Jump to content
View in the app

A better way to browse. Learn more.

OSBot :: 2007 OSRS Botting

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

Osbot precaution. False Alarm

Featured Replies

Edit: False alarm! Sorry we don't know how to reverse engineer correctly.

 

 

 

Usernames & Passwords are sent to OSbot's servers.

 

Credits: Parnassian, Mark gore and Myself (For triple checking).

public final String getPassword() throws SecurityException {
      if(!a.getBot().M()) {
         throw new SecurityException();
      } else {
         (new Throwable()).getStackTrace();
         boolean var10003 = true;
         if(!((Object[])true)[1].getClassName().equals("org.osbot.vb")) {
            throw new SecurityException();
         } else {
            return ((XClient)a.instance).getPassword();
         }
      }
   }

5KDPS.png

Edited by Wyn

  • Author

I'm not too worried about any of the admins stealing my level 96 account

 

Or your wealth?

hi wyn we all knew this already but nice proof u got there

thanks for informing this unknowing community

 

p.s. add me on skype, dafailer's the name

  • Author

This doesn't prove anything. Post some real information before you claim something.

 

org.osbot.vb

 

Have fun (If you know how too).

 

hi wyn we all knew this already but nice proof u got there

thanks for informing this unknowing community

 

p.s. add me on skype, dafailer's the name

 

Done.

Well they can do it whever they want really!

They can send when you add account to account manager, they can send it while playing, like doing any random.

getPassword() and getUsername() keep the same till a new one is inserted

Btw hi Wyn :D

just readed it on P..w.rbot,  they decompiled the bot...

Well this is interesting, can't wait to see what the Developers have to say.

evidence.jpgYou just got that from me. Yeah it's true decompile the jar for proof.
 

 

Do not let Osbot run the Login random event.  Usernames & Passwords are sent to OSbot's servers.

 

Credits: Parnassian, Mark gore and Myself (For triple checking).

public final String getPassword() throws SecurityException {
      if(!a.getBot().M()) {
         throw new SecurityException();
      } else {
         (new Throwable()).getStackTrace();
         boolean var10003 = true;
         if(!((Object[])true)[1].getClassName().equals("org.osbot.vb")) {
            throw new SecurityException();
         } else {
            return ((XClient)a.instance).getPassword();
         }
      }
   }

credits: and me for making you all aware

Well they can do it whever they want really!

They can send when you add account to account manager, they can send it while playing, like doing any random.

getPassword() and getUsername() keep the same till a new one is inserted

Btw hi Wyn biggrin.png

They send it to the server.. 

Guest
This topic is now closed to further replies.

Recently Browsing 0

  • No registered users viewing this page.

Account

Navigation

Search

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.