Is API calls a working concept for botting?

[MitsuSan]

Such a concept can only be successful as long as it is tolerated by the provider.

It is so easy to detect behaviours that do not occur with the original app. Here some examples:

• Transfer requests for pokemon that already have been transferred.
• How often does the inventory get queried? I assume the original does only once at startup.
• What about the player position, when is it updated? After a certain distance from last report, or elapsed time? Combination of both? Is it natural to send exact pokestop or pokemon positions?

There is a lot more we even do not think of and providers will never tell us how they flag bots.

Botting is only safe with an external app that accesses the original apps process memory. Read values and structures, raise keyboard- or touchscreen-events, it is even possible to do function calls. Detach the device gps and feed in values like a gps walking around. That is the way how serious mmo bots work.

Just my 2 cents.

[alexthepink95]

inventory gets queried quite a bit not sure about the rest use the pokemon-go-mitm to check and let us kno if u dont mind

[MitsuSan]

Good to know about that mitm, did not stumble over it yet. For myself, I will not create any new accounts, the two I had got permabanned. I consider this approach as a fight you can never win. Just thought about a possible other difference, the app retrieves the pokestop images, does the bot?