SIMPLE BUNNY HOP HACK CS:GO

Simple Bunny Hop Hack for CS:GO.
It does not jump, when u are chatting or writing in console.

Insrtuction:
>Run CS:GO
>Run BunnyHop

End - toggle hack.

VirusTotalⓘ
Jotti's malware scanⓘ

Credits -> SP1K3

i wrote a unique module for work with memory of process, because all credits to me.

SIMPLE BUNNYHOP HACK_mpgh.net.zip8 KB · 467 downloads 4/67 malicious

Download & Thanks

/Approved. Post back results and as always, use at your own risk. Also, next time make sure not to just scan the hack with VirusTotal, but also to scan it with Jotti's malware scanⓘ and post the link to the scan here. I've added it for you this time.

Nice, Ill check it out

Don't know what I'm doing wrong but it doesn't seem to work. I start CS:GO and as soon as the menu appears
I launch the exe. I joined a casual match and have the cheat enabled, I hold space and nothing. Any idea why?

yo, is this vac bannable?

Originally Posted by robrulz123

yo, is this vac bannable?

Yes, it is.

work perfectly..

thanks man, much better than the previous.
+thanks for update

Can you release the source?

Originally Posted by godlvl

Can you release the source?

External BHOP's are easy, for the chat you need to find the offset I guess with trial and error.

Originally Posted by godlvl

Can you release the source?

Lol, the source is right in front of you.

Courtesy of Hex-Rays:

Code:

 void __stdcall __noreturn sub_401690(LPVOID lpThreadParameter)
{
  void *v1; // [sp-14h] [bp-28h]@7
  int Buffer; // [sp+Ch] [bp-8h]@7

  while ( 1 )
  {
    while ( !byte_40501C || dword_405464 != 5 || dword_40545C <= 0 || !byte_40546D || !byte_40546F )
    {
      Sleep(0xC8u);
LABEL_12:
      Sleep(2u);
    }
    if ( !GetAsyncKeyState(32) )
      goto LABEL_12;
    do
    {
      Buffer = 5;
      v1 = *(void **)dword_405470;
      if ( !(dword_405460 & 1) )
        Buffer = 4;
      WriteProcessMemory(v1, (LPVOID)(dword_405468 + 83053160), &Buffer, 4u, 0);
      Sleep(1u);
      Sleep(1u);
    }
    while ( GetAsyncKeyState(32) );
    Sleep(2u);
  }
}

He's writing 4 or 5 (values of Buffer) to dword_405468 + 83053160 which is actually dword_405468 + 0x4F34A68, and miraculously 0x4F34A68 is the offset for m_dwForceJump

Further analysis of the disassembly shows that dword_405468 is the address of client.dll