bahadiraraz/fishington.io-bot

Fishington.io bot with OpenCV and NumPy

Fishington.io Bot - Latest version

• fishington.io bot using OpenCV and NumPy.
• bot can continue to fish and sell fully automatically.
• on average more than 80 fish / hour.

Video Link

• https://www.youtube.com/watch?v=X2bRXcCvmKY

How to Use

• Open CMD in fishington.io-bot folder and type pip install -r requirements.txt
• run the bot and switch to the window running fishington (you have 5 seconds until it starts fishing)
• stop the bot by pressing q on the main window or by forcing the script to stop

Hints

• works on most screen sizes
• only works if you stand right underneath the shop so the character can reach the shop by just walking up straight
• works best in FULLSCREEN
• works best if you stand right at the end of the bridge so there's only water underneath your character

fishington.io-bot's Issues

Deleted dependency detected

I'm a Cyber Security researcher and developer of PackjGuard [1] to address open-source software supply chain attacks.

Issue

During my research, I found that this repo is vulnerable to attack due to deleted dependency from the public PyPI registry.

Details

Specifically, file https://github.com/bahadiraraz/fishington.io-bot/blob/71d85a818afa9261619c8376b3cb3d74741cce25/requirements.txt lists sinchsms as one of the dependencies. However, it has been deleted from public PyPI. As such, an external bad actor can claim that name and register a malicious package, which will be then installed with pip install command, resulting in arbitrary remote code execution.

Impact

Not only your apps/services using https://github.com/bahadiraraz/fishington.io-bot repo code are vulnerable to this attack, but the users of your open-source Github repo could also fall victim.

You could read more about such attacks here: https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610

Remediation

Please manually register a placeholder sinchsms package on PyPI immediately or remove sinchsms dependency from https://github.com/bahadiraraz/fishington.io-bot/blob/71d85a818afa9261619c8376b3cb3d74741cce25/requirements.txt to fix this vulnerability.

To automatically fix such issues in future, please install PackjGuard Github app [1].

Thanks!

1. PackjGuard is a Github app that monitors your repos 24x7, detects vulnerable/malicious/risky open-source dependencies, and creates pull requests for auto remediation: https://github.com/marketplace/packjguard

ImportError: Bindings generation error. Submodule name should always start with a parent module name. Parent name: cv2.cv2. Submodule name: cv2

D:\fishington.io-bot-main\main>py main.py
Traceback (most recent call last):
File "D:\fishington.io-bot-main\main\main.py", line 3, in
from cv2 import cv2
ImportError: Bindings generation error. Submodule name should always start with a parent module name. Parent name: cv2.cv2. Submodule name: cv2