Valhalla Legends Archive

Warden officially broken.
http://bnetweb.org/news-on-bnetweb/warden-now-on-war3/30/
http://bnetweb.org/moderation-bots/l2uthless-ops-v2-12/
http://forum.codelain.com/index.php?topic=4803.0

Quote from: MyndFyre[vL] on April 15, 2009, 04:34 PM

Quote from: RiffRiot on April 15, 2009, 04:07 PM

Quote from: Yegg on April 15, 2009, 03:31 PM
When you say lack of "administrative rights" what do you mean?

After discussing it with my friend from work, applications need administrator rights for certain programs to access other programs memory.

Warden runs in-process and doesn't access other programs' memory.  It is able to read other windows' titles, though, because Windows provides APIs to do so.

Effectively meaning spoofing as a Mac client won't do shit, as we are being stopped by battle.net hashchecking to make sure Warden is included, NOT by the memory scans looking for 3rd party apps. Gotta do it the hard(er) way.

Quote from: nindoja

Quote from: neckbeard

Quote from: nindoja
ALL,  warden does work on Mac OS X, just not in the same way as the windows version.  I've sent a windows and mac packet dump to Varlock, and both clients respond to the warden packet (starts with "ff 5e"), so it's not as simple as just sending mac hashes or authenticating as a mac client.

The good news is that it appears to be the same warden system as they use in starcraft, and quite a few people have broken the SC warden.  I'm watching the progress online in a few different places and will keep posting here as I get more information.

Sorry but can you prove this? To my knowledge this is incorrect. The response to the warden packet is most likely identifying itself as a Mac client, perhaps?

I know it's not just identifying itself as a Mac because the response it sends changes with every challenge.  It may not be the same warden system as in windows, but it does change it's response each time.  Later, if I get some time I'll post a few packets from my capture in "The Void"

From the thread on GHost++ forums.
<http://forum.codelain.com/index.php?topic=4756.0>, by the way.

Registered just to post a suggestion in this thread, don't know if it's completely useless.
The Mac version of the Warcraft III client (in fact, all mac versions of all blizzard games) does not contain Warden, as it doesn't work with the infastructure of OS X.
Would it be possible to have a bot spoof itself as a Mac client, tricking battle.net into not warden-checking?
We were discussing this over on the GHost++ forums, and someone linked here.