Leaderboard

Hey, Just the start of some new features/fixes. Download link: http://osbot.org/devbuilds/osbot 2.5.54.jar API CHANGES: - Added Quests#isQuestsTabActive(), Quests#isAchievementsTabActive(), Quests#isMinigameTeleportActive() and Quests#isKourendFavorTabActive() - Updated quest list. FIXES: - Added some of the missing api documentation. More to come. - Small mouse movement improvements. Also a lot more to come. - Improved login handler and added support for the too many login attempts screen. MISC: - Minor bug fixes. - The OSBot Team

CzarScripts #1 Bots LATEST BOTS If you want a trial - just post below with the script name, you can choose multiple too. Requirements Hit 'like' on this thread

- Amethyst ore crafting also supported - Prioritises use-item on items in inventory that are closest to one another - Stops script when you run out of materials (if you decide not to restock at GE) Gallery

Trying to add you on discord. My name is Tantan#1406

Done good luck on trials guys ^^

Account died while on gatherers mode doing romeo and juliet , since the account had items on it from tut when It died (at the wizards cause it runs directly through there and not around it ) the cadava berry was lost and it was spamming the apothecary.

Depending on the scale of your farm, you can get away with having only 1 mule, but some users like to have a main mule and a few lower ranked mules collecting all the botted items

I also retract my vote from @ez11 to @Arctic

Can I have a trial of this please?? Looks like youre very active thats great! Thanks!

bought it and after 20mins my HCIM died to silk knights in ardougne lost hcim status, lost half of colored graceful only for 6$

I literally have no idea what any of this code talk means but it’s entertaining watching you all go at it, keep it up

Got me gut laughing. I was in two minds about joining this discussion since I rarely take a front seat to these types of discussions but this one was way too fucking funny to resist. Shit, you can search memory for an array? OMG, you can use a disassembler?? bypassing DRMs??? Teach me how to be like you bro. Imagine belittling someone but being too ignorant or stupid to actually check if they even use the detection method. There is no low level native mouse or keyboard hook in oldschool runescape for the context of detecting injected input. It simply doesn't exist. Anyone with 5% of the experience you so humbly bragged about could easily check that before making a baseless claim on the detection of SendInput and contributing to the shit show here on this thread. Outstanding job pal. Keeping the discussion civil. It doesn't matter if you use SendInput or regular java event dispatching in the context of detecting the validity of input since there's isn't any differing integrity tests on input events anywhere in the client. Bytecode or native. While they're both detectable, neither are being detected. Keynoting that this says nothing about the timings, and delays of those events.

I don't understand... EXACTLY, you just answered my question, I should blindly trust someone. In case you didn't know that's a common fallacy people fall into as a trap ( Blind Loyalty). And you know what you are right he doesn't have to explain himself, but it looks like he tried to. Anyways I don't have a negative opinion of him, actually, I think he's probably fairly intelligent( I like OS Bot and have been writing bots from time to time, and come across his posts every once in a while and they are usually helpful ), he just can't explain himself clearly, but that doesn't mean he's not correct. But in order to convince someone like me, a position of superiority doesn't just do the trick. Maybe there is a post you could point me in, and be like "haha stupid idiot, we answered this already in X", and you know what I would do, I would read that, and if I was happy with the answers laid out there I would be done and agree, and go, "oh mouse movement really doesn't matter.", But I don't know about any post at any time in history. Why does it matter if he's been actively protesting anti-ban for 15 years, if he never made a argument as to why it doesn't work, it doesn't matter how long he's been doing it, that doesn't make him right (The Appeal to Tradition) Also sorry for using logical fallacies, it's a little dumb, and you can probably point out 20 in me, but I just wanted to explain my side and why I disagreed. See I explained, now you can understand me, but @Alek hasn't. And yeah, you are right, that's what he said, he stated that SendInput was detectable, but that didn't answer the question at hand, read my initial post I explain this. Yikes, that is not a good response, can't you see what you are saying. Yes, I'm way more qualified to talk about detection and hacking than you. I wrote public aimbots and sold them for 2 years (Paladins, CSGO, Day of Infamy - all with my own custom updaters and AOB scanners), I'm fluent in MASM32 (x86 assembly), and I've disassembled more PEs, bypassing more DRMs and anticheat software than you have. = What the fuck did you just fucking say about me, you little bitch? I’ll have you know I graduated top of my class in the Navy Seals, and I’ve been involved in numerous secret raids on Al-Quaeda, and I have over 300 confirmed kills. I am trained in gorilla warfare and I’m the top sniper in the entire US armed forces. You are nothing to me but just another target. I will wipe you the fuck out with precision the likes of which has never been seen before on this Earth, mark my fucking words. You think you can get away with saying that shit to me over the Internet? Think again, fucker. As we speak I am contacting my secret network of spies across the USA and your IP is being traced right now so you better prepare for the storm, maggot. The storm that wipes out the pathetic little thing you call your life. You’re fucking dead, kid. I can be anywhere, anytime, and I can kill you in over seven hundred ways, and that’s just with my bare hands. Not only am I extensively trained in unarmed combat, but I have access to the entire arsenal of the United States Marine Corps and I will use it to its full extent to wipe your miserable ass off the face of the continent, you little shit. If only you could have known what unholy retribution your little “clever” comment was about to bring down upon you, maybe you would have held your fucking tongue. But you couldn’t, you didn’t, and now you’re paying the price, you goddamn idiot. I will shit fury all over you and you will drown in it. You’re fucking dead, kiddo. Honestly the resemblance is uncanny, anyone reading this that is okay with this should read up on Cognitive bias, this is no way anyone with any sense of power, or a trusted member on a forum should treat someone who has only been trying to help. That's the sad part, he's only trying to help the community, he's not attacking anyone, he could of just left and then nothing would of happened, and by posting something like this you may of just cemented your goal. You should be happy that people are testing your knowledge, not upset that they don't blindly trust you. Blind trust leads to the downfall of so many great communities, and it's sad to see that happening here... And then you actually make a decent argument, giving evidence as to why you think SendInput is detectable by Jagex, let me outline. 1. Sendinput is used in other windows auto-clickers 2. Other windows autoclickers are detectable by Jagex 3. Sendinput is detectable A decent argument, and with that Jagex post, honestly you might be right. But if I don't understand there were some points that asdttt made about delay playing a factor, and that Jagex can't poll that data from your mouse. If you could show me evidence that Jagex could find SendInput ( write a code snippet yourself, or link to one, find in the game code, or other ), then I would be 100% more keen to agree with you. But guess what that doesn't ANSWER THE QUESTION AT HAND. Why are mouse movement's futile, why should I blindly trust you o great one. Why does jagex have all this code, just to throw ignorant people like me off track? Can you answer this, because at this point it looks like you've given up and just expect us to agree based on your superiority.

It's not really a matter of what the mouse movement means for anti-bot. Here's what we know: 1) They're sent the mouse movement 2) OSBot's mouse movement has a few nearly 100% constant flaws in nearly every movement. I've shown a sample that I got from grabbing the same mouse movement, on the same tick as Jagex and simply got the delta between each element to detect the flaws. Mouse movement detection is a lot simpler then you'd think. Hell, you could calculate if the movement has any deviation just by checking angles lol. If mouse movement is only 1% of their detection, it should still be a priority to fix it. This wont magically solve bans, but it'll be 1 step in the right direction for sure. There's NOTHING we can do to magically solve getting banned because it's no sole check. It's a network of checks, and even what appears to be a TIER'd detection system.

Well for starters, let's accept the fact that Jagex sends mouse movements to the server for analyzing, AND I myself was able to very very easily pickup on OSBot's using basic math using the exact same data they're sent. There's serious flaws in the movement, mostly the last bit where it ends. Please review my research so you too will actually see these flaws. I have no idea how you find this to be naive, especially since a fairly large amount of anti-cheats rely on mouse DPI movements to detect certain hacks - even aimbot. OSBot's mouse movement is flawed, as simple as that. If you dispute that fact, please give me insight because I'd love to see you defend that obvious pattern... FYI, many anti-hacks actually use 50MS tick sampling. Hell, minecraft's servers RUN on 20 TPS. It's a great number for anything but visual rendering. To Next, I've searched through the runescape source numerous times and yes. To say we're not ever able to bypass is a bit absurd considering WE are feeding them the data. You need to remember that even though Jagex made the client, they're still on a virtual machine. Java is VERY VERY manipulable on purpose due to how high level it is, and the nature of how it's deployed on many platforms - which I'm sure you already know. Autoclickers are easily detected because, as you said, they do not execute the same click as a mouse would. Although an internal autoclicker, as far as they know, does not produce the same flaws and you're then in control of nearly every factor including press/hold timings (Assuming you don't create flaws...). They also do not do any stracktrace checks from what I've seen, although tomorrow I'll be sure to search for that. If you'd like me to provide hard evidence on click sampling, I'll do so tomorrow. It's hard to elaborate without providing at least something to back me up. So for example: https://github.com/zeruth/runescape-client/blob/master/src/Client.java#L3371 That's where they send the timings of the mouse, and here's where they track the mouse input/timings (Using normal Java events)... https://github.com/zeruth/runescape-client/blob/master/src/MouseInput.java Also if they did detect all autoclickers, that wouldn't explain the HUGE amount of people using them on their mains and never getting banned. As for the garbage collector... Your actually absolutely correct on this one. Jagex at ANY time can request a sample of your garbage collector. IMO a garbage collector simply can't be enough to distinguish a bot client from an official client, but they could probably detect a difference between a non-official client and official. Although I could be wrong as I myself haven't personally tested the garbage collector timings, oldGen size, newGen size, or frequencies between collections. This would be banning solely on assumption though which I doubt Jagex would do. Here's the nearly-de-obfuscated code for that: https://pastebin.com/FzdBmKPL It's just measuring the actual collection events rather then memory consumption. Still though, this is a very unstable measurement and I doubt they'd ban us soly based on this. However.. There is one other thing they could possibly use to directly detect a bot, although I still kinda doubt they'd go to this extent. They have a class checker which they, like the GC info, can request at anytime. https://github.com/zeruth/runescape-client/blob/master/src/Client.java#L4315 Weird right? I'm sure they use it for debugging purposes and possibly client compatibility/version checking, but you can't deny they couldn't use that to snoop around the JVM and find some bot classes. Especially considering how specific java packaging is. And this isn't anti-ban. The whole "anti-ban" thing makes 0 sense. There's no such thing as some magical thing that makes you unbannable. It's a combination of your bot's ABILITY that lead to a ban, not checking skills, not taking breaks, and not talking in chat. For instance, mouse movement, button hold times, mouse click-rate (Yes IMO they take account for this), mouse hold-time, and so on. There's no SINGLE check on their anti-hack, so implementing new mouse movement wont suddenly make OSBot 100% undetectable. Although, it's a major step in the right direction. Not sure if you're aware of this, but there is a LAAARGE amount of people who bypass.. Not going to name any groups because of how censoring you guys are on here, but Ik that you know they exist so please stop pretending bypassing is impossible. Not to mention, I've still yet to be banned..? If you'd like to discuss this in private, I'd love to show you a much better way of moving the mouse without generating patterns. -- Oh and just to close this, who really cares what Jagex says..? You really think they'd give critical detection information out to the public? I doubt they'd even tell their own moderators what they use to detect the majority of bot clients. Personally, I think they purposely spread false information just to fool botters.. I mean come on, this company couldn't even do dead man mode correctly without killing everyone. Edit: Eh I made something quick with JavaFX to further display what I meant by autoclicker flaws (Press->Release): My normal mouse: ->> Mouse press timings (MS): 78 ->> Mouse press timings (MS): 63 ->> Mouse press timings (MS): 59 ->> Mouse press timings (MS): 70 ->> Mouse press timings (MS): 75 ->> Mouse press timings (MS): 87 Autoclicker: ->> Mouse press timings (MS): 0 ->> Mouse press timings (MS): 0 ->> Mouse press timings (MS): 0 ->> Mouse press timings (MS): 0 ->> Mouse press timings (MS): 0 See? When you use that windows event, you have a delay of 0. This is also true if you make an internal autoclicker, but don't delay your events. Jagex is sent this data which they collect using the JVM's event's. Edit2: Also please at least give me some level of respect. I'm not some random moron shouting at potential super cool anti-ban features. I'm a fellow programmer trying to help this community by finding flaws in OSBot. Many reject me simply based on my account age, but I'm not full of shit. At least read what I have to say and test it for yourself before tossing it out the window like it's meaningless.

I think the important thing to take away here is that they do at least send the mouse data to their servers, it doesn't look very human, and if they wanted to they could use this as one of many metrics to detect bots. That alone should be enough to encourage a change, whether it be in the way OSBot itself handles mouse movements or by us scripters to handle movement ourselves.

1006 Can get it from the scripts page, the add now button has an onclick event that passes the script id as a param: <button class="button basic_script_label blue" onclick="window.location='/mvc/sdn2/scripts/21?action=add&amp;scriptID=1006'"> Add </button>

OP is a mule haha get it? because he's an ass!

Had a long ass reply and everything ready Im content with that decision though. Would like to point out though that i spent a lot more than just 3.7 hours on the account after the quest but due to the content being new, i died multiple times with both minigames. @Lost Panda can verify that, we did the quest simeltaneously and proceeded to the minigames while both in voice chat and we both kept on dying and dying. Between Friday to Sunday, including the 7 hours for the quest, i spent at least 25-30 hours on the account.

Considering the quest was actually completed and there was about 1/5 of the shards collected, albeit later than requested (the only concrete agreement was '<Sunday = 150M' '>Sunday = 75M', everything after the fact was agreed on due to the service taking longer than Sunday) you will still need to pay Decode for the work he completed on your account. Since it has been almost a week since the agreement for the completion of the quest, the following decision has been made by calculated the value of the service done: Service will terminated as-is and you pay Decode for the work completed, the Quest + Shards Collected coming to a total of 48.875M (35M + 13.875M). Please let us know when the payment has been completed.

PS: @Khaleesi is a man...