Use of normally-inaccessible skills? (WoW)

[ShasVa]

This might be a long shot, but here I go.

Is there any way that an outside application/code could allow a WoW character access to any spell/skill/ability?

One big draw would be the use of NPC spells. But for a bit of inconspicuousness, I'm hoping that such an application/code could allow a character use of spells that are in their spellbook, but are not directly usable - due to being the wrong specialization mostly. Like for instance, a Fire Mage could cast Blizzard despite not being in Frost spec.

Could it be done, and if so, what's the likelihood of being detected? (a ball-park estimate on the latter will suffice)

[Dupheadss]

As far as I am aware, All user spells are sent to the client via the server.

Here is an example of what that request looks like (using YMIR packet sniffer on TBC live)

ServerToClient: SMSG_SEND_KNOWN_SPELLS (0x2C2A) Length: 153 ConnIdx: 1 Time: 12/06/2021 16:43:10.875 Number: 102
InitialLogin: False
KnownSpellsCount: 36
FavoriteSpellsCount: 0
[0] KnownSpellId: 196 (196)
[1] KnownSpellId: 264 (264)
[2] KnownSpellId: 2973 (2973)
[3] KnownSpellId: 204 (204)
[4] KnownSpellId: 81 (81)
[5] KnownSpellId: 522 (522)
[6] KnownSpellId: 13358 (13358)
[7] KnownSpellId: 24949 (24949)
[8] KnownSpellId: 669 (669)
[9] KnownSpellId: 20572 (20572)
[10] KnownSpellId: 20573 (20573)
[11] KnownSpellId: 20574 (20574)
[12] KnownSpellId: 20576 (20576)
[13] KnownSpellId: 203 (203)
[14] KnownSpellId: 75 (75)
[15] KnownSpellId: 2382 (2382)
[16] KnownSpellId: 3365 (3365)
[17] KnownSpellId: 3050 (3050)
[18] KnownSpellId: 6233 (6233)
[19] KnownSpellId: 6246 (6246)
[20] KnownSpellId: 6247 (6247)
[21] KnownSpellId: 6477 (6477)
[22] KnownSpellId: 6478 (6478)
[23] KnownSpellId: 6603 (6603)
[24] KnownSpellId: 7266 (7266)
[25] KnownSpellId: 7267 (7267)
[26] KnownSpellId: 7355 (7355)
[27] KnownSpellId: 8386 (8386)
[28] KnownSpellId: 9125 (9125)
[29] KnownSpellId: 21651 (21651)
[30] KnownSpellId: 21652 (21652)
[31] KnownSpellId: 22027 (22027)
[32] KnownSpellId: 22810 (22810)
[33] KnownSpellId: 9077 (9077)
[34] KnownSpellId: 9078 (9078)
[35] KnownSpellId: 1978 (1978)

Back in the day there was a tool that could inject information into the packets and mess around with the client's responses - even that was mainly used on B rate private servers and has since been patched and abandoned.

In short (imo) there is no possible way to use or cast an otherwise unusable spell strictly within the clients memory or protected LUA calls, You can attempt to play around with packet manipulation. However I think you'd be pretty disappointed, Not to mention the amount of work it would take :P

[Xecis]

There are spells a player can cast that are not sent to the client by the server. However, this would indeed require a third-party program to send CMSG_CAST_SPELL packets with the modified spell ID. First, you would need to identify the spells most likely by scanning the spell IDs, then you would need the ability to modify and send a valid CMSG_CAST_SPELL request to the server. At the moment, I do not know of any easy and public way to do this. Sorry!

[ChrisIsMe]

aaaaaaaaaaaaaaaaaaaa

[ShasVa]

Well it was worth a shot. Thanks anyway people.