Results 1 to 11 of 11
  1. #1
    NightmareTX_RETIRED's Avatar
    Join Date
    Apr 2011
    Gender
    male
    Posts
    1,240
    Reputation
    57
    Thanks
    15,075
    My Mood
    Fine

    Question [Discussion] Possible way of faking SteamID?

    Now I don't set it as an official release because I dont know if it does affect the SteamID or not. But there is something I found, using CE, in IW5MP.exe called "STEAMID=" and next to the "=" there is your actual SteamID. I wonder that if you do modify it, do you think that it will make the report option useless?

    My Predictions:

    95% that it wont do squat
    3% that it might work and that when players want to report they will see your avatar and name but the link might redirect them to a fake Profile Page.
    2% That your name and avatar might not show at all

    For those who are expert in hacking, what do you think?

  2. #2
    master131's Avatar
    Join Date
    Apr 2010
    Gender
    male
    Location
    Melbourne, Australia
    Posts
    8,802
    Reputation
    3165
    Thanks
    73,318
    My Mood
    Breezy
    Probably won't work. You could always try if you want though.

    EDIT - I know of a struct array in the game's memory that has a string that contains each player's Steam ID, XUID and whatnot. It only appears when you are host so modifying it *might* work. The address for the 1st player information string (not the actual struct) is located at 0x4C35A00.
    Last edited by master131; 10-29-2012 at 12:56 AM.
    Donate:
    BTC: 1GEny3y5tsYfw8E8A45upK6PKVAEcUDNv9


    Handy Tools/Hacks:
    Extreme Injector v3.6.1 *NEW* Windows 10 compatible!
    A powerful and advanced injector in a simple GUI.
    Can scramble DLLs on injection making them harder to detect and even make detected hacks work again!

    Minion Since: 13th January 2011
    Moderator Since: 6th May 2011
    Global Moderator Since: 29th April 2012
    Super User/Unknown Since: 23rd July 2013
    'Game Hacking' Team Since: 30th July 2013

    --My Art--
    [Roxas - Pixel Art, WIP]
    [Natsu - Drawn]
    [Natsu - Coloured]


    All drawings are coloured using Photoshop.

    --Gifts--
    [Kyle]

  3. #3
    NightmareTX_RETIRED's Avatar
    Join Date
    Apr 2011
    Gender
    male
    Posts
    1,240
    Reputation
    57
    Thanks
    15,075
    My Mood
    Fine
    Modified SteamID and It didnt found my name in the Recent Game Tab. Normally I should see myself no? Althought this window doesnt refresh very often
    @master131

  4. #4
    The0neThe0nly's Avatar
    Join Date
    Oct 2012
    Gender
    male
    Posts
    1
    Reputation
    10
    Thanks
    0
    A while ago in CS:S, you were able to do this and use Console to connect to a game even if you were VAC'd. I'm not sure if it would work in Modern Warfare 3 though, give it a shot.

  5. #5
    master131's Avatar
    Join Date
    Apr 2010
    Gender
    male
    Location
    Melbourne, Australia
    Posts
    8,802
    Reputation
    3165
    Thanks
    73,318
    My Mood
    Breezy
    Quote Originally Posted by NightmareTX View Post
    Modified SteamID and It didnt found my name in the Recent Game Tab. Normally I should see myself no? Althought this window doesnt refresh very often
    @master131
    No, I'm pretty sure you don't see yourself on that list.
    Donate:
    BTC: 1GEny3y5tsYfw8E8A45upK6PKVAEcUDNv9


    Handy Tools/Hacks:
    Extreme Injector v3.6.1 *NEW* Windows 10 compatible!
    A powerful and advanced injector in a simple GUI.
    Can scramble DLLs on injection making them harder to detect and even make detected hacks work again!

    Minion Since: 13th January 2011
    Moderator Since: 6th May 2011
    Global Moderator Since: 29th April 2012
    Super User/Unknown Since: 23rd July 2013
    'Game Hacking' Team Since: 30th July 2013

    --My Art--
    [Roxas - Pixel Art, WIP]
    [Natsu - Drawn]
    [Natsu - Coloured]


    All drawings are coloured using Photoshop.

    --Gifts--
    [Kyle]

  6. #6
    NightmareTX_RETIRED's Avatar
    Join Date
    Apr 2011
    Gender
    male
    Posts
    1,240
    Reputation
    57
    Thanks
    15,075
    My Mood
    Fine
    Quote Originally Posted by master131 View Post
    No, I'm pretty sure you don't see yourself on that list.
    Strange because sometime I do.

    *EDIT*
    1. After a full restart of the game, I can see myself in the Recent Game Tab
    2. Modify SteamID
    3. Started Private Match
    4. My Icon and link is gone.

    To Make Sure:
    1. After a full restart of the game, I can see myself in the Recent Game Tab
    2. DID NOT modify SteamID
    3. Started Private Match
    4. My Icon and link is gone.

    hmmm.....
    Last edited by NightmareTX_RETIRED; 10-29-2012 at 01:23 AM.

  7. #7
    master131's Avatar
    Join Date
    Apr 2010
    Gender
    male
    Location
    Melbourne, Australia
    Posts
    8,802
    Reputation
    3165
    Thanks
    73,318
    My Mood
    Breezy
    Quote Originally Posted by NightmareTX View Post
    Strange because sometime I do
    Well, I don't pay attention to it so yeah. See if you can get a friend to help you test.
    Donate:
    BTC: 1GEny3y5tsYfw8E8A45upK6PKVAEcUDNv9


    Handy Tools/Hacks:
    Extreme Injector v3.6.1 *NEW* Windows 10 compatible!
    A powerful and advanced injector in a simple GUI.
    Can scramble DLLs on injection making them harder to detect and even make detected hacks work again!

    Minion Since: 13th January 2011
    Moderator Since: 6th May 2011
    Global Moderator Since: 29th April 2012
    Super User/Unknown Since: 23rd July 2013
    'Game Hacking' Team Since: 30th July 2013

    --My Art--
    [Roxas - Pixel Art, WIP]
    [Natsu - Drawn]
    [Natsu - Coloured]


    All drawings are coloured using Photoshop.

    --Gifts--
    [Kyle]

  8. #8
    NightmareTX_RETIRED's Avatar
    Join Date
    Apr 2011
    Gender
    male
    Posts
    1,240
    Reputation
    57
    Thanks
    15,075
    My Mood
    Fine
    Quote Originally Posted by master131 View Post
    Well, I don't pay attention to it so yeah. See if you can get a friend to help you test.
    Yeah. that would be best

  9. #9
    master131's Avatar
    Join Date
    Apr 2010
    Gender
    male
    Location
    Melbourne, Australia
    Posts
    8,802
    Reputation
    3165
    Thanks
    73,318
    My Mood
    Breezy
    @NightmareTX The string edit alone probably isn't going to work because the game uses an int64 to hold the XUID/Steam ID value in the same struct. The address of this 8 byte value is for the first player is at 0x4C79C0A. Set the value to anything apart from zero and see what happens. There's also another one at 0x4C7A658.

    I can also think of another method to fake Steam ID by modifying a function in steam_api.dll to return a fake Steam ID but that can be risky because I'm not sure if VAC checks for modifications on it.
    Last edited by master131; 10-30-2012 at 08:25 PM.
    Donate:
    BTC: 1GEny3y5tsYfw8E8A45upK6PKVAEcUDNv9


    Handy Tools/Hacks:
    Extreme Injector v3.6.1 *NEW* Windows 10 compatible!
    A powerful and advanced injector in a simple GUI.
    Can scramble DLLs on injection making them harder to detect and even make detected hacks work again!

    Minion Since: 13th January 2011
    Moderator Since: 6th May 2011
    Global Moderator Since: 29th April 2012
    Super User/Unknown Since: 23rd July 2013
    'Game Hacking' Team Since: 30th July 2013

    --My Art--
    [Roxas - Pixel Art, WIP]
    [Natsu - Drawn]
    [Natsu - Coloured]


    All drawings are coloured using Photoshop.

    --Gifts--
    [Kyle]

  10. #10
    rawr im a tiger's Avatar
    Join Date
    Feb 2012
    Gender
    male
    Location
    On the edge of Sanity
    Posts
    238
    Reputation
    40
    Thanks
    1,017
    My Mood
    Angelic
    Quote Originally Posted by master131 View Post
    @NightmareTX The string edit alone probably isn't going to work because the game uses an int64 to hold the XUID/Steam ID value in the same struct. The address of this 8 byte value is for the first player is at 0x4C79C0A. Set the value to anything apart from zero and see what happens. There's also another one at 0x4C7A658.

    I can also think of another method to fake Steam ID by modifying a function in steam_api.dll to return a fake Steam ID but that can be risky because I'm not sure if VAC checks for modifications on it.
    ie. CSteamID CSteamUser014::GetPlayerSteamID()? If you hook that and IsVacBanned, you'd probably be able to play in private matches while banned.

    As for spoofing ID as a variable, I'm no protocol expert, but I think steam requires validation and does a server-side VAC Ban check before allowing you to auth to DemonWare.

  11. #11
    master131's Avatar
    Join Date
    Apr 2010
    Gender
    male
    Location
    Melbourne, Australia
    Posts
    8,802
    Reputation
    3165
    Thanks
    73,318
    My Mood
    Breezy
    Quote Originally Posted by rawr im a tiger View Post
    ie. CSteamID CSteamUser014::GetPlayerSteamID()? If you hook that and IsVacBanned, you'd probably be able to play in private matches while banned.

    As for spoofing ID as a variable, I'm no protocol expert, but I think steam requires validation and does a server-side VAC Ban check before allowing you to auth to DemonWare.
    Yes, that's what I was referring to. And if anyone is interested in the psuedo-code, here it is (for 1.9.453):
    Code:
    // 0x3B418448 is a pointer to the current player's ISteamUser class
    steamUserStruct = Read<IntPtr>(0x3B418448);
    
    // The first value of the ISteamUser class is a pointer to a virtual method table
    vTableAddress = Read<IntPtr>(steamUserStruct);
    
    // The GetSteamID function is the 3rd one in the VMT.
    // +0 = GetHSteamUser
    // +4 = BLoggedOn
    // +8 = GetSteamID
    getSteamIDMethodPtr = (IntPtr)(vTableAddress.ToInt64() + 0x8); 
    
    // Read the pointer to the function
    getSteamIDMethodAddress = Read<IntPtr>(getSteamIDMethodPtr); 
    
    // Now modify the function at getSteamIDMethodAddress to do whatever, like return
    // a fake CSteamID value (essentially an int64 which is stored as an EAX and EDX value).
    // Example, to return a Steam ID of 0xDEADBEEFBEEFDEAD, we'd replace the function with this:
    // mov eax, BEEFDEAD
    // mov edx, DEADBEEF
    // ret
    Thanks to VoiDeD for making Open Steamworks public. :3

    IntPtr can be replaced with Int32/Integer since all pointers in 32-bit processes are only 4 bytes long.
    Last edited by master131; 10-31-2012 at 06:56 AM.
    Donate:
    BTC: 1GEny3y5tsYfw8E8A45upK6PKVAEcUDNv9


    Handy Tools/Hacks:
    Extreme Injector v3.6.1 *NEW* Windows 10 compatible!
    A powerful and advanced injector in a simple GUI.
    Can scramble DLLs on injection making them harder to detect and even make detected hacks work again!

    Minion Since: 13th January 2011
    Moderator Since: 6th May 2011
    Global Moderator Since: 29th April 2012
    Super User/Unknown Since: 23rd July 2013
    'Game Hacking' Team Since: 30th July 2013

    --My Art--
    [Roxas - Pixel Art, WIP]
    [Natsu - Drawn]
    [Natsu - Coloured]


    All drawings are coloured using Photoshop.

    --Gifts--
    [Kyle]

  12. The Following 5 Users Say Thank You to master131 For This Useful Post:

    aIW|Convery (10-31-2012),Birdpoop (11-01-2012),Geomatrical the 7th (10-31-2012),KeyTools (11-09-2012),rawr im a tiger (10-31-2012)

Similar Threads

  1. Theres a way to fake the hshield update!!!
    By hi9110 in forum Combat Arms Discussions
    Replies: 24
    Last Post: 09-13-2009, 10:51 AM
  2. Possible way to disable hackshield
    By g187rideordie in forum Combat Arms Discussions
    Replies: 48
    Last Post: 09-13-2009, 08:44 AM
  3. Possible way to make a fly hack!
    By Ragehax in forum Combat Arms Hacks & Cheats
    Replies: 30
    Last Post: 08-22-2009, 02:03 PM
  4. Any possible way to make a new Shop Hack?
    By TylerX in forum Combat Arms Hacks & Cheats
    Replies: 12
    Last Post: 11-06-2008, 09:36 PM
  5. Possible Ways Of Hacking HackShield Pro
    By kevi3434 in forum Combat Arms Hacks & Cheats
    Replies: 4
    Last Post: 09-03-2008, 07:05 AM