[C#] Protecting a bot

[​Exo]

#solved

[tolio]

first of all, everything is crackable.
in my opinion a custom obfuscator combined with a hwid system provides the best cost-benefit ratio

[Devsome]

+ check every x minutes if the user have the rights to use this tool or if anythink is wrong then close it.

[Requi]

Obfuscating the code, makes the code unreadable for a normal user. You have to deobfuscate it and if it's a custom obfuscator, he has to do it manually.

Then you can use a public packer, to avoid script kids. Mostly they give up after this

[tolio]

Originally Posted by tolio

everything is crackable.

and there is nothing you can do about it.

but you can provide a good product and people will pay for it. dont invest to much time in trying to protect your bot, instead work on your bot to improve the product you sell.

and something more about the obfuscator topic, for every commercial one there exists a deobfuscator so get hands on a custom/privat one and you are good to go

[YatoDev]

Originally Posted by xExorcist

The problem is even after i obfuscated the executable files, what if they managed to decompile it and change the lines that checks the txt hwid files to another link maybe that contains their hwid or even they can remove the whole hwid checking

dont check a text file. set up a database with a php script or program a server that accept connections and manage all

[3Angle]

Make a web based account system. And the server only returns to the premium users in the database. For example through the forum system, just like other game hacks.

[qqdev]

Put as much as you can on a web server and not inside the software.

[Devsome]

Register(webpage) => Database
Login(program) => to php => database(if account exist,if payed,if already logged in)

Encrypt your program to php POST with username,password,hwid and someother **** thats only the same on the username,password.

Decrypt it in the PHP script(webpage) ,handel it and send some emcrypted specialchars back to the program.
After the right decrypted specialchar the user are successfully logged in and ready to use your program.

[MrDami123]

The trick is to sell the result from the bot not the bot itself.

[BlackHybrid]

Google for Confuser..
This tool has the following features:
Anti debugger
Anti memory dumping
Anti decompiler
Prevent any tampering of the assemblies
Encrypt codes
Encrypt constants (i.e. numbers & strings)
Encrypt resources
Control flow obfuscation
External/Internal reference proxy
Renaming

[Else]

Originally Posted by BlackHybrid

Google for Confuser..

Google for DeConfuser..

[lama9379]

Easy to say: Web API.. That one which you are prefering.. PHP or c# server or what ever. I prefer socketservers, written in c# too

[Flyff_Service]

If your bot is a dll that is going to get injected into a target process then I would recommend this method to you:
1) Use a backend web login with your loader which identifies a user
(The user has to register his HWID either through your website or first startup - up to you.)
2) Then you need a little script in your backend web app which streams your bot dll directly to your Loader (don't save it on disk just keep it in the RAM), encrypted with the users HWID saved in your database. (Just a simple download script)

PHP Code:

//Pseudocode
$botModule = file_get_contents('bot.dll');
echo encrypt($botModule, $hwid); 


3. The loader decrypts the dll which is only possible if the PC of the user has the HWID which is linked to his account he is using.

Your bot dll can still be extracted when it's injected though, so in case you want to protect the module itself you have to hide it. I think you have to rewrite the PEB or sth like that, can't remember -> research with google by urself. But it's important to notice that there is no 100% protection if someone want to crack your bot he is able to!!!

Sry for bed englando it's very late

[dready]

@Flyff_Service

This is a legit way when using nativ code,but in .NET this seems a bit like an overkill.
You will put quiet some work, adding Compatiblity iusses and in the end fetching the unlinked Dll is about 5 Lines of Code.

Ps. You dont need to fiddle with the PEB, this works for sure, but i guess loading and solving the Dll directly raw into memory without ever linking it serves the same purpouse without the risk of something monitoring the Linktables

In the end Tolios approach is in my opinion be the best, stop the total starters, and put enough effort into the further Development to show people that they are buying the service, not the programm himself.