| View previous topic :: View next topic |
| Author |
Message |
dlclex How do I cheat?
Reputation: 0
Joined: 01 May 2022 Posts: 4
|
Posted: Sun May 01, 2022 4:31 am Post subject: PointerScan on object shows only one pointer with another ad |
|
|
PointerScan on object shows only one pointer with another address. What do i do wrong?
| Description: |
|
| Filesize: |
14.41 KB |
| Viewed: |
1531 Time(s) |

|
| Description: |
|
| Filesize: |
57.03 KB |
| Viewed: |
1531 Time(s) |

|
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 474
Joined: 09 May 2003 Posts: 25953 Location: The netherlands
|
Posted: Sun May 01, 2022 4:34 am Post subject: |
|
|
pointerpath may only reside in this region should be from 0 to 7fffffffffff
_________________
Tools give you results. Knowledge gives you control.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
dlclex How do I cheat?
Reputation: 0
Joined: 01 May 2022 Posts: 4
|
Posted: Sun May 01, 2022 4:56 am Post subject: |
|
|
Like this?
I start scan, get a lot of result, restart app, get object new address, then rescan with this address and get zero results
Context:
Trying to hack my simple program written on c#
object from CE is CurrentPerson from code
| Code: | namespace Test;
public class Program
{
public static Person CurrentPerson;
public static void Main()
{
CurrentPerson = new Person();
while (true)
{
Console.WriteLine(CurrentPerson.metr++);
Console.ReadLine();
}
}
}
public class Person
{
public int metr;
} |
| Description: |
|
| Filesize: |
17.05 KB |
| Viewed: |
1517 Time(s) |

|
| Description: |
|
| Filesize: |
94 KB |
| Viewed: |
1517 Time(s) |

|
| Description: |
|
| Filesize: |
101.41 KB |
| Viewed: |
1515 Time(s) |

|
| Description: |
|
| Filesize: |
56.21 KB |
| Viewed: |
1516 Time(s) |

|
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 474
Joined: 09 May 2003 Posts: 25953 Location: The netherlands
|
Posted: Sun May 01, 2022 5:16 am Post subject: |
|
|
I recommend checking "Allow stack addresses of the first thread(s)"
Also, why do you think the base address of the pointer is going to be in that region? It's possible the pointer is actually stored in one of the clr modules
(And you're better of using .net info)
_________________
Tools give you results. Knowledge gives you control.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
dlclex How do I cheat?
Reputation: 0
Joined: 01 May 2022 Posts: 4
|
Posted: Sun May 01, 2022 12:56 pm Post subject: Need help |
|
|
Thank you for the help, I found my variable.
Now I want to call function. I use internal c# dll for this.
But main question is how to find function. I read a lot of guides about this, but my code still don't work.
Check my steps please.
For calling function I use delegate
| Code: |
delegate void Add(int n);
|
and
| Code: |
Marshal.GetDelegateForFunctionPointer<Add>(<IntPtr>)
|
I remebmer it is possible I did it with AssaultCube a few years ago
Either error in steps, either in code, because app crashes with this error:
| Code: |
[process exited with code 3221225477 (0xc0000005)]
|
| Description: |
| Found one row with mov and one above with call. This is static pointers to function? I tried to use them addresses, but program crashes |
|
| Filesize: |
116.37 KB |
| Viewed: |
1428 Time(s) |

|
| Description: |
|
| Filesize: |
64.58 KB |
| Viewed: |
1424 Time(s) |

|
| Description: |
| Then toggle breakpoint on this row |
|
| Filesize: |
70.24 KB |
| Viewed: |
1425 Time(s) |

|
| Description: |
| Find out what writes in variable |
|
| Filesize: |
57.03 KB |
| Viewed: |
1430 Time(s) |

|
|
|
| Back to top |
|
 |
|