No More EndBanner

[znoen]

I hate this banner...


#Define ADR_NoEndBanner 0x8D62F8 //12-8

Pattern to always find this addy

DWORD NoEndBanner = FindPattern((PBYTE)"\x68\xF8\x00\x8D\x00\x50\xFF\x15\xF0\x00\x00\x00\x83\xC4\x0C", "xx?xxxxxx??xxxx", 1, true);

Code to modify text buffer (tnx @AeroMan More info)

void WriteMemory(void *adr, void *ptr, int size)
{
	DWORD dwback;
	VirtualProtect(adr, size, PAGE_EXECUTE_READWRITE, &dwback);
	memcpy(adr, ptr, size);
	VirtualProtect(adr, size, dwback, &dwback);
}

Change the Banner to something random

WriteMemory((void *)ADR_NoEndBanner, (PBYTE)"https://www.mpgh.net", 20);

Now you never have to see it again :3

[WhiteHat PH]

Good Job Bro! how about if i change it to WriteMemory((void *)ADR_NoEndBanner, (PBYTE)"https://www.mpgh.net", 20);

[znoen]

Good Job Bro! how about if i change it to WriteMemory((void *)ADR_NoEndBanner, (PBYTE)"https://www.mpgh.net", 20);

Great idea

[[MPGH]Mayion]

Great share.

[_PuRe.LucK*]

naice : - ).

[pusongbato]

good job, thanks for sharing

[darkmanzp96]

Why You Hate It

[AeroMan]

Remember not to override the original buffer
Goodjob!

[WhiteHat PH]

@AeroMan So what is the orriginal buffer ? if we use 20 what happen ?

[AeroMan]

@AeroMan So what is the orriginal buffer ? if we use 20 what happen ?

each byte has a particular function, if your original buffer is for example: https://www.mpgh.net <- that's 19 bytes.
If you then overwrite this function with a text for example: https://ImaginaryTextExample.com <- which is obviously alot longer you are going to overwrite more bytes, meaning you will overwrite another function which may result in a crash.

[WhiteHat PH]

Thank for the great info Sir