wallhack, flyhack, jumphack

[vixio_dv]

how to block wallhack, flyhack and jumphack?
if not posible to block forever, how can block this for some time before cheat codder renew they software?

[MentaL]

[Romulan]

Packing some secure programs inside the elementclient.exe to kill the client when a cheat tool is detected.

Packing tool = ******* (for example..)

[PWReadyGO]

Packing some secure programs inside the elementclient.exe to kill the client when a cheat tool is detected.

Packing tool = ******* (for example..)

"Packing some secure programs".
Ok. What programs?

[vixio_dv]

Packing some secure programs inside the elementclient.exe to kill the client when a cheat tool is detected.

Packing tool = ******* (for example..)

i have using *******. and problem not solved

[Romulan]

"Packing some secure programs".
Ok. What programs?

Realy, i don't know... I just know it's possible to add security rules ...

But the server that have this, they never will share how to...

[[D@nte]]

Write an active process scanner
Black list forbiden program id's like REVO WPE w/E
Kill elementclient.exe
done

where is the problem?!

[ronny1982]

you can add as many security scanners as you want, as long as they don't handshake with elementclient.exe they are useless cause you can kill them simply with any process explorer before running a hacking tool...

[PWReadyGO]

Write an active process scanner
Black list forbiden program id's like REVO WPE w/E
Kill elementclient.exe
done

where is the problem?!

This can be easily circumvented.

[Laeka]

use settings pwprotector

[Romulan]

pwprotector can be killed... it's very weak xD

[PWReadyGO]

pwprotector can be killed... it's very weak xD

Exactly! T-T

[vixio_dv]

anyone know how to change offset from server and base address from client?

[hrace009]

most of fly hack, wall hack, bot are using software called "autoit"

and send key to target element client.

i think you must made a program to block those "autoit"

here info's for autoit

[zdark]

Good Security is Server Side NOT Cliente Side.

[vixio_dv]

i have done with my protector, but sure this not secure, easy to bypass.

Good Security is Server Side NOT Cliente Side.

agree, i'm still trying to learn gacd, i'm sure with thats can block any illegal proggrams

[Zorno]

You could include this program to your exe. Dunno how but there are some methods for that im sure. Its just a invisible timer that checks for autoit, wpe and Nessus and if it see a process of one of those, it ends elementclient.
Included all other files of debug folder just for fun
I bet it will be found, thats why you should use serverside protection

[Romulan]

New ******* can do this work ;)

Ty for the processkiller btw...

[Zorno]

no prob.

Its quite simple. Here is the source for those who want to expand it to other programs.

Imports System.IO
Imports System
Imports System.Diagnostics
Imports System.ComponentModel
Public Class Form1

    Private Sub Form1_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load

    End Sub

    Private Sub Timer1_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer1.Tick
        If System.Diagnostics.Process. _
             GetProcessesByName("Nessus Client").Length > 0 Then
            For Each Process In System.Diagnostics.Process.GetProcessesByName("elementclient")
                Process.Kill()
            Next
        End If
        If System.Diagnostics.Process. _
             GetProcessesByName("autoit").Length > 0 Then
            For Each Process In System.Diagnostics.Process.GetProcessesByName("elementclient")
                Process.Kill()
            Next
        End If
        If System.Diagnostics.Process. _
             GetProcessesByName("wpe").Length > 0 Then
            For Each Process In System.Diagnostics.Process.GetProcessesByName("elementclient")
                Process.Kill()
            Next
        End If
    End Sub
End Class

for killing elemtclient on other processes just copy this part and replace utoit with the processname you want to check:

If System.Diagnostics.Process. _
             GetProcessesByName("autoit").Length > 0 Then
            For Each Process In System.Diagnostics.Process.GetProcessesByName("elementclient")
                Process.Kill()
            Next
        End If

Compile it with Visual Basic ( mine is Visual Basic 2008 express, the free one from Microsoft website )
Oh and you should set your form to opaque 0% and not shown in task bar because that whould be ... nah you know what i mean
Dont forget to enable your Timer1 and set it to 500 ms ... 100 is too fast to check all processes.

[vixio_dv]

you only make killer proccess very easy to bypass, if really dev they are know codding its self, you share its mean, you make its useless

[Zorno]

you only make killer proccess very easy to bypass

sure. When you use a rootkit for autoit, wpe or nessus. But its just a simple script to play around with. You may upgrade if you want

[vixio_dv]

now i have done hide client version

[Zorno]

now i have done hide client version

Thats for sure a very good protection. You cant read it with hex editor and sure it blocks all cheating tools
Nah for real, what does it bring for ya ? What if i use a client where i can enter whatever version number i want
I think there is no real protection at all but all that stuff together will bring the scriptkiddies to a fail

[vixio_dv]

only wait and see

[Zorno]

only wait and see

I will

Its an urgent topic. Not for servers with just 10 players but if i open mah server to the world i might need a protection

[Allvis]

Who has the solution to this problem WallHack please contact me by PM, if need be I paid for it to be solved.