Poker-AI.org

I’m developing a holdem bot in c#. The bot should be able to play the difficult sites, so stealth is an important issue.

The poker client program is running in one Win7 VirtualBox VM, the bot in another. I now need to figure out how the bot should get state from the client and give input to the client.

I could use Bring, but that would probably not be difficult for the client to discover, resulting in a mail from the site and then a closed account. RDP or VNC are other alternatives, but I guess they could be detected as well.

How can I get state from the poker client and give input to it in a safe way?

Hide bring with a rootkit? Or, scrape from outside the VM?

Yes, that might be a solution. But I don't know how safe (difficult to detect) a rootkit is. Can someone give me some more info on rootkits, have you used one yourself and what is your experience?


I don't know what you mean by that. How would that work?

Hi,

I think there are 3 approaches to this :

1) Run a process on the client. There are various ways to make this more difficult to detect.

2) Use a VM as the client. There are various ways to interact with a VM which are difficult to detect.

3) Use a regular PC as the client - connected to special hardware which looks to the client like a regular mouse/keyboard/monitor.

Of these - 1) is easy - but maybe not sufficient, 2) is challenging and leaves the weak flag of running a VM, 3) is very hard - and maybe over the top.

- PeppaPig

I guess you mean a rootkit, which is the only way I know of to hide a process. Are there other ways?
I have made some research on rootkits, but it's difficult to find any solid information. Where do I find a rootkit with a good tutorial that I can be sure doesn't contain any hidden back doors?


The infrastructure I have built runs the poker client in it's own VirtualBox VM, so any high stealth way of communicating with a program running in the VM is very interesting.

You say there are 'various ways to interact with a VM', could you please elaborate al little? Besides Telnet, SSH, RDP and VNC, which all use some kind of server running on the VM and which I guess all can be detected if the poker client wants to, there is the option of VRDP for a VirtualBox VM. I assume also VRDP uses a server running on the VM, so I don't know if that is any more difficult to detect than ordinary RDP.

I really need to find a high stealth way of communicating with the VM running the poker client. Any input will be appreciated!

I just stumbled over ReactOS, an open source Window clone. I just installed it into a VirtualBox VM.
I'll try to run some poker clients in the next few days to see how well those run.

If they run well, I'll try to access them via VRDP.
As I understood it, VRDP is part of VirtualBox, not the hosted OS.
Well, actually both options seem to be available...

Could be the perfect combo for the future, at least for me...