| View previous topic :: View next topic |
| Author |
Message |
Bizarro I post too much
Reputation: 0
Joined: 01 May 2007 Posts: 2648
|
Posted: Mon Jun 02, 2008 9:59 am Post subject: [c++]how to bypass wpm and rpm |
|
|
i just tried hookhop method for wpm and rpm, but it seems its still blocked by gg.
anyone know how to bypass it?
_________________
w8 baby.com Banner contest, Come join NOW!!
Check us out for Prize deatils |
|
| Back to top |
|
 |
HomerSexual Grandmaster Cheater Supreme
Reputation: 5
Joined: 03 Feb 2007 Posts: 1657
|
Posted: Mon Jun 02, 2008 11:12 am Post subject: |
|
|
it's blocked on r0 (kernel level)
You have to use a driver like CE does.
_________________
|
|
| Back to top |
|
 |
Bizarro I post too much
Reputation: 0
Joined: 01 May 2007 Posts: 2648
|
Posted: Mon Jun 02, 2008 11:18 am Post subject: |
|
|
how about loading CE driver
_________________
w8 baby.com Banner contest, Come join NOW!!
Check us out for Prize deatils |
|
| Back to top |
|
 |
HomerSexual Grandmaster Cheater Supreme
Reputation: 5
Joined: 03 Feb 2007 Posts: 1657
|
Posted: Mon Jun 02, 2008 11:41 am Post subject: |
|
|
I don't think it's that easy.
You'd have to talk to DB though.
_________________
|
|
| Back to top |
|
 |
Ferocious Advanced Cheater
Reputation: 0
Joined: 06 Feb 2008 Posts: 54
|
Posted: Mon Jun 02, 2008 11:44 am Post subject: |
|
|
if you wanna load CE's driver, you can call the functions by its IOCTL.
_________________
I wanna hack, but I don't know how... |
|
| Back to top |
|
 |
UnLmtD Grandmaster Cheater
Reputation: 0
Joined: 13 Mar 2007 Posts: 894 Location: Canada
|
Posted: Mon Jun 02, 2008 12:02 pm Post subject: |
|
|
| blankrider wrote: | it's blocked on r0 (kernel level)
You have to use a driver like CE does. |
Thing is is that NtWriteVirtualMemory/NtReadVirtualMemory is not the problem since you could rewrite your own routine that does the same thing. The problem is that it hooks an unexported function called KiAttachProcess.
(NtWriteVirtualMemory->KeStackAttachProcess->KiAttachProcess)
_________________
|
|
| Back to top |
|
 |
atom0s Moderator
Reputation: 205
Joined: 25 Jan 2006 Posts: 8588 Location: 127.0.0.1
|
|
| Back to top |
|
 |
tombana Master Cheater
Reputation: 2
Joined: 14 Jun 2007 Posts: 456 Location: The Netherlands
|
Posted: Mon Jun 02, 2008 1:30 pm Post subject: |
|
|
| Like UnLmtD said, you have to bypass KiAttachProcess. It's been asked before here how to do it, but I believe there was no answer. How did you do it Wiccaan?
|
|
| Back to top |
|
 |
atom0s Moderator
Reputation: 205
Joined: 25 Jan 2006 Posts: 8588 Location: 127.0.0.1
|
Posted: Mon Jun 02, 2008 1:55 pm Post subject: |
|
|
| tombana wrote: | | Like UnLmtD said, you have to bypass KiAttachProcess. It's been asked before here how to do it, but I believe there was no answer. How did you do it Wiccaan? |
My main direction saying that mines not detected was meaning just running, not attached to any given process. CE's driver is detected simply by having it running due to the contents and such inside it. Which was what I meant by rewriting to avoid that detection. I don't play anything that uses GameGuard, I downloaded GunBound just to see if my driver was detected by it or not.
_________________
- Retired. |
|
| Back to top |
|
 |
HalfPrime Grandmaster Cheater
Reputation: 0
Joined: 12 Mar 2008 Posts: 532 Location: Right there...On your monitor
|
Posted: Mon Jun 02, 2008 2:25 pm Post subject: |
|
|
There's also an incredibly easy way to use read/write process memory and any other function without any code of your own. This is what I'm currently using and it works on gg protected games. I'm pretty sure I'm the only one who uses my method.
Just think about how gg hooks APIs and find a weak spot. Hook-hopping is one, but there are others.
_________________
|
|
| Back to top |
|
 |
Anden100 Grandmaster Cheater
Reputation: 0
Joined: 20 Apr 2007 Posts: 668
|
Posted: Mon Jun 02, 2008 2:54 pm Post subject: |
|
|
| ive seen some people made Read/WriteProcessMemory using moon Light Engine's driver and .dll
|
|
| Back to top |
|
 |
Bizarro I post too much
Reputation: 0
Joined: 01 May 2007 Posts: 2648
|
Posted: Mon Jun 02, 2008 11:10 pm Post subject: |
|
|
| HalfPrime wrote: | There's also an incredibly easy way to use read/write process memory and any other function without any code of your own. This is what I'm currently using and it works on gg protected games. I'm pretty sure I'm the only one who uses my method.
Just think about how gg hooks APIs and find a weak spot. Hook-hopping is one, but there are others. |
hmm interesting. any more hints?
right now, im stuck with either writing my own drive(which obviously is too much for me) or using Pipe to communicate with injected dll for direct memory access
_________________
w8 baby.com Banner contest, Come join NOW!!
Check us out for Prize deatils |
|
| Back to top |
|
 |
tombana Master Cheater
Reputation: 2
Joined: 14 Jun 2007 Posts: 456 Location: The Netherlands
|
Posted: Tue Jun 03, 2008 2:38 am Post subject: |
|
|
| HalfPrime wrote: | There's also an incredibly easy way to use read/write process memory and any other function without any code of your own. This is what I'm currently using and it works on gg protected games. I'm pretty sure I'm the only one who uses my method.
Just think about how gg hooks APIs and find a weak spot. Hook-hopping is one, but there are others. |
Do you mean dll injection? As for the hooking of API"s, GG hooks RPM in kernel mode so you can't do anything about that from usermode.
|
|
| Back to top |
|
 |
lurc Grandmaster Cheater Supreme
Reputation: 2
Joined: 13 Nov 2006 Posts: 1900
|
Posted: Tue Jun 03, 2008 5:59 am Post subject: |
|
|
Don't say creating a driver is too much for you You can learn anything if you really want to. I did it so you should be able to aswell..
_________________
|
|
| Back to top |
|
 |
HalfPrime Grandmaster Cheater
Reputation: 0
Joined: 12 Mar 2008 Posts: 532 Location: Right there...On your monitor
|
Posted: Tue Jun 03, 2008 11:40 am Post subject: |
|
|
Try writing a program that hooks some APIs. Once you get a good feeling for what GG does, you'll see the flaws in it.
And, no, I don't use dll injection.
As for doing this vs writing a driver. If you write a driver, it may be difficult coding, but you'll know exactly how to do it since there's tuts, help, etc. If it ever gets patched, you could easily bypass it again. If you want to do it this way, it won't require coding, but you run the risk of wasting your time if you don't find it and you may not be able to bypass it if it gets patched.
_________________
|
|
| Back to top |
|
 |
|