Warden Private Server Script

[DarkLinux]

Think I found an easy fix for check 3.

for n in pairs(getfenv()) do ToList(n) end

1) Log before loading any hacks/bots
2) run again when warden calls Execute or GetText
3) diff both lists and search new values (really slow? dumped over 23100 values)
4) if found replace with junk string
5) run diff again, see if they created any new entries with that script, if so add to list 1


Improvements or any better idea?

local function IsDetected(text)
	local _isDetected = false;

	for n in pairs(getfenv()) do 
		if(n == text) then
			_isDetected = true;
			break;
		end
	end
	if (_isDetected) then
		ToConsole("DETECTED: YES")
	else
		ToConsole("DETECTED: NO")
	end
end

IsDetected("script_grind"); --YES
IsDetected("youknownothings"); --NO
IsDetected("IsDetected"); --NO

way too slow... cant do in lua I guess

if gBaseTable == nil then
	gBaseTable = {};
	local tIndex = 0;
	for n in pairs(getfenv()) do 
		gBaseTable[tIndex] = n;
		tIndex = tIndex + 1;
	end
	ToConsole("SETUP DONE " .. tIndex); 
else
	for n in pairs(getfenv()) do
		local _found = false;
		for _index, _text in pairs(gBaseTable) do
			if(n == _text) then
				_found = true;
				break;
			end
		end
		if _found == false then
			ToConsole("NEW " .. n); 
		end
	end
end

[macintelk]

I've been monitoring Warden packets for a while now and this is the entire list of strings that I have saved in my database: Paste2.org - Viewing Paste wDYINatW

reliasn can you please share howto retrive this info? would be great to build a scan tool

[DarkLinux]

reliasn can you please share howto retrive this info? would be great to build a scan tool

Hooks on wardens packet handler? It's relatively simple.

[bone91]

@danwins
My point was I could go write that to public chat and get other users flagged. I would hope they have a filter to not broadcast selected messages. Unless you cant send such colors.

Client doesn't allow for colored text messages (with the exception of item links) past vanilla (it was in TBC for a while, but not 2.4.3).
Servers would need to implement their own filter, but none of them have afaik.

[macintelk]

just played a bit with this code

if(rcsbn==nil and CastSpellByName~=nil)then 
rcsbn=CastSpellByName 
CastSpellByName=function(a) 
local d=debugstack(2) 
if(strfind(d,"Secure")==nil) then 
print("omg")
end 
rcsbn(a) 
CastSpellByName=rcsbn 
rcsbn=nil 
end 
end

testing CastSpellByName, RunMacroText, etc (managed to get a ban on wowcircle while running on a unlocked env)


Dark maybe this code help on var check?

if not  _G2 then 
print("reading _G")
_G2={}
for k,v in pairs(_G) do
_G2[k]=k
end
end

print("----DIFF LIST------")
local c=0
local c1=0
if _G2 then
for k,v in pairs(_G) do
c1=c1+1
if not _G2[k] then
c=c+1
print(tostring(select(2,issecurevariable(k))).. " - "..k);
end
end
end
print(c1.." vars Diff "..c)

the 'nil' output lists secure vars

[yung1]

Did anyone get anywhere with this?

[kenpachi1]

I have a 3.3.5 trinity server, but I cant make warden run any lua scripts

I asked for help in this topic.
Ant PQR Script - Help and Support - TrinityCore

But I got no answers. Do you have any idea where can I find help or data to be able to make the 3.3.5 warden runs Lua script?