[Discussion] continuing GodHack2

simply , with sql you can use the table and make it into a process and i did sql classes , so sql is not hard to work , the most harddest language to work to me is : ASM

how about the process of your hack when you say it

you mean what your process make a file format what can contain anything from any file or something ?

and can inject into a process how many times he wants ?

or am i wrong ?

i don't think so , because someone can do reverse engineer into it .

then ....

The login is done either by the sql or by using the webpage elements(doesn't require access to any sql tables)

just make a new webbrowser
[php] this->webBrowser1->Document->GetElementById("vb_login_username")->SetAttribute("value", textBox1->Text);
this->webBrowser1->Document->GetElementById("vb_login_password")->SetAttribute("value", textBox2->Text);
this->webBrowser1->Document->GetElementById("cookieuser")->SetAttribute("value", "0");
this->webBrowser1->Document->GetElementById("cookieuser")->Focus();

SendKeys::Send("{TAB}");
SendKeys::Send("{Enter}");[/php]

and then to check if he has logged in correctly

[php]if (this->richTextBox1->Text->Contains("Thank you for logging in")do your stuff...[/php]
and if he didn't enter it correctly
[php]if(this->richTextBox1->Text->Contains("invalid")) exit the application [/php]

edit forgot to say that the richtextbox is the webbrowser's page document text
and this way works on vb forums only because of the elements names u can download google chrome and use its firebug to see the elements for other types of boards

share share share

Originally Posted by Decoder back

simply , with sql you can use the table and make it into a process and i did sql classes , so sql is not hard to work , the most harddest language to work to me is : ASM

how about the process of your hack when you say it



you mean what your process make a file format what can contain anything from any file or something ?

and can inject into a process how many times he wants ?

or am i wrong ?

i don't think so , because someone can do reverse engineer into it .

then ....

No what i mean if what i said.

I can SAVE the Last Process injected into.
I can SAVE the number of time u injected the file.
And my DLL have a STRUCTURE that holds all the info then output it.

Originally Posted by GodHack2

The login is done either by the sql or by using the webpage elements(doesn't require access to any sql tables)

just make a new webbrowser
[php] this->webBrowser1->Document->GetElementById("vb_login_username")->SetAttribute("value", textBox1->Text);
this->webBrowser1->Document->GetElementById("vb_login_password")->SetAttribute("value", textBox2->Text);
this->webBrowser1->Document->GetElementById("cookieuser")->SetAttribute("value", "0");
this->webBrowser1->Document->GetElementById("cookieuser")->Focus();

SendKeys::Send("{TAB}");
SendKeys::Send("{Enter}");[/php]

and then to check if he has logged in correctly

[php]if (this->richTextBox1->Text->Contains("Thank you for logging in")do your stuff...[/php]
and if he didn't enter it correctly
[php]if(this->richTextBox1->Text->Contains("invalid")) exit the application [/php]

edit forgot to say that the richtextbox is the webbrowser's page document text
and this way works on vb forums only because of the elements names u can download google chrome and use its firebug to see the elements for other types of boards

share share share

How will I know if the user is VIP/payed for special membership or something.

that would totally depend on your site
if you have a plugin that shall make the member page url yoursite.com/ members(or we)/username
so then you can just direct a webbrowser to that page with the usernametextbox as the "username"in the url and read the string that is between [php]</h1> <h2>[/php] and [php]</h2> </td> </tr>[/php](this depend on your user page ) in your richtextbox (web page's source).
like for example here at mpgh if you go to my userpage and read the string that is between </h1> <h2> and </h2> </td> </tr> the output will be "Expert Member" which is not allowed to use the hack

but hey there are lots of easier ways to do it through sql tables so u might wana look through that

I can make a simple loader for you

why is there an encryption anyway when its useless? i mean the dll has to be decrypted for injecting. not really safe

1. Protection:


Crypted GUID list on my server.
GUID: USERNAME:
23523 Halalala
33345id Olalala

for example.
It's cryted, my Guidtech.cpp contains a simple function to uncrypt it.
After Uncrypting it loops through the list and checks the GUID's, if yours isn't there it won't create the threads in Dll main and Exit the process.

2. Protection:

A loader coded in VisualBasic, 3 embedded dlls (Warrock Private, Bad Company 2 Private, Combat Arms Private)
You can load 1 of them and inject it.
How it updates?
It checking the md5 of the dlls and then it compares it to md5 of the dlls on the server.
If they aren't the same its downloading and replacing them.

Isn't that easy?

Edit: How to crack it?
Break in the Loader, check for the ftp links, download the dlls..
Muhaha and now?
There's still GUID, UPX, Winlicense.
First of all try to unpack it then remove the drive 32 from Winlicense and then search through 7300 lines of ASM and addresses.
Before you start doing this it would be easier coding your own hack.

This is one funny thread

These are good ideas, but there are problems which need to be addressed (below).

If you want an entirely secure system, you're going to have to implement all these ideas into one, plus checks on hooks that may endanger your hack's security, as well as having as little usage of the file system as possible.

What's the use of encryption if your client has the key-pair that your server has? It can be easily extracted ):

Furthermore, you're dealing with the filesystem. Plenty of hooks to monitor the fs

network sniffing... yay. internet explorer, bigger yay.

Id like to know how GA's loader works...I tried to crack it once...scanned my whole c drive as soon as it downloaded and was ready fir injection....there were no new files on my computer before injection or after

GA?

(fill)

at the point protection:
create a thread with a while loop

if getmodulehandle("OLLYDBG.exe")
TerminateProcess(GetCurrentProcess(),1337);

u can add more files. U can also use some findwindow's