|
You last visited: Today at 13:08
Advertisement
[Release] XignCode Undetected Dll Injection
Discussion on [Release] XignCode Undetected Dll Injection within the S4 League Hacks, Bots, Cheats & Exploits forum part of the S4 League category.
01/03/2017, 23:31
|
#1
|
elite*gold: 26
Join Date: Jan 2012
Posts: 3,474
Received Thanks: 18,847
|
[Release] XignCode Undetected Dll Injection
Alo,
Recently I got in the mood to mess around with XignCode since it looks like this section is struggling with it. For now I just want to release a method that makes a singular .dll injection completely undetected.
The technique is really cheap, simple, and it's awkward that it even works. It works by forwarding the exported x3.xem dispatcher. The xc3 dispatcher is basically a GetProcAddress interpretation for their (xc3) own purposes.
To get my code working you just need to rename the dll " x3.xem" in the xigncode folder to " x3.dummy". Then simply rename your .dll to " x3.xem".
You should also be able to do static, undetected, memory changes inside the client's memory because xigncode isn't loaded yet. Meaning it hasn't had the chance to generate memory page checksums.
Code:
#include <cstdint>
#include <string>
#include <windows.h>
#define X3_NOT_INITIALIZED -536805375
typedef int32_t(__stdcall *t_x3_Dispatch)(OUT void *Function, IN uint32_t Type);
static t_x3_Dispatch o_x3_Dispatch = nullptr;
void __stdcall DllMain()
{
// add here your code
}
__declspec(dllexport) int32_t __stdcall x3_1(void *FunctionAddress, uint32_t Type)
{
if (o_x3_Dispatch == nullptr)
{
std::string ModulePath;
ModulePath.resize(MAX_PATH);
if (!GetModuleFileNameA(NULL, const_cast<LPSTR>(ModulePath.data()), MAX_PATH))
{
MessageBoxA(0, "GetModuleFileNameA failed!", "Error", 0);
return X3_NOT_INITIALIZED;
}
std::string S4_Folder = ModulePath.substr(0, ModulePath.find_last_of("\\"));
S4_Folder += "\\xigncode\\x3.dummy";
HMODULE hX3 = LoadLibraryA(S4_Folder.c_str());
if (hX3 == nullptr)
{
MessageBoxA(0, "LoadLibraryA failed!", "Error", 0);
return X3_NOT_INITIALIZED;
}
o_x3_Dispatch = reinterpret_cast<t_x3_Dispatch>(GetProcAddress(hX3, reinterpret_cast<LPCSTR>(1)));
if (o_x3_Dispatch == nullptr)
{
MessageBoxA(0, "GetProcAddress failed!", "Error", 0);
return X3_NOT_INITIALIZED;
}
DllMain();
}
return o_x3_Dispatch(FunctionAddress, Type);
}
Regards,
K1ramoX
|
|
|
01/03/2017, 23:35
|
#2
|
elite*gold: 0
Join Date: Mar 2010
Posts: 2,931
Received Thanks: 1,858
|
itc pls
|
|
|
01/03/2017, 23:42
|
#3
|
elite*gold: 111
Join Date: Aug 2016
Posts: 418
Received Thanks: 758
|
please itc :c
|
|
|
01/04/2017, 01:07
|
#4
|
elite*gold: 0
Join Date: Sep 2014
Posts: 64
Received Thanks: 23
|
Uuu Nice Work Bro,Thanks
|
|
|
01/04/2017, 01:15
|
#5
|
elite*gold: 0
Join Date: Nov 2012
Posts: 4
Received Thanks: 0
|
Doesn't work in VC+++ 2015.
|
|
|
01/04/2017, 03:35
|
#6
|
elite*gold: 0
Join Date: Jan 2015
Posts: 50
Received Thanks: 13
|
itc.
|
|
|
01/04/2017, 04:45
|
#7
|
elite*gold: 40
Join Date: Mar 2013
Posts: 1,394
Received Thanks: 778
|
itc please
|
|
|
01/04/2017, 09:22
|
#8
|
elite*gold: 0
Join Date: Jan 2017
Posts: 138
Received Thanks: 261
|
nice to see u back here
|
|
|
01/04/2017, 11:35
|
#9
|
elite*gold: 0
Join Date: Oct 2010
Posts: 129
Received Thanks: 56
|
N° 1. This is usefully! <3
|
|
|
01/04/2017, 11:58
|
#10
|
elite*gold: 0
Join Date: Aug 2013
Posts: 50
Received Thanks: 4
|
can you make video please?
ty
|
|
|
01/04/2017, 12:54
|
#11
|
elite*gold: 0
Join Date: Sep 2010
Posts: 171
Received Thanks: 17
|
when i open to itc its tell me waiting waiting i press on s4 launcher and click my username and password
but when i login its not open for my anything its stay all time waiting waiting
|
|
|
01/04/2017, 13:27
|
#12
|
elite*gold: 0
Join Date: Dec 2014
Posts: 51
Received Thanks: 13
|
itc :O
|
|
|
01/04/2017, 15:37
|
#13
|
elite*gold: 39
Join Date: Jun 2016
Posts: 269
Received Thanks: 804
|
so many faggots here thinking they're funny asking for itc ****.
@ : good job, although you could've mention you'd load x3.xem back into the memory. didn't look at the code first
|
|
|
01/04/2017, 17:31
|
#14
|
elite*gold: 40
Join Date: Sep 2016
Posts: 156
Received Thanks: 124
|
FREE ITCCCCCCC FREE ITEM CREATOOOR PLLEEAAASE
|
|
|
01/04/2017, 19:54
|
#15
|
elite*gold: 0
Join Date: Apr 2015
Posts: 103
Received Thanks: 148
|
PLS
|
|
|
|
|
Similar Threads
|
[Release] XIGNCODE Bypass
04/27/2016 - Dekaron Exploits, Hacks, Bots, Tools & Macros - 126 Replies
This is not the one Im Selling. But this works not bad at all.
http://i.epvpimg.com/dLGxb.png
Instructions:
1. Start your Game
2. Load the map
3. Let your character Spawn
4. Open Bypass (Vista/7 as Admin)
|
[release] How to Remove Xigncode
03/11/2015 - Dekaron Exploits, Hacks, Bots, Tools & Macros - 15 Replies
http://www.youtube.com/watch?v=2qVNQD6cxtY&lis t=UUjzWcB3i6DRrwGS7h1Vx8qw&index=1
1:
1if you suspend this you suspend xigncode
im sure i suspend codemon too but since i allready removed it from my client not really sure :d
2: if you terminate those i suspended you remove xigncode maybe codemon too
______________________________________
|
[Release] Xigncode Bypass
07/21/2014 - Alliance of Valiant Arms - 20 Replies
Yo,
today I'd like to present you my new xigncode Bypass.
______________________________________________
Tutorial]
-Download and unpack the zip-archive
-Start XignBp.exe as administrator
|
All times are GMT +1. The time now is 13:08.
|
|