Register for your free account! | Forgot your password?

Go Back   elitepvpers > MMORPGs > Kal Online > Kal Hacks, Bots, Cheats & Exploits
You last visited: Today at 01:04

  • Please register to post and access all features, it's quick, easy and FREE!


[TUTORIAL] Creating a simple DLL Cheat/Hack

Discussion on [TUTORIAL] Creating a simple DLL Cheat/Hack within the Kal Hacks, Bots, Cheats & Exploits forum part of the Kal Online category.

Reply
 
Old 03/15/2010, 13:38   #31


 
elite*gold: 55
Join Date: Mar 2006
Posts: 4,566
Received Thanks: 1,527
Well, u posted SRC from Proxy so i give ppl a send + recv method. hehe.


SendFunction
PHP Code:
DWORD PBACK  =  0x000000;// <- U need to get the Back Adress with IDA etc. Or do it with SearchPattern.
#define SendASM __asm{ push ebp };__asm{ mov ebp, esp };__asm{ sub esp, 18h};__asm{ JMP PBACK};
__declspec(nakedint __cdecl SendPacket (BYTE Header LPCSTR Format , ... ){SendASM;} 
RecvFunction
PHP Code:
int DetouredRecv(SOCKET Socketchar *Bufferint Lengthint Flags);
int (__stdcall *PacketRecv)(SOCKET Socketchar *Bufferint Lengthint Flags);

void Recv()
{
    
PacketRecv = (int (__stdcall *)(SOCKETchar *, intint))DetourFunction((PBYTE)recv, (PBYTE)DetouredRecv);

PHP Code:
int DetouredRecv(SOCKET Socketchar *Bufferint Lengthint Flags)
{
    switch(
Buffer[2])
    {
    case 
0x36//item drop
        
break;
    
    }
    return 
PacketRecv(SocketBufferLengthFlags);




bloodx is offline  
Thanks
4 Users
Old 03/15/2010, 16:04   #32
 
elite*gold: 220
Join Date: Jun 2007
Posts: 3,767
Received Thanks: 1,120
and where is the bot in src ?


meak1 is offline  
Old 03/15/2010, 23:02   #33
 
elite*gold: 0
Join Date: Dec 2009
Posts: 81
Received Thanks: 31
Quote:
Originally Posted by bloodx View Post
Well, u posted SRC from Proxy so i give ppl a send + recv method. hehe.


SendFunction
PHP Code:
DWORD PBACK  =  0x000000;// <- U need to get the Back Adress with IDA etc. Or do it with SearchPattern.
#define SendASM __asm{ push ebp };__asm{ mov ebp, esp };__asm{ sub esp, 18h};__asm{ JMP PBACK};
__declspec(nakedint __cdecl SendPacket (BYTE Header LPCSTR Format , ... ){SendASM;} 
RecvFunction
PHP Code:
int DetouredRecv(SOCKET Socketchar *Bufferint Lengthint Flags);
int (__stdcall *PacketRecv)(SOCKET Socketchar *Bufferint Lengthint Flags);

void Recv()
{
    
PacketRecv = (int (__stdcall *)(SOCKETchar *, intint))DetourFunction((PBYTE)recv, (PBYTE)DetouredRecv);

PHP Code:
int DetouredRecv(SOCKET Socketchar *Bufferint Lengthint Flags)
{
    switch(
Buffer[2])
    {
    case 
0x36//item drop
        
break;
    
    }
    return 
PacketRecv(SocketBufferLengthFlags);

If you do it like this, you will get many packets multiple times AND you get a lot of crap.

For example, do it like this and then try to keep track of a monster's hp by the dmg he's getting.
ILikeItEasy is offline  
Thanks
1 User
Old 03/15/2010, 23:28   #34


 
elite*gold: 55
Join Date: Mar 2006
Posts: 4,566
Received Thanks: 1,527
Quote:
Originally Posted by ILikeItEasy View Post
If you do it like this, you will get many packets multiple times AND you get a lot of ****.

For example, do it like this and then try to keep track of a monster's hp by the dmg he's getting.
hmm maybe maybe but maybe not :]


bloodx is offline  
Old 03/15/2010, 23:31   #35
 
elite*gold: 0
Join Date: Dec 2009
Posts: 81
Received Thanks: 31
I've seen some sources dismissing each 'repeated' packet, but then you're screwed when you should get 2 of the same packets
ILikeItEasy is offline  
Old 03/15/2010, 23:41   #36
 
elite*gold: 220
Join Date: Jun 2007
Posts: 3,767
Received Thanks: 1,120
and now then u filtering it out ? lol
meak1 is offline  
Old 03/15/2010, 23:49   #37
 
elite*gold: 0
Join Date: Dec 2009
Posts: 81
Received Thanks: 31
well.. here's my donation to your project

Code:
int ASyncPos=0;
int FinalSize=0;

int WINAPI __stdcall MyMagicRecv(SOCKET s, const unsigned char* buf, int len, int flags)
{

	if (ASyncPos==FinalSize && FinalSize>0)
	{
		HandlePacket(buf, ASyncPos);
		ASyncPos = 0;
	}
	int ret = OrigRecv(s,buf,len,flags);
	if (ret<0)
	{
		return ret;
	}
	if (ASyncPos==0)
		FinalSize = *((short int*) buf);
	ASyncPos+=ret;
	return ret;
}
ILikeItEasy is offline  
Thanks
3 Users
Old 03/30/2010, 17:46   #38
 
elite*gold: 20
Join Date: Jul 2007
Posts: 1,979
Received Thanks: 270
MyMagicRecv... lol
m0hamed just gives every person a thanks who posts some source snippet...
thanks for release, although i have got that
never made much with pointers... maybe i should take a look at that too xD
katze123 is offline  
Old 04/06/2010, 10:24   #39
 
elite*gold: 0
Join Date: Dec 2009
Posts: 81
Received Thanks: 31
Well, it is a workaround for filtering out 'double' recv packets by the public available sources. It is not the best method, but if you do some analysing yourself, you should be able to find out how it really works. This should at least give you a clue and if not, you can use it still to filter out double packets
ILikeItEasy is offline  
Old 04/06/2010, 16:28   #40
 
elite*gold: 220
Join Date: Jun 2007
Posts: 3,767
Received Thanks: 1,120
we not dumb but u dont understand what we want, we want not release the full stuff the people only need to push their brain on
meak1 is offline  
Thanks
1 User
Old 04/12/2010, 14:52   #41
 
elite*gold: 0
Join Date: Sep 2008
Posts: 150
Received Thanks: 98
any working UCE for int server which working now?
i need find speed adress....etc..can any1 post?
nidecker is offline  
Old 04/17/2010, 23:03   #42

 
elite*gold: 87
Join Date: Oct 2008
Posts: 1,208
Received Thanks: 907
warum leechen alle hier ? kann ja net mal wer thx drücken hier :>
Alnop2008 is offline  
Old 04/18/2010, 14:08   #43
 
elite*gold: 0
Join Date: Jan 2008
Posts: 52
Received Thanks: 2
is it possible to make auto pick up?
Agzar is offline  
Old 04/18/2010, 17:52   #44


 
elite*gold: 55
Join Date: Mar 2006
Posts: 4,566
Received Thanks: 1,527
Sure, u can add Auto Pick.
bloodx is offline  
Old 04/18/2010, 19:09   #45
 
elite*gold: 0
Join Date: Jan 2008
Posts: 52
Received Thanks: 2
any help :d?


Agzar is offline  
Reply



« Working DiTTo | [Service] Cheat Server »

Similar Threads
[Guide] Creating a Simple Loader with Injected DLL for Silkroad
02/02/2016 - SRO Coding Corner - 37 Replies
This next article in my series is a very important one for anyone wanting to get started with client modifications or understanding the client itself. This is the base article that will be used for all my future articles that explain various Silkroad development concepts. Like my previous article, there is nothing terribly exciting with this one as we have to get through the necessary boring stuff first before we can have any real fun. Unfortunately, this article is very heavy text wise and...
1 Hit Hack Cheat Engine Tutorial Request
05/27/2010 - Metin2 - 1 Replies
Hi there, I know how to change Atk Speed, Mov Speed, Range & Type Weapon with CE But i have never find the way to get the 1hit hack like Multihacks. Someone can teach me how to get it with Cheat Engine ??? Thanks
[Intermediate] Creating a strong but simple cipher
08/31/2008 - CO2 Programming - 9 Replies
Basically, here's the idea, we have a 'key' that contains every value a byte supports (0 to 255). When you encrypt a byte for instance 171 (0xAB) it creates an "x" using the first 4 bits of the byte, and "y" using the last for bits of the byte Value = 171 (0xAB) X = 10 (0xA) Y = 11 (0xB) Then in the output of the encrypt routine, it it'll fill that index as Key Here's an illustration to make it simpler; http://img120.imageshack.us/img120/3282/cipheran4 .gif



All times are GMT +2. The time now is 01:04.


Powered by vBulletin®
Copyright ©2000 - 2019, Jelsoft Enterprises Ltd.
SEO by vBSEO ©2011, Crawlability, Inc.

BTC: 3KeUpz52VCbhmLwuwydqxu6U1xsgbT8YT5
ETH: 0xc6ec801B7563A4376751F33b0573308aDa611E05

Support | Contact Us | FAQ | Advertising | Privacy Policy | Terms of Service | Abuse
Copyright ©2019 elitepvpers All Rights Reserved.