Injection - Getting started

[Tanaris4]

So I figured out how to actually inject a binary into wow on a mac. Now the bigger question for me is how can I utilize this in my existing bot which simply does memory reads/writes.

So to my question :-) From a design perspective, how do you go about communicating between the injected module and your bot UI? I recall using pipes during an obscure comp. sci. class but I'm not sure what the right method should be.

Specifically if I need to know when an event is fired, or say I want to call a function (like login), etc...

Any tips/starters?

Thanks in advance!

[GliderPro]

Interprocess Communication (IPC) (PureDarwin)

Mach ports sound interesting...

Mach ports: Kernel-provided queues of Mach messages. Tasks can send Mach messages to and receive Mach messages from Mach ports. The kernel blocks sending to full and receiving from empty Mach ports. There is also permission control for Mach ports ("port rights") so that unauthorized processes cannot randomly access Mach ports. The kernel itself provides Mach ports to interact with resources such as tasks, threads, etc. Hence, one can see the XNU kernel as a server that serves objects through Mach ports.

[Tanaris4]

How do windows bots do it? Something similar?

[GliderPro]

How do windows bots do it? Something similar?

I think MrFishIt uses a named pipe. Named pipes are probably the easiest method of IPC to get up and running. All bots need some method of IPC if they have an in-process module controlled by an out-of-process application.

[Tanaris4]

o.O - awesome:

Cocoa with Love: Interprocess communication: snooping, intercepting and subverting

Thx all, I wouldn't have searched for "cocoa, interprocess communication" otherwise

[Cypher]

Doez Blizzard make teh banz for teh injektiunz?

[Tanaris4]

I have a feeling I might need to buy the "mac os x internals" book, not a lot of documentation on mach ports for os x (or i sux @ teh googles)

and i dunno? haven't been banned yet? hmmmm. Warden is just a stub on os x I believe anyways. I prob. should look into understanding warden a bit more before I try out injection, altho I guess they could just monitor my CTM writes to ban anyways (I'm still confused y they don't just do that)

[SKU]

I have a feeling I might need to buy the "mac os x internals" book, not a lot of documentation on mach ports for os x (or i sux @ teh googles)

and i dunno? haven't been banned yet? hmmmm. Warden is just a stub on os x I believe anyways. I prob. should look into understanding warden a bit more before I try out injection, altho I guess they could just monitor my CTM writes to ban anyways (I'm still confused y they don't just do that)

^ trolled.

[Xarg0]

Why do so many people go down the route of injecting a module into wow and then controll it from an external process?
You have to take care about so many things, it's just not worth it.
If you want to have the benefits of beeing injected just run your bot completly injected, hook openGL and create an ingame gui, or register lua functions to controll your bot with an addon.

If you still want to have a remote bot ui I'd suggest you to look up on named pipes or shared memory, shared memory is probably the best ipc from a performance point of view while it's implementation can turn out to be rather ugly and named pipes are most likely the easiest to implement.

And about your worries on injection things into wow, it's prefectly secure to inject your private stuff into wow, only hooking and patching of wow functions could be possibly caught by warden if you're using public methods, however I've no clue if warden is even operating on Mac OS X, you've to find that out yourself.

[Tanaris4]

If you saw the UI of Pocket Gnome, you'd realize why I don't want to re-write the UI to be in the game And I don't have the time to execute unfortunately.

But thanks for the advice, I've been reading up on mach ports and see a couple options, but need to write some sample apps to test. The good thing is I won't be using the injected module for much, only things like logging in + accessing functions I fail @ reversing.