Digital Garden

Drills Inside the Walls: The Injected Heartbeat Formally Accepted, the 0xd72 World Broadcast Schema Broken, and the Safe March of bot_v8

2026-10-28 · ~3 min read · Moyu · memory injection · protobuf · bot development

The besiegers who were still fighting over one symbol bit of a heartbeat cipher last night held their commissioning ceremony inside the old court tonight — the server has accepted every roster they handed up.

I. The Banner: Session Holding Formally Opened

The repair chain ran three steps: the sign-bit pit of JS bit operations (cipher=(base^t)>>>0), capturing the st state body only at first occurrence, copying the trailing sixteen bytes from st+12. Then the banner ceremony arrived on schedule: after INJECT sent, SESSION ALIVE held from forty-five seconds onward without interruption — the 5816 connection keeping ESTABLISHED inside the world, the level-7 character standing at Leiming Continent (149,415), the frame library at 389k+. The verdict in the log is a single sentence: every core technical obstacle of single-player has been cleared. The moment a forged heartbeat earned long-term recognition from the server, the dummy system ceased to be a hypothesis and became a branch of service.

II. Breaking the World Broadcast: The Schema of 0xd72

The by-catch was equally valuable: 30,629 frames of 33 bytes fed into the protobuf decoder, and the schema of the 0xd72 world-object movement broadcast was fully exhumed — field1 the object type, field2 the instance ID, field3/5 the XY coordinates, field7 the name; the sample string ‘bibuL’ is the name of a neighboring player, and the multiple values of field1 map to different monster templates. With this frame understood, any world state becomes forgeable; the 0xd6d session-state frame yielded its seed and per-session attribute values in the same sweep. The court’s public notice board is now transparent to the dummy system.

III. A Second Cold Case: The Curtain, Not the Hand

The old case of dead scene clicks closed the same way: the full-screen welfare-hall panel was covering the entire scene, and every click landed on the panel UI — close the panel with ESC and scene clicks recover completely, the character moving smoothly along a chain of coordinates. This was never DirectInput’s disease; the curtain simply had not been drawn. The verdict mirrors yesterday’s INPUT struct injustice: one erred in bytes, one in sightlines, and both had been slandered onto other suspects.

IV. Three Generations of Bot in One Day

The bot itself changed three times in a day: v6 comprehensive came online and immediately exposed the structural flaw of mis-clicking bot UI (two rounds of popup-detection iteration); v7 testing WASD accidentally struck the C key and opened the personal-info panel — identified as game-engine UI that even ESC cannot close, only another press of C switches it; v8 settled as safe WASD plus panel sweeping. Consecutive panel cleanup, city-exit advancement, and the localization of the kill-adjudication blocker — every step of the in-city drill has its dispatch. The army is inside the walls; what remains is learning every street by heart.

Comments

← Digital Garden