[TUTORIAL] Creating a simple DLL Cheat/Hack

03/09/2011 16:50 BorSti#91
its fixed for int kal online so dont worry if u gonna fail
03/09/2011 18:22 Thiesius#92
It's not fixed, it just needs a little creativity :P
Depending on how much time I will have I might put together a fix (I think it should be a quickie)
03/09/2011 21:10 DerKleineDarky#93
meak hat schon recht, es is echt angenehm mit so wenig anderen bottern aufm int, ich bin dafür das das so bleibt :D
03/10/2011 00:32 BorSti#94
Quote:
Originally Posted by Thiesius View Post
It's not fixed, it just needs a little creativity :P
Depending on how much time I will have I might put together a fix (I think it should be a quickie)
Shit you got me :-) "this tutorial is Fixed"

It is a quickie if you use google without maybe a min
03/10/2011 20:34 KameLeon94#95
Thanks, i think this will greatly help me for a start. Big THX
07/27/2011 14:15 Spanyy#96
[Only registered and activated users can see links. Click Here To Register...]

I've got this files im my project. How i can compile it into dll?
07/27/2011 14:57 RunzelEier#97
use your IDE?
07/30/2011 03:19 kujoliki#98
Hello there!

This is a very nice tutorial indeed. With this tutorial and the Packethack sticky thread and some other threads (packet descriptions, server files etc.) you can do whatever you want! The only limit is your imagination!

I managed to do sooo much things...like walking private shop in a square or any other routine, "animated" shop text, "realtime" (you dont have to relog) imperial and bead of fire, pvp event with time limit etc.

And i'm not a computer scientist nor a hobby programmer. LOL i'm an engineer for horticulture, far away from programming, only hard math. (Though math is similar to programming)

Now to all wannabe haxx0rz out there:

You won't succeed because you're a gamer! Gamers doesn't have patience to analyse all the stuff, sources, informations, though it's easy. BUT you have to THINK!!

Here is the point where every "gamer" fails! You want to have quick success!
I mean such epic posts like:

Quote:
Originally Posted by Agzar View Post
is it possible to make auto pick up?
Quote:
Originally Posted by yazhimo View Post
Yup already did it but now i get something like this.
PHP Code:
1>------ Build startedProjectd3dx9_29ConfigurationDebug Win32 ------
1>Build started 21.01.2011 15:42:09.
1
>InitializeBuildStatus:
1>  Touching "Debug\d3dx9_29.unsuccessfulbuild".
1>ManifestResourceCompile:
1>  All outputs are up-to-date.
1>Exports_Def.def error LNK2001unresolved external symbol __E__0__
1
>Exports_Def.def error LNK2001unresolved external symbol __E__1__
1
>Exports_Def.def error LNK2001unresolved external symbol __E__2__
1
>Exports_Def.def error LNK2001unresolved external symbol __E__3__
....
1>Exports_Def.def error LNK2001unresolved external symbol __E__330__
1
>Exports_Def.def error LNK2001unresolved external symbol __E__331__
1
>c:\users\magnus\documents\visual studio 2010\Projects\d3dx9_29\Debug\d3dx9_29.lib fatal error LNK1120332 unresolved externals
1
>
1>Build FAILED.
1>
1>Time Elapsed 00:00:01.43
========== Build0 succeeded1 failed0 up-to-date0 skipped ========== 
EDIT
No 1 knows ?? its been up here few days now :D
EDIT
Maybe today ? :D hehe.
I tryed yesterday too and i got same error with dbghelp.dll proxy scale. and the one that was uploaded here. Still same error. :/
Quote:
Originally Posted by Spanyy View Post
[Only registered and activated users can see links. Click Here To Register...]

I've got this files im my project. How i can compile it into dll?
If you stuck at this point.....i have no words, stop try to hacking.

Anyways if you manage to write some good working uberhack, you'll lose the fun not only in kal, but in every game cause now you have a different point of view to games.


Some basic c++ would be nice and some math for your logic. :rtfm: No professionality required! Just get a clue how it works.
07/30/2011 04:10 DerKleineDarky#99
Quote:
Originally Posted by kujoliki View Post
Hello there!

This is a very nice tutorial indeed. With this tutorial and the Packethack sticky thread and some other threads (packet descriptions, server files etc.) you can do whatever you want! The only limit is your imagination!

I managed to do sooo much things...like walking private shop in a square or any other routine, "animated" shop text, "realtime" (you dont have to relog) imperial and bead of fire, pvp event with time limit etc.

And i'm not a computer scientist nor a hobby programmer. LOL i'm an engineer for horticulture, far away from programming, only hard math. (Though math is similar to programming)

Now to all wannabe haxx0rz out there:

You won't succeed because you're a gamer! Gamers doesn't have patience to analyse all the stuff, sources, informations, though it's easy. BUT you have to THINK!!

Here is the point where every "gamer" fails! You want to have quick success!
I mean such epic posts like:







If you stuck at this point.....i have no words, stop try to hacking.

Anyways if you manage to write some good working uberhack, you'll lose the fun not only in kal, but in every game cause now you have a different point of view to games.


Some basic c++ would be nice and some math for your logic. :rtfm: No professionality required! Just get a clue how it works.
where is your uberhack?
write it and use it :P

i dont like it when people tells that everything is possible but dont do anything. i want to see your hack, i want to see what you did.
10/03/2011 13:42 mohm195#100
ehm, thanks for this nice tut.
but if I'm going to do a auto login, just for id/pw and then try to crack 2nd password, what shall i do ?:d
forget my own 2nd pw and trying to get it back lol xD.
11/05/2011 02:09 hawkagent#101
So I tried this to make a proxy dll for dbghelp.dll for kalsage. With dumpbin/wrappit i made an 'empty' proxy dll which only passes the exports on to kal. However seems like my empty proxy dll makes the engine.exe crash.
Then I tried to make an empty proxy dll for dsound.dll, this time an error pops up "The engine.exe file is linked to missing export dsound.dll:0x000b.".

I tried to check if my proxy dll loads the original library of dsound.dll, so I put messagebox popups at places before and after loading the functions, and it seemed it succeeded.

Could this be the problem of AHS? Anyone can give me a push in the right way?
11/07/2011 13:16 RunzelEier#102
Dont use a message box to debug your dll.
Check if the dll handle is != null
otherwise attach a debugger and check the modules.
11/07/2011 20:04 hawkagent#103
Thanks for replying!

I did what you said, I removed the messagebox, even with only the code from wrappit the error still happens. So I guess this method of proxy-ing won't work, I atleast have to add some detours?
I have almost no experience in debugging, but do you mean add debugger like olly? I will look into tutorials for it, still have much to learn, but im eager :)
11/08/2011 15:23 RunzelEier#104
im pretty sure, you missed this part
Quote:
Now create new empty dll project in the Visual Studio and add existing item into source, d3dx9_29.cpp . You can name that project with whatever name, but if you are not experienced, then I recommend naming it d3dx9_29. Now right-click on project and select Properties. First of all, although it’s not really necessary, change the character set to multi-byte, as I don’t want to read cry posts about “My compiler gives me error about strings”. Switch to Linker/Input and Module definition file will be Exports_Def.def. Save the properties and return to the project.
11/08/2011 17:42 hawkagent#105
I wish i did, unfortunately the def declarations look fine. Just to make sure, I tested the same proxy dll I compiled on another server, no problem at all, the dll is exported correctly, even message boxes work :)
So it must be kalsage's protection that is messing my proxy dll up.

UPDATE: You were right, there WAS something wrong with the exports of my dll. The export txt file of dumpbin says my DLL exports these functions
Quote:
6 0 00001290 DirectSoundCaptureCreate = ___E__0__@0
12 1 000012A0 DirectSoundCaptureCreate8 = ___E__1__@0
7 2 000012B0 DirectSoundCaptureEnumerateA = ___E__2__@0
8 3 000012C0 DirectSoundCaptureEnumerateW = ___E__3__@0
1 4 000012D0 DirectSoundCreate = ___E__4__@0
11 5 000012E0 DirectSoundCreate8 = ___E__5__@0
2 6 000012F0 DirectSoundEnumerateA = ___E__6__@0
3 7 00001300 DirectSoundEnumerateW = ___E__7__@0
10 8 00001310 DirectSoundFullDuplexCreate = ___E__8__@0
4 9 00001320 DllCanUnloadNow = ___E__9__@0
5 A 00001330 DllGetClassObject = ___E__10__@0
9 B 00001340 GetDeviceID = ___E__11__@0
the "=__E__..." shouldn't be there obviously. I will look more into this. Suggestions welcome :)