There’s a massive security flaw

removed for the safety reasons.

what are you aiming at, the whole rotmg framework or simply about clients/proxies ?

just stay as superficial as possible.

There are quite a few of those.. I sent emails about 2 huge and 3 smaller security hole to Kabam about a year ago, none of them got fixed even though some of them are against their Privacy Policy (whatever I sent to the old WildShadow, it was fixed right away everytime).
I guess I know which one you just found but even if it wouldn't be there, you could post the login infomation to a webserver to log it.. That's one of the reasons I make my clients myself (if I want to use one, but usually that's not the case)

I dont know that flaw you are talking but i know doing this is VERY easy . Few lines of codes + a webpage hosted somewhere and gotcha. I had a working POC i never released or used , of course.

Thats also why i create my client myself, like you.

Anyway, if you trust me enough, i would be happy to have more details in PM.

---------- Post added at 11:57 AM ---------- Previous post was at 11:09 AM ----------

Thanks for clarifications, Datcoder. I was convinced it would be useless to look for this flaw, you proved me wrong.

Ladies and gentlemen, i dont know for Botmaker's one, but the flaw pointed by Datcoder isn't really a problem, unless you play ROTMG on a public computer / a hacker takes control of your computer / you launched a stealing program on your computer.

You just have to LOGOUT from ROTMG each time you stop playing (closing browser/projector IS NOT ENOUGH) to be safe.
Wait, this is something everyone should do when using Internet on a public computer : always properly LOGOUT from websites