CAaronD Posted January 30, 2018 Share Posted January 30, 2018 So, I THINK his items are on marketplace.tf. Was just looking at a Strange Spec KS Bushwacka earlier on and noticed a familiar name https://marketplace.tf/shop/itiswed Is this his shop? Kinda looks like the items somebody would sell if they ran a trading bot Referring to this profile https://steamcommunity.com/profiles/76561197963737955 Link to comment Share on other sites More sharing options...
SmokE Posted January 30, 2018 Author Share Posted January 30, 2018 11 minutes ago, CAaronD said: So, I THINK his items are on marketplace.tf. Was just looking at a Strange Spec KS Bushwacka earlier on and noticed a familiar name https://marketplace.tf/shop/itiswed Is this his shop? Kinda looks like the items somebody would sell if they ran a trading bot Referring to this profile https://steamcommunity.com/profiles/76561197963737955 Those are items he was already selling Link to comment Share on other sites More sharing options...
SmokE Posted January 30, 2018 Author Share Posted January 30, 2018 Thanks to a Friend. https://www.npmjs.com/package/style-console . Link to comment Share on other sites More sharing options...
Enzotoy Posted January 30, 2018 Share Posted January 30, 2018 So the hack is from only 1 backdoor ? Link to comment Share on other sites More sharing options...
Noot Boot Posted January 31, 2018 Share Posted January 31, 2018 21 hours ago, Enzotoy said: So the hack is from only 1 backdoor ? As others have said, We don't know. The bot is unsafe to use. You can try and look trough the code yourself if you're that interested Link to comment Share on other sites More sharing options...
SmokE Posted January 31, 2018 Author Share Posted January 31, 2018 https://github.com/WolfMountainGames/tf2-autoprice-bot Please report this user and this script. he changed account name and URL for the script This was the old URL https://github.com/AxleChange/tf2-autoprice-bot#config I have already emailed GitHub about the issue waiting for a reply Link to comment Share on other sites More sharing options...
Zeus_Junior Posted February 1, 2018 Share Posted February 1, 2018 @wolfmountaingames Did you fork it lol Link to comment Share on other sites More sharing options...
wolfmountaingames Posted February 1, 2018 Share Posted February 1, 2018 1 hour ago, Zeus_Junior said: @wolfmountaingames Did you fork it lol Yeah lol, I wanted to check it out and read how he was doing it so I could go through other bot scripts to make sure they don't have similar issues. Link to comment Share on other sites More sharing options...
Zeus_Junior Posted February 1, 2018 Share Posted February 1, 2018 1 hour ago, wolfmountaingames said: Yeah lol, I wanted to check it out and read how he was doing it so I could go through other bot scripts to make sure they don't have similar issues. Could download it and not use it, maybe edit it too and actually make it work c: Link to comment Share on other sites More sharing options...
appy Posted February 1, 2018 Share Posted February 1, 2018 36 minutes ago, Zeus_Junior said: Could download it and not use it, maybe edit it too and actually make it work c: bad idea, that code is a maze and i think it is deliberate, you never know what other backdoors he may have.It may not be as blatant as last time and may just be gaps in the logic that are very hard to find,which will allow him to exploit it. Like i found a couple of bugs that could be potentially exploited last time i went thought it itself Link to comment Share on other sites More sharing options...
Zeus_Junior Posted February 1, 2018 Share Posted February 1, 2018 19 minutes ago, appy said: bad idea, that code is a maze and i think it is deliberate, you never know what other backdoors he may have.It may not be as blatant as last time and may just be gaps in the logic that are very hard to find,which will allow him to exploit it. Like i found a couple of bugs that could be potentially exploited last time i went thought it itself Ye you're gonna have to really look at everything like 10 times but even then probably still better if you dont use it :s Link to comment Share on other sites More sharing options...
SmokE Posted February 2, 2018 Author Share Posted February 2, 2018 10 hours ago, wolfmountaingames said: Yeah lol, I wanted to check it out and read how he was doing it so I could go through other bot scripts to make sure they don't have similar issues. my bad for thinking you are alxe's alt sorry Link to comment Share on other sites More sharing options...
Dealer Posted February 3, 2018 Share Posted February 3, 2018 Guys,i downloaded the zip file a lot of days ago.I didn't unarchive(unzip)it, just opened "readme" and javascript files from original zip archive to read information. I didn't write any information in any file. After a few days I deleted it. QUESTION:Could this program do something bad as stealing my account, items or any data on the computer?In my opinion, it's inactive and works only when you've written all your information into it. Link to comment Share on other sites More sharing options...
manic Posted February 3, 2018 Share Posted February 3, 2018 Just now, Crazy*Spy said: Guys,i downloaded the zip file a lot of days ago.I didn't unarchive(unzip)it, just opened "readme" and javascript files from original zip archive to read information. I didn't write any information in any file. After a few days I deleted it. QUESTION:Could this program do something bad as stealing my account, items or any data on the computer?In my opinion, it's inactive and works only when you've written all your information into it. For it to work, you had to put in all of your information and run it. You should be fine. Link to comment Share on other sites More sharing options...
SmokE Posted February 3, 2018 Author Share Posted February 3, 2018 4 hours ago, Crazy*Spy said: Guys,i downloaded the zip file a lot of days ago.I didn't unarchive(unzip)it, just opened "readme" and javascript files from original zip archive to read information. I didn't write any information in any file. After a few days I deleted it. QUESTION:Could this program do something bad as stealing my account, items or any data on the computer?In my opinion, it's inactive and works only when you've written all your information into it. nope you are fully safe as Manic said ~ you had to run it, since you dint your all good and safe Link to comment Share on other sites More sharing options...
Dealer Posted February 4, 2018 Share Posted February 4, 2018 Thanks a lot for your answers. Link to comment Share on other sites More sharing options...
Enzotoy Posted February 5, 2018 Share Posted February 5, 2018 On 31/01/2018 at 5:32 PM, Noot Boot said: As others have said, We don't know. The bot is unsafe to use. You can try and look trough the code yourself if you're that interested the backdoor is here : https://pastebin.com/KGv1LrzE line 26 Link to comment Share on other sites More sharing options...
Zeus_Junior Posted February 5, 2018 Share Posted February 5, 2018 20 minutes ago, Enzotoy said: the backdoor is here : https://pastebin.com/KGv1LrzE line 26 There could be more. If anyone really wants to use it they’ll have to go over every letter in the entire thing. Link to comment Share on other sites More sharing options...
R3SP4WN Posted February 5, 2018 Share Posted February 5, 2018 For the love of god, just go and use Geel's bot if you are so desperate. Just stop using this shit, period. Link to comment Share on other sites More sharing options...
Enzotoy Posted February 5, 2018 Share Posted February 5, 2018 28 minutes ago, R3SP4WN said: For the love of god, just go and use Geel's bot if you are so desperate. Just stop using this shit, period. Geel bot ? Link to comment Share on other sites More sharing options...
Oishik Posted February 5, 2018 Share Posted February 5, 2018 I think he means Jessecar SteamBot Link to comment Share on other sites More sharing options...
Enzotoy Posted February 5, 2018 Share Posted February 5, 2018 1 hour ago, Oishik said: I think he means Jessecar SteamBot what is that ? Link to comment Share on other sites More sharing options...
SmokE Posted February 5, 2018 Author Share Posted February 5, 2018 7 hours ago, Enzotoy said: the backdoor is here : https://pastebin.com/KGv1LrzE line 26 https://hastebin.com/hifehofeve.js This was the actual backdoor part our info was being sent to that IP address you see in line 18945.56.74.164:8080 Edit: oops that line 26 is the decompressed version My link is also your line 26! Link to comment Share on other sites More sharing options...
SmokE Posted February 5, 2018 Author Share Posted February 5, 2018 57 minutes ago, Enzotoy said: what is that ? https://github.com/Jessecar96/SteamBot This is very old and outdated. Link to comment Share on other sites More sharing options...
Enzotoy Posted February 5, 2018 Share Posted February 5, 2018 3 minutes ago, « SɱokEy » said: https://hastebin.com/hifehofeve.js This was the actual backdoor part our info was being sent to that IP address you see in line 189 45.56.74.164:8080 yeah if remove this part the bot has an error when launch 2 minutes ago, « SɱokEy » said: https://github.com/Jessecar96/SteamBot This is very old and outdated. ohh kk Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.