you think some 14 yo wow player knows that some bot trial he DL'd is actually a repackaged crack of Pirox, or even that Pirox exists? You really planned to be the judge jury and executioner every time a cracked bot went online, and your solution was not to deactivate it or IP ban it but to INSTANTLY BAN THE WOW ACCOUNT FOREVER without knowing any more details and circumstances?

hopefully posting this doesnt get me banned from mmowned but if so its worth it, wow i am MAD about this. quite simply, today you decide to ban wow account of anyone using cracked pirox, next month of anyone whose monthly payment is late, then anyone who posts crap in your forums... why not? what you did proves you lack the common sense and trustworthiness to run a business like this. you are making a living running a business both against the WoW EULA and international copyright laws (see Glider trial) - AND YOU ARE GOING TO BAN ACCOUNTS WITH 100s DAYS PLAYED for messing with YOUR copyrights?

PS: wtf is "you are not forced to enter any acc data", are you saying this whole copy-protection scheme relied on the cracked bot users entering their login/PW and would not work for those crackers that dont use the bot's relogin function? I know you are not dumb, so im gonna assume that's bullshit and you would get both battlenet login and PW via keylogging the game.

[PiroX]

I really apologize for my mistake. I'm always honest to my community and say it here that this is not a lie!
I know and understand that lots of my pvptool users are disapointed now.

My goal was not to harm my customers or making pvpTool bad. I want you to believe this and think about "why we should get acc data of our customers".

Again here
I feel very very sorry and bad that i loose the trust of all people.
I know that i can not reverse it. But i can tell you the truth

I hope you don't leave PiroxBots.com Your MMO Bots developer - World of Warcraft Bot / Aion Bot and keep continue botting with pvpTool.
I understand if not.
I really owned myself with this stupid idea!

I apologize to my community and all others who used my tools and bots