Results 1 to 7 of 7
  1. #1
    jaydeeph's Avatar
    Join Date
    Feb 2011
    Gender
    male
    Posts
    63
    Reputation
    10
    Thanks
    153
    My Mood
    Blah

    Application Detection/Undetection

    So lets say I just released a hack/macro. And after a few days it gets detected, but not patched. How is XingCode detecting it? Via memory? Or when something is hooked/attached into the game?

    Also since it's only detected, if I re-compile my application would it still work?
    I'm thinking to create a macro which has the functions like Builder and Stub. So the member can create the macro, (of course not literally create, re-create the application with existing codes in the stub), since the executable is re-created would that make it undetected again?

    Thanks.

  2. The Following User Says Thank You to jaydeeph For This Useful Post:

    .Lawliet (05-26-2014)

  3. #2
    zZzeta/S's Avatar
    Join Date
    Apr 2012
    Gender
    male
    Location
    Germany
    Posts
    1,061
    Reputation
    43
    Thanks
    2,082
    Live: Open Handles can lead to a scan, random scans, strings, writing to read only pages, IAT, Peb(linked modules), Splicing hooks also known as detours, and signatures

    Static: Fileinfos in combination with size, strings(pdb path for ex), IAT.

    Catch-on Scans: Xigncode stores some detections in temp under a random file with dll extension, mui cache.
    Quote Originally Posted by Jabberwo0ck View Post
    Quote Originally Posted by uNrEaL View Post
    Cool, thanks!
    Ccman has gone too low. I've known for a long time he was sneaky.
    >top lel much crack many get so download wow

  4. #3
    jaydeeph's Avatar
    Join Date
    Feb 2011
    Gender
    male
    Posts
    63
    Reputation
    10
    Thanks
    153
    My Mood
    Blah
    Quote Originally Posted by zZzeta/S View Post
    Live: Open Handles can lead to a scan, random scans, strings, writing to read only pages, IAT, Peb(linked modules), Splicing hooks also known as detours, and signatures

    Static: Fileinfos in combination with size, strings(pdb path for ex), IAT.

    Catch-on Scans: Xigncode stores some detections in temp under a random file with dll extension, mui cache.
    Thanks @zZzeta/S I understood half the thing you said, lol. Just lack the knowledge but fear not I'm learning. Could you please tell me what IAT stands for? Because googling just "IAT" wont help.

  5. #4
    zZzeta/S's Avatar
    Join Date
    Apr 2012
    Gender
    male
    Location
    Germany
    Posts
    1,061
    Reputation
    43
    Thanks
    2,082
    Quote Originally Posted by jaydeeph View Post
    Thanks @zZzeta/S I understood half the thing you said, lol. Just lack the knowledge but fear not I'm learning. Could you please tell me what IAT stands for? Because googling just "IAT" wont help.
    Import Address Table. Another section in any valid PE file. If you use a func like GetAsyncKeyState there will be an import to User32.dll with GetAsyncKeyState addr.

    Oh and I forogt return adress checks on certain funcs
    Quote Originally Posted by Jabberwo0ck View Post
    Quote Originally Posted by uNrEaL View Post
    Cool, thanks!
    Ccman has gone too low. I've known for a long time he was sneaky.
    >top lel much crack many get so download wow

  6. #5
    jaydeeph's Avatar
    Join Date
    Feb 2011
    Gender
    male
    Posts
    63
    Reputation
    10
    Thanks
    153
    My Mood
    Blah
    Quote Originally Posted by zZzeta/S View Post
    Import Address Table. Another section in any valid PE file. If you use a func like GetAsyncKeyState there will be an import to User32.dll with GetAsyncKeyState addr.

    Oh and I forogt return adress checks on certain funcs
    Ohh that makes a lot more sense now. Thanks a lot mate. Rep++ if I can.
    Edit: Offtopic: What's the name of the anime on your profile pic? Looks cool.
    Last edited by jaydeeph; 05-24-2014 at 06:45 AM.

  7. #6
    zZzeta/S's Avatar
    Join Date
    Apr 2012
    Gender
    male
    Location
    Germany
    Posts
    1,061
    Reputation
    43
    Thanks
    2,082
    Black Rock Shooter
    Quote Originally Posted by Jabberwo0ck View Post
    Quote Originally Posted by uNrEaL View Post
    Cool, thanks!
    Ccman has gone too low. I've known for a long time he was sneaky.
    >top lel much crack many get so download wow

  8. The Following User Says Thank You to zZzeta/S For This Useful Post:

    jaydeeph (05-25-2014)

  9. #7
    jaydeeph's Avatar
    Join Date
    Feb 2011
    Gender
    male
    Posts
    63
    Reputation
    10
    Thanks
    153
    My Mood
    Blah
    Quote Originally Posted by zZzeta/S View Post
    Black Rock Shooter
    Thanks bro .
    @Riddick requesting a close on this thread, thanks bro.

Similar Threads

  1. [Detected] Black Light v1 ; Makes Detected Hacks Become Undetected
    By FoSho' in forum Combat Arms Europe Hacks
    Replies: 369
    Last Post: 02-12-2013, 01:03 PM
  2. [Application] Undetected Module Maker V1.0
    By radnomguywfq3 in forum Visual Basic Programming
    Replies: 72
    Last Post: 12-31-2009, 07:50 AM
  3. Cheat engine detected/undetected (I am confused!!!)
    By Logica in forum General Game Hacking
    Replies: 11
    Last Post: 08-16-2008, 06:16 AM
  4. here is Undetected + detected hack
    By sukh13 in forum WarRock - International Hacks
    Replies: 16
    Last Post: 10-27-2007, 03:42 AM
  5. Are These Detected Or Undetected
    By portugal18 in forum WarRock - International Hacks
    Replies: 3
    Last Post: 07-13-2007, 04:26 PM