[Anti-Hack]iProtect

[IDEEKAY]

Well it started as a bet, when my friend told me I couldn't prevent DLL injections via r3. We argue for sometime, than I decided to write a simple LoadLibraryA hook for his CRT injection routine... He said I win, but I didn't have anything to do for the rest of the day, so I said "Hey! why not hook kernel32.BaseThreadStartThunk(); and **** them up even more! So I added that, then I decided to even extend farther to x64 bit Vista & XP(wasn't hard since x64 structure is similar to x86 with the exception of RAX, RDX, RCX, RDX+more)). Well long story short, I decided I will release a public version of iProtect sometime by Friday(I'm preparing website and forums for support issues)

This was an image for the first version I ever made, current version is Beta 6.

Features:
*Dynamic loading of DLL(DLL's memory will be scattered all over, to confuse crackers)
*CRC of DLL's function(I saw that bypassing hooks was easy, so I made a simple but complex hash algorithm for CRC)
*DLL injection prevention(Self explanatory)
*Ingame function hooks(SetHP(), SetAP()...etc. I think I will have this as a private version)
*Supports WINE and MacOS's crossover platform
*x64 Support
*No system drivers(Was the whole point of iProtect)

 

[Team Zebra]

Pretty interesting stuff. I'm assuming it'll come only as the compiled version, or are you confident enough in it to release the source code as well?

 

[alfredao]

Yeah! Very interesting.

 

[`-Lost*Soul-']

love it
although c++ -.-
well i guess c++ would be the best choise for anti hacks

 

[wesman2232]

very interesting, I hope this goes well.
We would need one atm

 

[IDEEKAY]

Pretty interesting stuff. I'm assuming it'll come only as the compiled version, or are you confident enough in it to release the source code as well?

Well I would, but my algorithm is in there :X

 

[Team Zebra]

Yeah, that's true. Ah well, either way good job, at least from what I can see so far. You seem knowledgable judging on what I've seen from you in the past, so I'm expecting it to be good quality.

 

[Reynolds]

Well I would, but my algorithm is in there :X

You could release code without algorithm, or give somme code snippets ?

 

[-Lambda-]

There is much another ways to inject a dll or hack gunz, lol, also you need to do some server checks or replacing the runnable will be enough to bypass it.

 

[Demantor]

I am interested..
Will this be released, or just showing?

 

[ThePhailure772]

So what are you going to do when I go r0 to inject a function and use inline assembler to call a function and not the standard Gunz one?

 

[IDEEKAY]

Lol? Hope you can managed handling all the r0 functions to call. Inline assembler to call a function? what function. Besides guess you know don't know what BaseThreadStartThunk is. Even if you somehow bypass that, you'll have to worry about iProtect traversing all modules loaded, which will detect all data that's been manually loaded by GunZ or the OS.

 

[Asumi]

Nice looking forward for the release
Plx release with source code so the developers arround here can improve it!

 

[-Lambda-]

Nice looking forward for the release
Plx release with source code so the developers arround here can improve it!

And the hackers bypass it, lol.

OpenSource anticheat = fail.

 

[Nobody666]

And the hackers bypass it, lol.

OpenSource anticheat = fail.

Meant to post that last night in response to Zebra's post.

Open source anti-cheat just makes it that much easier for a hacker to bypass. The best anti-hack would be closed source.

Anyways decent job. Would stop most of the script kiddys out their for a while.

 

[Team Lion]

That's what they said about hashing algorithms 20 years ago too.

But they were wrong, the public hashing algorithms are the strongest ones out there. Something that is public and can't be cracked, is something that is pretty tough.

Though I do see the point in that open source anti-hacks are probably unfeasible simply due to weaknesses easily being found.

Also what are these "r0" functions. A Google search did me no justice. Anyone got a quick reminder?

 

[ThePhailure772]

Lol? Hope you can managed handling all the r0 functions to call. Inline assembler to call a function? what function. Besides guess you know don't know what BaseThreadStartThunk is. Even if you somehow bypass that, you'll have to worry about iProtect traversing all modules loaded, which will detect all data that's been manually loaded by GunZ or the OS.

Load Module, Remove from PEB using r0. It's not really hard to do that. Also, removing any SSDT hooks you set is easy too.

 

[4ndr34s]

gunz is a **** game, you can make a perfect antichack but someone will bypass it

 

[hex4]

i view a MessageBox Executing when is injected.
in the source code is part of the string

 

[Torrentspy]

nice^^
hope u release it soon