MadProtection

[MadKnight]

It seems that all old Protection System made by Aylen (R11, KoemV1, KoemV2) can be bypassed and allow Players to crash an cheat with Packet Hacks. I decided to release my protection system for free now.

MadKnights AntiHack Protection


- Protects against all Crash Hacks and Packet Hacks
- Protects against Speed Hack
- Protects against UG/OG Hack
- Protects against Tradehack
- Protects against Damage and 1 Hit Hack
- Disable Autobattle 
- Include Server Side Caller Check
- Config File is reloadable at Runtime
- Include Full Debug Mode (see every Packet and other usefull Socket Debug Informations)
- Inlcude e.pk, config.pk and engine.exe Checksumcheck (SHA-512, its like md5)
- Include Player Welcome Message
- Works together with cracked KoemV2 (Instance Dungeon/Summon Scrolls etc. working)


This is how the config looks like:


; MadProtectS Configuration File
; 1 = enable, 0 = disable


[Protect] 
Checksum = 0                    ; Enable or Disable SHA-512 Checksums
CallerCheck = 1                 ; Enable or Disable Serverside Caller Check            
SpeedCheck = 1                  ; Enable or Disable Speed Check
UgOgCheck = 1                   ; Enable or Disable Overgrund Underground Check
MaxAttack = 6000                ; Maximum allowed Physical/Magical Attack Points
MaxDamage = 20000               ; Maximum allowed Final Damage to Monsters
MaxZ = 60000                    ; Maximum allowed Z-Axis Coordinate
MinZ = -200                     ; Minimum allowed Z-Axis Coordinate
MaxSpeed = 800                  ; Maximum allowed Movespeed


[Misc]
WelcomeMsg = Welcome to Kal! Have fun and play fair.    
PlayerOnMsg = 1                                         ; Player Online Count Message at Player Gamestart


[Checksum]
Engine = 9EB9717FD27DBF36AF1414F3DFDF6D828AAC02FD09412DC9C98E18AEB5D982F858EA9644C19B41C3728B725E14C43D0D14A163F8C6BA9705E75094AC301A7FF1
MadHelp = 8c7aadef2984c22fb4a5369a28e0d09c0c5d7b866052fc62ae89f4824797f2288381f2a0f2dd2280e948afeb5455ab119e76d75517b5d54c9dbba40ef4171b2d
Configpk = 04D13E206E5C1D24D251EFBBE01D9DA2BA409D337C02F419AA72DFC479A2AADC3E34EAD430EE679016EF30A8595884F49E9A6077173DA0E4568F005649594F44
Epk = 990AC7CF063F54928304DEB0A7DF5791A7A8309479DEFB00744240AEDD13FFE4FAFB5529946787B7C1A25569FC9501930554C211CFE563E6BCEAE84A9225B0D8

Install:

1. Load "MadProtectS.dll" on Serverside with Obsidian.
2. Add libcurl.dll, zlib1.dll and MadHelp.dll to clientside and replace dbghelp.dll with MadHelp.dll

If you want to report an crash here then i need at least one valid Exception Log (e.g. 140221.153738.dbg.txt) and optional an OllyDBG Screenshot, otherwise i can only ignore the report because of insufficient information.

Download:

You must be registered to see links

Mirror 1:

You must be registered to see links

Mirror 2:

You must be registered to see links

Mirror 3:

You must be registered to see links

People know that im not a fan of crypted dlls, but this DLLs need to be crypted for security reasons, otherwise it would be to easy for some hackers on elite p v p to hack this protection, so it might be that your antivirus says this is a virus, you have to trust me or dont download it : )

Checksum MD5

MadProtectS.dll 3cc62ed87d27ab27d9061927f9a1015a
MadHelp.dll bb4c0e4bbc4746c599b5eba5b9d83109
libcurl.dll d0f3b3aaa109a1ea8978c83d23055eb1
zlib1.dll c7d4d685a0af2a09cbc21cb474358595

 

[Chelios1985]

it has malware gen

 

[MadKnight]

MadHelp:

You must be registered to see links

"a variant of Win32/Packed.Themida"
MadProtectS.dll:

You must be registered to see links

"probably a variant of Win32/Packed.Themida"

Take a look what Themida is:

You must be registered to see links

Its an Packer, DLL crypter, but Virus Scan say crypted files are Virues, as i said trust me or dont download it, i cant release it unpacked like all my other addons, because people would crack the protection like they did with Aylens Systems.

 

[pamz]

dont tell me you think themida cant be cracked :d

 

[MadKnight]

@pamz
no, but it makes it harder and no one wrote a working packet hack yet (since 8 month)

 

[shiref6]

@MadKnight the word " Thanks " isn't enough it 's really nice from you to release trusted protection like this for free
i don't know about people but i am going to use it for sure at my server

--------------------------update--------------------------------
i tested it and got same problem with mainsvr that it doesn't start so i tried another one and result is
mainsvr crash when i try to login

i hope you fix that soon

 

[dodger]

well didnt tested yet but looks great to share your work keep going



mad i were testing it but when i followed steps and started to use mainsvrt obsidian
main svrt obs not working and freezed my skype when i end process whith task manager every thing works fine..
do u know whats up..? thanks

 

[dodger]

some one have tested it guys ?!

 

[Nyxs]

When i add the dll to the "dll-loader" the mainserver doesn't start up, do you have any idea what could be the problem?

 

[dodger]

still the same here .. Mad Are you up ?

 

[ho29]

same problem here..

 

[MadKnight]

Change the load order try to put MadProtectS to place 1 in Obsidian and as striker said it might cause problems when two DLLs hook the same function so i it is not said that the dll is compatible with all other dlls out here

 

[Nyxs]

If i only load the MadProtectS, it still doesn't start up :/

 

[xhethx]

mainserver is fine

but
i got error when i need to lunch the game
.Runtime error
R6030
-CTR not initialized

 

[MadKnight]

@Nyxs

It might be that you miss vcredist 2010 or your Data Execution Prevention is still enabled

@xhethx

try this engine:

You must be registered to see links

And a common error in dbghelp replacement is that you need to replace it twice, so there are two hex places in the engine where you need to replace dbghelp.dll with MadHelp.dll

 

[Nyxs]

@Nyxs

It might be that you miss vcredist 2010 or your Data Execution Prevention is still enabled

@xhethx

try this engine:

You must be registered to see links

And a common error in dbghelp replacement is that you need to replace it twice, so there are two hex places in the engine where you need to replace dbghelp.dll with MadHelp.dll

I have never heard from that, is it possible to fix it?

 

[Giggidy]

im confused you said it uses SHA-512 Checksums

so what is this md5 checksum for ?



Checksum MD5
Code:
MadProtectS.dll 3cc62ed87d27ab27d9061927f9a1015a
MadHelp.dll bb4c0e4bbc4746c599b5eba5b9d83109
libcurl.dll d0f3b3aaa109a1ea8978c83d23055eb1
zlib1.dll c7d4d685a0af2a09cbc21cb474358595

 

[MadKnight]

@Giggidy

to verify the file integrity like CRC Check
you can ignore it if you want

 

[WiCkEd2]

This only would work for the old engine only? or new gui engine too?

-W

 

[Giggidy]

well i got the server to load no problem after i decided to use obsidian because i used another dll loader before.

i loaded the MadProtectS.dll 1st in obsidian and main.dll 2nd

loaded mainserver fine and then as soon as someone tries to login to the server the mainserver crashes immediatly.

i cant provide any logs bc im not familar with olly and all that stuff all i can report is that the main crashes when ppl try and login.

also i have not completely set up the clientside yet to be compatible with the madknight serverside setup so maybe a silly question but is it possible someone is crashing the serverside because of trying to log in with a completely unmatched clientside ?