Hackshield Ghetto Bypass (and tutorial)

[deadnesser]

So you want to make another bypass? Well at least read through my previous tutorial first so I can just cut straight to the goodies. Basically, just getting rid of hackshield and preventing it from even starting isn't the easiest way to make a bypass. But it is possible. This tutorial will show you how to make an engine that is compatible with something like MHS by L.Spiro.

First step, unpack the newest engine.
Now fix the crc32 (0954F8BC) and start up combat arms.
Start up MHS and join a server and see what your problem is.
The error is, "A hacking tool has been discovered..."
So open the engine in ollydbg and search for all refrenced text strings.
Now make a search for "A hacking tool"
Your result should be

00505D55  |. 68 D0BD6600    PUSH Engine.0066BDD0                     ;  ASCII "A hacking tool has been discovered in the following location so the program has been shut down.
(%s)"

Scrolling up you should see

00505D3A  |.^74 BA          JE SHORT Engine.00505CF6

Now open up engine.exe in a hex editor and change

74 BA

to

75 BA

(Make sure its the right binary string)
Now fix the crc32, run combat arms, open MHS, and join a server.
Congrats everything is running golden!

Credits:
*************.net
Zephyrous
DeadlyData
Fyyre
pooping99
King-Orgy

Tools used:
OllyDbg 1.10
https://www.ollydbg.de/odbg110.zip
PE Explorer
Download PE Explorer/Editor application, DLL Viewer, EXE Ressource Editor and Disassembler, Borland Delphi EXE Editor.
PEiD
https://www.peid.info/files/PEiD-0.94-20060510.zip
crc32 plugin
https://www.peid.info/plugins/crc32-gelios.zip
MHS
L. Spiro's Memory Hacking Software

To use the bypassed engine overwrite your current engine in your combat arms folder.

[Iwin]

I just cant find "A Hacking tool" string.

Idk what i'm doing wrong ffs.

[wrenbb]

All of this is beyond my scope of knowledge but I still read on. Why? I am amazed by 2 things in this thread.

1) that people actually understand this stuff adn are going through all of this to create a free bypass. Big fat sloppy kudos to all of you. Then there is #2.
2) The stupidity of leeches like tehwolfe. It amazes me how he can sit here waiting to leech all of this hard work and get a e-pat on the back when he dumps it on another site w/o crediting all of you. On top of that he seems to NOT contributing the knowledge he is trying to make us believe he has and is instead being complete dick to everyone. I am amazed he hasnt been banned yet.

To those of you working on this issue we love you and to choobs like tehwolfe I hop that tree fucks you back.

PS Droppoint I love the response. Can you say PWND!!!!!!!!!

[kingpop91770]

Did I ever say rename your hsupdate or hs folder? No
Rename those back to what they were

I never renamed the HShield Folder....Noob. Failed. With. Hacks. And. Life.

[Hautkopf1488]

So you want to make another bypass? Well at least read through my previous tutorial first so I can just cut straight to the goodies. Basically, just getting rid of hackshield and preventing it from even starting isn't the easiest way to make a bypass. But it is possible. This tutorial will show you how to make an engine that is compatible with something like MHS by L.Spiro.

First step, unpack the newest engine.
Now fix the crc32 (0954F8BC) and start up combat arms.
Start up MHS and join a server and see what your problem is.
The error is, "A hacking tool has been discovered..."
So open the engine in ollydbg and search for all refrenced text strings.
Now make a search for "A hacking tool"
Your result should be

00505D55  |. 68 D0BD6600    PUSH Engine.0066BDD0                     ;  ASCII "A hacking tool has been discovered in the following location so the program has been shut down.
(%s)"

Scrolling up you should see

00505D3A  |.^74 BA          JE SHORT Engine.00505CF6

Now open up engine.exe in a hex editor and change

74 BA

to

75 BA

(Make sure its the right binary string)
Now fix the crc32, run combat arms, open MHS, and join a server.
Congrats everything is running golden!

Credits:
*************.net
Zephyrous
DeadlyData
Fyyre
pooping99
King-Orgy

Tools used:
OllyDbg 1.10
https://www.ollydbg.de/odbg110.zip
PE Explorer
Download PE Explorer/Editor application, DLL Viewer, EXE Ressource Editor and Disassembler, Borland Delphi EXE Editor.
PEiD
https://www.peid.info/files/PEiD-0.94-20060510.zip
crc32 plugin
https://www.peid.info/plugins/crc32-gelios.zip
MHS
L. Spiro's Memory Hacking Software

To use the bypassed engine overwrite your current engine in your combat arms folder.

Thanks very much, i appreciate this, i will use this along with one of my fellow coders to see what we cant come up with.

[Iwin]

I cant find A Hacking Attempt no matter what I do, can someone help?

[Riot1337]

Download PEID and the crc32 plugin.
Then open PEID and open up the original engine.
Then look at the crc32 using the plugin tray at the bottom.
Copy this crc32 value, and then open up your modified engine.
Then paste the copied crc32 value using the plugin and click fix it.

LOL! nvm got it just needed to put it in the plugin folder xD

Edit: Works perfectly thanks man

[Iwin]

Nevermind I found it =))

[Phaze228]

Thanks man..i was actually attempting this
so your tut helped me out

[Riot1337]

the only thing that sucks about this is that hackshield is still running and that changes all the memory around =\
Example: opk vac... the aobs dont work anymore since hackshield is still running and the memory is scrabbled

[king.joker.9]

O.O so it preety much screws up too the memory? still its a bypasser i needed one of these a while back a file was locked otno my computer and well combat arms always saw it >:O

[deadnesser]

the only thing that sucks about this is that hackshield is still running and that changes all the memory around =
Example: opk vac... the aobs dont work anymore since hackshield is still running and the memory is scrabbled

Since my engine uses different offsets for eveything you will need to make unique hacks for everything using this bypass. Sorry

[Riot1337]

O.O so it preety much screws up too the memory? still its a bypasser i needed one of these a while back a file was locked otno my computer and well combat arms always saw it >:O

ya its better than nothing but now u cant have 1 stable address u just have to keep rescanning pretty much .. not sure about pointers didnt test yet...

(*hehe now i can bak to fly hacking/underground hack since the scan method for it only works when hackshield is working lol... bad thing is i have to keep rescanning every game =\*) but yea its public and has been for long time when MHS wasn't patched

[XxxMattstaxxX]

uhh OMG!! How in world do i use this? Please give me a (TUT)

[Iwin]

This is a tut Matt ^^

But there is another more powerful way of bypassing using ollydbg.

[iTzAlViN]

Doesn't work... well for me atleast, do i have to do everything on the tutorial or i just replace your Engine with the normal Engine in CA folder, cause that's what i did then i tried to the old hacks but it didn't work