[RELEASE] 12SKY TELEPORT HACK[UPDATE]

10/04/2008 21:23 Iktov#1
If you use this hit the thanks button.

Updated for the newest 12Sky(whole process took about 10 minutes). Does not include the AutoPill. Just extract the contents of the archive anywhere. Launch the .exe file that came with the hack and then load up the game and login. To use view the commands list in the first release thread here:

[Only registered and activated users can see links. Click Here To Register...]

Also the hack leaves a log file in your route C:/ drive called 12Sky.log. The log shows the current PID of the current 12Sky Process if anyone is interested in that.

When this gets patched please DO NOT contact me to update it again for you. There must have been some miscomunication in my last thread that said "Everyone add me to X-Fire when this gets patched and ask for an update". Though I don't remember typing that, but thats what happened. I am only releasing this right now as I currently have no interest in the game and starting all over from scratch for the 4th time dosen't exactly feel very appealing to me. If anyone can offer anything to me in the form of an extra account you may have to help me get started back up and interested in the game again I would be much appreciative.


Enjoy the hack again.

EDIT: also ignore the fact that on the top of the hack's window it says "Army Ops". I just quickly recompiled the same loader I use for America's Army with slight changes for 12Sky. Forgot to change the window title though.
10/09/2008 14:25 reijin#2
12SkyTele.exe:

Quote:
Antivirus;Version;letzte aktualisierung;Ergebnis
AhnLab-V3;2008.10.9.3;2008.10.09;-
AntiVir;7.8.1.34;2008.10.09;-
Authentium;5.1.0.4;2008.10.09;-
Avast;4.8.1248.0;2008.10.09;-
AVG;8.0.0.161;2008.10.09;-
BitDefender;7.2;2008.10.09;-
CAT-QuickHeal;9.50;2008.10.08;-
ClamAV;0.93.1;2008.10.09;-
DrWeb;4.44.0.09170;2008.10.09;-
eSafe;7.0.17.0;2008.10.08;-
eTrust-Vet;31.6.6137;2008.10.09;-
Ewido;4.0;2008.10.09;-
F-Prot;4.4.4.56;2008.10.08;-
F-Secure;8.0.14332.0;2008.10.09;-
Fortinet;3.113.0.0;2008.10.09;-
GData;19;2008.10.09;-
Ikarus;T3.1.1.34.0;2008.10.09;-
K7AntiVirus;7.10.489;2008.10.09;-
Kaspersky;7.0.0.125;2008.10.09;-
McAfee;5401;2008.10.09;-
Microsoft;1.4005;2008.10.09;-
NOD32;3506;2008.10.09;-
Norman;5.80.02;2008.10.08;-
Panda;9.0.0.4;2008.10.09;-
PCTools;4.4.2.0;2008.10.09;-
Prevx1;V2;2008.10.09;-
Rising;20.65.32.00;2008.10.09;-
SecureWeb-Gateway;6.7.6;2008.10.09;-
Sophos;4.34.0;2008.10.09;-
Sunbelt;3.1.1708.1;2008.10.09;-
Symantec;10;2008.10.09;-
TheHacker;6.3.1.0.103;2008.10.07;-
TrendMicro;8.700.0.1004;2008.10.09;-
VBA32;3.12.8.6;2008.10.09;-
ViRobot;2008.10.9.1414;2008.10.09;-
VirusBuster;4.5.11.0;2008.10.08;-

weitere Informationen
File size: 98304 bytes
MD5...: a6ed70bbed4773ec4a01fc6a63c24c2a
SHA1..: f42405c0fbe43a38b830674ea3a8c5329544fc3c
SHA256: 02e1f8b49986b81d8928b7d1a4b37a916b4ae5195784d9f627 e2cffc94808056
SHA512: b575e6309d3bbe565359daa2b7eb303f3e2f036979495691e9 0d0a3dd3632bb1<br>dd058593d0f9faf1531f4974500ad001 af5374b32494c96aa4257465a1c225bc
PEiD..: -
TrID..: File type identification<br>Win32 Executable MS Visual C++ (generic) (65.2%)<br>Win32 Executable Generic (14.7%)<br>Win32 Dynamic Link Library (generic) (13.1%)<br>Generic Win/DOS Executable (3.4%)<br>DOS Executable Generic (3.4%)
PEInfo: PE Structure information<br><br>( base data )<br>entrypointaddress.: 0x401e43<br>timedatestamp.....: 0x48e7b702 (Sat Oct 04 18:33:38 2008)<br>machinetype.......: 0x14c (I386)<br><br>( 4 sections )<br>name viradd virsiz rawdsiz ntrpy md5<br>.text 0x1000 0x6f24 0x7000 6.57 c2665b2c1dd69f8ccba85015c2fcebc2<br>.rdata 0x8000 0x1c18 0x2000 4.50 2ef78c79c43aede475f2e0eea1c753a6<br>.data 0xa000 0x2478 0x1000 1.60 9db58fc07da85fafba85a6d5eedff7fc<br>.rsrc 0xd000 0xc5f0 0xd000 6.95 cf1cebfd94e07ca8a2387dc0f1406d0a<br><br>( 3 imports ) <br>> KERNEL32.dll: GetProcAddress, LoadLibraryA, IsBadReadPtr, GetCurrentProcessId, GetVersionExA, CloseHandle, Sleep, ResumeThread, SetThreadContext, GetThreadContext, SuspendThread, WriteProcessMemory, FindFirstFileA, GetModuleFileNameA, CreateThread, GetLastError, CreateMutexA, FlushFileBuffers, SetStdHandle, GetSystemTimeAsFileTime, GetTickCount, QueryPerformanceCounter, SetFilePointer, ExitProcess, GetModuleHandleA, TerminateProcess, GetCurrentProcess, GetStartupInfoA, GetCommandLineA, LCMapStringA, WideCharToMultiByte, MultiByteToWideChar, LCMapStringW, TlsAlloc, SetLastError, GetCurrentThreadId, TlsFree, TlsSetValue, TlsGetValue, HeapAlloc, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, WriteFile, GetStdHandle, UnhandledExceptionFilter, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, SetHandleCount, GetFileType, HeapDestroy, HeapCreate, VirtualFree, HeapFree, GetLocaleInfoA, GetCPInfo, VirtualProtect, VirtualAlloc, GetSystemInfo, VirtualQuery, GetStringTypeA, GetStringTypeW, RtlUnwind, GetACP, GetOEMCP, HeapReAlloc, InitializeCriticalSection, HeapSize, InterlockedExchange<br>> USER32.dll: DialogBoxParamA, ShowWindow, MessageBoxA, PostMessageA, FindWindowA, EndDialog, LoadIconA<br>> SHELL32.dll: Shell_NotifyIconA<br><br>( 0 exports ) <br>
12SkyTele.dll

Quote:
AhnLab-V3;2008.10.9.3;2008.10.09;-
AntiVir;7.8.1.34;2008.10.09;-
Authentium;5.1.0.4;2008.10.09;W32/Heuristic-KPP!********
Avast;4.8.1248.0;2008.10.09;-
AVG;8.0.0.161;2008.10.09;-
BitDefender;7.2;2008.10.09;-
CAT-QuickHeal;9.50;2008.10.08;-
ClamAV;0.93.1;2008.10.09;-
DrWeb;4.44.0.09170;2008.10.09;-
eSafe;7.0.17.0;2008.10.08;-
eTrust-Vet;31.6.6137;2008.10.09;-
Ewido;4.0;2008.10.09;-
F-Prot;4.4.4.56;2008.10.07;W32/Heuristic-KPP!********
F-Secure;8.0.14332.0;2008.10.09;-
Fortinet;3.113.0.0;2008.10.09;-
GData;19;2008.10.09;-
Ikarus;T3.1.1.34.0;2008.10.09;-
K7AntiVirus;7.10.489;2008.10.09;-
Kaspersky;7.0.0.125;2008.10.09;-
McAfee;5401;2008.10.09;-
Microsoft;1.4005;2008.10.09;-
NOD32;3506;2008.10.09;-
Norman;5.80.02;2008.10.08;-
Panda;9.0.0.4;2008.10.09;-
PCTools;4.4.2.0;2008.10.09;-
Prevx1;V2;2008.10.09;-
Rising;20.65.32.00;2008.10.09;-
SecureWeb-Gateway;6.7.6;2008.10.09;-
Sophos;4.34.0;2008.10.09;Mal/Dloadr-E
Sunbelt;3.1.1708.1;2008.10.09;-
Symantec;10;2008.10.09;-
TheHacker;6.3.1.0.103;2008.10.07;-
TrendMicro;8.700.0.1004;2008.10.09;-
VBA32;3.12.8.6;2008.10.09;-
ViRobot;2008.10.9.1414;2008.10.09;-
VirusBuster;4.5.11.0;2008.10.08;-

weitere Informationen
File size: 8192 bytes
MD5...: c3bc14bee172030d77e95e4d7ddb468c
SHA1..: ecbe86e31c18546d01f8788505349fc62541cad8
SHA256: d38f73925e54d7eecd8e502c6897187b2940ee548b381afd3d 70b3f28e4b1648
SHA512: 5de15b540fc9e48126cf36b9f3caf422a5c6828d74f4d4a648 76c13d82cd550b<br>1fb823ac1d5a1e777cafafe6717f6c09 6688028164cea966fbbb2a286fe73e92
PEiD..: -
TrID..: File type identification<br>Win32 Executable Generic (42.3%)<br>Win32 Dynamic Link Library (generic) (37.6%)<br>Generic Win/DOS Executable (9.9%)<br>DOS Executable Generic (9.9%)<br>Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
PEInfo: PE Structure information<br><br>( base data )<br>entrypointaddress.: 0x100010dc<br>timedatestamp.....: 0x48e7b5f4 (Sat Oct 04 18:29:08 2008)<br>machinetype.......: 0x14c (I386)<br><br>( 4 sections )<br>name viradd virsiz rawdsiz ntrpy md5<br>.text 0x1000 0xcb6 0xe00 5.71 c5d20d7b778f8100159a152dbd933dec<br>.rdata 0x2000 0x838 0xa00 4.44 8d08a1b414bd88764b6548fe2f500096<br>.data 0x3000 0x5c 0x200 0.36 f3c7c718d73a188311bd6fa5589600da<br>.reloc 0x4000 0x1b4 0x200 4.95 a20a49d34b1d572f058d51271611dcdd<br><br>( 4 imports ) <br>> KERNEL32.dll: CreateThread, Process32First, WaitForSingleObject, CreateRemoteThread, OpenProcess, VirtualFreeEx, Module32First, GetLastError, GetProcAddress, DeleteFileA, Process32Next, GetModuleHandleA, CreateToolhelp32Snapshot, Module32Next, CloseHandle, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, WriteProcessMemory, ReadProcessMemory, GetCurrentProcess, VirtualAllocEx, QueryPerformanceCounter, ExitProcess, GetSystemTimeAsFileTime<br>> USER32.dll: FindWindowA, GetWindowThreadProcessId<br>> ADVAPI32.dll: AdjustTokenPrivileges, LookupPrivilegeValueA, OpenProcessToken<br>> MSVCR71.dll: _vsnprintf, localtime, time, fclose, _strlwr, free, _initterm, malloc, _adjust_fdiv, __CppXcptFilter, _except_handler3, __dllonexit, _onexit, __security_error_handler, fopen, sprintf, fprintf<br><br>( 0 exports ) <br>
10/10/2008 00:31 Iktov#3
Wooohooo... Somebody actually replied, sort of.

Not sure what your point is though on the file scans, if you think they are actually infected or you are just taking the time to provide the scan. I can assure you though they are completely clean. The dll is just simply using read/write process memory to patch the address that determines GM/Dev status from a 0 to a 1. And the exe is just an injector.

Also since nobody here bothered to take the time to post a thanks or a comment about his hack I figured there is no interest in it. I have made a fix to the hack recently because the file posted above was lagging the game out to unplayable proportions. I was able to learn about this mistake and fix it because another forum people actually replied after downloading it and told me it was lagging(go figure). Anyways if anybody here is interested in the fixed version then Post here and I will upload the new one, if not then I won't even bother.
10/15/2008 11:40 siegeless#4
Hi there,

Thanks for the program. i tested it and it does cause lagging.

Are you able to advice/send me the update one?

Hope to hear from you again.

Cheers!