MMORPG Bot Reverse Engineering and Tracking

LiveOverflow demonstrates how to reverse engineer a Guild Wars 2 trading bot and exploit its API to track it.

A friend told me that a GW2 trading bot implemented a dumb API. We are going to find and use it to track the bot. LEARN ON HEXTREE (ad) Learn hacking on Hextree: hextree.io/ Watch this video and more on Hextree: app.hextree.io/courses/yt-reverse-engineering-windows/dynami… Join the Hextree Discord: discord.gg/xgQpCQCpvy Play Guild Wars 2: account.arena.net/register Fiddler: telerik.com/fiddler .NET Reflector: red-gate.com/products/dotnet-development/reflector/ HxD: mh-nexus.de/en/hxd/ IDA Free: hex-rays.com/products/ida/support/download_freeware.shtml Windows VM: developer.microsoft.com/en-us/microsoft-edge/tools/vms/ CHAPTERS 00:00 - Investigating a Guild Wars 2 Trading Bot 01:05 - Building a Safe Windows Analysis Environment 02:47 - Intercepting the Bot's Server Requests With Fiddler 04:14 - Hunting for Hidden API Endpoints 04:49 - IDA Reveals Packing or Obfuscation 05:41 - Dumping the Running Process and Opening Its RAM 06:49 - Extracting UTF-16 Strings and Undocumented Endpoints 07:40 - Replaying an Authenticated get_online_users Request 08:08 - The API Exposes Every Online Bot's Guild Wars 2 Key 08:38 - Tracking Bot Accounts Until the Service Shuts Down SUPPORT Per video: patreon.com/join/liveoverflow Per month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join Buy my handwriting font (ad): shop.liveoverflow.com/ WATCH, FOLLOW & READ Second channel: youtube.com/LiveUnderflow Twitch: twitch.tv/LiveOverflow/ Twitter: twitter.com/LiveOverflow/ Instagram: instagram.com/LiveOverflow/ TikTok: tiktok.com/@liveoverflow_ LiveOverflow blog: liveoverflow.com/ Hextree blog (ad): hextree.io/blog #ReverseEngineering (ad) LiveOverflow YouTube channel is supported by advertisement and product placement.