PDA

View Full Version : Advantages and disadvantages of the different mods



anon
30.01.09, 18:29
This post is OUT OF DATE and is only left here for reference purposes.


Modded clients - Extreme Mod, Faze Mod, Shareaza SBI-Leecher, BitThief PS, uSerenity

Advantages

Undetectable when used correctly
Extremely flexible, lots of cheating settings [Extreme Mod, Faze Mod, SBI-Leecher, uSerenity]
No upload [Faze: Private version only]
Perfect client spoofs [The BitThief PS has a hardcoded BitTornado emulation]


Disadvantages

Higher resource usage [Azureus Hack]
Maybe not as easy to use if you're new
The BitThief PS Mod's only cheating setting is a download multiplier. The mod is designed exclusively for leeching.
Shareaza SBI-Leecher's fake upload isn't visible and applies globally



Hex-mods - uTorrent Expansion LP/Extreme LE, BitComet, others

Advantages

No extra resource usage
Easy to use (run the mod you want and add a torrent)


Disadvantages

Detectable by higher-level trackers
Not very extensible
Mods don't always work on all trackers (regardless of getting banned)
You can't see your fake ratio or change the cheating settings from the UI



Tools - RM(R), mRatio, PMR, GreedyTorrent/Ratio Faker, UNI-Leech

Advantages

You may not even need the files to start faking [RM, mR, PMR]
Feature-filled and easy to use
Low resource usage


Disadvantages

Some trackers can detect the RM Mr. RatioMaster has fixed the port issue and scraping, so if you use the memory reader, you shouldn't be detected. Also, cheatos's RMeX can almost fully automate the Waffles method, which few trackers ban.
mRatio's Deluge and Azureus scrape emulations are buggy mRatio 3.0.10 is out.
UNI-Leech pads your announces with NULs so it doesn't work on all trackers
You can't fake without the files with GT/RF, and must change the multiplier regularly. Not anymore, thanks to cheatos' GT Randomizer.
GreedyTorrent also doesn't work properly with uTorrent 1.8.2 GT appears to work with 1.8.3. You could also get Ratio Faker off our Tools (http://www.sb-innovation.de/f46/) section, and it randomizes multipliers - it also appears to have issues with newer uTorrent versions, however.
The PMR is overly detectable :biggrin:



Something you should know about tools


For the tracker there's no difference if you're using RM, mR or the Shu Mod, since the only thing the tracker gets is the announce.
Otherwies if it would be something else that makes tools detectable ...
Also, it's tested, and RM works at Waffles (I don't recommend it, don't use RM there), the problem must be something that has to do with the announce which is sent.
A litte difference to an original announce makes it detectable, so the program itself isn't detectable, it's not using a bug like PMR does, but the client emulation (spoof) is the weak point.
Or maybe it's something with the constant speed rate, ... .

In short:
Using a tool is (nearly) as safe as using a mod (just because you can't see the peerspeed) as long as the tool is as perfectly coded as the mod is.

@Everyone: if I forgot anything please tell me. :smile:

dHV4
31.01.09, 17:30
...
You forgot to tell us what are the disadvantages of GreedyTorrent, tell me of those please.

anon
31.01.09, 17:34
Don't quote the whole post.

With GT you can't fake upload without the files, and must change the multiplier regularly to stay safe. You can find more info here (http://www.sb-innovation.de/f59/using-greedytorrent-strategically-other-things-7961/).

anon
03.02.09, 23:51
Update
Added a hex-mod disadvantage, Azureus scraping to the list of buggy mRatio emulations, and a very important quote everyone should read.

Comment
Refrain from using scraping along the Azureus emulation in mRatio! Check the tracker's Web frontend regularly to know how many seeders and leechers a torrent has instead.

anon
05.02.09, 17:41
Update
Added information about the new mRatio emulation fix and GreedyTorrent possibly not working with uTorrent 1.8.2.

Comment
Get the EmuDb fix from the mRatio 2.0.10 thread!

anon
06.02.09, 22:18
Update
Acknowledged the existance of RatioFaker :biggrin:

Comment
If you are a GT user, give it a try!

anon
09.07.09, 00:36
Update
Lots of fixes.

Comment

I'd need to check if normal updates work. But I stopped a torrent after a minute of downloading, and the fake upload was reported.

If it really works, I'll update the "advantages and disadvantages of the different mods" thread. :biggrin:

---------- Post added at 19:35 ---------- Previous post was at 19:25 ----------

Confirmed, it works. :top:

Zorvak
28.08.09, 17:10
I think I know how tracker admin detect mod with multi upload (2x, 3x, 5x)



# Real.Up Mod.Up Result
1 1234 * 3 => 3702 Divisible by 3
2 5678 * 3 => 17034 Divisible by 3
3 9012 * 3 => 26703 Divisible by 3
4 3456 * 3 => 10368 Divisible by 3
5 7890 * 3 => 23670 Divisible by 3


Well, the table is self explanatory.
Original upload is 1234 byte, multiplied 3x to 3702. 3702 is sent to the tracker. After 30 minutes 17034 (5678*3) byte is sent in the second announcement and so on.
The script wait until the announce is sent 50 or 100 times.
If you see in the table above, 3702, 17034, 26703, 10368 and 23670 are divisible by 3.
It would be suspicious if after uTorrent send the upload announcement 100 times, all of the number is divisible by 3.

To the coders : could you make the mod multiply the upload with 3.12, for example instead of 3.0 ?
You can multiply the upload with 312 and divide it with 100.



# Real.Up Mod.Up Result
1 1234 * 3.12 => 3850.08 => 3850 Not Divisible by 3
2 5678 * 3.12 => 17715.36 => 17715 Divisible by 3
3 9012 * 3.12 => 28117.44 => 28117 Not divisible by 3
4 3456 * 3.12 => 10782.72 => 10782 Divisible by 3
5 7890 * 3.12 => 24616.8 => 24616 Not Divisible by 3

anon
28.08.09, 18:19
Which mods are you talking about? The only Multi mods available for uTorrent are 11x and 111x, the 2x, 5x and 8x ones are Fakeup.

The Extreme Mod's upload multiplier picks a random value between the ones you enter, making it pretty much undetectable. Faze's lets you use decimal multipliers.

Zorvak
28.08.09, 18:35
uTorrent mod 11x and 111x, I'm using 3x as the example.

anon
28.08.09, 18:37
By design, a Multi-3x uTorrent mod can't be coded. And there's a simpler way to detect 11x and 111x than looking at a common denominator in the uploaded amounts :redface:

Gapo
22.09.10, 14:57
You don't need to change the multiplier frequently in GT, now that we have a program for that. Looks at http://www.sb-innovation.de/showthread.php?threadid=20054

anon
22.09.10, 16:47
True.

The first post could really use a cleanup. I'll try to remember once I get home.

colousit
12.10.10, 09:08
Very informative thread for new users :)

Any chance we could get an update on the 1st post as to what is the current status ?

Regards,

Vation
12.10.10, 10:09
Very informative thread for new users :)

Any chance we could get an update on the 1st post as to what is the current status ?

Regards,

The list is up to date, it represents "current status".
uSerenity is new thing, therefore it means post was secretly edited lately(is up to date).

anon
12.10.10, 14:18
The list is up to date, it represents "current status".

True.


uSerenity is new thing, therefore it means post was secretly edited lately(is up to date).

Yes, I updated a few things without bumping this thread.

bjs
20.12.11, 20:38
Please excuse me if this is not the right place to ask the question.

Please could anon or anyone else advise how I can sniff
1. the torrent announce packets sent to the trackers
2. the trackers' response?

I have downloaded SmartSniff but could not figure out how to capture this. Many thanks!

anon
21.12.11, 01:29
Try reading SmartSniff's manual, then use include:remote:tcp:XXXX as a filter, where XXXX is the tracker's port number. Remember sniffing won't work on SSL trackers (well, it will, but you'll see encrypted garbage).