EducationPerfected icon indicating copy to clipboard operation
EducationPerfected copied to clipboard

Suspicious activity detected (again)

Open tomb56 opened this issue 3 years ago • 30 comments

i've been using v2 for a while and it has been working well but i tryed to run it a couple of minutes ago and it says Suspicious activity detected. I think there's been a update to EP because when i ran the normal version it sayed update in the bottom left corner.

tomb56 avatar May 17 '22 04:05 tomb56

i don't even have to run the script and it does it it just does it after about 2 seconds SharedScreenshot

tomb56 avatar May 17 '22 04:05 tomb56

bruh... that was quick

stg if they implemented like a browser check... I'll look at it later

akioweh avatar May 17 '22 05:05 akioweh

i just had japanese and was using it for some work that i got set, i did it legit anyway so dont need. Just letting you know

tomb56 avatar May 17 '22 05:05 tomb56

i literally dk why it just happens when I click the start button of a task, even though absolutely no functions are triggered D:

akioweh avatar May 17 '22 05:05 akioweh

Yeah it weird idk how it could detect it if it doesn't do anything

tomb56 avatar May 17 '22 05:05 tomb56

EP is tracking repo so can act on new changes? Maybe can fix by adding random timing to answering

Susmaster64 avatar May 17 '22 07:05 Susmaster64

when do you recon you'll have it fixed by

tomb56 avatar May 19 '22 23:05 tomb56

i have a python script that might work with semi auto mode but its slower but it does what fully automatic does, but it requires some libraries to be installed. I can link the repo. It has random inputting delay (you can change easily by looking at code) and typing time but i think if you download the exe version you do not need to install libraries. https://github.com/Susmaster64/Python-write-clipboard

Susmaster64 avatar May 20 '22 05:05 Susmaster64

maybe it can detect because ep can detect that there is puppeteer?

Susmaster64 avatar May 20 '22 05:05 Susmaster64

It comes up with that if you get too many right in a row, and too quickly {I think} You'll need to do like 2 wrong for every one right.

Razzy52 avatar May 22 '22 09:05 Razzy52

has anyone tried using other webdrivers like selenium. or have they just blocked all developer browsers

s1dny avatar May 23 '22 05:05 s1dny

i think it is a ratelimit thing where similar to what razzy said, if you get like 10 correct in a second the anticheat will trigger after a while

akioweh avatar May 23 '22 06:05 akioweh

this is problematic as it breaks one of the essential features of the script with (almost) no way to fix it; the high-speed answering

it's hard to fix because it is a server-side rate limit afaik... only chance of bypassing is messing with packets/networking but I doubt that it would work (and if there is a viable exploit, can always be fixed by them)

akioweh avatar May 23 '22 06:05 akioweh

i think it is a ratelimit thing where similar to what razzy said, if you get like 10 correct in a second the anticheat will trigger after a while

yea just tried it again and seems to be working. they definitely must have some sort of rate limiting. you could always just run it slower but over like a whole day. but as you were saying before this is problematic as it breaks the essential feature of the high speed answering

s1dny avatar May 23 '22 07:05 s1dny

it is pretty confusing:

  • i have just used it at full speed for quite a while with no problems
  • last time, I get the anticheat popup when clicking start on a task on the puppeteer window; I could log in from my personal browser and do tasks with no problems (altho in both cases EducationPerfected was not actively running)

akioweh avatar May 23 '22 08:05 akioweh

i just ran it for 30 minutes with no problem with the script running. though couple of days ago when i ran puppeteer with or without the script i had that same pop up you were talking about.

s1dny avatar May 23 '22 10:05 s1dny

yup, similar experience still not sure what exactly triggers the anticheat

akioweh avatar May 23 '22 10:05 akioweh

Umm i think it is the submit button cause i used an ahk file to press enter instead and it works completely fine. Or it might detect any function triggers through injected scripts like button press or anything.

suryasingh1 avatar Jun 09 '22 07:06 suryasingh1

yea i had that exact same experience. as soon as the script entered the submit button i was kicked from the task for suspicious behaviour.

s1dny avatar Jun 09 '22 08:06 s1dny

Do you guys want me to send my ahk files. What i have done is copied another guys script to make it type like a human. But it goes like this what between 2 to 3 seconds. Type like human press enter. The commands are Carl+t to start Carl+r to stop

suryasingh1 avatar Jun 09 '22 08:06 suryasingh1

one thing is that like even if I don't activate the script it has triggered the anticheat but nothing has consistent reproduction results D:

akioweh avatar Jun 09 '22 17:06 akioweh

Isn’t that only for the new version?

suryasingh1 avatar Jun 10 '22 01:06 suryasingh1

oh were you talking about the old userscript? well then yeah they detect it when you call .click() on the submit button

akioweh avatar Jun 12 '22 10:06 akioweh

Do you guys want me to send my ahk files. What i have done is copied another guys script to make it type like a human. But it goes like this what between 2 to 3 seconds. Type like human press enter. The commands are Carl+t to start Carl+r to stop

can you send the ahk files I want to run some tests with it.

chinakillertianamen avatar Aug 17 '22 05:08 chinakillertianamen

dont mind my username

chinakillertianamen avatar Aug 17 '22 05:08 chinakillertianamen

@suryasingh1 :) (in case they don't have notifications for this thread)

akioweh avatar Aug 17 '22 19:08 akioweh

sorry for very late reply here.

Github doesn't support the file type so i will send in text. Here is the first script:

#NoEnv ; Recommended for performance and compatibility with future AutoHotkey releases. ; #Warn ; Enable warnings to assist with detecting common errors. SendMode Input ; Recommended for new scripts due to its superior speed and reliability. SetWorkingDir %A_ScriptDir% ; Ensures a consistent starting directory.

DetectHiddenWindows, On SetTitleMatchMode, 2

WinGetClass, WinClass, Google Chrome

loop { SetTimer, GetFocus, 200 ; Makes the browser gain focus every 200 ms } return

GetFocus: ControlFocus,, Google Chrome Return

setkeydelay 300 looping := true ^t:: looping := true While(looping = true) { Random, rand, 1100, 1200 Sleep %rand% RunWait, HumanTyping.ahk Sleep 150 Send, {Enter} } return ^r:: looping := false return

suryasingh1 avatar Aug 23 '22 07:08 suryasingh1

here is the second one (HumanTyping.ahk):

#NoEnv ; Recommended for performance and compatibility with future AutoHotkey releases. ; #Warn ; Enable warnings to assist with detecting common errors. SendMode Input ; Recommended for new scripts due to its superior speed and reliability. SetWorkingDir %A_ScriptDir% ; Ensures a consistent starting directory.

AutoTrim,On string = %clipboard% Gosub,ONLYTYPINGCHARS StringSplit, charArray, string Loop %charArray0% { this_char := charArray%a_index% Send %this_char% Random, typeSlow, 1, 3 typeMin = 150 typeMax = 200 if (typeSlow >= 3){ typeMin = 200 typeMax = 250 } Random, t, typeMin, typeMax Sleep, %t% } Return

ONLYTYPINGCHARS: AutoTrim,Off StringCaseSense,On StringReplace,string,string,–,-,All ;emdash StringReplace,string,string,´,',All StringReplace,string,string,’,',All StringReplace,string,string,©,(C),All StringReplace,string,string,“,",All ;left quote StringReplace,string,string,”,",All ;right quote StringReplace,string,string,®,(R),All StringReplace,string,string,¼,1/4,All StringReplace,string,string,½,1/2,All StringReplace,string,string,¾,3/4,All StringReplace,string,string,™,TM,All StringReplace,string,string,«,<<,All StringReplace,string,string,»,>>,All StringReplace,string,string,„,',All StringReplace,string,string,•,-,All ;bullet StringReplace,string,string,…,...,All StringReplace,string,string,rn,`n,All ;replace newlines StringReplace,string,string,chr(0),A_Space,All ;NULL StringReplace,string,string,chr(9),A_Space,All ;Horizontal Tab StringReplace,string,string,chr(10),A_Space,All ;Line Feed StringReplace,string,string,chr(11),A_Space,All ;Vertical Tab StringReplace,string,string,chr(14),A_Space,All ;Column Break StringReplace,string,string,chr(160),A_Space,All ;Non-breaking space Return

suryasingh1 avatar Aug 23 '22 07:08 suryasingh1

here is the second one (HumanTyping.ahk):

#NoEnv ; Recommended for performance and compatibility with future AutoHotkey releases. ; #Warn ; Enable warnings to assist with detecting common errors. SendMode Input ; Recommended for new scripts due to its superior speed and reliability. SetWorkingDir %A_ScriptDir% ; Ensures a consistent starting directory.

AutoTrim,On string = %clipboard% Gosub,ONLYTYPINGCHARS StringSplit, charArray, string Loop %charArray0% { this_char := charArray%a_index% Send %this_char% Random, typeSlow, 1, 3 typeMin = 150 typeMax = 200 if (typeSlow >= 3){ typeMin = 200 typeMax = 250 } Random, t, typeMin, typeMax Sleep, %t% } Return

ONLYTYPINGCHARS: AutoTrim,Off StringCaseSense,On StringReplace,string,string,–,-,All ;emdash StringReplace,string,string,´,',All StringReplace,string,string,’,',All StringReplace,string,string,©,(C),All StringReplace,string,string,“,",All ;left quote StringReplace,string,string,”,",All ;right quote StringReplace,string,string,®,(R),All StringReplace,string,string,¼,1/4,All StringReplace,string,string,½,1/2,All StringReplace,string,string,¾,3/4,All StringReplace,string,string,™,TM,All StringReplace,string,string,«,<<,All StringReplace,string,string,»,>>,All StringReplace,string,string,„,',All StringReplace,string,string,•,-,All ;bullet StringReplace,string,string,…,...,All StringReplace,string,string,rn,`n,All ;replace newlines StringReplace,string,string,chr(0),A_Space,All ;NULL StringReplace,string,string,chr(9),A_Space,All ;Horizontal Tab StringReplace,string,string,chr(10),A_Space,All ;Line Feed StringReplace,string,string,chr(11),A_Space,All ;Vertical Tab StringReplace,string,string,chr(14),A_Space,All ;Column Break StringReplace,string,string,chr(160),A_Space,All ;Non-breaking space Return

is this an alternative?

qmanstal avatar Jul 22 '24 03:07 qmanstal

I just reccomend using the old version to copy the text to clipboard and use my little clipboard to typing python script, it's here somewhere on one of the issues, and I think the repo is under my account somewhere. It has random delay between key presses and a fake thinking time.

Susmaster64 avatar Jul 23 '24 06:07 Susmaster64