Cheat Engine

alesyt0h · Newbie cheater Reputation: 0 Joined: 12 Aug 2015 Posts: 19

Hello!

I'm trying to make a teleport hack, I've found the address which is storing x, y and z , found the pointer aswell, but when I change the value in CE, is moving my character in the game but just 100ms or less after I modify the value, is returning me to the original position. Only allows small values like 5 or something every 2 or 3 seconds, tried seting hotkey to increment the value by 5 but is so slow and is returning me to the original position aswell.

Is there I can do using CE?? I've thought about something like: write the address and block the program to overwrite the address but I don't know if that is even possible xD

++METHOS · Posted: Sat Jul 23, 2016 12:04 pm Post subject:

Assuming the game is not an online game, you've found the wrong coordinate values.

alesyt0h · Newbie cheater Reputation: 0 Joined: 12 Aug 2015 Posts: 19

It's an online game.

I've read about people saying that for online games, xyz coordinates are stored on the server side or something like this.

But for this game it's possible, I know it because there is a paid hack that does exactly that, teleport to everywhere.

I've played around a bit with the addresses I've found, I can for example jump to higher position and when I fell, I take damage. I can teleport from 200.00 x/y coord to 210.00 for example,, but no more >.<

++METHOS · Posted: Sat Jul 23, 2016 12:40 pm Post subject:

The paid hack could be manipulating packets that are sent to the server.
If you can teleport, but with limits, then there may be a server-sided check going on.
All that said, you may still have the wrong coordinate values (maybe).

alesyt0h · Newbie cheater Reputation: 0 Joined: 12 Aug 2015 Posts: 19

I didn't thought about the packets lol, thought that wasn't possible without hacking the server:P

I don't know if I have the wrong address, thought that maybe the address is correct but not the pointer. Achieved to get 5000 pointers on pointer scan but now is only decreasing the number by 2-3 (will take ages to find more specific pointer with this method I think)

With the address/pointer I have I'll freeze it, then I cannot move. If I freeze z coordinate, I cannot jump, that doesn't mean that I have the right coordinates?

++METHOS · Posted: Sat Jul 23, 2016 12:55 pm Post subject:

Pointers are a waste of time unless you are certain that you have the correct address(es), in this case.

You may have the correct addresses...you may not. Sometimes, there are multiple coordinate addresses. I usually test by freezing the values and checking to make sure that there is no ghosting effect and also by checking to see if I can teleport through objects. If I can do those things successfully, then I am good.

alesyt0h · Newbie cheater Reputation: 0 Joined: 12 Aug 2015 Posts: 19

Lets say I start with unknown initial value, I use stairs to go up then increased value, go down, decreased value etc... until I have like 300-400. I'll put all the addresses to the list and I freeze stacks of 50 or something until I found the one that dont let me jump, on my case there is only one address that prevents me from jumping when I freeze it.

The others values usually dont do nothing, but sometimes there are some weird values, that creates a "ghost" of my character or something, like I only saw the head of my character on the original, and the body on the location I want to port.

Thought that maybe was some value that the game restores the position when it is changed, tested by freezing all the values, like 300 or more and changing the coordinates to all of them, result was the same, I cannot teleport longer distances :/

ulysse31 · Posted: Sat Jul 23, 2016 3:41 pm Post subject:

If you make your game believe that your coordonates changed, you can be pretty sure the game will send the packets to the server, that is if the game fully believes your coordonates.
I hacked an MMO that behaved the same way you're describing, the reason for it was that the program wrote the coordonates value many time per sec and only read those coordonates right after they were written, therefore you had 0.000000001 sec to write the "hacked" coordonates, between the program write and between the program read, in other word the solution is code injection.

You right click the coordonate address, "find out what writes to..." (make sure to use VEH debugger), you hook the opcode that writes to it and you make it write your value. What is likely to happen is that after 1 to 5 min the game crashes due to memory integrity checks so don't be surprised if that happens.

++METHOS · Posted: Sat Jul 23, 2016 4:22 pm Post subject:

If the coordinate checks are being done client-side, then you can easily circumvent that.

alesyt0h · Newbie cheater Reputation: 0 Joined: 12 Aug 2015 Posts: 19

ulysse31 · Posted: Sun Jul 24, 2016 7:09 am Post subject:

From what you said it seems that the game writes the coordonate value only after you edit it with CE, if that is the case it means the game detects the value you wrote as wrong and over writes it, you'd need to backtrace this function and see where the game value comes from, it could be sent by server and it could be a client sided check.

alesyt0h · Newbie cheater Reputation: 0 Joined: 12 Aug 2015 Posts: 19

Thanks ulysse3131 !!

I did a lot of tests this morning and the results are very good I think.

With that code Im able to teleport myself over me, I was on 358.76 ported to 398.76 then I fall and die Razz

However for teleport to x,y,z in one time I think its difficult, I did another script just like that one, but for y coord, put the z script and the y script on toggle and played with them for a while till I've found a way for teleport.

Had to make the script like this: