Force to use a loader

zakkwilde_17 · 10/03/2017, 23:06

Hey guys...
I need a smart answer here. I did a loader using cov3lodaer, and I also did a little gamegard to prevent bots. Okay, my question is this! How can I force the player to use only my loader? so it can not log in using any other loader?

Loader

AntiBot

.Xori^ · 10/03/2017, 23:24

One way would be to have the launcher inject the host-address after it has completed its autopatch/anti-bot functions and is triggered to start the client.

*Edit: By doing this you are still leaving the possibility of 3rd party launchers being usable. If for some reason a player figures your host-address out they could easily apply it to said launcher.

A safer way would be to have the launcher send a packet to the server confirming the client is clear for login.

Spirited · 10/04/2017, 00:45

Quote:

Originally Posted by .Xori^

One way would be to have the launcher inject the host-address after it has completed its autopatch/anti-bot functions and is triggered to start the client.

*Edit: By doing this you are still leaving the possibility of 3rd party launchers being usable. If for some reason a player figures your host-address out they could easily apply it to said launcher.

A safer way would be to have the launcher send a packet to the server confirming the client is clear for login.

That method would be opening Resource Monitor and looking under the network tab.
So maybe not the best solution. Client side protection in general is usually snake oil.

.Xori^ · 10/04/2017, 03:44

Quote:

Originally Posted by Spirited

That method would be opening Resource Monitor and looking under the network tab.
So maybe not the best solution. Client side protection in general is usually snake oil.

Very true, it'll stop select few. But there is always a work around.

JaniQ · 10/04/2017, 04:39

well the way you should protect against proxies is not to make them unable to launch the game without your launcher because there are tons of work arounds but rather changing the game cryptography either by simply changing and hiding the bfk or by editing the cryptography client and server side.

that being said if you still want them to use your launcher only you can probably make it do certain things that the player won't be able to login without otherwise like again changing the bfk or the packet stamps.

-impulse- · 10/04/2017, 11:31

You can use IPC (inter-process communication) to validate the game. An example would be using named pipes, the launcher sets up a pipe, the counterpart (injected into the game) would read from the pipe some validation message. If the counterpart cannot access the pipe or does not validate the message it would close the game.

iBotx · 10/05/2017, 02:01

Make a connection between the server and the loader to communicate with each other like every n minutes sends a beep to the server and make a check on the server if after n minutes it doesn't receive a beep that means that your shield is down and disconnect the player.

zakkwilde_17 · 10/16/2017, 19:55

I got it, tnx for help all, very useful

Thread can be closed

iBotx · 10/26/2017, 02:25

This is a shield i made recently, it might help with your question.

Spirited · 10/26/2017, 07:15

Quote:

Originally Posted by iBotx

This is a shield i made recently, it might help with your question.

File integrity has nothing to do with process integrity or forcing the use of a loader.

iBotx · 10/27/2017, 00:18

Quote:

Originally Posted by Spirited

File integrity has nothing to do with process integrity or forcing the use of a loader.

Actually, you can by making a connection between the server & the loader, ofc by encrypting the packets and making it harder to know how the mechanism works, this is obvious i know but it is just a basic example and it worked for me.

Spirited · 10/27/2017, 02:45

Quote:

Originally Posted by iBotx

Actually, you can by making a connection between the server & the loader, ofc by encrypting the packets and making it harder to know how the mechanism works, this is obvious i know but it is just a basic example and it worked for me.

I'm talking about your project, not this stupid idea of process security on Windows. If someone wanted to get around your "Conquer Shield", all they'd have to do is hook the client process and change values as it reads them from magictype. Your shield doesn't do anything to secure the client. Just because the file is legitimate doesn't mean the process is or the data it's reading.

iBotx · 10/27/2017, 19:01

Quote:

Originally Posted by Spirited

I'm talking about your project, not this stupid idea of process security on Windows. If someone wanted to get around your "Conquer Shield", all they'd have to do is hook the client process and change values as it reads them from magictype. Your shield doesn't do anything to secure the client. Just because the file is legitimate doesn't mean the process is or the data it's reading.

Anything can be bypassed if you know what you`re doing, so please stop talking and start helping people instead of insulting what they do. It`s not likely anyone can do, normal players are looking for normal ready apps to use, So this will at least protect you against noobs. Over that, I didn't ask your opinion. This is my contribution to help him, so please stay out of this. Also, I posted this for him to learn about the connection between the loader and the server to answer his question.

Honestly, I don`t know why you still exist in this community, all you do is insult people and their work, even If they`re trying.

Spirited · 10/27/2017, 22:40

Quote:

Originally Posted by iBotx

Anything can be bypassed if you know what you`re doing, so please stop talking and start helping people instead of insulting what they do. It`s not likely anyone can do, normal players are looking for normal ready apps to use, So this will at least protect you against noobs. Over that, I didn't ask your opinion. This is my contribution to help him, so please stay out of this. Also, I posted this for him to learn about the connection between the loader and the server to answer his question.

Honestly, I don`t know why you still exist in this community, all you do is insult people and their work, even If they`re trying.

I'm not insulting you. If you post project work publicly, you should expect feedback.

iBotx · 10/28/2017, 00:16

Quote:

Originally Posted by Spirited

I'm not insulting you. If you post project work publicly, you should expect feedback.

I'm not using it anymore and the reason I posted it here was for the OP to learn how to make a communication between the client and the server, the reason i dropped this project was because it was weak. Anyway it`s ok and yes I expect feedback but try to be less rude when giving feedback-s.