WarRock EAC BYPASS LOL!

[MRx86™]

edit

[eCyler]

ok bro

[~ExoduS~*]

thx but this is a bad way xD. Its easy to fixx it without bypass

[+Yazzn]

Nice London

[Alliance™]

There are other easy usermode exploit to get handle of the process for inject DLL

[sokter1]

Originally Posted by Alliance™

There are other easy usermode exploit to get handle of the process for inject DLL

you think clientlessbot will back to work agian ?

[Alliance™]

Originally Posted by sokter1

you think clientlessbot will back to work agian ?

Reversing the new packet encryption i dont think is hard, the problem is the heartbeat, i will check it in the next days!

[Willi35]

Originally Posted by GHTheBoss

Whats this doing ? force to load eac.exe and instead of closeup all handle it dosen't.! P.S eac driver is still running but handled closeup get dafuqed!

hope for fasting patcher! already reported to EAC :| enjoy it untill its patched ...


how to use it ? open cheats engines Runs warrock launcher. attach cheats engine there and then look the patch above.. Enjoy! dafuq.!!!!!!!!!!!!!!!!

00415115 A1 E8D15200 mov eax, dword ptr [52D1E8]
0041511A 83F8 05 cmp eax, 5
0041511D 74 4A je short 00415169

Everything is Inside WRUpdater.exe LOL
i learned alot from EAC ... they are professional retarder in KerneLand u.u

[COLOR="Red"][B]here how to use this trash codenz![/B][/COLOR]

//00415115    A1 E8D15200     mov     eax, dword ptr [52D1E8]
*(DWORD*) 0x52D1E8 = 5;


//0041511D    74 4A           je      short 00415169
memcpy((void*)0x41511D,(void*)"\x90\x90",2);

Heartbeat still working ... by doing this job. so you don't need any sheet more.
thx to me :P


i'm still looking for better way i don't want to apply any patch to code i still prefer 1338 method to become stealther!


i already know nobody will credit for it, but you must remember always NO GHTheBoss No Party,



Codenzzzzzzzzzzzzzzzz!


Thx to MZ'4D5A for sarscam and patience. love u man!

Bullshit.

Originally Posted by Alliance™

There are other easy usermode exploit to get handle of the process for inject DLL

PsLookupProcessByProcessId... For the Handle ObOpenObjectByPointer

[Alliance™]

Originally Posted by Willi35

PsLookupProcessByProcessId... For the Handle ObOpenObjectByPointer

This function are used in Kernel mode, i said there are other user mode exploit XD

[sirosix]

Originally Posted by Alliance™

This function are used in Kernel mode, i said there are other user mode exploit XD

nearly every known user mode exploit is patched for EAC/BE. when a methode goes public it dosent take much time until its patched. for Rust i had 5 injecting methodes now i only got two. they are patching one after the other.

and yes the "bypass" from King7 is bullshit. Heartbeat will only work once because a false Heartbeat will be ignored one time but the second Heartbeat will make you disconnect. it dosen't completly disable EAC but EAC will still know that it wasn't started properly.

[Willi35]

Originally Posted by sirosix

nearly every known user mode exploit is patched for EAC/BE. when a methode goes public it dosent take much time until its patched. for Rust i had 5 injecting methodes now i only got two. they are patching one after the other.

and yes the "bypass" from King7 is bullshit. Heartbeat will only work once because a false Heartbeat will be ignored one time but the second Heartbeat will make you disconnect. it dosen't completly disable EAC but EAC will still know that it wasn't started properly.

The problem is these companies are learning from Public Sourcecodes. It will be much harder, when the people stop to share everything public. Also, the workers of these companies are basically skilled from university.

To beat a System is always to think different.

Also the most of the "Cheat Loaders" needs more Innovations and new Ideas to increase their protection against reverse engineering.

[Alliance™]

Originally Posted by sirosix

nearly every known user mode exploit is patched for EAC/BE. when a methode goes public it dosent take much time until its patched. for Rust i had 5 injecting methodes now i only got two. they are patching one after the other.

and yes the "bypass" from King7 is bullshit. Heartbeat will only work once because a false Heartbeat will be ignored one time but the second Heartbeat will make you disconnect. it dosen't completly disable EAC but EAC will still know that it wasn't started properly.

Not all, for example a stupid example is force a process to load a dll like system dll and hide this from PEB.
I dont use it but is a noob method in usermode XD

[sirosix]

Originally Posted by Willi35

The problem is these companies are learning from Public Sourcecodes. It will be much harder, when the people stop to share everything public. Also, the workers of these companies are basically skilled from university.

To beat a System is always to think different.

Also the most of the "Cheat Loaders" needs more Innovations and new Ideas to increase their protection against reverse engineering.

yep exactly, they are very active @sites like *************, looking for the newest methodes and simply patching them, even methode where you think that they might be unpatchable, they find ways arround to detect those.

[MRx86™]

Well i were in vocation just back today.

Bypass was working about 15 day's ago for sure.

usermode way which i tryed and working perfectly..
setglobalhook...
APPINT...

[Willi35]

Originally Posted by GHTheBoss

Well i were in vocation just back today.

Bypass was working about 15 day's ago for sure.

usermode way which i tryed and working perfectly..
setglobalhook...
APPINT...

I would you like inform that App_init can be blocked by some Anti-Virus Companys, because some malware was using that way.

This way i can not recommend it.