The Cow Anti Cheat

[Kalachnikov]

Nice work. :)
What about a server side protection against proxy? It would be good cuz actually is the most used cheat, even in GMO.

[goldenfox]

Is it possible to add function like hide main.exe process?

As what Kalachnikov said, how about adding server side protection? cow dll will process all server <-> client traffic then the server app will process cow dll traffic going to the real gameserver. I don't know if it's alot of work to an elite coder like you. =)

Just a suggestion though. :)

[zolamu]

good luck FeN$x from leo123 :D

[mauka]

Give me luck ^^ feniks got masm skills he dont need it

[theunknownguy]

Give me luck ^^ feniks got masm skills he dont need it

Lol he could give me luck on my real work... i really need it rolf.

Is it possible to add function like hide main.exe process?

As what Kalachnikov said, how about adding server side protection? cow dll will process all server <-> client traffic then the server app will process cow dll traffic going to the real gameserver. I don't know if it's alot of work to an elite coder like you. =)

Just a suggestion though. :)

Yes its possible to add, but i wont. Kernel hooks for hide process can cause BSDOS (more if the source is open). Also people doesnt like drivers and i dont like drivers. And finally Kernel hooks are blocked for x64 by patch guard.

About server side probably i can add a lame encryption for packet with a timer for switch keys, so in that order bots wont work.

But ill add all of this when i have time, ive been really bussy at work.

[zasmqniq]

hey can someone tell me how to add to my source to find the hack tool that is not in the Task Manager :?

Thanks you all gyiz its really important for me

[Netzo]

Is it possible to add function like hide main.exe process?

As what Kalachnikov said, how about adding server side protection? cow dll will process all server <-> client traffic then the server app will process cow dll traffic going to the real gameserver. I don't know if it's alot of work to an elite coder like you. =)

Just a suggestion though. :)

I asked him about hiding the main.exe process, he said there's no point doing something like this

[goldenfox]

I asked him about hiding the main.exe process, he said there's no point doing something like this

Yeah I got his point

[zasmqniq]

hmm it is a good point how can we find some hack that is not in the task manager not to hide a main.exe in task to make our AntiHack find a cheat that is hidden iin task how to block it thats my question :( but i see there is no one who want to tell me :(

[theunknownguy]

hmm it is a good point how can we find some hack that is not in the task manager not to hide a main.exe in task to make our AntiHack find a cheat that is hidden iin task how to block it thats my question :( but i see there is no one who want to tell me :(

Detect or Restore SSDT hooks will prevent cheats that behave like rootkits to hide themself from task manager.

Or just switch to x64 when you cant make kernel hooks...

[zasmqniq]

hmm theunknownguy my friend you are crazy good coder i see but i dont know how to do that thats why i am asking ^^

[theunknownguy]

hmm theunknownguy my friend you are crazy good coder i see but i dont know how to do that thats why i am asking ^^

Google is your best friend... search on it.

[[INDG]FeN$x]

Theunknownguy you never finish projects... you just like me... wonder why?...

[Bason4ik]

o_O two FeN$x???)))

[[INDG]FeN$x]

Theunknownguy you could implement the IAT scanner, its lame but it will work as an extra security to your anti cheat:

CheckByIAT Proc pITD:DWord
	Local pINT:DWord
	Local pIAT:DWord
	Local TotalAPIsFound:Dword
	Assume Eax:Ptr IMAGE_IMPORT_DESCRIPTOR
	Assume Edx:Ptr IMAGE_IMPORT_BY_NAME
	Assume Ebx:Ptr MAP_MODULEINFO
	.Repeat
	  Mov Eax, pITD
	  Mov Eax, [Eax].OriginalFirstThunk
	  Mov Edx, [Eax].FirstThunk
	  .If (Eax == 0)
	    Jmp @End
	  .EndIf
	  Mov pINT, Eax
	  Mov pIAT, Edx
	  Lea Esi, Offset APIDetectList
	  .Repeat
	    Mov Eax, pINT
	    .If (DWord Ptr [Eax] == 0)
	      .Break
	    .EndIf
	    Mov Edx, [Eax]
		Add Edx, pModule
		Push Edx
    	Invoke szCmp, [Edx].Name1, Esi
    	Pop Edx
    	.If (Eax != 0)
      		Add TotalAPIsFound, 1
    	.EndIf
    	Add Esi, AlignString
	    Add pIAT, DWord 														
	    Add pINT, DWord
	  .Until (Eax == -1) 												
	  Add pITD, SizeOf IMAGE_IMPORT_DESCRIPTOR
	  Mov Eax, pITD
	.Until ([Eax].OriginalFirstThunk == 0) 
	Mov Eax, 1
	@End:
	Assume Eax:Nothing
	Assume Edx:Nothing
	Ret
CheckByIAT EndP

o_O two FeN$x???)))

Theunknownguy is just my alter ego

[mauka]

never will understand why need block autoclickers..

How-ever there is good script blocker called UCP - Anticheat :)

[Mulegend]

Je, fenix never finish your "works"... only use all ppl like testers for after sell this sh!t

[kinder32]

Please, some mirror, i need this.

[Regz]

Please, some mirror, i need this.

Me too, can somebody reupload source codes?

[gnomiux]

Thread cleaned. Keep on topic people and remember - no flaming

[1313]

Link is dead. Mirror please

[LedZeppelin]

just stumbled into this thread, good stuff!

anyone still have the file could please re-upload? thanks.

[thevjfla]

¿new links?