[Release][C++] Usaful anti dll injection function.

[belette321]

Anti DLL injection [C++] :

By DLL :

void AntiInject () 
{ 
   HANDLE hProc = GetCurrentProcess(); 
   while (TRUE) { 
      BlockAPI(hProc, "NTDLL.DLL", "LdrLoadDll"); 
      Sleep (100); 
   } 
} 
 
BOOLEAN BlockAPI (HANDLE hProcess, CHAR *libName, CHAR *apiName) 
{ 
   CHAR pRet[]={0xC3}; 
   HINSTANCE hLib = NULL; 
   VOID *pAddr = NULL; 
   BOOL bRet = FALSE; 
   DWORD dwRet = 0; 
 
   hLib = LoadLibrary (libName); 
   if (hLib) { 
       pAddr = (VOID*)GetProcAddress (hLib, apiName); 
       if (pAddr) { 
           if (WriteProcessMemory (hProcess, 
                            (LPVOID)pAddr, 
                            (LPVOID)pRet, 
                            sizeof (pRet), 
                            &dwRet )) { 
              if (dwRet) { 
                 bRet = TRUE; 
              } 
           } 
       } 
       FreeLibrary (hLib); 
   } 
   return bRet; 
}

Or like this if you do it on .EXE :

void AntiInject () 
{ 
   HANDLE hProc = FindWindow(0,"Gunz"); 
   while (TRUE) { 
      BlockAPI(hProc, "NTDLL.DLL", "LdrLoadDll"); 
      Sleep (100); 
   } 
} 
 
BOOLEAN BlockAPI (HANDLE hProcess, CHAR *libName, CHAR *apiName) 
{ 
   CHAR pRet[]={0xC3}; 
   HINSTANCE hLib = NULL; 
   VOID *pAddr = NULL; 
   BOOL bRet = FALSE; 
   DWORD dwRet = 0; 
 
   hLib = LoadLibrary (libName); 
   if (hLib) { 
       pAddr = (VOID*)GetProcAddress (hLib, apiName); 
       if (pAddr) { 
           if (WriteProcessMemory (hProcess, 
                            (LPVOID)pAddr, 
                            (LPVOID)pRet, 
                            sizeof (pRet), 
                            &dwRet )) { 
              if (dwRet) { 
                 bRet = TRUE; 
              } 
           } 
       } 
       FreeLibrary (hLib); 
   } 
   return bRet; 
}

Change Gunz to your gunz name like if you use BR it will be "The Duel".


Google it
Thanks.

 

[frenchfatcat]

aye... nice one

easy but cheers

 

[Tra3200]

Oh yea Nice....Hahah

 

[Katsuro]

This Works?

No. It doesn't work. He released it because its broken. >_>;;

 

[belette321]

It supose to work

 

[belette321]

I love you too

 

[belette321]

VC++ or DevCPP. You need to know that this is usally without other functions like Api hook block or banned windows name ...

Thanks.

 

[BRAZIL-PAULINHO]

o Niiiiiiice






::

 

[belette321]

VC++ or DevCPP ....

 

[BRAZIL-PAULINHO]

Hmm i have VC++ here but What i have to do with the code?

 

[belette321]

Add it to existant limited anti-cheat.

 

[BRAZIL-PAULINHO]

Ok Thanks

 

[belette321]

Your wellcome.

 

[BRAZIL-PAULINHO]

Do You Know any anticheat that i can use?

 

[kochon]

Damn.. C++ is weird. To me, C# seems a lot more logical.. i dunno. But hey it's a preference .

Thanks, I'm saving this for later.

 

[belette321]

I hate .NET

 

[ThePhailure772]

Seriously useless...

 

[XZeenon]

I'm going to find you and shoot you some day. I hope that day comes very very soon. Reading all of your posts in the other Anti-Hack thread your basically like, "HOW EYE USE THIS>!?" in about three posts in that whole thread which is VERY annoying. Just GTFO, Learn some coding then come back and hopefully you wont be as retarded.

Lol Kats, you shouldn't really say 'Learn some coding then come back' Lol
Anyway Chill it's a virtual forum. It means nothing if he says crap lol.

 

[bounty-hunter]

Kochon C# is .... logicall becuz its a 5second job, seriously all you need to do is drop components and add a few lines of code.
Unless you work on something advanced you will start to think C# is weired

 

[Rhymist]

nice one man .