mathielo

Steam Bots: How to get shared and identity secrets

If you're looking into automating transactions in your Steam Account using Steam Bots, you most likely will need to:

1. Have TOTP ("MFA" or "2FA") enabled via Steam Authenticator (Steam Guard)
2. Have in hands both shared secret and identity secret

Having Steam Guard enabled for your Steam Account ensures that there will be no holds on transactions such as trades. Having the shared and identity secrets are necessary for complete autonomy of your Steam Bot, meaning it won't require any human interaction from you.

There is a tremendous lack of information about all of this as Steam does not provide official support for implementing Steam Bots. The information available in this guide was gathered through lots of blood and sweat hard research, reverse eng

Lusamine

Posts are generally in reverse chronological order (newest listed first).
Most listings are mine; others I've worked with or retweeted are noted.

Last updated June 19, 2025.

Scarlet/Violet

Important Links

• Actual Mark Rates
• Shiny Rates for Version 3.0.1

SerhatTeker

#!/usr/bin/env bash
# -*- coding: utf-8 -*-
# vim: set ft=sh et ts=4 sw=4 sts=4:
# =================================================================================================
#
# Copyright 2022 Serhat Teker <[email protected]>
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at

b01

#!/bin/sh

# Copyright 2023 Khalifah K. Shabazz
#
# Permission is hereby granted, free of charge, to any person obtaining a
# copy of this software and associated documentation files (the “Software”),
# to deal in the Software without restriction, including without limitation
# the rights to use, copy, modify, merge, publish, distribute, sublicense,
# and/or sell copies of the Software, and to permit persons to whom the
# Software is furnished to do so, subject to the following conditions:

Lusamine

Introduction

Pokémon Sword and Shield carried over wandering overworld Pokémon from the Let's Go games. Unlike LGPE, these overworld wanderers have identifiable origins, and thus it is possible to legality check them by verifying the correlation between certain values in their data similar to gen 3-4 PIDIV.

Overworld data is stored in the save file in the overworld block. This is why you can save in front of a strong spawn or Galarian bird, reset the game, and encounter exactly the same Pokémon.

Can Overworld RNG be abused or manipulated?

It was recently discovered in October 2021 that this is possible to do. Current methods can be done with or without CFW. Additionally, the presence of overworld data allows for the creation of CFW bots that simply scan overworld data for shiny or marked Pokémon without ever engaging in battle.

What Pokémon does Overworld RNG apply to?

The categorization can seem complex, so let me break it down:

NicolaiLolansen

A windows version inspired by this lovely gist: https://gist.github.com/AsgerPetersen/9ea79ae4139f4977c31dd6ede2297f90

Debugging QGIS 3.x python plugins on Windows 10 using VS Code

Plugin

In QGIS install the plugin debugvs.

Python dependencies

The debugvs plugin needs the python module ptvsd to function. This module is not installed by default.

MichaelSimons

Retrieving Docker Image Sizes

There are two metrics that are important to consider when discussing the size of Docker images.

1. Compressed size - This is often referred to as the wire size. This affects how fast/slow images can be pulled from a registry. This impacts the first run experience on machines where images are not cached.
2. Uncompressed size - This is often referred to as the size on disk. This affects how much local storage is required to support your Docker workloads.

The example commands shown below will work on Windows, MacOS, and Linux.

How to Measure the Compressed Size

gustavohenrique

Run via Docker

docker run -d \
    -e POSTGRES_PASSWORD=mysecretpassword \
    -e POSTGRES_USER=root \
    -e POSTGRES_DB=mydb \
    -e PGDATA=/var/lib/postgresql/data/pgdata \
    -v ${HOME}/pgdata:/var/lib/postgresql/data \
    --name postgres \

felipou

# https://stackoverflow.com/questions/39928401/recover-db-password-stored-in-my-dbeaver-connection

# requires pycryptodome lib (pip install pycryptodome)

import sys
import base64
import os
import json
from Crypto.Cipher import AES

dmmeteo

"""
Single Responsibility Principle
“…You had one job” — Loki to Skurge in Thor: Ragnarok
A class should have only one job. 
If a class has more than one responsibility, it becomes coupled. 
A change to one responsibility results to modification of the other responsibility.
"""

class Animal:
    def __init__(self, name: str):