[Question][Networking] Bot Detection menu

Shout-Out

User Tag List

Results 1 to 8 of 8
  1. #1
    dook123's Avatar Active Member
    Reputation
    21
    Join Date
    Oct 2008
    Posts
    115
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)

    [Question][Networking] Bot Detection

    My question pertains to this:
    4D8610 Send_CMSG_BOT_DETECTED2

    I believe this message would be sent from client to server if the client(warden) detected a bot.

    I'm wondering if its possible to drop these messages if they are ever sent?

    I know wow used to send unencrypted data and now it encrypts some of it. I would guess this is encrypted so figuring out if it was sent would be challenging.

    On that topic, anyone know what type of encryption is used?

    Thanks for your help
    ------------------------------
    If not me than who?

    [Question][Networking] Bot Detection
  2. #2
    BoogieManTM's Avatar Active Member
    Reputation
    52
    Join Date
    May 2008
    Posts
    193
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    RC4 encryption.

    In all of my years of wow protocol reversing/analysis (since beta), I've never seen those opcodes being used. If they want to get you like that.. they're not going to be that obvious.

  3. #3
    dook123's Avatar Active Member
    Reputation
    21
    Join Date
    Oct 2008
    Posts
    115
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Thanks for the reply.

    I suppose it wouldnt be that easy would it

    Im happy to hear its RC4, higher potential to decrypt, hopefully a small key as well. Im sure they were going for speed and to deter simple plain text reading.

    /closed
    ------------------------------
    If not me than who?

  4. #4
    XTZGZoReX's Avatar Active Member
    Reputation
    32
    Join Date
    Apr 2008
    Posts
    173
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    According to Ralek, those (and some related opcodes) were used to catch InnterSpace and Glider. They're no longer in use, I don't think.

  5. #5
    andy012345's Avatar Active Member
    Reputation
    59
    Join Date
    Oct 2007
    Posts
    124
    Thanks G/R
    0/7
    Trade Feedback
    1 (100%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Yeh theres a bunch of client checks for glider and innerspace, seperate from warden. I believe in the PTR builds you can see the client even crashes with the assertion "glider" for example.

    These opcodes have nothing to do with warden.

  6. #6
    BoogieManTM's Avatar Active Member
    Reputation
    52
    Join Date
    May 2008
    Posts
    193
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by XTZGZoReX View Post
    According to Ralek, those (and some related opcodes) were used to catch InnterSpace and Glider. They're no longer in use, I don't think.
    Hmmm. I was under the impression that that detection method hijacked other packets (I know for sure it was trigged by SMSG_FRIENDS_LIST). I'm pretty sure those opcodes are from beta and were never really used. If they did use that.. lolll. funneh

  7. #7
    XTZGZoReX's Avatar Active Member
    Reputation
    32
    Join Date
    Apr 2008
    Posts
    173
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    They did use them.

    BTW: https://bitbucket.org/XTZGZoReX/wowp...dler.cs#cl-123

    (Yes, I know it's not part of Warden, I just put it there anyway.)

  8. #8
    BoogieManTM's Avatar Active Member
    Reputation
    52
    Join Date
    May 2008
    Posts
    193
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Ahh.. interesting. I wonder if sending that packet would still get ya banned :P

Similar Threads

  1. Question about bot detection
    By razeru in forum WoW Bots Questions & Requests
    Replies: 4
    Last Post: 01-30-2015, 07:16 PM
  2. Some important questions about bot/hack detection
    By JoshRMT in forum SWTOR Bots and Programs
    Replies: 8
    Last Post: 01-05-2012, 04:15 PM
  3. A few questions about bots/hacks and their detection
    By UNREST in forum WoW Bots Questions & Requests
    Replies: 2
    Last Post: 02-01-2011, 12:08 PM
  4. Question about bots.
    By Houie in forum World of Warcraft General
    Replies: 3
    Last Post: 06-11-2007, 10:27 PM
  5. [Question] Autoit bot
    By twitch101 in forum World of Warcraft General
    Replies: 7
    Last Post: 12-13-2006, 03:46 PM
All times are GMT -5. The time now is 12:17 PM. Powered by vBulletin® Version 4.2.3
Copyright © 2025 vBulletin Solutions, Inc. All rights reserved. User Alert System provided by Advanced User Tagging (Pro) - vBulletin Mods & Addons Copyright © 2025 DragonByte Technologies Ltd.
Google Authenticator verification provided by Two-Factor Authentication (Free) - vBulletin Mods & Addons Copyright © 2025 DragonByte Technologies Ltd.
Digital Point modules: Sphinx-based search