Cheat Engine

[aikoncwd]

Hey, some users asked how to store a cheat-table on a webserver and set a password to protect them, I decided to code a small program to add some protection layers. The first you need to know is:

There is no way to protect a cheat-table/trainer/program/game 100%, we only can add some "ofuscation layers" to prevent the newbies stealing our job. Any expert user can de-ofuscate our protection layer and access the table, ¿ok?

This "protector" is coded to have an easy deployement. We will upload our table to pastebin (or any other hosting service, you can use your own hosting if you have one), then the protector will ask for a password, all the code will be ofuscated. Test this real example:

http://www.mediafire.com/download/d1p999v44bqycll/The_Witcher3_-_AikonCWD_protected.zip

updated: http://www.mediafire.com/download/6kyac4962rhzl3i/table_protected_aikoncwd.rar

Download and open the "protected" cheat-table, it will prompt for a password:



Try to guess the password, if you fail a message will popup and you will be redirected to forum.cheatengine.org:



The correct password for this "protected" table is: "aikoncwd" (without quotes), try to enter aikoncwd and see if the table showup.

==========================================

This is how the protector works. If you edit the VBS file you will see this ofuscated code:

[faizangmc]

great stuff. Would love it to use this protector in compiled trainers and also the dynamic password feature also looks cool..

hope this gets further expanded...

Thanks for your work bro

[aikoncwd]

[faizangmc]

no. I tried to download but mediafire seems to have blocked it. :\

[aikoncwd]

[faizangmc]

k thanks . il gve a try

[panraven]

I'm not suspect there is any virus, but my av software keep remove the extracted vbs. I can only obtain the file from a VM XP. (But the XP cannot run the vbs because missing some ocx)
https://www.virustotal.com/en/file/34038c55e93cf01886514ee8dd5639c93713381cd8377e422b8fe9c8e323798f/analysis/

[Alamer99]

[atom0s]

The biggest flaw in this is that you can just alter 1 part of it to find the password. VBS is not at all secure. For example the trainer vbs you posted starts with:

[Xillica]

[atom0s]

[Xillica]

[atom0s]

Putting some sort of protection will help with the noobs / copy-pasters, but it wont stop someone with some or advanced experience from gaining access to your information you don't want shared. Anyone can pick up on cracking/hacking an application, there are tons of resources on the internet that teach reverse engineering.

Along with that, Cheat Engine is open source, so anyone can alter it to do their bidding.

[aikoncwd]

[STN]

Warning: This is a subject i was fond of years back and played with it for a good while so long post ahead (but you will enjoy it and learn a thing so read ).

Years back, there was a rather interesting discussion on a reversing forum i used to frequent by lena (a really awesome reverser) about if you can completely stop people from reversing and she believed you can when most didn't. This thread reminded me of that. I am of the same idea, yes you can!. Put enough code virtualization/self-modifying code and anti-tricks that it is a pain to understand one instruction of program and you will stop anyone from even bothering. Even for a challenge, there is only so far some people will go, even the experts will give up and that is pretty much 100% protection.

Sure, its not really uncrackable but practically, increase the difficulty and the time required and it is uncrackable. I made a keygenme around the same time and posted on these forums, the trick was a simple NOT instruction that i used for protection (i am serious) and nobody had any idea what it was doing (atomos/wiccaan took a crack at it and failed). Imagine putting any more tricks in it and taking a gander at the code would have been hard.

So, considering the skill level of people in ghing, you can make a unsteal-able trainer with the least effort but you are going to have to make a sacrifice. AVs going berserk, loss of user-friendliness. If you make a trainer once every year then that is feasible but if you constantly have to make trainer for your site then its a deal-breaker and it is the reason why i stopped protecting my trainers or even packing them because i make them for mass consumption. The stuff i truly care about, i don't share it and it stays protected that way.

Now actually good job on the protector AikonCWD, at least for the idea. But don't use VBS, its like using batch file to protect your shit, you are giving out the source of your protector and then wondering how did you cracked it so easy. Even VB would have been fine to use or any programming language really.

For people wondering how did atomos know to use MsgBox to output that and going OMG you are awesome. Here is how and the secret
The OP is using chr function.
http://www.w3schools.com/vbscript/func_chr.asp
Pretty basic - converts the specified ANSI character code to a character
Execute function is self-explanatory but still take a look at this example
http://www.4guysfromrolla.com/webtech/030300-1.shtml

So how do you crack this crypto code ? a MsgBox sufficed or if you want to be creative, write that in a txt file or whatever comes to mind. Or hey go and input the ansi chars in Cheat Engine Hex viewer and be surprised as it starts translating into words .

I don't know VBS but you don't need to, it is simple english .


PS: I don't really understand why you would want to protect a cheat table, it is made to be shared. Don't share it if you don't want to share it ??????