Need Some Hints To Code

Hi guys, i want premise that i know vb.net and i'm aware of the fact that is completely useless if you want to make a nice aimbot/esp/wallhack because max you can do is pixel stuff, atm i'm learning a bit of c++ to move around this new level, so here it comes my question:

What's that PB detects?

I heard in forums that you need to dump a log of the strings detected, i heard it checks/ed the MD5, i heard it checks the hooking method.
What's true? What's false?

Once i know this a lil bit better i can start move with the coding, but still if i dont know what's detected and what's not i really dont know where to start.

Now that i think about, how would i extract values from BF3 process without triggering PB ban? i really cant get past these 2 questions and i really hope you guys can give me a little hint.

Hmm no bites? Well, i'm going to suggest going to one of these threads since the general group who reads these forums are only here to leach. Someone here might have your answer but has not looked at this thread. Good luck

Programming - MPGH - MultiPlayer Game Hacking

@ed234 do you want me to move this to programming/C/C++?

Originally Posted by bullpop

@ed234 do you want me to move this to programming/C/C++?

i posted it here because ppl who works with pb and specially in bf3 i guessed they were around here XD try to move it lets see if somebody will answer

thanks a lot

Originally Posted by ed234

i posted it here because ppl who works with pb and specially in bf3 i guessed they were around here XD try to move it lets see if somebody will answer

thanks a lot

No problem, always happy to help

.

I have no personal experience with PB, but since it has been around long enough I think it's safe for me to assume that PB has all the usual base covered.

That means:

String detection things like 'aimbot' will get flagged. But it probably won't check for an md5 string, since dll files are not static in memory, it's more likely that they have a signature. To bypass this, remove your dll from the PEB->ldr or rebuild your dll each time it gets detected.

Next: hooks.

All usual hooks are probably detected/watched. Try a mid-function hook or a hardware breakpoint+exception handler combo.

That will probably keep you under the radar, if not you'll just have to try and see what works.

Originally Posted by .::SCHiM::.

I have no personal experience with PB, but since it has been around long enough I think it's safe for me to assume that PB has all the usual base covered.

That means:

String detection things like 'aimbot' will get flagged. But it probably won't check for an md5 string, since dll files are not static in memory, it's more likely that they have a signature. To bypass this, remove your dll from the PEB->ldr or rebuild your dll each time it gets detected.

Next: hooks.

All usual hooks are probably detected/watched. Try a mid-function hook or a hardware breakpoint+exception handler combo.

That will probably keep you under the radar, if not you'll just have to try and see what works.

@.::SCHiM::. first of all, thanks a lot for your answer

let me resume what you just said to see if i got it right:

strings, like if i name a variable aimbot=x then i will be detected;
PEB->ldr means Process Environment Block with a loader data connected to an ldr that some how i have to remove (or smth like that, i'm reading stuffs about it right now)
hooks i'm diggin into what you just said right now

and now the hardest stuff that i really cant find out by my self: how do i extract from memory x,y,z address of every player in the map?
so far i can get to this:
x y z is some what of an array, or atleast that will be in my dll, then in memory i should be able to find some addresses that referes to that kind of address class (enemy/friendly players or players with the value of enemy or friendly), but i really dont know how to do that... i tried it time ago to do that in some other games but without success.
my method is to open CE and scan for the addresses but even IF I may eventually find, i have no clue on how to offset them into a full array of right addresses that points their x or y or z values.
perhaps there are some more advanced ways to do that, i'd really love a point out

another thing came up to my mind about possible detection:
if pb detects strings, we may also talk about possible d3d detection?
as example to create some d3d stuffs we have, to bring a simple example, D3DXMatrixRotationY, this string is proper of the .lib from where its taken, so this means that if pb checks that i'd need to rewrite the lib, am i right?

strings, like if i name a variable aimbot=x then i will be detected;

This will not be detected:

int aimbot = 0;

This will be detected:

char* str = "aimbot";

You've got the peb and the hook part right. But I'm afraid I can't help you with the x,y,z coordinates of your game. You can try the reverse engineering tutorials to help you understand what's happening inside your target.

another thing came up to my mind about possible detection:
if pb detects strings, we may also talk about possible d3d detection?
as example to create some d3d stuffs we have, to bring a simple example, D3DXMatrixRotationY, this string is proper of the .lib from where its taken, so this means that if pb checks that i'd need to rewrite the lib, am i right?

What do you mean by this?

Originally Posted by .::SCHiM::.

This will not be detected:
You've got the peb and the hook part right. But I'm afraid I can't help you with the x,y,z coordinates of your game. You can try the reverse engineering tutorials to help you understand what's happening inside your target.

What do you mean by this?

nothing :P that was my misconception of string

thanks a lot!

Need Some Hints To Code

Post a Reply

Similar Threads

Tags for this Thread