Results 1 to 9 of 9
  1. #1
    debohax's Avatar
    Join Date
    Sep 2009
    Gender
    male
    Posts
    380
    Reputation
    13
    Thanks
    1,544
    My Mood
    Busy

    Source discussion..

    Hey coders can you use this to make some nice publics :Wink:

    Windows XP___


    Code:
    #define HS_JMP            0x63B31D
    #define HS_JMP2            0x63B323
    
    typedef int            (__cdecl *HS_GetProcAddress_t)( int hModule, int a2 );
    typedef int            (__stdcall *HackshieldComm_t )( int, void*, void* );
    typedef signed int    (__stdcall *KickProc_t)( int a1, int a2, int a3 );
    
    HS_GetProcAddress_t                pHS_GetProcAddress        = NULL;
    HackshieldComm_t                pHackshieldComm            = NULL;
    KickProc_t                        pKickProc                = NULL;
    
    signed int __stdcall new_KickProc( int a1, int a2, int a3 )
    {
        return 1;
    }
    
    int __stdcall new_HackshieldComm( int hsCommCode, void *Param1, void *Param2 )
    {
        if( hsCommCode == 4 || hsCommCode == 5 || hsCommCode == 13 ) //kill!
        {
            if( hsCommCode == 4 ) //replace kick proc
            {
                DWORD *dwParam1 = (DWORD *)Param1;
    
                pKickProc    = (KickProc_t)*dwParam1;
                *dwParam1    = (DWORD)new_KickProc;
            }
    
            int iReturn = pHackshieldComm( hsCommCode, Param1, Param2 );
    
            return 1;
        }
    
        int iReturn = pHackshieldComm( hsCommCode, Param1, Param2 );
    
        return iReturn;
    }
    
    void HookCommunication( EXCEPTION_POINTERS* pExceptionInfo )
    {
        DWORD dwEbp        = pExceptionInfo->ContextRecord->Ebp;
        DWORD dwParam2    = 0;
    
        __asm
        {
            push eax;
            push edx;
            mov eax, dwEbp;
            mov edx, [eax+0xC];
            mov dwParam2, edx;
            pop edx;
            pop eax;
        }
    
        if( dwParam2 == 0xA ) //this is the ordinal of some export...hmm..
        {
            pHackshieldComm                        = (HackshieldComm_t)pExceptionInfo->ContextRecord->Eax;
            pExceptionInfo->ContextRecord->Eax    = (DWORD)new_HackshieldComm;
        }
    
        pExceptionInfo->ContextRecord->Eip        = HS_JMP2;
    
        return;
    }
    
    PVOID pContextHandler = NULL;
    
    LONG WINAPI ***ExceptionHandler( EXCEPTION_POINTERS* pExceptionInfo )
    {
        if( pExceptionInfo->ExceptionRecord->ExceptionCode != EXCEPTION_SINGLE_STEP )
        {
            return EXCEPTION_CONTINUE_SEARCH;
        }
    
        if( pExceptionInfo->ExceptionRecord->ExceptionAddress == (PVOID)HS_JMP ) 
        {
            HookCommunication( pExceptionInfo );
            return EXCEPTION_CONTINUE_EXECUTION;
        }
    
        return EXCEPTION_CONTINUE_SEARCH;
    }
    
    void InitContextHook()
    {
        pContextHandler = AddVectoredExceptionHandler( 0x50BE17, ***ExceptionHandler );
    
        CONTEXT Context;
        Context.ContextFlags = CONTEXT_DEBUG_REGISTERS;
        GetThreadContext(GetCurrentThread(), &Context);
        Context.Dr0 = HS_JMP;
        Context.Dr7 = (1<<0)|(1<<2)|(1<<4)|(1<<6);
        SetThreadContext(GetCurrentThread(), &Context);


    Windows Vista 64_____


    Code:
    #pragma once
    #define WIN32_LEAN_AND_MEAN
    #include <windows.h>
    
    #if !defined(_M_IX86) && !defined(_M_X64)
    	#error Unsupported platform: build for X86 or X64 only.
    #endif
    
    /* Update these offsets.. */
    #ifdef _M_IX86
    	#define HS_JMP 0x63B31D
    	#define HS_JMP2 0x63B323
    #elif _M_X64
    	#define HS_JMP 0x123456789ABCDEF
    	#define HS_JMP2 0xFEDCBA987654321
    #endif
    
    typedef int ( *hsGetProcAddress_t )( int Module, int a2 );
    typedef int ( WINAPI *HackshieldComm_t )( int, PVOID, PVOID );
    typedef signed int ( WINAPI *KickProc_t )( int a1, int a2, int a3 );
    
    hsGetProcAddress_t hsGetProcAddress = 0;
    HackshieldComm_t HackshieldComm = 0;
    KickProc_t KickProc = 0;
    
    HANDLE vehContextHandler;
    
    WORD WINAPI new_KickProc( int a1, int a2, int a3 )
    {
    	return( TRUE );
    }
    
    int WINAPI new_HackshieldComm( int hsCommCode, PVOID a2, PVOID a3 )
    {
    	/* Kill message */
    	if( hsCommCode == 4 || hsCommCode == 5 || hsCommCode == 13 )
    	{
    		/* Replace the kick procedure */
    		if( hsCommCode == 4 )
    		{
    			KickProc = ( KickProc_t ) *( ( DWORD_PTR * ) a2 );
    			*( ( DWORD_PTR * ) a2 ) = ( DWORD_PTR ) new_KickProc;
    		}
    
    		HackshieldComm( hsCommCode, a2, a3 );
    		return( TRUE );
    	}
    
    	return( HackshieldComm( hsCommCode, a2, a3 ) );
    }
    
    void HookCommunication( EXCEPTION_POINTERS* ExceptionInfo )
    {
    	DWORD Param2;
    	#ifdef _M_IX86
    		Param2 = *( ( DWORD_PTR * ) ExceptionInfo->ContextRecord->Ebp + 12 );
    	#elif _M_X64
    		Param2 = *( ( DWORD_PTR * ) ExceptionInfo->ContextRecord->Rbp + 24 );
    	#endif
    
    	/* This is the ordinal of a specific export.. */
    	if( Param2 == 0xA )
    	{
    		#ifdef _M_IX86
    			HackshieldComm = ( HackshieldComm_t ) ExceptionInfo->ContextRecord->Eax;
    			ExceptionInfo->ContextRecord->Eax = ( DWORD_PTR ) new_HackshieldComm;
    		#elif _M_X64
    			HackshieldComm = ( HackshieldComm_t ) ExceptionInfo->ContextRecord->Rax;
    			ExceptionInfo->ContextRecord->Rax = ( DWORD_PTR ) new_HackshieldComm;
    		#endif
    	}
    
    	#ifdef _M_IX86
    		ExceptionInfo->ContextRecord->Eip = HS_JMP2;
    	#elif _M_X64
    		ExceptionInfo->ContextRecord->Rip = HS_JMP2;
    	#endif
    }
    
    LONG WINAPI ***ExceptionHandler( EXCEPTION_POINTERS* ExceptionInfo )
    {
    	if( ExceptionInfo->ExceptionRecord->ExceptionCode != EXCEPTION_SINGLE_STEP )
    	{
    		return( EXCEPTION_CONTINUE_SEARCH );
    	}
    
    	if( ExceptionInfo->ExceptionRecord->ExceptionAddress == ( PVOID ) HS_JMP ) 
    	{
    		HookCommunication( ExceptionInfo );
    		return( EXCEPTION_CONTINUE_EXECUTION );
    	}
    
    	return( EXCEPTION_CONTINUE_SEARCH );
    }
    
    void InitContextHook( )
    {
    	CONTEXT ctx;
    
    	vehContextHandler = AddVectoredExceptionHandler( 0x50BE17, ***ExceptionHandler );
    
    	ctx.ContextFlags = CONTEXT_DEBUG_REGISTERS;
    	GetThreadContext( GetCurrentThread( ), &ctx );
    
    	ctx.Dr0 = HS_JMP;
    	ctx.Dr7 = 0x55;
    
    	SetThreadContext( GetCurrentThread( ), &ctx );

    Well???

    Credits to: sobiets btw
    Last edited by debohax; 10-27-2009 at 05:10 PM.

  2. #2
    juanrineytor's Avatar
    Join Date
    Sep 2008
    Gender
    male
    Location
    Moo-chang
    Posts
    3,398
    Reputation
    0
    Thanks
    195
    My Mood
    Amused
    There's a source code section now... You should ask in there, but first, Where did you get the code? and for what is it? Bypass, aimbot? what?!

  3. #3
    debohax's Avatar
    Join Date
    Sep 2009
    Gender
    male
    Posts
    380
    Reputation
    13
    Thanks
    1,544
    My Mood
    Busy
    Quote Originally Posted by juanrineytor View Post
    There's a source code section now... You should ask in there, but first, Where did you get the code? and for what is it? Bypass, aimbot? what?!
    Its a Hook and bypass for hackshield (to use any hack). Just needs the detected strings edited out. Takes about a day for a coder to do.

    And I said credit to- sobiet

  4. #4
    JIGS4W's Avatar
    Join Date
    Aug 2009
    Gender
    male
    Posts
    2,912
    Reputation
    48
    Thanks
    156
    I appreciate the idea but next time don't do it here plox


  5. #5
    debohax's Avatar
    Join Date
    Sep 2009
    Gender
    male
    Posts
    380
    Reputation
    13
    Thanks
    1,544
    My Mood
    Busy
    well If it is in the wrong section could a mod/admin move pls I apoligize I dont wanna double post tho.

  6. #6
    headsup's Avatar
    Join Date
    Apr 2009
    Gender
    male
    Location
    Pa
    Posts
    1,232
    Reputation
    8
    Thanks
    207
    My Mood
    Cynical
    Guys look .,,,, He just copied my thread in here and made a new thread and posted my shit!! wtf Ban him or sumthing???????????????

  7. #7
    why06's Avatar
    Join Date
    Jul 2009
    Gender
    male
    Location
    IBM
    Posts
    4,305
    Reputation
    170
    Thanks
    2,194
    My Mood
    Flirty
    Hmmm... I was wondering if anyone noticed that... except he included the one for Vista too. And since it is ******'s bypass I wouldn't get to worked up =/...

    "Every gun that is made, every warship launched, every rocket fired signifies, in the final sense, a theft from those who hunger and are not fed, those who are cold and are not clothed. This world in arms is not spending money alone. It is spending the sweat of its laborers, the genius of its scientists, the hopes of its children. The cost of one modern heavy bomber is this: a modern brick school in more than 30 cities. It is two electric power plants, each serving a town of 60,000 population. It is two fine, fully equipped hospitals. It is some fifty miles of concrete pavement. We pay for a single fighter plane with a half million bushels of wheat. We pay for a single destroyer with new homes that could have housed more than 8,000 people. This is, I repeat, the best way of life to be found on the road the world has been taking. This is not a way of life at all, in any true sense. Under the cloud of threatening war, it is humanity hanging from a cross of iron."
    - Dwight D. Eisenhower

  8. #8
    debohax's Avatar
    Join Date
    Sep 2009
    Gender
    male
    Posts
    380
    Reputation
    13
    Thanks
    1,544
    My Mood
    Busy
    Quote Originally Posted by headsup View Post
    Guys look .,,,, He just copied my thread in here and made a new thread and posted my shit!! wtf Ban him or sumthing???????????????
    Ok first off I didnt copy nothin I didnt even know yall had a source section in this forum thats why they had to move it here I posted this in the hacks section. So get off my nutz..

    And your thread didnt have a copy of this re wrote in 64 bit I just read it. I wasnt copying your post period. Also you didnt give proper credits for the source in your post This was writen by sobiet

    He was the head coder for one of the unspeakable forums. I figured I would post this to see if a coder could edit out the detected strings and make it work again this is 5 month old source but it has the basic constuction of what we need.

    Thats all I didnt know you already posted the xp version or I wouldnt have added it here.

    Well anyways thats all I have to say about that any coders gonna give this a try or what?

  9. #9
    Liz's Avatar
    Join Date
    Feb 2009
    Gender
    female
    Location
    Karnaca
    Posts
    30,677
    Reputation
    4094
    Thanks
    17,851
    My Mood
    Aggressive
    fuck ******


    Click Here to Become a MPGH Premium Member by Donating $25 or More.

    If anyone claims to be me via MSN/Skype/Email or any other source outside of MPGH private or visitor messages, IT'S NOT ME!
    They are trying to trick or scam you. Report them immediately and PM me here for verification.
    "Don’t confuse my personality with my attitude. My personality is who I am. My attitude depends on who you are." — Frank Ocean
    Moderator: 5/2009-10/2009 | GMod: 10/2009-10/2010 | Staff Administrator: 10/2010-Present
     
    Stupid/Pointless Private messages = SPAM, SPAM = BAN.

Similar Threads

  1. CS Source Clan/Server
    By Dave84311 in forum General
    Replies: 20
    Last Post: 10-04-2006, 01:21 PM
  2. Signature of the Week #3 Discussion
    By Bull3t in forum Art & Graphic Design
    Replies: 13
    Last Post: 07-19-2006, 10:41 AM
  3. Signature of the Week #2 Discussion
    By Bull3t in forum Art & Graphic Design
    Replies: 8
    Last Post: 07-11-2006, 10:03 AM
  4. Counter Strike: Source
    By Flawless in forum CounterStrike (CS) 1.6 Hacks / Counter Strike: Source (CSS) Hacks
    Replies: 15
    Last Post: 06-03-2006, 09:28 PM

Tags for this Thread