Leaderboard

CzarScripts #1 Bots LATEST BOTS If you want a trial - just post below with the script name, you can choose multiple too. Requirements Hit 'like' on this thread

CURRENT RECORD: 201 HOURS RUNTIME NEW: Sandstone mining + hopper support Humidify/water circlet/bandit unnote Ardy cloak tele support Setup Screen Preview Results 84 HOURS ON NEW LEVEL 20 ACCOUNT Suicided account with mirror mode near rock crabs, 81 mining! I will probably go for 99 Even supports Ancient Essence Crystal mining! Preview: Mine 1 drop 1 item drop pre-hover feature:

Spider's F2P Wilderness Looter! I made this script a while ago but didn't release it as I didn't think much of it. Was just trying it out now and It made 115k in an hour which I thought was pretty good actually for a F2P level 3 with 0 requirements This inspired me to try to fix any bugs and maybe expand on the idea to make custom P2P looters No Requirements! Create a level 3 account and start in Edgeville! Original Features -Prioritizes more expensive loot (AnchovyPizzas--->Swordfish--> Lobsters ---> Addy Arrows) -If attacked by enemy player will escape and bank and come back to loot -If attacked by skeleton or npc will feint the skeleton (jump over the ditch to lose aggro and come back immediately) -if dies goes back to edgeville and continues looting Updates -Added Ability to Select custom inventory value you want to bank at (1/2/2019) -Added Gp/Hour and Current inventory Value to the paint (1/2/2019) -Walks to Lower Level Wilderness if Wilderness Level >5 (1/2/2019) To Do List -Make looting start from the bottom of the list to avoid it grabbing the same item being looted by other players -Add default option (Bank at 60 addy arrows / or inventory full) Download Link http://www.mediafire.com/file/0ceq57cz63xx4p1/Spider+F2P+Wildy+Looter+1.22.jar Pm for any script ideas or even script requests I might do 1 or 2 for free ?

Preventing RS Botting Bans V3 Written by Alek 1. Introduction This guide is Version 3 of my original guide released 4 years ago. I decided to focus more on commonly asked questions and general misconceptions about botting. Many of the topics are very technical and there are brilliant engineers who both bust bots and create them. The majority of botters who come here have little to no programming experience, or very little knowledge in subject areas such as reverse engineering. It’s very difficult to fully explain all key concepts, however hopefully this material will give you a base reference to draw your own conclusions. 2. How to not get banned The secret formula to botting is keeping a very, very, low profile. This game has been around for 15+ years, that is a TON of data to play with. Generally speaking: -Don’t bot more than 4 hours per day -Don’t bot more than 10 hours per week -Diversify your tasks -Don’t use a VPN/VPS/proxy -Don’t bot more than one account -Do quests -Don’t RWT/goldfarm -Don’t bot in hot spots, use places like Zeah You’re going to have a ton of people say, “oh I suicided for 11 years straight, never logged out, I make $500k/year”, etc. They simply don’t. Either they haven’t botted long enough or their claims are baseless. If you want to keep your account relatively safe then don’t bot longer than the times I recommended above. Time played is a key factor into profiling a bot, it’s been even talked about on official livestreams during live bot busting events. 3. Misconceptions The biggest misconception is that the company doesn’t have any automatic detection systems. Although the detection vectors improve over the years, there are official statements claiming that all bans are manually reviewed before being issued. THIS DOES NOT MEAN ACCOUNTS ARE NOT AUTOMATICALLY FLAGGED. Common situation: Suicide bot on the weekend without getting banned, account gets a ban on the following Monday or Tuesday. This is because your account was probably flagged over the weekend, then eventually reviewed for the final determination on the following business days. Another misconception is that if you “survived the weekend”, then you are safe. This is certainly not true, most anticheat will "flag and monitor". This means that you were in fact detected but the anticheat is watching your actions very closely to grab more information about what you are doing. Information from these monitoring sessions are used to quickly detect and ban in the future. For Runescape, one example is the use of bot worlds. Another non-Runescape example is Valve-AntiCheat profiling numerous hacks over the course of months and then issue behemoth ban waves all at once for games like Counter-Strike. 4. Antiban/Antipattern Scripters who include antiban/antipattern methods in their scripts are either naive, new scripters, or are trying to earn more sales by making false promises. Competitor clients further this perpetuation by forcing script writers to implement these methods. It’s a gimmick and overall you’re going to get banned whether you use these "special methods" or not. Some of these “special” (aka worthless) methods are: -Moving your mouse randomly -Checking your exp -Examining random objects -Moving your camera angle randomly -Implementing “fatigue” systems -Diversifying the way you interact with objects One of the special methods I’d like to talk about which was not listed above was randomizing sleep time between actions. This is especially special because there are numerous flaws with it. 1. Your computer doesn’t perfectly execute actions in the same time every time 2. Your script doesn’t perfectly loop in the same time every time 3. Your ping fluctuates causing a delay between the client and server 4. If the top three all remained constant, you could find the upper and lower bounds of the mean and use statistics to recreate the sleep time. Anti-pattern is a bit different, but a lot of scripters have been wrongly claiming their script having “antipattern” when they’re really using the same “special methods”. Examples of antipattern: - Talking to other players (Cleverbot) - Mixing up tasks (perhaps after accumulating X gold, go to the Grand Exchange and sell) The goal of anti-pattern is to reduce the chances of being manually reported by other players for botting. Although “antipattern” is more desirable than “antiban”, there is still no definitive proof of the impact it has in the total picture. 5. Client detection 5A. I’m going to keep this relatively brief because this is probably the most technical aspect of this guide. There is an overarching debate over Injection vs Reflection and it’s pretty silly. Both are detectable because both have different ways you can detect it. In the non-Java hacking world, this would be equivalent to something like ReadProcessMemory versus LoadLibrary. To better put it, reading memory from outside the process versus inside. There are ways to hide it, ways to find it, ways to hide against the ways to find it, and ways to find the ways how to hide it against from finding it. As you can see, it’s really cat and mouse and it boils down to implementation. 5B. Additionally, you can be detected for macroing without even using a client. You can banned for using Gary's Hood or AutoHotKey. Both of these use some sort of Windows API function like SendInput, from protected mode. This is how color-bots also get detected without injecting/reflecting the client. 5C. Mirror Mode adds some protection to users where the normal OSBot client can be detected. Think of mirror-mode as a safety catch rather than a comprehensive antiban measure; and yes mirror mode has genuinely protected users at least on one confirmed occasion. In summary, you will still get banned because mirror-mode only protects you from one aspect of botting and there are potentially hundreds of detection vectors. 6. Conclusion and final remarks Having good botting habits like I outlined in section two, and having a good script which is reliable and not prone to getting baited (locked behind doors, etc), is your safest bet. There are people who do “studies” and “research” but ultimately their results are inconclusive, non-definitive, and certainly only proves a correlation and not causation. There are too many variables to isolate to make any data worthwhile; ip address, computer, scripts, clients, botting locations, skills, account time, bot time, quests, RWT, java exceptions, client detection, the list goes on and on. Too many variables to isolate, too much that we cannot prove. The bottom-line is that the only people who know specifics about the anticheat system are the anticheat developers.

Tinderbox Looter Loots tinderboxes in the Wise Old Mans house in Draynor How to use: Progress Reports: Download Changelog:

Made an earlier post about how all OSBot scripts seem detected, and posted some findings relating to the banrates of changing various things such as timings, clickspeed, movement, and mouse DPI. In testing, I found that almost 100% of all OSBot's mouse movements follow very simplistic patterns that are picked up very quickly by Jagex's anti-bot. This goes for ALL other client's I've tested, all containing some flaw within their mouse movement, whether it be [Other-Bot-Client]'s flawed inaccurate spoofed mouse movement, or [Other-Bot-Client]'s consistency. I've reported these flaws to the developers of OSBot already, but was not met with confirmation on whether or not they'll do anything about it. Possibly because they're still under the illusion that mouse movement doesn't play a big role in detection. So here's a topic to prove just that. First off, let me start by showing that Jagex certainly does record mouse movement: https://github.com/zeruth/runescape-client/blob/master/src/MouseRecorder.java#L40 This shows the frequency of their collection. 50MS ticks, which is equivalent to 20 times a second. Now you could say.. But isn't 50 MS not enough to accurately depict mouse movement? And that is true to some extent, but it's more then enough data to analyse in order to find flaws or patterns. Here's what it looks like to move a mouse on a 50MS tick-rate: https://i.gyazo.com/4eb9de90c1c8a60959e874fb24488ab3.mp4 A common argument may be that collecting mouse movement is an absurd amount of data, but.. They combine the integers into mostly a 2 byte for small/medium, and larger a 3 byte or 4 byte and save/send it as that. That means they can store around 250,000-500,000 x/y captures per 1mb. That translates to around 3.4 HOURS of constant mouse movement data capture per user. That data would obviously build up over-time, but IMO Jagex most likely clears this data either every ban-wave, or every week. Which wouldn't really be that much. You could also compress these integers an insane amount due to how primitive the encoding would be. They also only send movements, not equal, or zero movements: https://github.com/zeruth/runescape-client/blob/master/src/Client.java#L3330 - Although, they still keep track of those equal/zero movements: https://github.com/zeruth/runescape-client/blob/master/src/Client.java#L3332 So we can see they record the data locally, but do they send it to the server? The answer is, yes. Here's proof of that (Annd they send a loot more then just that...): https://github.com/zeruth/runescape-client/blob/master/src/Client.java#L3307 And here's them encoding the difference between mouse x/y movements into a 2 byte integer and appending it to their packet buffer (Only medium speed movements under about 31 pixel per 50MS): https://github.com/zeruth/runescape-client/blob/master/src/Client.java#L3342 And here's them encoding movements into a 3 byte integer and appending it to their packet buffer (var10 = mouseY * 765 + mouseX): https://github.com/zeruth/runescape-client/blob/master/src/Client.java#L3345 And here's them encoding movements into a 4 byte integer and appending it to their packet buffer (var10 = mouseY * 765 + mouseX):: https://github.com/zeruth/runescape-client/blob/master/src/Client.java#L3348 They also can detect when you move your mouse outside of the screen, and how many ticks (Ticks are capped of course): https://github.com/zeruth/runescape-client/blob/master/src/Client.java#L3324 Reconstructing their mouse collection: ||) Equal, or zero movements are tracked by ticks. If you don't move your mouse for 30 ticks, they'll know. They most likely use this for multiple purposes, the biggest being the ability to figure out the entire mouse movement rather then just bits of it. 1) Movement of the mouse is tracked, smalls/medium movements exactly by this (Only medium/small per-tick movement difference under about 30 in length) int yDiff = (recordedY - previouslyRecordedYMove); int xDiff = (recordedX - previouslyRecordedXMove); handler.packetBuffer.putShort(yDiff + (idleIndexesPassed<< 12) + (xDiff << 6)); idleIndexesPassed = 0; movementIndex = the indexes skipped before finding a mouse move in the X/Y mouse recorder. Used to track time between mouse movmenets. 2) Larger movements that are made in less then 8 ticks of "idle" mouse: (Actual location sent) int var10 = (recordedY * 765 + recordedX); handler.packetBuffer.put24bitInt((idleIndexesPassed << 19) + var10 + 8388608); idleIndexesPassed = 0; 3) Large movements that are made 8+ ticks from being "idle" (Actual location sent) int var10 = (recordedY * 765 + recordedX); var14.packetBuffer.putInt((idleIndexesPassed << 19) + var10 + -1073741824); idleIndexesPassed = 0; (Don't mind the -1073741824 or other random numbers. Java doesn't support primitive unsigned numbers, so you have to use hacky stuff to compress your integer sizes) The majority of OSBot's movements would fall under #1's logging. The others are just for larger mouse movements (in terms of last X/Y -> new X/Y). Why do they multiple Y by 765? Because they've capped the X axis from exceeding 764 therefor they can easily mathematically combine the two integers for saving resources, then de-couple them whenever they want. So what does all this have to do with OSBot's mouse movement? Well, I performed a basic test to grab the mouse movement delta's between every 50MS tick (Just as Jagex does) and found 100% consistency among certain parts of their mouse movement patterns: OSBot's mouse movement: https://pastebin.com/AJn2NC31 My own mouse movement: https://pastebin.com/vnGtX16z Right away you should notice many flaws inside OSBot's mouse sample. As you can clearly see, OSBot repeats ONLY 4-5 at the end of movements, AND at the last few deltas at the end of the movement, it goes from Lower, Bigger, Lower, This seems to be the case with virtually all mouse movements over 4-5 pixels large made by OSBot. So if I'm able to detect this flawed mouse movement in a matter of seconds with basic math, then so can Jagex? This would also explain why tasks requiring massive amounts of mouse movement, such as agility, have much higher ban-rates vs something like fighting, or AFK tasks. Does this mean this is the only detection method banning OSBot? Absolutely not. However, in my experience, I've yet to be banned by using OSBot as an API for everything BUT mouse movement, or camera movement (Of course with a lot more human-like behavior sprinkled on top of the scripts). This is purely based on only a little more then a week of botting without a ban, so it's possible I'm not bypassing, but simply delaying my ban. Hell, it's possible I was detected the second my script first started and now i'm just riding a monthly ban wave. Still beats a daily ban wave though...

Hello and thank you for visiting my thread First of all, I'm Charizard1995 and I'm pretty new to the forums but lately I've been having a blast leveling RS so I thought I'd put my expertise to work and get paid from it I have over 10 years of Runescape experienced and have gotten over 2 quest capes, 126 accounts ETC. The reason I'm doing this : I am doing this for spare money as I'm looking for an extra source of income so I can purchase my first house So please consider this when ordering from me, I hope this assures you a bit more that I won't scam or try and pull something on you. T O S All OSbot T.O.S applies - You must provide me account details and all supplies for the desired account - You may not log in and do anything until service is completed - You may not log in until the account details has been changed and you've given me a feedback for the work done - I will not be using any BOTS so any offenses i will not be held responsible for as I will be recording every level completed - If you want you use MM you must pay 20% upfront cost so I can pay for my Osbot expenses Account types - 1 def pure (hybrid) * All pre-quests and skilling will be completed by us Combat skills will include the following * 55 Magic * 40 attack, 70 str 75 range Price to be discused THREAD TO BE FINISHED IN THE FOLLOWING DAYS as im working on building accounts to have inventory

I'm now at 1m rsgp, total runtime about 14 hours f2p.=) *Someone just droped 8k Anchovey pizzas, worth 5m, didnt get it , but its amazing what people toss out!*

https://osbot.org/forum/topic/156505-dream-server/ Try to use that - if it's to difficult then you are most likely not at the right level to try this. It's better to learn some more fundamentals. And don't use a database to do inter-process communication.

Still no bans running your script, made 10+ 99hp accounts. However there is an issue currently, when standing north or in any of the corners the accounts log out when out of combat and sometimes don't log back in. Also when buying potions from the NMZ chest it occasionally types the amount of doses ingames. It also has a few issues with running around the outside of the NMZ 'pen', and if the camera isn't zoomed out enough it can get stuck. But like I said, no bans. If you could fix these that would be amazing.

https://linx.li/b7ntaz4b.png

This is a bit stange request in general. Why would you want to appeal 2 day ban? If you really innocent then there is nothing to worry about and if you did bot why bother appealing it?

Script turns out to be great. Did 75-85 construction for 5 hours with 12 hour breaks. No ban. Thanks for this script!

Hey, welcome!

Hello!

haiiiiii

Desert support will be expanded in the upcoming versions, both sandstone mining and humidify included.

Could I please get a trial?

Do I win Rank 1 Profit?

10 Hours per week

Thanks so maybe perfect chopper looking for good f2p money making script so many cool scripts here i feel like little boy in huge shop with toys xd

Looks very nice!

Script is in maintenance only mode and removed from store. No new Trials/Auths will be given. All current users: contact me via DM if you have any questions or bug reports. Script id: 1087 Features: Mines gems in shilo village for around 300k gp profit/hour depending on your mining level and how active the mine is Supports using a Gembag Worldhopping Optionally dropping junk gems CLI support Requirements: 40+ Mining Shilo village quest completed Any regular pickaxe equipped or in your inventory Notes: Make sure to wear a charged Amulet of glory while running this script as it drastically lowers the time it takes to mine gems It takes ages to get a Gembag from MLM and it doesnt increase the profit too much, so it is by no means necessary to run this script! Start the script inside shilo village to avoid webwalker issues. The GUI is self explanatory, for CLI settings check below! CLI settings: Parameters have to be separated with ";"s Set the parameter to 0 for false, 1 for true Parameters in order are: Debugmode (adds a logger statement after each action. Helpful for bug reports otherwise not needed) Dropping Uncut Opals Dropping Uncut Jade Use Gembag Enable Worldhopping Example: -script 1087:0;1;1;0;1 runs the scripts with debugmode disabled, drops both opal and jade gems, doesnt use them gembag and has worldhopping enabled. Full example: java -jar "PATH TO YOUR OSBOT.jar" -login OSBOTUSERNAME:OSBOTPASSWORD -bot OSRSACCOUNT:OSRSPASSWORD:BANKPIN -script 1087:1;1;1;0;1 -world 303 More info on running a script from CLI here: https://osbot.org/forum/topic/118831-cli-commands-table/ Pictures (post your own and I will add them here!):

Currently Experiencing a problem where the bot will open but instantly terminate --INFO][Bot #1][09/19 10:09:05 AM]: Loaded 3 built-in random solvers! [INFO][Bot #1][09/19 10:09:05 AM]: Waiting for input. [INFO][Bot #1][09/19 10:09:11 AM]: Main method variable food = Trout [INFO][Bot #1][09/19 10:09:11 AM]: Main method variable skill = DEFENSE [INFO][Bot #1][09/19 10:09:11 AM]: Time to kill [ERROR][Bot #1][09/19 10:09:11 AM]: Error in script onStart(): BSN Barbarian Killer java.lang.NullPointerException at org.osbot.rs07.api.util.ExperienceTracker.start(re:153) at Main.onStart(o:264) at org.osbot.rs07.event.ScriptExecutor.IiiIIiiIiiii(hn:50) at org.osbot.rs07.event.ScriptExecutor.start(hn:177) at org.osbot.lpT1.IiiIIiiIiiii(wv:222) at org.osbot.lPt7.IiiIIiiIiiii(xu:256) at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) at java.lang.Thread.run(Unknown Source) [INFO][Bot #1][09/19 10:09:11 AM]: Terminating script BSN Barbarian Killer... [INFO][Bot #1][09/19 10:09:11 AM]: Script BSN Barbarian Killer has exited!