Azerothcore-wotlk: PQR,EWT Scripts block

[poszer]

PQR,Ewt, Scripts block

SMALL DESCRIPTION:

I don't need a lot to say. It's simple, we need it (It's totally sh1ty to play vs players who's using it).
Also i'm opening this issue, so we can track it. If someone is experienced and already give a try to try block this, share infos with us. Thanks

EXPECTED BLIZZLIKE BEHAVIOUR:

CURRENT BEHAVIOUR:

Players are able to run these things in the background.

STEPS TO REPRODUCE THE PROBLEM:

1. Get scripts, PQR profile and play
2. It's undetected by core
3. This software is destroying the game.

EXTRA NOTES:

BRANCH(ES):

master

AC HASH/COMMIT:

OPERATING SYSTEM:

MODULES:

OTHER CUSTOMIZATIONS:

---

Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.

[poszer]

Will be great to PIN this issue if posible @FrancescoBorzi

[vhiperdev]

Some time ago I was trying to make this block, but it is complex to understand how Warden works to make these scripting blocks that come from the client.

Reference Link: https://community.trinitycore.org/topic/14569-ant-pqr-script/

PQR and EWT

And also forbidden macros example:

#showtooltip Mind Freeze
/ run if GetSpellCooldown ("Mind Freeze") == 0 and IsSpellInRange ("Mind Freeze", "target") and (UnitCastingInfo ("target") or UnitChannelInfo ("target")) then CastSpellByName ("Mind Freeze") end

[FrancescoBorzi]

@poszer pinned

[BarbzYHOOL]

I have already compiled a lot of info in a private repo on gitlab for a big anticheat (PQR included) because I felt like discussing anticheat in public wasn't the best idea. Hit me up if one of you wants to start working on this.

[Viste]

its even can be added to security(new github future).

[poszer]

its even can be added to security(new github future).

Yeah, you re right

[lineagedr]

It's actually really simple, I've already done it on my Sunwell Core. All you need to do is a few modifications to your warden to be able to send LUA to players clients.

Example:

warden_checks table

In-Game:

And then you'll have to make your custom lua detection code or use one from: https://pastebin.com/BZJ2QNAM which is sniffed warden data from warmane

Like this:

_=(function() if ChatFrame1 == nil then return nil end c=ChatFrame1:GetNumMessages() for i=1,c do t=ChatFrame1:GetMessageInfo(i) if string.find(t,\"\\124cffff7d0a<\\124r\\124cffffd200PQR\\124r\\124cffff7d0a>\\124r\") ~= nil then return \"PQRFOUND\" end end end)()"

It scans the players chat for the PQR string and if it finds it returns PQRFOUND.

Ofcourse this is very basic detection and it will only find PQR a more advanced way is to check if the player has LUA Unlocked

 "if not WTainted then local f=CreateFrame'frame'f:SetScript('OnEvent',function(s,e)SendAddonMessage(\"00q\",\"RwX\",\"WHISPER\",\"s3l\")end)f:RegisterEvent'ADDON_ACTION_FORBIDDEN'WTainted=true end; RunMacroText('')StaticPopup_Hide(\"ADDON_ACTION_FORBIDDEN\")\r"

[Nemepy]

Someone made a solution for de pqr ?

[CosmeF]

Any news on this issue? I'm getting complaints on pvp's fairness, specially with PQR. So if any of you have like a temporal solution, please give us a hand. If you are worried about the temporal fix being spread out and reverse engineered, feel free to contact me privately. I'll be discrete for the good of the fix.

[frankygat123]

@lineagedr How do you configure your warden to send that? When I have attempted to change the function for GetText it fails the checks and I never have it send the lua. I know the address for DoString over GetText, but I'm not having luck making my warden send lua

[frytik]

https://github.com/TrinityCore/TrinityCore/commit/0531463a3c02d98ed77e9c7689ad7237ecaddc09

[Helias]

Finally we have some PQR checks! Test it! https://github.com/azerothcore/azerothcore-wotlk/pull/3875