Preventing RS Botting Bans V3

[skang]

Been thinking about those antiban features.
Some probably won't work because they aren't logged.

If quest log is loaded during startup, then there won't be any database entry in Jagex system every time you check it.
Camera angles won't change much if 3D models are already loaded and its handled client side.

I imagine those things aren't normally logged unless the account is flagged.

But some interactions are always logged, like entering a bank and depositing a item.
With big enough data you would see a lot of accounts whose average time from bank entry to withdrawal/deposit average time and standard deviations are same.

Edited November 10, 2022 by skang

[fat ass]

Best Guide ever bruhhh

[datsundude]

This literally makes it not worth it to bot. I'm probably not going to renew my subscription. Who bots only 4 hours a day? You have to spend more time creating accounts than autoing because they get banned every day for 1 or it takes longer to bot an account than hand play it. What's the point? 4 hours a day is ass. This a great guide but botting just isn't worth it anymore. You're better off paying vennys to train for you or just buying a fucking account. I think botting is pretty dead. Everyone that's like "I make all this money from my gold farm!" Is full of shit. They spend 9 hours a day in front of their computer creating accounts and setting them up just to get 1 or 2 transfers before they are banned. You spend more time at your computer botting than just playing. It's a total waste of time and money now. Jagex is ruining the game anyhow by turning it into rs3. Soon it won't even be worth it to gold farm. RuneScape is dead. Botting is dead. Save your money.

Edited January 18, 2023 by datsundude

[Ktsvon]

def glad i read this post first before i start building

[iskaybee]

?

Edited August 6, 2023 by iskaybee

[Super Mikey]

i have had very good luck over the years

[JoeBlow449]

On 1/18/2023 at 9:54 AM, datsundude said:

This literally makes it not worth it to bot. I'm probably not going to renew my subscription. Who bots only 4 hours a day? You have to spend more time creating accounts than autoing because they get banned every day for 1 or it takes longer to bot an account than hand play it. What's the point? 4 hours a day is ass. This a great guide but botting just isn't worth it anymore. You're better off paying vennys to train for you or just buying a fucking account. I think botting is pretty dead. Everyone that's like "I make all this money from my gold farm!" Is full of shit. They spend 9 hours a day in front of their computer creating accounts and setting them up just to get 1 or 2 transfers before they are banned. You spend more time at your computer botting than just playing. It's a total waste of time and money now. Jagex is ruining the game anyhow by turning it into rs3. Soon it won't even be worth it to gold farm. RuneScape is dead. Botting is dead. Save your money.

I mean that's his guess. I'm sure you can do 6-8 every so often and be okay.

[wended]

On 6/18/2017 at 6:28 PM, Alek said:

e

 

On 6/18/2017 at 6:30 PM, HeyImJamie said:

10 Hours per week

Fk that shit im doing 10 a day YOLO!

[Slipknot6320]

i've been heavily botting in FTP over the last week on 500 + worlds, trying to see how long i can go without getting banned. I'm not goldfarming just getting through the shit levels. 

I've heavily botted multiple accounts to 99 magic using an auto clicker in my house. Has anyone ever been banned for that? 

These are on accounts that were created several years ago though, i imagine new accounts are watched quite closely?

[99skillz1337]

ty so much

[GlassNhearts]

On 6/18/2017 at 12:28 PM, Alek said:

Preventing RS Botting Bans V3
Written by Alek

1. Introduction
This guide is Version 3 of my original guide released 4 years ago. I decided to focus more on commonly asked questions and general misconceptions about botting. Many of the topics are very technical and there are brilliant engineers who both bust bots and create them. The majority of botters who come here have little to no programming experience, or very little knowledge in subject areas such as reverse engineering. It’s very difficult to fully explain all key concepts, however hopefully this material will give you a base reference to draw your own conclusions.

2. How to not get banned
The secret formula to botting is keeping a very, very, low profile. This game has been around for 15+ years, that is a TON of data to play with. Generally speaking:

-Don’t bot more than 4 hours per day
-Don’t bot more than 10 hours per week
-Diversify your tasks
-Don’t use a VPN/VPS/proxy
-Don’t bot more than one account
-Do quests
-Don’t RWT/goldfarm
-Don’t bot in hot spots, use places like Zeah

You’re going to have a ton of people say, “oh I suicided for 11 years straight, never logged out, I make $500k/year”, etc. They simply don’t. Either they haven’t botted long enough or their claims are baseless. If you want to keep your account relatively safe then don’t bot longer than the times I recommended above. Time played is a key factor into profiling a bot, it’s been even talked about on official livestreams during live bot busting events.

3. Misconceptions
The biggest misconception is that the company doesn’t have any automatic detection systems. Although the detection vectors improve over the years, there are official statements claiming that all bans are manually reviewed before being issued. THIS DOES NOT MEAN ACCOUNTS ARE NOT AUTOMATICALLY FLAGGED. Common situation: Suicide bot on the weekend without getting banned, account gets a ban on the following Monday or Tuesday. This is because your account was probably flagged over the weekend, then eventually reviewed for the final determination on the following business days.

Another misconception is that if you “survived the weekend”, then you are safe. This is certainly not true, most anticheat will "flag and monitor". This means that you were in fact detected but the anticheat is watching your actions very closely to grab more information about what you are doing. Information from these monitoring sessions are used to quickly detect and ban in the future. For Runescape, one example is the use of bot worlds. Another non-Runescape example is Valve-AntiCheat profiling numerous hacks over the course of months and then issue behemoth ban waves all at once for games like Counter-Strike. 

4. Antiban/Antipattern
Scripters who include antiban/antipattern methods in their scripts are either naive, new scripters, or are trying to earn more sales by making false promises. Competitor clients further this perpetuation by forcing script writers to implement these methods. It’s a gimmick and overall you’re going to get banned whether you use these "special methods" or not. Some of these “special” (aka worthless) methods are:

-Moving your mouse randomly
-Checking your exp
-Examining random objects
-Moving your camera angle randomly
-Implementing “fatigue” systems
-Diversifying the way you interact with objects

One of the special methods I’d like to talk about which was not listed above was randomizing sleep time between actions. This is especially special because there are numerous flaws with it.

1. Your computer doesn’t perfectly execute actions in the same time every time
2. Your script doesn’t perfectly loop in the same time every time
3. Your ping fluctuates causing a delay between the client and server
4. If the top three all remained constant, you could find the upper and lower bounds of the mean and use statistics to recreate the sleep time.

Anti-pattern is a bit different, but a lot of scripters have been wrongly claiming their script having “antipattern” when they’re really using the same “special methods”. Examples of antipattern:

- Talking to other players (Cleverbot)
- Mixing up tasks (perhaps after accumulating X gold, go to the Grand Exchange and sell)

The goal of anti-pattern is to reduce the chances of being manually reported by other players for botting. Although “antipattern” is more desirable than “antiban”, there is still no definitive proof of the impact it has in the total picture.

5. Client detection

5A.      I’m going to keep this relatively brief because this is probably the most technical aspect of this guide. There is an overarching debate over Injection vs Reflection and it’s pretty silly. Both are detectable because both have different ways you can detect it. In the non-Java hacking world, this would be equivalent to something like ReadProcessMemory versus LoadLibrary. To better put it, reading memory from outside the process versus inside. There are ways to hide it, ways to find it, ways to hide against the ways to find it, and ways to find the ways how to hide it against from finding it. As you can see, it’s really cat and mouse and it boils down to implementation.

5B.      Additionally, you can be detected for macroing without even using a client. You can banned for using Gary's Hood or AutoHotKey. Both of these use some sort of Windows API function like SendInput, from protected mode. This is how color-bots also get detected without injecting/reflecting the client. 

5C.      Mirror Mode adds some protection to users where the normal OSBot client can be detected. Think of mirror-mode as a safety catch rather than a comprehensive antiban measure; and yes mirror mode has genuinely protected users at least on one confirmed occasion. In summary, you will still get banned because mirror-mode only protects you from one aspect of botting and there are potentially hundreds of detection vectors. 


6. Conclusion and final remarks
Having good botting habits like I outlined in section two, and having a good script which is reliable and not prone to getting baited (locked behind doors, etc), is your safest bet. There are people who do “studies” and “research” but ultimately their results are inconclusive, non-definitive, and certainly only proves a correlation and not causation. There are too many variables to isolate to make any data worthwhile; ip address, computer, scripts, clients, botting locations, skills, account time, bot time, quests, RWT, java exceptions, client detection, the list goes on and on. Too many variables to isolate, too much that we cannot prove. The bottom-line is that the only people who know specifics about the anticheat system are the anticheat developers.

this is a very good way to not get banned , agree 100% I follow alot of these and rarely ever deal w high ban rates , everyone be careful! ik this is old ! but i plan to share it