Skip to content
View in the app

A better way to browse. Learn more.

OSBot :: 2007 OSRS Botting

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (โ‹ฎ) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

Leaderboard

  1. Czar

    Global Moderator
    14
    Points
    23654
    Posts
  2. FrostBug

    Scripter III
    5
    Points
    3967
    Posts
  3. Alek

    Ex-Staff
    5
    Points
    7878
    Posts
  4. Knuckolls

    $500.00 Donor
    3
    Points
    1515
    Posts

Popular Content

Showing content with the highest reputation on 08/23/18 in all areas

  1. ๐Ÿ‘‘CzarScripts #1 Bots ๐Ÿ‘‘ ๐Ÿ‘‘ LATEST BOTS ๐Ÿ‘‘ If you want a trial - just post below with the script name, you can choose multiple too. ๐Ÿ‘‘ Requirements ๐Ÿ‘‘ Hit 'like' ๐Ÿ‘ on this thread
  2. NEW! supports new south + east shortcuts, new hopper (upstairs), and mouse invokes!!! (just like runelite!) 'the intelligent choice' By Czar 34-99 Mining on video!! Agility Shortcut Setup Window Preview 70 hours run time https://i.imgur.com/wiF6VPO.png
  3. Hi all, Hope all is well. In the last two months I've been botting OSRS pretty extensively as I've been in-between jobs (left old role for a new role set to start in September) and found myself with a lot of free time. I consider myself to be analytical and I always make a conscious effort to keep my biases in check. In these last few months, I've gathered quite a few insights regarding how Jagex's anti-cheat team operates, which I believe to be accurate and would like to share them with all of you today. To be clear, I have no direct line of contact to anyone working on the anti-cheat team so these are just conclusions I've drawn based on my personal experiences & those of fellow botters. My analysis will only pertain to bans issued manually to accounts that have purchased a membership and are highly diversified (NOT goldfarming) as I have no experience running F2P/P2P botfarms. Those are almost certainly handled by a different stream (RE: Botwatch). *** "Manual Ban" does not refer to a mod teleporting next to you and banning you in-game, but rather someone on the anti-cheat team screening your account (from a log of hundreds - thousands) and making a judgement call as to whether you've broken any rules *** 1) All bans issued on diversified/rested accounts with membership (questing, different skills etc) and don't goldfarm are due to manual reviews by someone on the anti-cheat team 2) The only way for a botted account (that satisfies the conditions above ) to survive is to avoid a manual review at all costs 3) The single most important factor in regards to triggering a manual review is total time online (I've found this figure to be ~12 hours) Total time online INCLUDES the time you spend playing legitimately on the account. ie: if you bot for 10 hours and play legitimately for 4 hours you WILL VERY LIKELY trigger a manual review Once your account gets reviewed, the entire history of your account is available to the anti-cheat team thus any kind of botting that you've done (no matter how long ago) is liable to lead to a ban An account that survives a manual review is not a reflection of the botters knowledge/prowess but the incompetence of the anti-cheat specialist reviewing your account False positives are 100% real as are false negatives (bots that fly under the radar). For evidence on false positives (incorrectly banned accounts) you can do a quick search on google and find mod tweets directly contradicting each other regarding whether the ban was accurate or not I've successfully appealed botted accounts that were played on only 1 IP address that were permanently banned for macroing major. Their response was something along the lines of "we identified unauthorized access to your account" (100% false / impossible). This confirms that bans are at the discretion of a judgement call that the anti-cheat specialist reviewing your account makes. The accounts that were appealed were highly diversified in tasks (quests, combat, skilling, clue scrolls, favour, mini games etc), and botted specific skills up to 4 hours consecutively (20 minute breaks per hour botted) 4) Avoiding hotspots for manual reviews is 100% key to not getting banned. Example of hotspots that are guaranteed to cause a manual review: runecrafting 1h+, Zulrah etc. Even if you do Zulrah or runecrafting legitimately for extended periods of time, your account will be manually reviewed. To reiterate point 3), any kind of botting history will be available to the anti-cheat specialist reviewing your account 5) The primary mandate of the anti-cheat team is to eliminate gold farming & real world trading. These are the primary forms of botting that directly impact Jagex's bottomline and as a [Chinese] financial sponsor owned company, you can be damn sure that is their #1 priority It is my belief that accounts with large amounts of wealth on them (100M+) are subject to more frequent manual reviews when flagged. This is because banning the account becomes a double whammy for Jagex 6) "Anti-Cheat specialists" are NOT data scientists, but regular customer support staff that are trained in that respect. Thus, it is my belief that in their training they are given relatively specific guidelines to follow to identify whether an account is botting or not. It is reasonable to assume that these guidelines are set in accordance to the most popular botting scripts & botted skills This explains why accounts that exploit an unpopular gold farming mechanic through private scripts have very low ban-rates. I personally have botted several accounts using such a script that has crashed very obviously (clicking the same spot for hours due to lack of failsafe) and ALL of them have survived. It is not unreasonable to assume that because of the sheer quantity of data collected on each account, the data scientists will only send a SELECTION of logs to the anti-cheat specialist to review (ie: hey John, please review the following woodcutting/agility logs on account X for the past week) It is my belief that the anti-cheat team is occasionally given unique mandates to follow through on (the recent NMZ banwave is a clear example in my opinion). This falls in line with them pursuing their primary mandate of keeping goldfarmers in check as Zulrah is one of the most efficient gold-farming mechanics in the game and accounts are being farmed EN MASSE to exploit it 7) Many people have reported a substantial improvement in ban rates when using mirror-mode instead of injection. This is a highly controversial topic because Osbot claims injection to be indistinguishable from other third party clients. Personally, I believe this to be unlikely because there have been many reports of tutorial accounts getting instantly locked when logging in from the injection client whereas the normal client logs in fine. Additionally, OSBuddy is confirmed to return a signature to Jagex that identifies it specifically as OSBuddy. It is not unlikely to think Runelite has done the same (I haven't found official evidence of this however) because it would be in the best interest of the owners of these clients to just play ball with Jagex. This, in turn, would make it very easy for the anti-cheat team to flag unidentified third-party clients for high priority review. It is important to stress that although mirror-mode appears to be the safer alternative, it is only one of the many factors Jagex uses to identify bots. If you don't bot responsibly, your account will get flagged all the same due to the aforementioned reasons in points 1 through 6. Concluding thoughts: Although avoiding bans will likely never be an exact science, I think we can make some progress by simply sharing bans we've recently experienced. In my short time here, I've noticed a famine mentality as relates to protocols & best practices to avoid bans. Although I understand why someone who relies on OSRS botting to put food on the table would want to keep to themselves, this attitude is clearly counter-productive to the advancement of botting as a whole. I will be starting my new role in less than 2 weeks and will not be doing much botting anymore, so I wanted to leave you guys with what I learned in hopes to start a collaborative discussion moving forward. Ban Report Example: Client: Mirror Time online the day leading to a ban: 12 hours Activit(es) botted leading to a ban: NMZ/ gold farming technique/ Woodcutting etc. Age of account: days, weeks, months, years etc. Alek's response to this thread: Best, Logicfury P.S. I will try my best to update the thread with any & all well thought-out insights (contradictory or supporting) and give credit where it is due
  4. 2 points
    Says the man who uses another bot client that clicks on entities that are not even visible, and claims the interactions to be revolutionary - yet they were copy pasta'd from rs-hacking (or similar sites) over 10 years ago. How do I know you weren't banned using their client which obviously has a lot of questionable methods? There's no lying from our end; our injection techniques aren't naive; I really don't want to spend time writing out in layman's terms what this means. Although the other devs aren't as outspoken as me, it doesn't mean they are inactive and don't care. I can't really discuss everything we do to protect your accounts, as that would compromise it. What I can say is that the OSBot team is not a bunch of new developers, they've been doing this for many, many years and you're in good hands. We can't stop server-sided heuristics. If you want to run a F2P/P2P farm with accounts that botted off tutorial island, I'm sorry but you're going to run a much higher risk. Please take a look at my botting guide.
  5. Just take some precautions. Don't have them interact with each other, bot on your other account on a Proxy (which you can hit up @D Bolter for.) I would say also if your wanting to make sure the account creation IP doesn't bite you in the ass somehow also maybe look into @Night's Account Creation service and you can bulk purchase accounts to bot on and the creation IP won't match your Main's. Enjoy and Good luck
  6. Can't do it with the Camera class
  7. Quality thread, thank you.
  8. This is an AIO (All-in-one) bot that has almost every thieving style except blackjack, ask for a free trial by liking thread or making a post! Vyres and elves are now supported! Both can make solid profit per hour, decent passive income! BIG THANK YOU TO ALL OUR SUPPORTERS! WE ARE THE MOST SOLD THIEVING BOT IN OSBOT HISTORY. MOST REPLIES, MOST USERS, LONGEST PROGGIES #1 Thiever | Most Overall Sales | Most Total Replies | Most Results | 10+ Years Maintained | 'the intelligent choice' by Czar SUPPORTS VYRES 224M made in a single sitting of 77 hours 1.1B made from elves and vyres!! ELVES SUPPORTED TOO! (NEW) 2.1m/hr, 6 crystals in 7 hrs 99 THIEVING MANY MANY TIMES, 35M EXP IN ONE BOTTING RUN!! 99 thieving in ~43k xp (12 minutes remaining)! Just got 99 proggy! Gratz to @iz0n THIEVING PET AT LVL 22 FROM TEA STALLS 11.5 HOURS, WITH PET TOO!! 610k/hr getting 99s on deadman worlds!
  9. JPHamlett Quester Currently supported quests Cook's Assistant Sheep Shearer Romeo & Juliet I will add more as time goes on Current bugs: Unknown Change Log: Initial Commit
  10. @Chuckle Message him
  11. Thanks for the explanation . I'll push a fix asap!
  12. love the script, but when you have Marks of Grace selected to be picked up, and you're high alching it will get stuck sometimes when a MoG is on the ground due to it prioritizing the high alch over the MoG, so it hovers over the MoG but its already clicked the high alchemy spell, causing the script to stop.
  13. Hey @Czar I think I speak for us all, I would like to see a magic or fletching option
  14. is it safe to bot yet tho? update just happened
  15. Just give it some time. Did you expect the client to 100% work within a short period of time after a Game Update? Just exert some patience and it'll be fixed soon.
  16. Some nice ideas in the thread and nice reports. I will be doing more coding then posting new SDN update to the script again, can't wait For all the questions regarding does the script support this/that, I gave you trial so you can see for yourself Running around in market is for DMM, I will make a customizable option for what to do when caught, e.g. run away, run away to X tile, fight back, etc. (more ideas are welcome) Jugs of wine will be added for sure. Seed boxes are on the list to be added too. Activated trial requests gl guys happy botting
  17. Would be good to explore the api? https://osbot.org/api/org/osbot/rs07/api/Camera.html
  18. I just bought Perfect magic, it won't attack or cast spells. It asks me what spell i want to use to attack NPC's. I don't know if the bot or script is broken or if i am typing the wrong information in. Level "Level 1: Wind Strike" or "Wind Strike" doesn't seem to work. Please help me.๏ปฟ
  19. Ill get it fixed soonโ„ข. Meanwhile git gud
  20. its been going up especially with the bot nuke going on rn
  21. 60 att is good but I would love to try a high level gmauler myself
  22. make either on of them into a 60 attack piety pure
  23. I was joking that your 'gold farm' method is ruined now lol
  24. Hey buddy, I know how their system works. Nearly all detection is done automatically. Every account logged in game at any given point is being analyzed by botwatch. Certain actions can cause you to be automatically banned, meaning there was zero manual intervention, but those aren't too common compared to everything else. Most bots are analyzed by the system and when the system is confident enough that the account is botting, it'll be flagged and added to a list. This is where the "manual" work comes in, and all that is is a Jmod quickly looking at whatever data it is they look at and confirming it is a bot before issuing the ban and this is done because their bot detection system isn't accurate enough to allow it to dish out bans 100% of the time by itself. Your interpretation of "manual reviews" is a jmod sitting down at his desk and individually looking over accounts 1 by 1 trying to determine if they are a bot. This is NOT how it works over at jagex and anyone who thinks that someone is there looking over 10s of thousands of accounts 1 by 1 trying to nitpick bots is braindead.
  25. how do I make it not run from guards catching me at the bakers stall? I can one hit them
  26. CLI. You beauty. Question, where is the file location for the mentioned "my_save_file"?
  27. Every time i try running this now, it goes for maybe 6 clicks, then a black screen pops up, saying i have selected to stop script, and it logs me out. i Used this bot for one night before it stopped working. am i missing something simple to make this work?? Sometimes it doesn't even get the first clicks in. just shuts the bot strait down. have tried it in both mirror mode and injection It does one lap and then it just stops for me, just stands there. Also, when you fall or complete it, it just stops as well. like it doesn't work when he's not on rooftops
  28. It's not the script, it's how you're botting.
  29. Hi, I want to pay with OSGP but the link provided on topic is dead and I'm not sure where to buy a voucher. Thanks in advance Edit - may I try the free trial first I may aswell
  30. I wish the script had more IQ, when doing baker's stall the bots runs all the way across the marked instead of just hiding behind the boxes. fix pls
  31. 1 point
    Could I get a trial please?
  32. Would like to try this script please
  33. Looking for a bot that includes teleport alching ;), maybe you could implement it @Czar? Its the best xp for till stun alch ? bought several of your scripts so i dont need a trial ?
  34. does this script support the kourend fruit stall??
  35. Does this support Ham Store Room ? ??
  36. Is it normal for it to only clean 4.6 - 5k herbs an hour? Seems fairly slow. I noticed other scripts hitting 6 - 6.5k herbs an hour cleaned. I have escape on for faster functioning also.
  37. is this a one time purchase or monthly?
  38. Hello Czar! I love all your scripts, even through I got access to the mining one trial, I didn't use it due to time constraint. But I would love to try this script.
  39. can i please get a trial for herblore
  40. any ETA, on when black jacking will be supported? also banking via noted food, to get more food in polly while black jacking. Thank you!
  41. trial please boss
  42. I try to depatterize as much as possible with an implementation of a markov chain. In the item combinator script (the one doing the fletching) I coded multiple ways to... withdraw items (withdraw 14, misclick withdraw 10, misclick withdrawX) sometimes I the script purposefully withdraw 10, I will have a fix component that will make a subsequent withdraw attempt so that the final inventory is 14 of one item and 14 of the other combine items (randomly select an item about where the primary and secondary items intersect. i.e: select the first item at a rand inv slot 10-13, select the second item at rand inv slot 14-16. Interact with the banker sometimes when interacting with the make-all button I will immediately right click hover the banker sometimes mouse offscreen, and afk for a bit after every item has been processed sometimes wait a bit then then hover the banker sometimes wait a bit, hover the banker but over-eagerly press bank before every item have been processed (there would be like 1 or 2 left to combine). The markov chain is used to randomly select a some variation of an action to run. Some actions occur more frequently than others (optimal actions most frequent). An image to better illustrate what I mean: https://imgur.com/CtAP0Tl. W14P means to withdraw 14 of the primary item. Other abbreviations follow the same convention. There end up being 48 distinct possible paths (6 * 3 *3 = 48) (distinct ways to combine items). While there probably still a pattern it is much harder to detect (or takes longer) resulting in what hopefully is less frequent bans. Or none as I do other legit content on my main to mix it up On injection botting, I can't say that it is detectable or not. But what I can hypothesize is that because 3rd party clients are all the rage, and these 3rd party clients reverse engineer osrs just like botting clients (injection/reflection) jagex has a harder time knowing if someone is botting based only on foreign code detection. Someone may be using a 3rd part client that just happens to use injection to pull game data. You're probably right with Jagex not being able to run bot detection on all accounts, I heavily suspect accounts newly created are flagged. This flag is lifted after some playtime to give the anticheat some time to screen new accounts. The majority of new accounts created are f2p suicide bots right, and they get banned relatively quickly. I don't think anticheat is built into the game client, I read java code is easy to de-obfuscate in comparison to other languages. If you look at the decompiled source code of the osbot client you will notice variable names being changed to a variation iliiIlili, while difficult to look through it still is possible. I think the reason that java is easy to decompile is the reason there are so many 3rd party clients. ^ I am not positive that the above is true, I don't have experience reverse engineering java code and can only give my naive observations. One more thing, I think that some operations in the game are purely client side. My justification for this is that they can be implemented client side. For example hovering xp for a skill is a matter of reading loaded memory on your computer, when you hover a skill the rs client probably does not send a request to a Jagex server requesting the xp for a skill. Other things I think are client side are camera rotation, examining items, selecting an item but not using it on a related item, and right clicking somewhere. Operations that are client side are opening the bank, withdrawing or depositing items, placing a GE offer, trading or following another player, and walking somewhere (duh). This distinction is important because if anticheat is not in the client then only data that involves both the client and a Jagex server can be used to detect botting.
  43. Does this support shift dropping?

Account

Navigation

Search

Search

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions โ†’ Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.