Patch bots [Plus Emulator]

[EvilCoder]

Hi all,

RELEASE63-201405071257-197450526

A very easy and small fix to patch these "bots" everybody is releasing now these days.

I don't know if Habbo uses the same packet ID for these things. But as the most of you know there is packet with number 340. This will send the variables.txt location which you are currently using.

Bots do not have external_variables, bots are being send on another way. There for you can use this packet in order to check your variables link.

How do I install it?
Browse to "Events.cs" and Add the following packet in the list:

internal static int ClientVars = 340;

Now browse to StaticClientMessageHandler.cs and Search for:

handlers.Add(Incoming.LoadProfile, new StaticRequestHandler(SharedPacketLib.LoadProfile));

Paste the following rule after this line:

handlers.Add(Incoming.ClientVars, new StaticRequestHandler(SharedPacketLib.CheckClientVars));

Now go to "Requests->Users.cs" and find "GetBalance()". Paste this new internal void there.

internal void CheckClientVars()
        {
            string unnecessaryJunk = Request.PopFixedString();
            string RequestedVariables = Request.PopFixedString();

            if (RequestedVariables == "" || !RequestedVariables.Contains("external_variables.txt"))
            {
                Silverwave.Core.Logging.WriteLine("[ClientMgr] User tried to authenticate without the real external variables from this hotel - request has been blocked.");
                Session.Disconnect();

                return;
            }
        }

Also add this to your sharedlib:

internal static void ClientVars(GameClientMessageHandler handler)
        {
            handler.ClientVars();
        }

Make sure your variables "contains" ..../external_variables.txt" or change the "Contains" part in the "void CheckClientVars()".

Credits to:
@Mextur -> Teaching me .NET in the first place.
@EvilCoder {me} (I like to mess around with unused packets. I found this one during my unhandled packetlog)
@Bjork (Finding the necassery structure (not 1 string, but 2) thx).

Don't forget the thx button ++ This is not a permanent fix. But the released bots for now are patched!

Kind regards,
Mikey

[MentaL]

[Rush Retros]

This is preatty good thank u vm :)

[Bjork]

Good idea but it's making a packeterror when connecting

[Receiver]

Thanks for this as its very helpful to the members that use Plus Emulator.

[EvilCoder]

Good idea but it's making a packeterror when connecting

What does the packeterror say? If you post me the error I will try to make a scenario and fix this.

[Bjork]

It need two strings, the second contains the external_variables link.

And "Session.GetHabbo().Username" makes the packeterror

Like this, it seems to be working:

internal void CheckClientVars()
        {
            string Junk = Request.PopFixedString();
            string RequestedVariables = Request.PopFixedString();

            if (!RequestedVariables.Contains("external_variables.txt"))
            {
                Session.Disconnect();
                return;
            }            
        }

[EvilCoder]

What you also could do is make it:

if (RequestedVariables != "" && !RequestedVariables.Contains("external_variables.txt"))

- - - Updated - - -

It need two strings, the second contains the external_variables link.

And "Session.GetHabbo().Username" makes the packeterror

Like this, it seems to be working:

internal void CheckClientVars()
        {
            string Junk = Request.PopFixedString();
            string RequestedVariables = Request.PopFixedString();

            if (!RequestedVariables.Contains("external_variables.txt"))
            {
                Session.Disconnect();
                return;
            }            
        }

I see.. Then remove that part and make it say:

Silverwave.Core.Logging.LogException("User tried to authenticate without the real external variables from this hotel - this has been blocked.");

- - - Updated - - -

It need two strings, the second contains the external_variables link.

And "Session.GetHabbo().Username" makes the packeterror

Like this, it seems to be working:

internal void CheckClientVars()
        {
            string Junk = Request.PopFixedString();
            string RequestedVariables = Request.PopFixedString();

            if (!RequestedVariables.Contains("external_variables.txt"))
            {
                Session.Disconnect();
                return;
            }            
        }

Also updated the function in main thread. Thanks!

- - - Updated - - -

Gosh I hate bots like hell... People who invented this should not share this. All the noobs are now downloading this program and spamming hotels. So annoying.

[SuklaaVene]

Is this possible on r63a? Example Phoenix.

[EvilCoder]

Is this possible on r63a? Example Phoenix.

It should be, log your packets during login. And look if you see an unhandled packet saying the link of your external variables. If so, you need to use the "number" in front of that message. That would be the correct packetnumber.

You could even check the "base" location. Which is the buzzhotel.info/game/ link in the screenshot, and the "unnecessaryJunk" string var.

[SuklaaVene]

It should be, log your packets during login. And look if you see an unhandled packet saying the link of your external variables. If so, you need to use the "number" in front of that message. That would be the correct packetnumber.

You could even check the "base" location. Which is the buzzhotel.info/game/ link in the screenshot, and the "unnecessaryJunk" string var.

Tested it out. God dam there isin't that packet! ;(

EDIT: Only 482 isin't handled and its EventLogMessageEvent

EDIT2: Too 3110 and its GetMOTDMessageEvent sooo... not important.

[ThuGie]

Wait, Couldn't they just add this packet to the bot ?

[Troll Hotel]

You also need to add

internal static void ClientVars(GameClientMessageHandler handler)
        {
            handler.ClientVars();
        }

to your sharedpacketlib.cs

[GrateZ4]

Or just fix a captcha for your register :)

[Arachis]

Not sure if the original hotel was also using this as a security measure, but you could get around it, by just doing the exact same thing the client would do:


Of course, you'd need to adjust it to the hotel's 'ext_vars' link. There really isn't a way to patch these types of bots, but you could make it harder/troublesome for the user by hiding this type of information from the user.

[Emily]

Isn't there something called external variables override? :)