[Development] EU Spambot [PostMessageA + SetCursorPos bypass]

08/18/2009 13:41 Drizzt1112#1
I have made a bypass for the GG's PostMessageA hook. This dll includes two bypassed functions, one is the PostMessage and the other is the SetCursosrPos.

Now, i failed @ using visual basic to do a bot :rolleyes: which would use these functions but i am giving the dll out for you to do it.

The dll imports are here:
Quote:
Private Declare Function hndnsPMA Lib "hndns.dll" (ByVal hwnd As Long, ByVal wMsg As Long, ByVal wParam As Long, lParam As Long) As Long
Private Declare Function hndns SCP Lib "hndns.dll" (ByVal xpos As Long, ByVal ypos As Long) As Long
Use the hndnsPMA for PostMessageA and hndnsSCP for SetCursorPos.

What i used as my VB code was this:

Quote:
Private Declare Function hndnsPMA Lib "hndns.dll" (ByVal hwnd As Long, ByVal wMsg As Long, ByVal wParam As Long, lParam As Long) As Long
Private Declare Function hndnsSCP Lib "hndns.dll" (ByVal xpos As Long, ByVal ypos As Long) As Long
Private Declare Function FindWindow Lib "user32" Alias "FindWindowA" (ByVal lpClassName As String, ByVal lpWindowName As String) As Long

Private Sub Command1_Click()
Dim hWndCMD As Long
hWndCMD = FindWindow(vbNullString, "Untitled - Notepad") ///READ BELOW///
hndnsPMA hWndCMD, WM_KEYDOWN, vbKeyE, 0
hndnsPMA hWndCMD, WM_KEYUP, vbKeyE, 0
End Sub
I tried it with notepad and it didn't work, so it is the code and not GG. You need to insert "Dragonica (Current Ver : 0.908.1301)" as the window name when you want to use it for dragonica.

Scan:
Antivir: Nothing found
ArcaVir: Nothing found
Avast: Nothing found
AVG: Nothing found
BitDefender: Nothing found
F-Prot: Nothing found
Norman: Nothing found
Rising: Nothing found
VirusBlokAda32: Nothing found
VirusBuster: Nothing found

[Only registered and activated users can see links. Click Here To Register...]
Scanned by [Only registered and activated users can see links. Click Here To Register...]

EDIT: Forgot to add the dll :rolleyes:
08/18/2009 14:04 ShadowOps#2
Quote:
Originally Posted by Drizzt1112 View Post
I have made a bypass for the GG's PostMessageA hook. This dll includes two bypassed functions, one is the PostMessage and the other is the SetCursosrPos.

Now, i failed @ using visual basic to do a bot :rolleyes: which would use these functions but i am giving the dll out for you to do it.

The dll imports are here:


Use the hndnsPMA for PostMessageA and hndnsSCP for SetCursorPos.

What i used as my VB code was this:



I tried it with notepad and it didn't work, so it is the code and not GG. You need to insert "Dragonica (Current Ver : 0.908.1301)" as the window name when you want to use it for dragonica.

Scan:
Antivir: Nothing found
ArcaVir: Nothing found
Avast: Nothing found
AVG: Nothing found
BitDefender: Nothing found
F-Prot: Nothing found
Norman: Nothing found
Rising: Nothing found
VirusBlokAda32: Nothing found
VirusBuster: Nothing found

[Only registered and activated users can see links. Click Here To Register...]
Scanned by [Only registered and activated users can see links. Click Here To Register...]

EDIT: Forgot to add the dll :rolleyes:
[Only registered and activated users can see links. Click Here To Register...]

BTW: This doenst work anymore... Tested it with AutoIT (Maybe im doing something wrong)
08/18/2009 15:37 Drizzt1112#3
Quote:
Originally Posted by ShadowOps View Post
[Only registered and activated users can see links. Click Here To Register...]

BTW: This doenst work anymore... Tested it with AutoIT (Maybe im doing something wrong)
Umm, how did you test it?
08/18/2009 16:38 ShadowOps#4
Dllopen "(Name.dll)"

Rest of script ( Im not at my own pc right now, its botting hehe. Since AutoIT doesnt work. i use USB gamepad + Joytokey + Ducktape = bot ;)
08/18/2009 19:26 Drizzt1112#5
Remember that you can't just use the default sendkey etc functions, you have to use those included in the .dll.

Botting is easier.... Apple on teh keyboard = bot.