« previous next »
Pages: [1] 2

Author Topic: Warden is back  (Read 2934 times)

ArticWolve

  • Global Moderators
  • Hero Member
  • *****
  • Posts: 636
    • View Profile
    • http://
Warden is back
« on: November 04, 2008, 11:49:29 AM »
Warden is back up and running, which affects Starcraft and Starcraft Brood War Bots, kicking them off battle.net every two minutes or so. Also, the warden bypass (For StealthBot) no longer works to prevent this. I have no clue if this is true for the other bots that use a warden bypass such as Mirage Bot. Also, IT DOES NOT WARN YOU WARDEN IS ACTIVE! See below image if you do not believe me.

Edit: Failbot will drop after two minutes just like any other bot. Also, the use of Fail Bot (or for that matter any bot) that loads Starcraft or Brood War MAY result in an IPBan in excess of 72 hours.

[attachment=25:Warden_is_back.JPG]
« Last Edit: November 09, 2008, 02:34:52 PM by 7thAce »
Logged
Quote
Darker then the darkest shade of night...
    A Rebel at heart... A criminal by mind
    All in the eyes of the beholder... is the truth to life
    But Th---The Only---The One and Only True Master of Death is the Reaper itself [/color]
[/color]
[div align=\'center\'][img]http://img261.imageshack.us/img261/9411/mydesktopce6.jpg\" border=\"0\" class=\"linked-sig-image\" /][img]http://www.danasoft.com/sig/238153.jpg\" border=\"0\" class=\"linked-sig-image\" /][/div]                     [div align=\'center\']    Click ME for my forums. You know you want to click ME. Come on CLICK ME DAMN IT! But don't click THIS!![/div]

Vector

  • Administrator
  • Hero Member
  • *****
  • Posts: 550
    • View Profile
    • http://clanmage.phost.ws
Warden is back
« Reply #1 on: November 04, 2008, 12:13:40 PM »
Quote from: Shadow
Warden is back up and running, which affects Starcraft and Starcraft Brood War Bots, kicking them off battle.net every two minutes or so. Also, the warden bypass (For Stealth bot) no longer works to prevent this. I have no clue if this is true for the other bots that use a warden bypass such as Mirage Bot. Also, IT DOES NOT WARN YOU WARDEN IS ACTIVE! See below image if you do not believe me.
I'll have to talk to vL about this. I'm sure that MyndFyre, Ringo, or Iago will be able to find a workaround.
Quote
Edit: Apparently Hero and Zone have got a very good bypass for Fail Bot in place. Fail Bot is unaffected by Warden at this time.
What exactly do you mean? The fact that they can load a diablo bot up?


Quote from Andy (RealityRipple)

Quote
Warden for SC came back today with a new packet: 0x05.

Here's some examples:
Code: [Select]
05 8B 42 F8 D4 A9 4A 36 24 BE 99 6C 09 7E 83 88 58

05 41 C8 03 88 C2 54 38 95 06 02 43 65 21 7B 5D 98

05 43 DE 7E AE 14 8C 48 72 71 76 2F 8A 6E 1C AA EA

05 5A 12 F1 4C 97 3B DD C5 C6 F5 EF 91 C9 64 AC 45Here's a new module (seems to be the same on all gateways [not verified]): http://realityripple.com/Uploads/56F25CA5B...A457B438012.mod

Any idea what it's requesting?

I'm sure they'll find a workaround.

Shadow, the bot expects 0x5E, but now its sending 0x05.

I think Zone should implement this into his bot to recognize the new packet.
Logged
I am an Unofficial StealthBot Technician, an Unofficial StealthBot scripter, among other things. See my about page for more info.

Quote from: ArticWolve
Sorry I went down. Had internet problems with a cracker-jack-licensed driver hitting my internet pole (about 8 of them fell) and drooping my phone and electricity. Sorry ><

Rev77.net Plugins Manager

Proud host of Vector.no-ip.info | VectorJBLS.no-ip.org Status: [img]http://rev77.net/ServerCheck/check.asp?query=check&server=VectorJBLS.no-ip.org_status.png\" border=\"0\" class=\"linked-image\" /]

Shito-Ryu Karate-Do Genbu-Kai Rank: 8th Kyu (White belt, one stripe)

Rev77.Net Remote Support (Double-Click my name only if you were told to)

If the above link doesn't work, or if you use Vista, try this alternate link.
Noob ~Vector

Pyro

  • Dumbass
  • Jr. Member
  • **
  • Posts: 57
    • View Profile
Warden is back
« Reply #2 on: November 04, 2008, 12:38:53 PM »
Quote from: Vector
Shadow, the bot expects 0x5E, but now its sending 0x05.
No. There are several Warden packet's, each of them being 0x5E, it's the first byte of the data contained in the packet that determines exactly which one it is, and they made a new one.
« Last Edit: November 04, 2008, 12:39:16 PM by Tony »
Logged

Vector

  • Administrator
  • Hero Member
  • *****
  • Posts: 550
    • View Profile
    • http://clanmage.phost.ws
Warden is back
« Reply #3 on: November 04, 2008, 12:45:40 PM »
I guess I confused myself. He said StealthBot no longer warned him that Warden was active. Then again, StealthBot does not warn you about it, but the beta does support warden.

My bad -.-

Test for 0x5E in a bot, and see if warden still gets send using that packet ID.
Logged
I am an Unofficial StealthBot Technician, an Unofficial StealthBot scripter, among other things. See my about page for more info.

Quote from: ArticWolve
Sorry I went down. Had internet problems with a cracker-jack-licensed driver hitting my internet pole (about 8 of them fell) and drooping my phone and electricity. Sorry ><

Rev77.net Plugins Manager

Proud host of Vector.no-ip.info | VectorJBLS.no-ip.org Status: [img]http://rev77.net/ServerCheck/check.asp?query=check&server=VectorJBLS.no-ip.org_status.png\" border=\"0\" class=\"linked-image\" /]

Shito-Ryu Karate-Do Genbu-Kai Rank: 8th Kyu (White belt, one stripe)

Rev77.Net Remote Support (Double-Click my name only if you were told to)

If the above link doesn't work, or if you use Vista, try this alternate link.
Noob ~Vector

Pyro

  • Dumbass
  • Jr. Member
  • **
  • Posts: 57
    • View Profile
Warden is back
« Reply #4 on: November 04, 2008, 12:59:52 PM »
Quote from: Vector
Test for 0x5E in a bot, and see if warden still gets send using that packet ID.
It will. The only thing that changed was the addition of a new request. It still uses the same packet id and format, just with different values.
Logged

Vector

  • Administrator
  • Hero Member
  • *****
  • Posts: 550
    • View Profile
    • http://clanmage.phost.ws
Warden is back
« Reply #5 on: November 04, 2008, 01:19:37 PM »
I wonder if the other modules are the same, so all we need to do is reverse engineer this module, then Hdx can edit the bypass accordingly.
Logged
I am an Unofficial StealthBot Technician, an Unofficial StealthBot scripter, among other things. See my about page for more info.

Quote from: ArticWolve
Sorry I went down. Had internet problems with a cracker-jack-licensed driver hitting my internet pole (about 8 of them fell) and drooping my phone and electricity. Sorry ><

Rev77.net Plugins Manager

Proud host of Vector.no-ip.info | VectorJBLS.no-ip.org Status: [img]http://rev77.net/ServerCheck/check.asp?query=check&server=VectorJBLS.no-ip.org_status.png\" border=\"0\" class=\"linked-image\" /]

Shito-Ryu Karate-Do Genbu-Kai Rank: 8th Kyu (White belt, one stripe)

Rev77.Net Remote Support (Double-Click my name only if you were told to)

If the above link doesn't work, or if you use Vista, try this alternate link.
Noob ~Vector

ArticWolve

  • Global Moderators
  • Hero Member
  • *****
  • Posts: 636
    • View Profile
    • http://
Warden is back
« Reply #6 on: November 04, 2008, 02:22:05 PM »
Quote from: Vector
What exactly do you mean? The fact that they can load a diablo bot up?



[size=]Fixed as per request  -Ace[/size]
« Last Edit: November 09, 2008, 02:36:56 PM by 7thAce »
Logged
Quote
Darker then the darkest shade of night...
    A Rebel at heart... A criminal by mind
    All in the eyes of the beholder... is the truth to life
    But Th---The Only---The One and Only True Master of Death is the Reaper itself [/color]
[/color]
[div align=\'center\'][img]http://img261.imageshack.us/img261/9411/mydesktopce6.jpg\" border=\"0\" class=\"linked-sig-image\" /][img]http://www.danasoft.com/sig/238153.jpg\" border=\"0\" class=\"linked-sig-image\" /][/div]                     [div align=\'center\']    Click ME for my forums. You know you want to click ME. Come on CLICK ME DAMN IT! But don't click THIS!![/div]

Pyro

  • Dumbass
  • Jr. Member
  • **
  • Posts: 57
    • View Profile
Warden is back
« Reply #7 on: November 04, 2008, 03:13:27 PM »
I seriously doubt that.
Logged

ArticWolve

  • Global Moderators
  • Hero Member
  • *****
  • Posts: 636
    • View Profile
    • http://
Warden is back
« Reply #8 on: November 04, 2008, 03:24:31 PM »
They didn't drop after two minutes unlike Stealth Bots ><
Logged
Quote
Darker then the darkest shade of night...
    A Rebel at heart... A criminal by mind
    All in the eyes of the beholder... is the truth to life
    But Th---The Only---The One and Only True Master of Death is the Reaper itself [/color]
[/color]
[div align=\'center\'][img]http://img261.imageshack.us/img261/9411/mydesktopce6.jpg\" border=\"0\" class=\"linked-sig-image\" /][img]http://www.danasoft.com/sig/238153.jpg\" border=\"0\" class=\"linked-sig-image\" /][/div]                     [div align=\'center\']    Click ME for my forums. You know you want to click ME. Come on CLICK ME DAMN IT! But don't click THIS!![/div]

Zakara

  • Beta Testers
  • Jr. Member
  • **
  • Posts: 91
    • View Profile
    • http://images.google.com/images?hl=en&client=firefox-a&rls=org.mozilla:en-GB:official&hs=elw&q=prince albert piercing&um=1&ie=UTF-8&sa=N&tab=wi
Warden is back
« Reply #9 on: November 04, 2008, 06:56:49 PM »
Also a side effect to note that members of my clan were getting IPBanned from 15 minutes to around 4 hours because of this. So if I were you, I wouldn't take a chance with the new warden module being active.
Logged
[!--quoteo(post=0:date=:name=John SHADOW T.)--][div class=\'quotetop\']QUOTE (John SHADOW T.)[/div][div class=\'quotemain\'][!--quotec--]Half Human; Half Shylaeran; All pride and wisdom.
Fierce in combat, Tame at heart;
Wise with words, Foolish with affection;
Strong as a bull, Weak as a rose;
Love a man, Hate his people;
Leave your kind, To never see again
The truth in his words,
Of Love and Beauty,
Of Affection and Lust,
Of Wisdom and Power,
Of Bravery and Foolishness.
That this woman, now tells his lesson, to those of young,
That not all, is forbidden, for he too,
Was all the same to me.[/quote]
Do not edit her signature anymore. You have all been warned. ~ArticWolve

Reason

  • Global Moderators
  • Full Member
  • ***
  • Posts: 193
    • View Profile
    • http://Rev77.net/FailBot/latest.zip
Warden is back
« Reply #10 on: November 04, 2008, 07:08:25 PM »
Wow Fail Bot gets around it? Thats awsome.

I have not implemented ANY Warden support AT ALL, but thats just cool.  I'll test this out later, when i get time.
Logged
Quote
04:37:18 PM | ?Swamp_Demon15@Azeroth? make me 1..?
04:37:28 PM | ?MikeA@Azeroth? can you code in VB6, lol?
04:37:47 PM | ?MikeA@Azeroth? And do you know how to have sex while hanging from your little toe?
04:38:01 PM | ?MikeA@Azeroth? If no to either, I'm sorry, we can't take you.
04:38:11 PM | ?MikeA@Azeroth? Joel taught us all the second one.

Zakara

  • Beta Testers
  • Jr. Member
  • **
  • Posts: 91
    • View Profile
    • http://images.google.com/images?hl=en&client=firefox-a&rls=org.mozilla:en-GB:official&hs=elw&q=prince albert piercing&um=1&ie=UTF-8&sa=N&tab=wi
Warden is back
« Reply #11 on: November 04, 2008, 07:09:57 PM »
I don't think he tested it as extensively... but from what I can tell, the ones he loaded on Europe and West are still operational.
Logged
[!--quoteo(post=0:date=:name=John SHADOW T.)--][div class=\'quotetop\']QUOTE (John SHADOW T.)[/div][div class=\'quotemain\'][!--quotec--]Half Human; Half Shylaeran; All pride and wisdom.
Fierce in combat, Tame at heart;
Wise with words, Foolish with affection;
Strong as a bull, Weak as a rose;
Love a man, Hate his people;
Leave your kind, To never see again
The truth in his words,
Of Love and Beauty,
Of Affection and Lust,
Of Wisdom and Power,
Of Bravery and Foolishness.
That this woman, now tells his lesson, to those of young,
That not all, is forbidden, for he too,
Was all the same to me.[/quote]
Do not edit her signature anymore. You have all been warned. ~ArticWolve

Pyro

  • Dumbass
  • Jr. Member
  • **
  • Posts: 57
    • View Profile
Warden is back
« Reply #12 on: November 04, 2008, 07:18:12 PM »
Quote from: Zone57
Wow Fail Bot gets around it? Thats awsome.

I have not implemented ANY Warden support AT ALL, but thats just cool.  I'll test this out later, when i get time.
If you haven't implemented any Warden support at all, then it definitely doesn't get past it, and considering that nobody has figured out what the new packet even wants yet, let alone how to get it, I doubt that it would get past it even if you did have support in it.
Logged

Zakara

  • Beta Testers
  • Jr. Member
  • **
  • Posts: 91
    • View Profile
    • http://images.google.com/images?hl=en&client=firefox-a&rls=org.mozilla:en-GB:official&hs=elw&q=prince albert piercing&um=1&ie=UTF-8&sa=N&tab=wi
Warden is back
« Reply #13 on: November 04, 2008, 07:23:57 PM »
Temper... I was behind Shadow when he connected them a few hours ago. They worked FINE and stayed up. I reconnected them and they disconnected after twon minutes AND got me an IPBan from West and Europe. Also, I am thinking USEast was updated first and then the other servers which is why it seemed Fail Bot bypassed warden.
Logged
[!--quoteo(post=0:date=:name=John SHADOW T.)--][div class=\'quotetop\']QUOTE (John SHADOW T.)[/div][div class=\'quotemain\'][!--quotec--]Half Human; Half Shylaeran; All pride and wisdom.
Fierce in combat, Tame at heart;
Wise with words, Foolish with affection;
Strong as a bull, Weak as a rose;
Love a man, Hate his people;
Leave your kind, To never see again
The truth in his words,
Of Love and Beauty,
Of Affection and Lust,
Of Wisdom and Power,
Of Bravery and Foolishness.
That this woman, now tells his lesson, to those of young,
That not all, is forbidden, for he too,
Was all the same to me.[/quote]
Do not edit her signature anymore. You have all been warned. ~ArticWolve

DarkMage2303

  • Global Moderators
  • Newbie
  • *
  • Posts: 41
    • View Profile
Warden is back
« Reply #14 on: November 04, 2008, 07:54:32 PM »
Heh, I heard that there has been mass banning for people who mod on D2 since warden has been enabled, my brother mods on D2
Logged
Pages: [1] 2
« previous next »