TQ Binary Server MultiHack

[_DreadNought_]

Originally Posted by nTL3fTy

Thanks.
I'll crack dat shiz now. Gimme today seeing as im all over the place.
#edit
He's using a Hash against the application and closing anything that matches the Hash, that again involves Ultimation changing the source code abit.

Where has Ultimation been lately?

[DragonHeart]

Originally Posted by _DreadNought_

Thanks.
I'll crack dat shiz now. Gimme today seeing as im all over the place.
#edit
He's using a Hash against the application and closing anything that matches the Hash, that again involves Ultimation changing the source code abit.

Where has Ultimation been lately?

He's working on a project and he never really been into making hacks afaik. So he doesn't care much.

[prog4mer]

You don't know anything...

Some of the nice hacks got released, after the conquer player elite coders left the scene. I was in their community for a while, but after some years no one left who played conquer anymore and it was over with the party..

Some creditors for this tool here are "cpec" as mentioned above.
Ultimation as example is one of them.

you bet, they used it on public servers, just really nice things you can't even imagine.

automated everything.. like goldbots, dbbots, marketbots, speedlevelingbots and of course teleporting. And also their own clients without co runned on servers and played by them self automated 24h.

Some of the best glitches are allready fixed by TQ or/and made serverside.

So the best time of conquer is allready over. sry for you.

you should play better games then conquer.... like poker
Maybe you get good and start making money while playing a game!
check my sig..

But the best game is:
reallife personal leveling, getting better, be successful, get money, have a good life.

have a good time!

[pro4never]

So I'm correct in assuming the only protection they've added is vs memory injection and the .exe hash? Seems easy enough to handle imo...

I mean really, all you'd need to do is write a proxy, have a tool which reads the crypt key and sends it to the proxy before you log in and uses that as the key to setup blowfish as you log in. Boom, done. None of the files are running/stored client side, no memory injection and all you need to use is nulls loader to change the ip (or even just change the server.dat seeing as most use a cracked .exe that links to a decrypted server.dat)

That being said... why bother even using their exe? Unless they add in checks that run while opening the exe which sends information to the server confirming that the scans have been run, this information is verified and then used to allow/deny login requests there is NOTHING they can do...

I simply don't see why you wouldn't make a tool to...

A: Read crypt key from STANDARD blabla.exe

B: modify and run a CUSTOM blabla.exe

C: Inject/mess around with the CUSTOM .exe for your hacks.

Seems simple enough to me as it's binaries and they really can't do any further protection than hooking into the .exe themselves... so simply don't use their exe!

[showman2020]

i want you to put Auto hunter for it .. because i play server and i bored for hunting in tc for getting cps ..

can you please ?

[zhalyn]

Originally Posted by _DreadNought_

Thanks.
I'll crack dat shiz now. Gimme today seeing as im all over the place.
#edit
He's using a Hash against the application and closing anything that matches the Hash, that again involves Ultimation changing the source code abit.

Where has Ultimation been lately?

no need to update ultimation's hack
just unpack the conquer.exe and puff all hacks will work

[_DreadNought_]

cba to find 4 different unpackers for the packers he used,

[jokerboy123]

Sad enough it doesnt work for RenegadeCo client 1030

[pranay34]

Just a heads up:
For people who have been asking where he has been lately. He quits co so I dont think he will even bother updating it.

[kirollos3]

is it working

[pro4never]

Originally Posted by _DreadNought_

cba to find 4 different unpackers for the packers he used,

Dumb question but couldn't you just use a default 5165 .exe using their encryption key? Why would you need to actually decompile his entire exe? I seriously doubt he has added in any server side checks to confirm which exe you are using :O

[zhalyn]

Originally Posted by pro4never

Dumb question but couldn't you just use a default 5165 .exe using their encryption key? Why would you need to actually decompile his entire exe? I seriously doubt he has added in any server side checks to confirm which exe you are using :O

Binary uses 5072.exe, and all binary servers used to change their BF key every patch as an anti-hack, which players forced to download the latest 5072.exe to login.

Changing BF key --> Random BF Key + packed = MZ? BF Key.
just need to unpack the protected 5072.exe and look for the right address which holds the bf key

[gl0verseer]

there is more than one way to find the bf key lol

[copz1337]

I ******* love this. This song reminds me of the Army.

Suggestion: Make the Teleport hack work? And make it so you can start the music again once it's over.

[© Haydz]

Originally Posted by _DreadNought_

Nobody who played AcidCO cracked the PR0 Anti-Cheat by Hybrid and Ultimation(Who did a fantastic job btw.) so really thats like stopping hacks alltogether for there(?) old server.

I did, I was even aimbotting on Ulti's latest server until it shut down

My BF Key detector reveals it has been changed to "GenerationXXXXXX", I'll possibly make a tool to find it, because whoever this guy is, will obviously be changing it again.

I don't have time to start playing with his executable right now though.