Go Back   XZONE REACTOR Forums > Online Gaming > Counter-Strike > 175pt作弊器 豆客作弊器
Register FAQ Calendar Mark Forums Read

Reply
Old 03-30-2010, 06:36 PM   #1
Administrator
 
h4c0r-BG's Avatar
 
Join Date: Dec 2009
Posts: 648
Thanks: 64
Thanked 378 Times in 124 Posts
Rep Power: 18
h4c0r-BG has disabled reputation
h4c0r-BG is offline

Thumbs up Congratulations on 175PT 3.0.4.5 Update!


I want to congratulate on the 175pt developers, for their update.

They do memory checks on their module (like should have been from long time ago).
If you stop their checks hearthbeat, the auth dies (like it should have been, and i think DOKEE used something like that).
If you do memory modifications (corrupt memory CRC) - the auth dies (again).

The only thing is that you should've kept the error kicking after cheat detection instead of an auth failure. This way you wouldn't know from where the problem comes but ... good job on the update.

When i am bored i will look into it deeper. Kind regards, h4c0r-BG.
__________________
 
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Re: Congratulations on 175PT 3.0.4.5 Update!
Old 03-31-2010, 03:01 AM   #2
happygodsu
Guest
 
Posts: n/a
Default

Quote:
Originally Posted by h4c0r-BG View Post
I want to congratulate on the 175pt developers, for their update.

They do memory checks on their module (like should have been from long time ago).
If you stop their checks hearthbeat, the auth dies (like it should have been, and i think DOKEE used something like that).
If you do memory modifications (corrupt memory CRC) - the auth dies (again).

The only thing is that you should've kept the error kicking after cheat detection instead of an auth failure. This way you wouldn't know from where the problem comes but ... good job on the update.

When i am bored i will look into it deeper. Kind regards, h4c0r-BG.
Thank you for your answer! Of course! I was not trying to look silly again, you can too! But I still hope you can give a hint! Sincerely, your fans!
 
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Re: Congratulations on 175PT 3.0.4.5 Update!
Old 03-31-2010, 10:39 AM   #3
强生cs工作室
Guest
 
Posts: n/a
Default

Don't forget : just for fun
 
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Re: Congratulations on 175PT 3.0.4.5 Update!
Old 03-31-2010, 11:40 AM   #4
happygodsu
Guest
 
Posts: n/a
Default

Quote:
Originally Posted by 强生cs工作室 View Post
Don't forget : just for fun
that's great!
 
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Re: Congratulations on 175PT 3.0.4.5 Update!
Old 03-31-2010, 12:07 PM   #5
cancoder
Guest
 
Posts: n/a
Default

// DWORD Address = 0x1000B512;
DWORD Address = 0x1000C5F2;
BYTE PokeValue = 0xEB;
DWORD NumberOfBytes = 1;
DWORD Write=0;
DWORD HLProcessId=0;

HWND HLwnd=FindWindow(NULL, "Counter-Strike");
if(!HLwnd)
{
MessageBox(hwnd,"wnd", "no wnd", MB_ICONINFORMATION);
return 0;
}
DWORD ThreadId =GetWindowThreadProcessId(HLwnd, &HLProcessId);
HANDLE HandleWindow = OpenProcess(PROCESS_ALL_ACCESS, FALSE, HLProcessId);

WriteProcessMemory(HandleWindow, (LPVOID)Address, &PokeValue, NumberOfBytes, &Write);

MessageBox(hwnd,"ok", "good", MB_ICONINFORMATION);


my code bypass WH BLock , but i got Kick , please help me !!!
 
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Last edited by cancoder; 03-31-2010 at 12:20 PM.
Re: Congratulations on 175PT 3.0.4.5 Update!
Old 03-31-2010, 01:34 PM   #6
gl32
Guest
 
Posts: n/a
Default

Quote:
Originally Posted by cancoder View Post
// DWORD Address = 0x1000B512;
DWORD Address = 0x1000C5F2;
BYTE PokeValue = 0xEB;
DWORD NumberOfBytes = 1;
DWORD Write=0;
DWORD HLProcessId=0;

HWND HLwnd=FindWindow(NULL, "Counter-Strike");
if(!HLwnd)
{
MessageBox(hwnd,"wnd", "no wnd", MB_ICONINFORMATION);
return 0;
}
DWORD ThreadId =GetWindowThreadProcessId(HLwnd, &HLProcessId);
HANDLE HandleWindow = OpenProcess(PROCESS_ALL_ACCESS, FALSE, HLProcessId);

WriteProcessMemory(HandleWindow, (LPVOID)Address, &PokeValue, NumberOfBytes, &Write);

MessageBox(hwnd,"ok", "good", MB_ICONINFORMATION);


my code bypass WH BLock , but i got Kick , please help me !!!
You Need Bypass CRC Check。
You can try the following places to find 175 memory validation code:
Such as:
Read Breakpoint at 0x1000C5F2.
 
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Last edited by gl32; 03-31-2010 at 01:49 PM.
Re: Congratulations on 175PT 3.0.4.5 Update!
Old 03-31-2010, 01:59 PM   #7
Administrator
 
h4c0r-BG's Avatar
 
Join Date: Dec 2009
Posts: 648
Thanks: 64
Thanked 378 Times in 124 Posts
Rep Power: 18
h4c0r-BG has disabled reputation
h4c0r-BG is offline
Default

Quote:
Originally Posted by cancoder View Post
// DWORD Address = 0x1000B512;
DWORD Address = 0x1000C5F2;
BYTE PokeValue = 0xEB;
DWORD NumberOfBytes = 1;
DWORD Write=0;
DWORD HLProcessId=0;

HWND HLwnd=FindWindow(NULL, "Counter-Strike");
if(!HLwnd)
{
MessageBox(hwnd,"wnd", "no wnd", MB_ICONINFORMATION);
return 0;
}
DWORD ThreadId =GetWindowThreadProcessId(HLwnd, &HLProcessId);
HANDLE HandleWindow = OpenProcess(PROCESS_ALL_ACCESS, FALSE, HLProcessId);

WriteProcessMemory(HandleWindow, (LPVOID)Address, &PokeValue, NumberOfBytes, &Write);

MessageBox(hwnd,"ok", "good", MB_ICONINFORMATION);


my code bypass WH BLock , but i got Kick , please help me !!!
You can try digging in the 175Protect.dll threads and analyse the code, and try to fool the auth part that the threads are performing CRC checks.
__________________
 
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Re: Congratulations on 175PT 3.0.4.5 Update!
Old 03-31-2010, 06:33 PM   #8
cancoder
Guest
 
Posts: n/a
Default

Quote:
Originally Posted by gl32 View Post
You Need Bypass CRC Check。
You can try the following places to find 175 memory validation code:
Such as:
Read Breakpoint at 0x1000C5F2.
OLLYDBG got detected by 175protect.dll , hl can't run !!!
 
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Re: Congratulations on 175PT 3.0.4.5 Update!
Old 03-31-2010, 06:44 PM   #9
cancoder
Guest
 
Posts: n/a
Default

Quote:
Originally Posted by h4c0r-BG View Post
You can try digging in the 175Protect.dll threads and analyse the code, and try to fool the auth part that the threads are performing CRC checks.
can you give me address of CRC checks ? analyse the code is very hard !!
 
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Re: Congratulations on 175PT 3.0.4.5 Update!
Old 03-31-2010, 10:32 PM   #10
Administrator
 
h4c0r-BG's Avatar
 
Join Date: Dec 2009
Posts: 648
Thanks: 64
Thanked 378 Times in 124 Posts
Rep Power: 18
h4c0r-BG has disabled reputation
h4c0r-BG is offline
Default

Quote:
Originally Posted by cancoder View Post
can you give me address of CRC checks ? analyse the code is very hard !!
Nobody will spoon feed you in the mouth with ready code and addresses, you have to think on your own sometimes.

Also stop doing it for the game-play-with-cheats, do it for the skill and knowledge and forget the game.
__________________
 
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




Powered by vBulletin® Version 3.8.6
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.5.0 RC2