Jump to content

Preventing RS Botting Bans V3


Alek

Recommended Posts

On 5/7/2020 at 6:00 AM, Geeseball said:

I still bot only for 10 hours a week and so far it is going well without bans. I haven’t tried what happens when you go over this. I can imagine if you divide the hours well over the week that you can bot for 15 hours. At least I think so and it is not certain not to be banned.

why even pay vip and bot if ur only gonna do it for 10h...pointless

Link to comment
Share on other sites

On 5/16/2020 at 8:29 PM, kufar abaka said:

why even pay vip and bot if ur only gonna do it for 10h...pointless

Because I don't bot more than 10 hours a week on one account but that doesn't mean you can't bot multiple accounts at the same time. 

I think it is way better to bot a small amount of multiple accounts than bot a lot of time on one account. The progress of all the accounts go way slower but at the end if you don't receive a ban you have a lot of high level accounts.

Link to comment
Share on other sites

5 hours ago, Geeseball said:

Because I don't bot more than 10 hours a week on one account but that doesn't mean you can't bot multiple accounts at the same time. 

I think it is way better to bot a small amount of multiple accounts than bot a lot of time on one account. The progress of all the accounts go way slower but at the end if you don't receive a ban you have a lot of high level accounts.

good point tho

Link to comment
Share on other sites

  • 3 weeks later...
  • 3 weeks later...

I don't know about what you are saying I use a proxy and before it I had 3 accounts banned within a hour of making them I use proxy now and im running an account for almost a week nothing but botting it besides maybe setting up the bots and stuff im using basically all prem. bots im doing more then 4 hours a day and 10 hours a week I am using the main 3 botting clients (osbot, Advertising other bots isn't allowed., and dream bot) as one does not have either good bots for every skill or doesn't have all skills im using this account to see if any scripts get me banned then im gonna try and do 5 to 10 bots using the bots I trust, I wanna level them up tell I feel like I can do the more risky stuff with them. 

Link to comment
Share on other sites

  • 4 weeks later...

Alot is uncertain because jagex is really secretive but what we do know is theres alot to it, so it safe to assume jagex would put in place anything they could come up with.

Including mouse movement tracking and if its acting out of the curve, like a heat map of the rest of the player base's mouse movement when doing any repetitive semi to fully stationary skill a bots mouse movement history starts to stick out then it gets flagged and then it just roller coasters into jagex's hands.

But if the scripter can include a randomly generated path to the target without zigzagging around it will blend in and be alot harder to detect. Mirror mode is huge too. From my experience anyway, not stating facts but this is how I imagine it, maybe variations in mouse speed too. They're looking at everything

Edited by 12346720
Link to comment
Share on other sites

  • 2 months later...
  • 5 weeks later...
  • 1 month later...
  • 3 weeks later...
On 6/18/2017 at 11:28 AM, Alek said:

Preventing RS Botting Bans V3
Written by Alek


1. Introduction
This guide is Version 3 of my original guide released 4 years ago. I decided to focus more on commonly asked questions and general misconceptions about botting. Many of the topics are very technical and there are brilliant engineers who both bust bots and create them. The majority of botters who come here have little to no programming experience, or very little knowledge in subject areas such as reverse engineering. It’s very difficult to fully explain all key concepts, however hopefully this material will give you a base reference to draw your own conclusions.

2. How to not get banned
The secret formula to botting is keeping a very, very, low profile. This game has been around for 15+ years, that is a TON of data to play with. Generally speaking:

-Don’t bot more than 4 hours per day
-Don’t bot more than 10 hours per week
-Diversify your tasks
-Don’t use a VPN/VPS/proxy
-Don’t bot more than one account
-Do quests
-Don’t RWT/goldfarm
-Don’t bot in hot spots, use places like Zeah

You’re going to have a ton of people say, “oh I suicided for 11 years straight, never logged out, I make $500k/year”, etc. They simply don’t. Either they haven’t botted long enough or their claims are baseless. If you want to keep your account relatively safe then don’t bot longer than the times I recommended above. Time played is a key factor into profiling a bot, it’s been even talked about on official livestreams during live bot busting events.

3. Misconceptions
The biggest misconception is that the company doesn’t have any automatic detection systems. Although the detection vectors improve over the years, there are official statements claiming that all bans are manually reviewed before being issued. THIS DOES NOT MEAN ACCOUNTS ARE NOT AUTOMATICALLY FLAGGED. Common situation: Suicide bot on the weekend without getting banned, account gets a ban on the following Monday or Tuesday. This is because your account was probably flagged over the weekend, then eventually reviewed for the final determination on the following business days.

Another misconception is that if you “survived the weekend”, then you are safe. This is certainly not true, most anticheat will "flag and monitor". This means that you were in fact detected but the anticheat is watching your actions very closely to grab more information about what you are doing. Information from these monitoring sessions are used to quickly detect and ban in the future. For Runescape, one example is the use of bot worlds. Another non-Runescape example is Valve-AntiCheat profiling numerous hacks over the course of months and then issue behemoth ban waves all at once for games like Counter-Strike. 

4. Antiban/Antipattern
Scripters who include antiban/antipattern methods in their scripts are either naive, new scripters, or are trying to earn more sales by making false promises. Competitor clients further this perpetuation by forcing script writers to implement these methods. It’s a gimmick and overall you’re going to get banned whether you use these "special methods" or not. Some of these “special” (aka worthless) methods are:

-Moving your mouse randomly
-Checking your exp
-Examining random objects
-Moving your camera angle randomly
-Implementing “fatigue” systems
-Diversifying the way you interact with objects

One of the special methods I’d like to talk about which was not listed above was randomizing sleep time between actions. This is especially special because there are numerous flaws with it.

1. Your computer doesn’t perfectly execute actions in the same time every time
2. Your script doesn’t perfectly loop in the same time every time
3. Your ping fluctuates causing a delay between the client and server
4. If the top three all remained constant, you could find the upper and lower bounds of the mean and use statistics to recreate the sleep time.

Anti-pattern is a bit different, but a lot of scripters have been wrongly claiming their script having “antipattern” when they’re really using the same “special methods”. Examples of antipattern:

- Talking to other players (Cleverbot)
- Mixing up tasks (perhaps after accumulating X gold, go to the Grand Exchange and sell)

The goal of anti-pattern is to reduce the chances of being manually reported by other players for botting. Although “antipattern” is more desirable than “antiban”, there is still no definitive proof of the impact it has in the total picture.

5. Client detection

5A.      I’m going to keep this relatively brief because this is probably the most technical aspect of this guide. There is an overarching debate over Injection vs Reflection and it’s pretty silly. Both are detectable because both have different ways you can detect it. In the non-Java hacking world, this would be equivalent to something like ReadProcessMemory versus LoadLibrary. To better put it, reading memory from outside the process versus inside. There are ways to hide it, ways to find it, ways to hide against the ways to find it, and ways to find the ways how to hide it against from finding it. As you can see, it’s really cat and mouse and it boils down to implementation.

5B.      Additionally, you can be detected for macroing without even using a client. You can banned for using Gary's Hood or AutoHotKey. Both of these use some sort of Windows API function like SendInput, from protected mode. This is how color-bots also get detected without injecting/reflecting the client. 

5C.      Mirror Mode adds some protection to users where the normal OSBot client can be detected. Think of mirror-mode as a safety catch rather than a comprehensive antiban measure; and yes mirror mode has genuinely protected users at least on one confirmed occasion. In summary, you will still get banned because mirror-mode only protects you from one aspect of botting and there are potentially hundreds of detection vectors. 


6. Conclusion and final remarks
Having good botting habits like I outlined in section two, and having a good script which is reliable and not prone to getting baited (locked behind doors, etc), is your safest bet. There are people who do “studies” and “research” but ultimately their results are inconclusive, non-definitive, and certainly only proves a correlation and not causation. There are too many variables to isolate to make any data worthwhile; ip address, computer, scripts, clients, botting locations, skills, account time, bot time, quests, RWT, java exceptions, client detection, the list goes on and on. Too many variables to isolate, too much that we cannot prove. The bottom-line is that the only people who know specifics about the anticheat system are the anticheat developers.

I read -Don’t bot more than 4 hours per day

 

NOPE! 24 hours a day is the only way for me

  • Like 1
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...