Injection

[gomomo]

Hi guys, I wonder which injection method are you using?

Xtrap detects my dll even If I put a simple messagebox in dllmain and it still gets detected.

#include <windows.h>
#include <process.h>


UINT WINAPI testfunc(VOID *)
{
    MessageBoxA(0, " test",  "test",  0);
	return 1;
}

BOOL WINAPI DllMain(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID lpvReserved)
{
    if ( fdwReason == 1 )
    {
        _beginthreadex(0, 0, testfunc, 0, 0, 0);
    }
    return 1;
}

Thanks

[rabir007]

Put the MessageBox into the DllMain, before the BeginThreadEx

[gomomo]

Put the MessageBox into the DllMain, before the BeginThreadEx

Are you serious...? I'm not talking about the messagebox, I'm talking about xtrap detection...

[Palestine_Freedom]

Hi guys, I wonder which injection method are you using?

Xtrap detects my dll even If I put a simple messagebox in dllmain and it still gets detected.

#include <windows.h>
#include <process.h>


UINT WINAPI testfunc(VOID *)
{
    MessageBoxA(0, " test",  "test",  0);
	return 1;
}

BOOL WINAPI DllMain(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID lpvReserved)
{
    if ( fdwReason == 1 )
    {
        _beginthreadex(0, 0, testfunc, 0, 0, 0);
    }
    return 1;
}

Thanks

X-Trap is detecting Dynamic Link Library (DLL) when injecting to crossfire.exe, there's a method been posted which all are using it now.
https://www.mpgh.net/forum/242-crossf...-hacks-ud.html

[Pingo]

@gomomo
Let us know how you get on with that method Palestine_Freedom linked you to.

I used to use a little app i made for fixing the dll.
[IMG]https://i203.photobucke*****m/albums/aa29/Baxter_esa/PatcherScreen_zps9767ac7e.png[/IMG]

Just tested it and still works. Let me know if you want a copy.
I don't mess with CF much anymore so i don't mind sharing it.
Straight forward to use, click the button and choose a dll.
The original dll is replaced with the fixed one.

[rabir007]

Are you serious...? I'm not talking about the messagebox, I'm talking about xtrap detection...

Xtrap detecting the way your hack works... So all you have to do, is to change the way...
I mean the algorithm

[Palestine_Freedom]

@gomomo
Let us know how you get on with that method Palestine_Freedom linked you to.

I used to use a little app i made for fixing the dll.
[IMG]https://i203.photobucke*****m/albums/aa29/Baxter_esa/PatcherScreen_zps9767ac7e.png[/IMG]

Just tested it and still works. Let me know if you want a copy.
I don't mess with CF much anymore so i don't mind sharing it.
Straight forward to use, click the button and choose a dll.
The original dll is replaced with the fixed one.

Can you share your program with me please ? i am too much lazy to download Windows SDK (:.