[Release]ObverseFlyff-Bypass

Quote:

Originally Posted by Devisory Putting so much effort in something u can bypass way easier. Just make a shortcut of the Game.exe and add the word 'release' at the end like this: [Only registered and activated users can see links. Click Here To Register...] and now you are free to use all hacktools. You can just use a customized cheat engine as well and it wont detect it or even Sandboxie. Probably there are more methods to use cheat engine but what would you expect of server hosted by EvilSlayer? XD

Quote:

Originally Posted by greyb1t Using that method you descibed above will not bypass their internal "anti-cheat", only the Shark Shield. The reason he put such effort into bypassing it was not only to bypass Shark Shield, but also the internal in-game anti-cheat for those who do not have an undetected cheat engine. That was just my guess, not sure if that's why :)

Quote:

Originally Posted by greyb1t Creating an "Anti-Cheat" in .NET is not a good idea either ;/ Good job!

Quote:

Originally Posted by /Aiden\ Well if there is a crypted synch between the Game & the "Anti-Cheat" then you can use any language. Some years ago i used to do that with my guard too. Of course you could still try to emulate packets and create a "GG-Emulator" as the God himself nForce aka. dBased did with the Official GG. Oh and i forgot to mention this: I had a bit trouble at the beginning with your source code. The client was always frozen. I had to exclude one thread suspension: [Only registered and activated users can see links. Click Here To Register...] I know it is pretty obvious to exclude that one:rolleyes: You may want to add that feature to your Base Source aswell :)

if (modInfo.name.find("Neuz") != std::string::npos)
	if (thread.getWaitReason() == DelayExecution)
		SuspendThread(thread.getHandle().getRaw());

Quote:

Originally Posted by greyb1t By viewing the image you attached, I can see that the main thread also has the wait reason set to DelayExecution. Meaning that the method I used, will not work it'll suspend the main thread aswell. But I guess you fixed the issue by not suspending the one thread that has the earliest Create Time? I won't bother adding a comment saying that the method to filter the good and bad threads might vary based on server, if you're experienced enough, you should be able to figure it out on your own.

Quote:

Originally Posted by Sammyz I'm happy you bypassed this, i don't play on this server but... The person who created this anti-hack is prolly the most egotistical prick in the world who backdoors and rootkits people for his MAC bans. He has even bragged about it and claims its unbypassable. Great release lol.

Quote:

Originally Posted by macroseller [Only registered and activated users can see links. Click Here To Register...] How is this connecting to remote server. Its obviously function to send event messages to app windows. For example killing window, sending clicks...

Quote:

Originally Posted by /Aiden\ Your code loops throuh all threads. Windows is giving always the same information about threads. This means that when you list all the threads with ProcessThreadsView the loop of your Source will get the same information in the same row. I just needed to add a blacklist filer to it and "blacklist" the first suspension loop. With this method the main thread keeps running, while all the other "DelayExecution" threads get suspended.

Quote:

But I guess you fixed the issue by not suspending the one thread that has the earliest Create Time?

	gWin::ProcessEnumerator procEnum;

	for (auto &process : procEnum.getProcesses()) {
		if (process.getName() == "Neuz.exe") {

			for (auto &thread : process.getThreads()) {
				auto modInfo = process.getAssociatedModule(&thread);

				FILETIME fileTime;
				fileTime.dwLowDateTime = thread.getPtr()->CreateTime.LowPart;
				fileTime.dwHighDateTime = thread.getPtr()->CreateTime.HighPart;

				SYSTEMTIME sysTime;

				FileTimeToSystemTime(
					&fileTime,
					&sysTime
				);

				printf("%d-%d-%d %d:%d:%d\n", sysTime.wYear, sysTime.wMonth, 
                                	sysTime.wDay, sysTime.wHour, sysTime.wMinute, sysTime.wSecond);
			}
		}
	}

Quote:

Originally Posted by Pkersawboy Hey, thanks for the bypass :), I know Obverse shutted down but I'm playing on a pserver called Dravelinex which basically is a copy with the same Sharkshield. I was wondering which Cheat engine you were using for Obverse flyff and if you could develope a new one for Dravelinex flyff :) ( New server).