Deprecated: The behavior of unparenthesized expressions containing both '.' and '+'/'-' will change in PHP 8: '+'/'-' will take a higher precedence in /home/iano/public_html/tpforums-vb5/forum/includes/class_core.php on line 5842

PHP Warning: Use of undefined constant MYSQL_NUM - assumed 'MYSQL_NUM' (this will throw an Error in a future version of PHP) in ..../includes/init.php on line 165

PHP Warning: Use of undefined constant MYSQL_ASSOC - assumed 'MYSQL_ASSOC' (this will throw an Error in a future version of PHP) in ..../includes/init.php on line 165

PHP Warning: Use of undefined constant MYSQL_BOTH - assumed 'MYSQL_BOTH' (this will throw an Error in a future version of PHP) in ..../includes/init.php on line 165

PHP Warning: "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in ..../includes/functions_navigation.php on line 588

PHP Warning: "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in ..../includes/functions_navigation.php on line 612

PHP Warning: Use of undefined constant misc - assumed 'misc' (this will throw an Error in a future version of PHP) in ..../global.php(29) : eval()'d code(6) : eval()'d code on line 1

PHP Warning: Use of undefined constant index - assumed 'index' (this will throw an Error in a future version of PHP) in ..../global.php(29) : eval()'d code(6) : eval()'d code on line 1

PHP Warning: Use of undefined constant misc - assumed 'misc' (this will throw an Error in a future version of PHP) in ..../includes/class_bootstrap.php(1422) : eval()'d code(4) : eval()'d code on line 1

PHP Warning: Use of undefined constant index - assumed 'index' (this will throw an Error in a future version of PHP) in ..../includes/class_bootstrap.php(1422) : eval()'d code(4) : eval()'d code on line 1

PHP Warning: Use of undefined constant onlinestatusphrase - assumed 'onlinestatusphrase' (this will throw an Error in a future version of PHP) in ..../includes/class_core.php(4684) : eval()'d code on line 6

PHP Warning: Use of undefined constant onlinestatusphrase - assumed 'onlinestatusphrase' (this will throw an Error in a future version of PHP) in ..../includes/class_core.php(4684) : eval()'d code on line 6

PHP Warning: Use of undefined constant onlinestatusphrase - assumed 'onlinestatusphrase' (this will throw an Error in a future version of PHP) in ..../includes/class_core.php(4684) : eval()'d code on line 85

PHP Warning: Use of undefined constant onlinestatusphrase - assumed 'onlinestatusphrase' (this will throw an Error in a future version of PHP) in ..../includes/class_core.php(4684) : eval()'d code on line 6

PHP Warning: Use of undefined constant onlinestatusphrase - assumed 'onlinestatusphrase' (this will throw an Error in a future version of PHP) in ..../includes/class_core.php(4684) : eval()'d code on line 6

PHP Warning: Use of undefined constant onlinestatusphrase - assumed 'onlinestatusphrase' (this will throw an Error in a future version of PHP) in ..../includes/class_core.php(4684) : eval()'d code on line 6
Concerning the new login packet of update 10.61 [Bot detection?]
Results 1 to 5 of 5

Thread: Concerning the new login packet of update 10.61 [Bot detection?]

  1. 10-30-2014, 01:56 PM #1
    rbraga
    rbraga is offline
    Junior Member
    Join Date
    Aug 2009
    Posts
    3

    Concerning the new login packet of update 10.61 [Bot detection?]

    I found that the login packet was changed this new update. After a small inspection Its seems that more hardware data is being sent to cipsoft servers, more precisely the video card as you can see:

    00a0 4e 56 49 44 49 41 20 43 6f 72 70 6f 72 61 74 69 NVIDIA Corporati
    00b0 6f 6e 20 47 65 46 6f 72 63 65 20 39 34 30 30 4d on GeForce 9400M
    00c0 2f 50 43 49 2f 53 53 45 32 05 00 33 2e 33 2e 30 /PCI/SSE2..3.3.0

    The packet increased from 158 to 208 bytes.

    Apparently, the new data is going on clear text appended to the end of packet, and it is not being encrypted by the rsa function.

    My thoughts on this is that, if cipsoft wants to know more information on our hardware they can detect better if people share accounts, or use bots on vps/dedicated servers because they have a specific virtualization fingerprint.
    Reply With Quote Reply With Quote
  2. 10-30-2014, 09:57 PM #2
    DarkstaR
    DarkstaR is offline
    Administrator DarkstaR's Avatar
    Join Date
    Aug 2008
    Posts
    1,863
    They also added code to send data about average, floor, and ceiling of FPS and object count (object count is the number of item classes initialized). Its packet outgoing 0x1F
    ​
    Reply With Quote Reply With Quote
  3. 10-30-2014, 10:37 PM #3
    normik
    normik is offline
    Member
    Join Date
    Jan 2010
    Posts
    70
    sneaky bastards
    Reply With Quote Reply With Quote
  4. 10-31-2014, 12:56 AM #4
    rbraga
    rbraga is offline
    Junior Member
    Join Date
    Aug 2009
    Posts
    3
    Quote Originally Posted by DarkstaR View Post
    They also added code to send data about average, floor, and ceiling of FPS and object count (object count is the number of item classes initialized). Its packet outgoing 0x1F
    Interesting... maybe they are just trying to debug video issues or something.

    What u guys think?
    Reply With Quote Reply With Quote
  5. 11-05-2014, 04:24 PM #5
    Ash Katchup
    Ash Katchup is offline
    Senior Member
    Join Date
    Mar 2009
    Location
    Brazil
    Posts
    266
    Quote Originally Posted by rbraga View Post
    Interesting... maybe they are just trying to debug video issues or something.

    What u guys think?
    Probably. But still dangerous as many bots allow you to low the FPS to less than 10 (the minimum you can set within Tibia Client)
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules