Thread: Hook Detected

Page 2 of 4 FirstFirst 1234 LastLast
Results 16 to 30 of 48
  1. #16
    .::SCHiM::.'s Avatar
    Join Date
    Sep 2010
    Gender
    male
    Posts
    733
    Reputation
    180
    Thanks
    880
    My Mood
    Twisted
    Quote Originally Posted by whit View Post
    He hooks Present & Reset i Believe....
    Would that work with chams? (can you disable the depth buffer from there?)
    And why would you want to hook reset?

    I'm SCHiM

    Morals derive from the instinct to survive. Moral behavior is survival behavior above the individual level.

    Polymorphic engine
    Interprocess callback class
    SIN
    Infinite-precision arithmetic
    Hooking dynamic linkage
    (sloppy)Kernel mode Disassembler!!!

    Semi debugger




  2. #17
    Se lutar tú vai além, humilde igual Jesus.
    MPGH Member
    Turbulence's Avatar
    Join Date
    Aug 2010
    Gender
    male
    Posts
    2,181
    Reputation
    10
    Thanks
    742
    My Mood
    Pensive
    Quote Originally Posted by whit View Post
    He hooks Present & Reset i Believe....
    @whit, you have Detour that works?
    @topblast give your opnion please..

  3. #18
    topblast's Avatar
    Join Date
    Mar 2010
    Gender
    male
    Location
    Far from around you Programmer: C++ | VB | C# | JAVA
    Posts
    3,607
    Reputation
    149
    Thanks
    5,052
    My Mood
    Cool
    Quote Originally Posted by whit View Post
    Prolly Just Your Detour....Single JMP is easily Detected...
    How can they be a single JMP function ()

    JMP (ADDRESS HERE)


    My, mhmm opinion is if you weren't hooking DIP you will not DC . Just use NX charms, or hook a Function CALLED by DIP!


    I am so smart !
    Last edited by topblast; 05-25-2011 at 01:40 PM.
    I just like programming, that is all.

    Current Stuff:

    • GPU Programmer (Cuda)
    • Client/Server (Cloud Server)
    • Mobile App Development

  4. #19
    .::SCHiM::.'s Avatar
    Join Date
    Sep 2010
    Gender
    male
    Posts
    733
    Reputation
    180
    Thanks
    880
    My Mood
    Twisted
    Quote Originally Posted by topblast View Post


    How can they be a single JMP function ()

    JMP (ADDRESS HERE)


    My, mhmm opinion is if you weren't hooking DIP you will not DC . Just use NX charms, or hook a Function CALLED by DIP!
    NXchams-> easy shit, did that when I was still in my mothers belly
    So I should hook a deeper function? Aight I can try that.

    Which function do you hook?

    I'm SCHiM

    Morals derive from the instinct to survive. Moral behavior is survival behavior above the individual level.

    Polymorphic engine
    Interprocess callback class
    SIN
    Infinite-precision arithmetic
    Hooking dynamic linkage
    (sloppy)Kernel mode Disassembler!!!

    Semi debugger




  5. #20
    whit's Avatar
    Join Date
    Jan 2010
    Gender
    male
    Posts
    7,159
    Reputation
    490
    Thanks
    2,253
    Quote Originally Posted by topblast View Post
    [SIZE="3"]

    How can they be a single JMP function ()

    JMP (ADDRESS HERE)
    Its The most Common way of hooking
    And you ask how?

  6. #21
    .::SCHiM::.'s Avatar
    Join Date
    Sep 2010
    Gender
    male
    Posts
    733
    Reputation
    180
    Thanks
    880
    My Mood
    Twisted
    I've my hook 3 functions deeper now, and it's still detected

    EDIT: I found one cause of the d/c, I used to methods to unwind the stack to the original arguments (mid function hook remember) I commented them out, they were detected for some reason. But now after 2/5 minutes I'm still getting d/c'd

    G2g now though, so first response from me is in about 9 hours. Please post whatever suggestions you have!
    Last edited by .::SCHiM::.; 05-25-2011 at 02:03 PM.

    I'm SCHiM

    Morals derive from the instinct to survive. Moral behavior is survival behavior above the individual level.

    Polymorphic engine
    Interprocess callback class
    SIN
    Infinite-precision arithmetic
    Hooking dynamic linkage
    (sloppy)Kernel mode Disassembler!!!

    Semi debugger




  7. #22
    topblast's Avatar
    Join Date
    Mar 2010
    Gender
    male
    Location
    Far from around you Programmer: C++ | VB | C# | JAVA
    Posts
    3,607
    Reputation
    149
    Thanks
    5,052
    My Mood
    Cool
    Quote Originally Posted by whit View Post
    Its The most Common way of hooking
    And you ask how?
    Jump is not a single Function -.-, it is a keyword. Also it depending of the size it is 1 byte + the address's size
    I just like programming, that is all.

    Current Stuff:

    • GPU Programmer (Cuda)
    • Client/Server (Cloud Server)
    • Mobile App Development

  8. #23
    whit's Avatar
    Join Date
    Jan 2010
    Gender
    male
    Posts
    7,159
    Reputation
    490
    Thanks
    2,253
    Quote Originally Posted by topblast View Post


    Jump is not a single Function -.-, it is a keyword. Also it depending of the size it is 1 byte + the address's size
    No Shit Topblast...I think your half BR

  9. #24
    topblast's Avatar
    Join Date
    Mar 2010
    Gender
    male
    Location
    Far from around you Programmer: C++ | VB | C# | JAVA
    Posts
    3,607
    Reputation
    149
    Thanks
    5,052
    My Mood
    Cool
    Quote Originally Posted by .::SCHiM::. View Post
    I've my hook 3 functions deeper now, and it's still detected
    when you say that, it makes me feel like you just added 3 to your offset, if i am right, I DO NOT MEAN THAT!

    (why are people so slow ?)

    I said "Hook a function CALLED by DIP!"

    K this is how it is,


    Your PTC function

    void ptc(char*cmd)
    {
    __asm{

    push cmd
    call 0xDEADBEEF
    add esp, 4
    }
    }

    Lets explain,



    INSTEAD OF HOOKING PTC, you will hook 0xDEADBEEF, Because that function is CALLED!! CALLED!!! CALLED!!!
    by PTC

    and i said hook a function CALLED!!! CALLED!!! CALLED!!!!!!! by DIP!


    OMG!!!!!!!!





























    *Take Chill Pill!*

    wooo saaaaaa


    Quote Originally Posted by whit View Post
    No Shit Topblast...I think your half BR
    I am NON BR,... Woo SAAAAAAAAAAAAAA


    your just jelly because I have to explain something to you,

    Hater
    Last edited by topblast; 05-25-2011 at 02:07 PM.
    I just like programming, that is all.

    Current Stuff:

    • GPU Programmer (Cuda)
    • Client/Server (Cloud Server)
    • Mobile App Development

  10. #25
    Se lutar tú vai além, humilde igual Jesus.
    MPGH Member
    Turbulence's Avatar
    Join Date
    Aug 2010
    Gender
    male
    Posts
    2,181
    Reputation
    10
    Thanks
    742
    My Mood
    Pensive
    topblast you is the more smart .... jajajajjsjsjsaas

    but the my hack, dc after that i packed he...

  11. #26
    topblast's Avatar
    Join Date
    Mar 2010
    Gender
    male
    Location
    Far from around you Programmer: C++ | VB | C# | JAVA
    Posts
    3,607
    Reputation
    149
    Thanks
    5,052
    My Mood
    Cool
    jajajaja

    I use PEcompact
    I just like programming, that is all.

    Current Stuff:

    • GPU Programmer (Cuda)
    • Client/Server (Cloud Server)
    • Mobile App Development

  12. #27
    Se lutar tú vai além, humilde igual Jesus.
    MPGH Member
    Turbulence's Avatar
    Join Date
    Aug 2010
    Gender
    male
    Posts
    2,181
    Reputation
    10
    Thanks
    742
    My Mood
    Pensive
    Quote Originally Posted by topblast View Post
    jajajaja

    I use PEcompact
    PECompact, VMProtect, PESpin, Themida, MPress, ASpack, Surfpack... and others give DC..

    Then no is the packers, is the detour or other function of hack!

    @topblast
    Analise my hack ?

  13. #28
    topblast's Avatar
    Join Date
    Mar 2010
    Gender
    male
    Location
    Far from around you Programmer: C++ | VB | C# | JAVA
    Posts
    3,607
    Reputation
    149
    Thanks
    5,052
    My Mood
    Cool
    Quote Originally Posted by Turbulence View Post
    PECompact, VMProtect, PESpin, Themida, MPress, ASpack, Surfpack... and others give DC..

    Then no is the packers, is the detour or other function of hack!

    @topblast
    Analise my hack ?
    jajaja
    no,
    I just like programming, that is all.

    Current Stuff:

    • GPU Programmer (Cuda)
    • Client/Server (Cloud Server)
    • Mobile App Development

  14. #29
    Se lutar tú vai além, humilde igual Jesus.
    MPGH Member
    Turbulence's Avatar
    Join Date
    Aug 2010
    Gender
    male
    Posts
    2,181
    Reputation
    10
    Thanks
    742
    My Mood
    Pensive
    Quote Originally Posted by topblast View Post
    jajaja
    no,
    JAJAJAJAJAJA
    get screwed jajajaa

  15. #30
    Alessandro10's Avatar
    Join Date
    Oct 2010
    Gender
    male
    Location
    MPGH.NET
    Posts
    6,140
    Reputation
    215
    Thanks
    4,607
    My Mood
    Busy
    TopJa owned Turb ajaja

Page 2 of 4 FirstFirst 1234 LastLast