Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Runescape Private Server 

Magic Mirror - Reflection Runtime Utility

Magic Mirror is now available for a pre-pre-alpha. The tool is still brand new, but I figured I would share the progress I've made so far. Currently, all that is (semi) working is the scan-by-value feature. Lots will change, stay tuned for more information.

This tool is being developed by myself and Konloch.

https://github.com/cryptotoad/MagicMirror


Magic Mirror is a modern reflection client designed to replace the outdated clients plaguing the RSPS scene.

Magic Mirror was designed with 3 goals in mind.

- Magic Mirror is extensible with scripts (Not yet!)

- Magic Mirror supports code injection on jars and class folders

- Magic Mirror ɿoɿɿiM ɔiǫɒM -

.bnim ni ƨlɒoǫ Ƹ ʜƚiw bɘnǫiƨɘb ƨɒw ɿoɿɿiM ɔiǫɒM

.ɘnɘɔƨ Ƨ9ƧЯ ɘʜƚ ǫniuǫɒlq ƨƚnɘilɔ bɘƚɒbƚuo ɘʜƚ ɘɔɒlqɘɿ oƚ bɘnǫiƨɘb ƚnɘilɔ noiƚɔɘlʇɘɿ nɿɘbom ɒ ƨi ɿoɿɿiM ɔiǫɒM

Images below.
Spoiler (Click to View)
Cool shit OP and nice to see Konloch on board too
There's a lot of weird non-standard syntax in the source. The mirrored text on the repo is a cool gimmick though.
Lots of the GUI is generated with netbeans that may be what you're seeing.
If you're referring to my code, it's because I hate java.

Update: I've managed to get scan-by-val to actually write to the remote fields, and implemented a sort of bootleg cheat engine.
https://i.imgur.com/HCkXsf7.mp4
What exactly would this allow you to do on a rsps?
https://i.imgur.com/HCkXsf7.mp4

Well for starters, it makes interface forcing much easier than it would be with cheat engine.

That said, the MAIN purpose of scan-by-value is to assist with deobfuscation, allowing you to quickly find the fields you need to run your reflection code.

What this allows you to do varies wildly depending on the server, but it will allow you to find obscure flaws much quicker than a reflection client packed with pre-made commands.

Long term, it will be scripted to also support premade commands, however the commands will reference an obfuscation map so there's no need to rename variables when you use a new client, you simply make a new map.
Got to say when it comes to coding RSPS related tools, PlaySkool is the man.
Tool has been updated, refining scan now works. Still only for ints. Once I add in-array scanning I'll port the functions to the other types.
Updated on github, now includes rudamentary string support and fixed some bugs with null value handling.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by the1DomoOct 27, 2020 06:21 AM 2 120 Oct 27, 2020 06:21 AM
Last Post: ButtermilkJesus
by the1DomoSep 29, 2020 10:37 AM 1 133 Sep 29, 2020 10:37 AM
Last Post: Chevy
by severosMay 7, 2020 09:54 PM 2 97 May 7, 2020 09:54 PM
Last Post: de_g3ntl3m4n