[Makes detected hacks undetected] Simple PE Cipher

[Jason]

I was talking to Bombsaway a few days ago and he was saying that the old method of ciphering a file (pumping shit onto the end of the file) no longer works with CA. It just so happens I was bored at the time so I wrote this simple little cipher. Basically it just manipulates a few values within the PE structure and also rewrites some data into the .text section.

This, unlike the older ciphers, should work to fool Nexon's hash logic.

Using it is pretty straightforward:

1. Download the .zip and extract it
2. Run "Simple PE Cipher.exe"
3. Press the browse button to locate your Dll
4. Press "Run Cipher", if all goes as expected you should see a "Cipher Completed Successfully" message box appear.
5. Inject the .dll. A backup of the original .dll is also created (with a .bak extension) in the same directory as the ciphered dll so you can revert at any time if something goes wrong.

Written in Win32 C++ for teh lulz.

If you have any issues with it, please feel free to PM me or post in the thread, I'll do my best to rectify the issues.
Virus Scan
Jotti

No idea why this had those two scanners report a backdoor to be honest. Perhaps because I'm using some I/O API, dunno.

Anyways, enjoy, and report back with results.

[Broderick]

I'm a little skeptical about downloading it with those backdoors showing up in the virus scans.

I also did a re-scan and something else, other than the backdoors, came up.

Virus Total

Lol, it's up to your own judgement if you want to use the Cipher, obviously. However, it is clean. I've been a member here for over 2 years and never released anything infected, I was also a minion for 9 months. Also note, those "scanners" that picked up viruses are some of the dodgiest scanners on the list. Most just use very basic methods of scanning (such as checking certain API calls and then calling them "viruses"), in absence of any real virus detection.

The long and short of it is that scanners can be very temperamental when you start doing anything with File IO. This app drops a new file and renames existing files and I guess that's why some of the shitty scanners are picking it up as a virus.

[SJounouchi]

Alright, seems safe enough.

Anyways, I use Extreme Injector and for some reason the Combat Arms process (Engine.exe) doesn't show up. Any help?

[Broderick]

Alright, seems safe enough.

Anyways, I use Extreme Injector and for some reason the Combat Arms process (Engine.exe) doesn't show up. Any help?

Has nothing to do with me. But the process would only come up if it was running, otherwise you'll need to type it in manually.

[SJounouchi]

Has nothing to do with me. But the process would only come up if it was running, otherwise you'll need to type it in manually.

I know the program has to be running.

Typed it in manually and got it working, but Combat Arms closes whenever I I have the injector open.

[Googly Pants]

I know the program has to be running.

Typed it in manually and got it working, but Combat Arms closes whenever I I have the injector open.

Bro, if i were you, i would delete every injector you have downloaded, and download "Portal". its the fastest, easiest injector to use.

[Broderick]

I know the program has to be running.

Typed it in manually and got it working, but Combat Arms closes whenever I I have the injector open.

master131 is not me, go ask him about his injector, not me.

[broinarms]

Bro, if i were you, i would delete every injector you have downloaded, and download "Portal". its the fastest, easiest injector to use.

no the fastest and easiest injector to use is n00b's latest injector

[felixlovivir]

Does it work on USF ( Soldier Front ) Because I tried to undetected the Annoying Cat's Public Kill Hack v2 and it doesn't work it still dc me.

[Successful_Loser]

It doesn't work because I tried it on a few, and doesn't work...

[thebaconstripman]

I have a problem when browsing for my downloaded hack. When i click load it says you do not have permission to open this file, contact the file owner or admin to obtain permission. Sorry if this is a stupid and/or obvious question.

[Scream49]

You have to run the program as Administator. Just Right-Click on the application select Run As Administrator and that should take care of your problem.

[YellowFever]

I know the program has to be running.

Typed it in manually and got it working, but Combat Arms closes whenever I I have the injector open.

Portal is much better. If you want to leaarn more, use this tut: https://www.mpgh.net/forum/288-combat...cs-v2-0-a.html

[Mshine67]

So does this work for all the detected hacks?

[cowboy6666]

Hmm I'm getting the error MSVCR100.DLL is missing when I try to run. Am I missing something?

[Drake]

Hmm I'm getting the error MSVCR100.DLL is missing when I try to run. Am I missing something?

https://www.mpgh.net/forum/186-combat...ll-errors.html