Boting Few Question

[Alekso]

Hi Buddys
I have few question about that bot i know i can get caught by blizzard and get banned but my question is many ppl here cry a river because they got banned for 5/10 accounts.
Do we have any informations from bossland about detection because im looking for any informations but cant find anything on this forum?
Now about blizzard scan our pc for HonorBuddy. I already used many cheats most of them for more protection i should install them on pendrive to avoid ban for example what i know Steam VAC also scan your pc what if i will install honrobuddy on pendrive?
Why everyone think if u start bot u have to be banned? In my opinions it's only a bad luck if u get banned.

Question for developer
I know guys you fight with blizzard in court but if u want to still get profit from this business your should start speaking with us because now i saw many many ppl who are really mad because there is no info from you.
I know business is business but come one do somethink guys we are your customers we gave you a credit to keep it run.


Cheers!

 

[Jiniix]

Your ideas and opinion are wrong. Bot = ban.

 

[Kuat]

How could pendrive help?

They don't scan your HDD. Blizzard scan computer MEMORY and programs running in background.

 

[Aion]

Blizzard scan computer MEMORY and programs running in background.

Good try! Any proof?
And do not try to link EULA please, because it is just empty intentions there, not actual proof for such actions!

 

[Alekso]

How could pendrive help?

They don't scan your HDD. Blizzard scan computer MEMORY and programs running in background.

Its funny guys you will never know what they do buddy devs propably also dont have any idea about it i believe they are a pro programmers but they dont earn billions dollars each year.

If some guys can only write bot=ban you shouldnt ever start bot/hack any game since when you start using your brain for example I also use a system with random boot i mean got disabled DEP policy etc and other detective shits and we will se if there will be any ban soon if not i have right for example VAC also shouldn't scan your pc but me and my friend hack same game with 2 different cheats ( i will not give any names) but my cheat got extra protection like random boot system and for more protection i should use zip file and run it always from removable storage (FAT32) and NEVER receive ban but my friend pay almost 15 euro more and he get banned. Also when banwave come in that game my account was save since 2013.

Thats why im gonna check it maybe it give any clue for buddy dev how to make it more stealth because right know they can only skan your task manager and they will se Honorbuddy.exe ^^ maybe im worng i dont code this cheat dont know how it works but first time i saw somethink like this. why exe from HB dont have any random letters/numbers every new open why exe wont run as notepad? it (maybe) should also help to avoid ban hammer.
There is many tricks and tips how to make it more protective.
Maybe devs think they cant do somethink more (wrong you always can code somethink better and better )


Regards
Alekso

 

[qztr]

If some guys can only write bot=ban you shouldnt ever start bot/hack any game since when you start using your brain for example I also use a system with random boot i mean got disabled DEP policy etc and other detective shits and we will se if there will be any ban soon if not i have right for example VAC also shouldn't scan your pc but me and my friend hack same game with 2 different cheats ( i will not give any names) but my cheat got extra protection like random boot system and for more protection i should use zip file and run it always from removable storage (FAT32) and NEVER receive ban but my friend pay almost 15 euro more and he get banned. Also when banwave come in that game my account was save since 2013.

Oh lord...
Two different products can't be compared like that. The more expensive hack was just trying to get as many sales as possible, more money = more fun.
Doesn't mean that the code in the hack is the same, and when a detection occurs it's all about the code, since well, the whole program is a code.

 

[Alekso]

Oh lord...
Two different products can't be compared like that. The more expensive hack was just trying to get as many sales as possible, more money = more fun.
Doesn't mean that the code in the hack is the same, and when a detection occurs it's all about the code, since well, the whole program is a code.

True but 2 hack site working for few years 2 of them have really really good reputation!

 

[Kuat]

Good try! Any proof?
And do not try to link EULA please, because it is just empty intentions there, not actual proof for such actions!

Proof is banwaves happening on the regular basis since 2015

You got proof otherwise? How do they detect the bot?

 

[Aion]

Proof is banwaves happening on the regular basis since 2015

You got proof otherwise? How do they detect the bot?

Google it, and you will see tons of discussions, blogs and lots of other stuff regarding Blizzards detection habits, including the 2007 hoax, when they actually attempted to scan outside wow.exe. Some guys were able to prove how Blizzard track and collect hash sets from all the loaded modules in RAM, plus monitored the net traffic for suspicious sites, visited and other "interesting" stuff, but Blizzard have stopped this, once it gets into the public, fast enough, before became donors to the consumer organisations in most countries, they operate.

The last (or previous) detection methods would not be revealed from both parties, no need to ask for them, but even if they are revealed, most of us, including you or me, would not understand anything off it.

The most important for us was already said - they have made sleeping traps in any of the recent client patches, then fired two of them in the last days before the banwaves, then removed them with the last client patch, in attempt to hide the detection style.

 

[Avenger]

Good try! Any proof?
And do not try to link EULA please, because it is just empty intentions there, not actual proof for such actions!

Really!
Buddy Store Developer has no fundamental knowlage about Blizzard services?


Blizzard Entertainment: Anti-cheating Agreement


2. In an effort to combat the efforts of those individuals who are willing to violate the EULA, Blizzard utilizes an ‘anti-cheating’ utility that runs as part of Blizzard games. This ‘anti-cheating’ utility performs limited scans of:
the Random Access Memory (‘RAM’) that is occupied by a Blizzard game to confirm that the Blizzard game’s program has not been altered or ‘hacked’ in violation of the EULA;
the Blizzard games ‘process’ to determine if any unauthorized third-party programs or computer code has been attached to the Blizzard games process;
the Windows Process List to determine if any confirmed hacking, botting or cheating programs are presently open in violation of the EULA; and
the Windows Handles list to see which processes have a handle to the Blizzard games ‘process’. Additional information obtained from RAM and/or disc for the processes that have a handle to the Blizzard games ‘process’ will be used to determine if it is a confirmed hacking, botting or cheating program in violation of the EULA

 

[phazeshifta123]

Google it, and you will see tons of discussions, blogs and lots of other stuff regarding Blizzards detection habits, including the 2007 hoax, when they actually attempted to scan outside wow.exe. Some guys were able to prove how Blizzard track and collect hash sets from all the loaded modules in RAM, plus monitored the net traffic for suspicious sites, visited and other "interesting" stuff, but Blizzard have stopped this, once it gets into the public, fast enough, before became donors to the consumer organisations in most countries, they operate.

The last (or previous) detection methods would not be revealed from both parties, no need to ask for them, but even if they are revealed, most of us, including you or me, would not understand anything off it.

The most important for us was already said - they have made sleeping traps in any of the recent client patches, then fired two of them in the last days before the banwaves, then removed them with the last client patch, in attempt to hide the detection style.

Are you really attempting to bring up something from 2007? Really? You want to base your argument on something that happened 10 years ago?

And yes, Blizzard scans within their own memory space. Have you ever heard of a little program that Blizzard has that's called Warden by chance? Do you have even the slightest clue what Warden does?

And if you think that Blizzard is scanning outside of their processes with spyware or some other BS you want to come up with, don't you think that in the past 10 years a single person would've caught them doing it? We all know that Raphus hasn't been able to catch them. We all know that the HB dev team can't stop Blizzard from catching bots...

If the HB team knew about the traps set by Blizzard, why didn't they stop the banwaves from happening? They obviously knew they were there, since you seem to have known they were there. Once again, the HB team failed to do their jobs.

 

[Aion]

Are you really attempting to bring up something from 2007? Really? You want to base your argument on something that happened 10 years ago?

And yes, Blizzard scans within their own memory space. Have you ever heard of a little program that Blizzard has that's called Warden by chance? Do you have even the slightest clue what Warden does?

And if you think that Blizzard is scanning outside of their processes with spyware or some other BS you want to come up with, don't you think that in the past 10 years a single person would've caught them doing it? We all know that Raphus hasn't been able to catch them. We all know that the HB dev team can't stop Blizzard from catching bots...

If the HB team knew about the traps set by Blizzard, why didn't they stop the banwaves from happening? They obviously knew they were there, since you seem to have known they were there. Once again, the HB team failed to do their jobs.

Sorry to disappoint you, but your conclusions off my post are somehow opposite to what I have written, mate.

I never stated that Blizzard is scanning outside their dedicated memory space nowadays, please reread and comprehend my post again, if you have not already done And yes, they have scanned outside their own memory in the past, but obviously, not today!

The Warden is not a program, but set of sophisticated modules, which are "working" within the wow.exe, aka the game client, which is the actual "program".

But this is not interesting, since Warden is not the one, detecting the 3rd party software nowadays.

You can blame Raphus & Buddy team for the recent detection banwave, but this is cat vs mouse game, it always was, and will be! The earlier you comprehend this, the sooner you will sleep well!

The illustrative "traps" explanation was leaked on discord from other persons, not connected with the Buddy Team, so anyone who read it there, have rough idea what happened and how Blizzard were able to blind the eyes of the most botting developers this time (Not Buddy Team only, since several other bots got banned as well)

Really!
Buddy Store Developer has no fundamental knowlage about Blizzard services?

Buddy Store Developers = Community Developers, aka seasoned gamers & botters, which have some skills into development of profiles, combat routines and other content for Honorbuddy, and was granted access to the Buddy Store by the Buddy Team.

We are part of the community on first place, we are not employees of Bossland GmbH or affiliated with the Buddy Team, mate.

 

[Zarm]

A couple of things in your post and im just correcting for information for yourself.

1.

i should install them on pendrive to avoid ban for example what i know Steam VAC also scan your pc what if i will install honrobuddy on pendrive?
Why everyone think if u start bot u have to be banned? In my opinions it's only a bad luck if u get banned.
Cheers!

Running a program from a pendrive. A program must still be loaded into main memory and put on the stack for it to run. This means that the information and files are stored on the drive yes but the necessary processes are still run on the main unit.
The steps are:
> Initialise process information
> Load executable from storage into main memory (notice this step)
> Load program counter
> program enters Queue
> dispatched to CPU

The program is still run on the main unit doesnt matter where it is stored, the issue with pendrives is usually that read speed is slow and not good for constant reading/writing applications usually. (small programs can be fine but nothing like a bot.) Try running photoshop or somthing from your pendrive then try running somthing like notepad.

Half the time yes it is luck if you get banned. Some bots avoid the banwaves but HB is too large for Blizz to ignore and is most likely being directly targeted (just my opinion).

2.

Thats why im gonna check it maybe it give any clue for buddy dev how to make it more stealth because right know they can only skan your task manager and they will se Honorbuddy.exe ^^ maybe im worng i dont code this cheat dont know how it works but first time i saw somethink like this. why exe from HB dont have any random letters/numbers every new open why exe wont run as notepad?

This one also, It doesnt matter what the .exe is called you could change this everytime and no difference would be made.
this will lead on from my last point, A process image contains alot of information more than what the .exe is named, the name is mostly for user readability in the task manager or such like.
A process image contains:
>Process control block (PCB)
- Process ID, parent process ID, user ID
- Processor state (register contents, program counter, stack pointer)
- Scheduling information (process state, priority)
- Memory management info, process privileges
- Account info (CPU time used, time limits)
- Inter-process communication, I/O status
>User program
>User data
>Stack
>Heap
This provides alot more information than just what an exe is called and is all obtainable from scanning the process.
It wont run as 'Notepad' because it simply isnt notepad, renaming the .exe is a huge placebo.
Your basically telling me that if i rename 'Battle.net Launcher' to 'honorbuddy' that i will get banned if they scan, same thing but reversed.

So if i lay out a .exe so we can understand
> file headers <
> .text (this stores method calls and such)<
> .data (this stores static variables which do not change over teh course of the process) <
> .bss (this stores other variables which all haev the same initial value and change over the course of process execution <
This contains all the information when broken down along with the PCB list i explained earlier. Detection is based upon interaction with their (wow.exe) and calls to it , HB is not a program that simply clicks all over the screen. It utilizes methods within wow (hence why it is needed to reverse engineer to find these and either block or utilise) with this kind of interaction Forks are created by the program (google about operating systems and 'forking').

Hope this clears up a few things and is a good read for others.
Any of the devs or so on that feel like correcting or adding to what ive said feel free. (always loved to gain knowledge from you guys)