Printable View
Please have in mind that this protection can be bypassed VERY EASY. This could work as an EXTRA way to protect your server but do not trust your security to a protection based on window titles or name or running process cause both can be changed in seconds.
what did you said its true&right but just for the peoples who have hacks from downloading and use it its good no?....
you can block debuggers from running your dll by a few simple codes like change size of file over 1 GB so debugger will crash,or others like this.Also you can get a good dll protector like Themida or MoleBox(last one) and first the hacker need to crack the dll than to bypass the window.You can build some "stress system" : shutdown the computer when a debugger is found running or editors and your hacker will dont accept to shutdown his computer 1000time just to can apply a patch for skills in town.Or you can do some security for this kind of hack using this sources but instead of pop-up window use a backup file to replace the "hacked" file.Quote:
Originally Posted by Dios
This "MuGuard" is good for the part with check of files with .bmd extension.The other part is not so good because if you dont secure your dll you will get easy hacked by WPE or other hacking applications.
Hack dll? You just need to change stuff at hacks with any resource editor and that's it. No themida can save you from that. Also themida sucks big time with antivirus.
If I change MuPie window title, running process name it will work with no problems and I needed no experience in hacking / programing / debuggers
Is because most of anti cheats (like the Loe123 one) use windows names and things like that. you must catch the process who try to access to main and block, there are lot of ways to prevent it.Quote:
Originally Posted by Dios
The best way is memory checking. Hacks must edit some value in main for make it work.
For example WPE PRO is very easy to detect, no Windows Title Name or proccess name, just
need to see WSARecv() API.
WPE PRO injects his module in WSARecv() API, so its very easy to detect it.
yea the best method it compare memory of running process and check who run the main.exe
for exampe if it isnt the explorer.exe so give a msg.. like f1x one.. this is anti hack noob version
Help !!!
============== MuGuard - Debug ==============
Assembling: Module1
Module1.asm(147) : error A2006: undefined symbol : TextOut
Errors ocurred.
Complier Easy Code Asm T_T Help
mmm yeah but some of the problem of the people is when they try to compile that....and i need how to find the offsets or just someone have the same main used on this proyect?
you need add GDI to your project..Quote:
Originally Posted by fenix010203
gj leo! Hope someone finishes it