[Proof of Concept]Why not to trust a public multi-client (bananasplit in asm)

09/28/2008 22:40 Ian*#31
Generally a firewall wouldn't stop a program from modifying something, like, M's loader, it modifies your client everytime to run it, and your firewall probably doesn't say anything. You could do the same thing and things that shouldn't be there, actually inside your loader if you made one.
09/29/2008 06:04 IAmHawtness#32
Quote:
Originally Posted by Force.Of.Spite View Post
Generally a firewall wouldn't stop a program from modifying something, like, M's loader, it modifies your client everytime to run it, and your firewall probably doesn't say anything. You could do the same thing and things that shouldn't be there, actually inside your loader if you made one.
Most newer firewalls monitor so much more than just internet connections. COMODO and F-Secure (probably a lot more) also check if programs try to access other programs' memory :p
09/29/2008 19:33 joek#33
You need something like ProcessGuard to detect code injection into active processes.
Problem is even simple tools like zoom changers need to do a little code injection.

Also you would need something that can checksum and monitor the game executable.
10/06/2008 14:53 pioloboy#34
i want to download a multi-client
10/07/2008 14:32 MushyPeas#35
Quote:
Originally Posted by pioloboy View Post
i want to download a multi-client
Permission granted