[HOWTO]Doing AntiHack System for C++ Coders.

04/25/2012 22:28 JoinClup#1
Hello com,
Hacks are our trouble.So I have developed it.
Its stoping injection.
WARNING1 specially for padmak because he can help me or tim: When i wanna do it .mix data for work without dll inject itz not work, i get ?????? error.

WARNING2 You must make injector for inject that dll for protect your server.
You can make hidden injector.

Source :

PHP Code:
#include <direct.h>
#include <Windows.h>
#include <TlHelp32.h>
#include <iostream>
using namespace std;
void StartDefending();
void BlockInject(HANDLECHAR*, CHAR*);
HWND hwnd;

BOOL APIENTRY DllMainHMODULE hModule,
                       
DWORD  ul_reason_for_call,
                       
LPVOID lpReserved
                     
)
{
    switch (
ul_reason_for_call)
    {
    case 
DLL_PROCESS_ATTACH:
        
StartDefending();
    case 
DLL_THREAD_ATTACH:
    case 
DLL_THREAD_DETACH:
    case 
DLL_PROCESS_DETACH:
        break;
    }
    return 
TRUE;
}
void StartDefending(){
    
BlockInject(GetCurrentProcess(), "NTDLL.DLL""LdrLoadDll");
    
cout << "Protection started!" << endl;
    
system("pause");
}

void BlockInject(HANDLE hProcessCHARlibNameCHARapiName

    
DWORD pRet[] = {0xC3};
    
WriteProcessMemory(hProcess, (LPVOID)(VOID*)GetProcAddress(LoadLibrary(libName), apiName), (LPVOID)pRetsizeof(pRet), 0);

Simple Video [TR] :


Block to SwitchBot V3[Thats not good tutorial because it can work like .mix but we can edit mss32.dll :D:D which player know mss32's inside] :


I have writen slowly because I have broken my left arm.
Have fun :handsdown::handsdown:
04/25/2012 22:45 Mi4uric3#2
I think everyone who can program in c++ knows how to stop LoadLibrary..
Additionally using "WriteProcessMemory" for writing into the own memory is bad.
use memcpy or in this case just *(BYTE*).
04/25/2012 22:49 JoinClup#3
Quote:
Originally Posted by Mi4uric3 View Post
I think everyone who can program in c++ knows how to stop LoadLibrary..
Additionally using "WriteProcessMemory" for writing into the own memory is bad.
use memcpy or in this case just *(BYTE*).
yes, everyone knows but who porgramming in c++ but its for players.do u think players know ?

WriteProcessMemory -- memcpy or copymemory is better too i think
04/25/2012 23:04 Mi4uric3#4
Quote:
Originally Posted by JoinClup View Post
yes, everyone knows but who porgramming in c++ but its for players.do u think players know?
Well, you named the Thread "[...] for C++ Coders", not me..
04/25/2012 23:43 balika01#5
crash...
04/26/2012 16:40 Niks90#6
When i inject the dll, it give me an error: msvcp100d.dll missing
but i have this dll in system32 XD
04/26/2012 20:21 balika01#7
Quote:
Originally Posted by Niks90 View Post
When i inject the dll, it give me an error: msvcp100d.dll missing
but i have this dll in system32 XD
not 100, 110!
04/27/2012 08:33 Opium™#8
Quote:
Originally Posted by JoinClup View Post
Hello com,
Hacks are our trouble.So I have developed it.
Its stoping injection.
WARNING1 specially for padmak because he can help me or tim: When i wanna do it .mix data for work without dll inject itz not work, i get ?????? error.

WARNING2 You must make injector for inject that dll for protect your server.
You can make hidden injector.

Source :

PHP Code:
#include <direct.h>
#include <Windows.h>
#include <TlHelp32.h>
#include <iostream>
using namespace std;
void StartDefending();
void BlockInject(HANDLECHAR*, CHAR*);
HWND hwnd;

BOOL APIENTRY DllMainHMODULE hModule,
                       
DWORD  ul_reason_for_call,
                       
LPVOID lpReserved
                     
)
{
    switch (
ul_reason_for_call)
    {
    case 
DLL_PROCESS_ATTACH:
        
StartDefending();
    case 
DLL_THREAD_ATTACH:
    case 
DLL_THREAD_DETACH:
    case 
DLL_PROCESS_DETACH:
        break;
    }
    return 
TRUE;
}
void StartDefending(){
    
BlockInject(GetCurrentProcess(), "NTDLL.DLL""LdrLoadDll");
    
cout << "Protection started!" << endl;
    
system("pause");
}

void BlockInject(HANDLE hProcessCHARlibNameCHARapiName

    
DWORD pRet[] = {0xC3};
    
WriteProcessMemory(hProcess, (LPVOID)(VOID*)GetProcAddress(LoadLibrary(libName), apiName), (LPVOID)pRetsizeof(pRet), 0);

Simple Video [TR] :

[Only registered and activated users can see links. Click Here To Register...]

Block to SwitchBot V3[Thats not good tutorial because it can work like .mix but we can edit mss32.dll :D:D which player know mss32's inside] :

[Only registered and activated users can see links. Click Here To Register...]

I have writen slowly because I have broken my left arm.
Have fun :handsdown::handsdown:
Thanks
04/27/2012 11:03 Niks90#9
Quote:
Originally Posted by balika01 View Post
not 100, 110!
Yes, 110 sorry :D
04/27/2012 12:37 JoinClup#10
:D someones asking to me how i inject to my client
im answering :

Make hidden injector
04/27/2012 19:12 Niks90#11
JoinClup, solutions for missing dll's?
04/27/2012 19:40 TheRevoLveR#12
thanks
05/10/2012 11:25 koraycan123#13
tmmda bu ntdllyi bloke ediyor daha sonrasında kullanıcı gene ntdllyi injecte ederek dllleri yükleyebilir :)
05/10/2012 18:00 JoinClup#14
bunu bir oyuncu yapabilir mi ve bu test geliştirilebilir.
05/10/2012 18:01 vpser#15
ahaha oyuncu yaparmı oyuncu yaparmı zaten hileyi engellemek için yapıyon profesyonel bir oyuncu hertürlü yapar