[Anti-Hack]iProtect

[Mr.Lucifer]

gunz is a **** game, you can make a perfect antichack but someone will bypass it

Then it's not perfect.

 

[IDEEKAY]

Load Module, Remove from PEB using r0. It's not really hard to do that. Also, removing any SSDT hooks you set is easy too.

You don't understand what R3 is idiot, I'm not using neither kernel SSDT nor inline hooks. Rofl you know nothing about PEB. Besides your module will instantly appear on my list and will be unloaded.

iProtect RLS:

To view the content, you need to sign in or register

 

[wesman2232]

You don't understand what R3 is idiot, I'm not using neither kernel SSDT nor inline hooks. Rofl you know nothing about PEB. Besides your module will instantly appear on my list and will be unloaded.

iProtect RLS:

To view the content, you need to sign in or register

nice site you got there lol

 

[-Lambda-]

You don't understand what R3 is idiot, I'm not using neither kernel SSDT nor inline hooks. Rofl you know nothing about PEB. Besides your module will instantly appear on my list and will be unloaded.

iProtect RLS:

To view the content, you need to sign in or register

And how are you detecting if a module is valid or is a hack?

Also: Bypass: Delete from the folder and put a new runnable, lol.

 

[Demantor]

And how are you detecting if a module is valid or is a hack?

Also: Bypass: Delete from the folder and put a new runnable, lol.

Well,, not in using EuroGunZ's MD5 Checks in the Runnable ; )

 

[IDEEKAY]

And how are you detecting if a module is valid or is a hack?

Also: Bypass: Delete from the folder and put a new runnable, lol.

Traversing the modules list... I check by their CRC.

Also: GunZ launcher has a CRC check on each files, lol. That's only if the admin knows how to enable it.

 

[gregon13]

Traversing the modules list... I check by their CRC.

Also: GunZ launcher has a CRC check on each files, lol. That's only if the admin knows how to enable it.

i dunno what your talking about but my launcher uses a special serial key + the was brute force encrypted and modified so it can't be unpacked and my server uses MD5 which this works for now

 

[X-Weaver]

nice work

 

[Linear88]

You could use md5 checks serversided.

 

[bounty-hunter]

Questions i have to ask
1) How is your antihack going to be loaded, if its going to come with a custom runnable, then replacing the runnable would be a easy bypass
2) If its a DLL we need to load, replacing the dll would be the bypass

^_^

 

[Demantor]

Questions i have to ask
1) How is your antihack going to be loaded, if its going to come with a custom runnable, then replacing the runnable would be a easy bypass
2) If its a DLL we need to load, replacing the dll would be the bypass

^_^

You can use a MD5 Check in the runnable of each dll in the client folder as EuroGunZ is using ; )

 

[viydude]

Yeeee hackers GTFO

 

[corrado]

and.. download?

 

[darkflare81]

and.. download?

 

[ThievingSix]

Traversing the modules list... I check by their CRC.

Also: GunZ launcher has a CRC check on each files, lol. That's only if the admin knows how to enable it.

Uh, this doesn't seem to make any sense. You can't tell if a dll is a hack by its CRC. There are many valid dll's that you aren't going to have dll's for. For example events.dll from trillian has a dll in all processes. You going to shut down my gunz if thats running?

A blacklist isn't going to work. Your not the first one to do it. Also why does your original pic look photoshoped?

 

[dacharles]

FAIL Project, crash Gunz

 

[Guy]

i dunno what your talking about but my launcher uses a special serial key + the was brute force encrypted and modified so it can't be unpacked and my server uses MD5 which this works for now

"Bruteforce encrypted" - and erm, if it's packed, at one point, it does need to unpack to function. I'd just attach a debugger, let it unpack to memory, then find anything of interest.

The only real solution to stop RE for now, is virtualization/obfuscation.

OpenSource anticheat = fail.

As Gene suggested, an event-driven anti-cheat that attempted to detect other users cheating would work fine. Or, you could write a Gunz bot to monitor each game for cheating users (Granted, if you'd want to save yourself the trouble of writing one, Veldi's been released, and there's been at least five other clients made by varying devs).

You could use md5 checks serversided.

That's impossible - at one point, the client would have to send the checks to the server, which could easily be spoofed.

Uh, this doesn't seem to make any sense. You can't tell if a dll is a hack by its CRC. There are many valid dll's that you aren't going to have dll's for. For example events.dll from trillian has a dll in all processes. You going to shut down my gunz if thats running?

A blacklist isn't going to work. Your not the first one to do it. Also why does your original pic look photoshoped?

A file CRC won't work at all - more so, keeping track of signatures in DLLs would work to a degree, but, then when you start virtualizing and obfuscating some DLLs, attempting to find a unique signature would begin to get very complicated.

Anyways, OP, a usermode anti-cheat isn't the greatest idea. An anti-cheat similar to Gene's idea, as previously mentioned, or one functioning similar to Waryas would be the solution to go for.

Eitherway, as stated, this won't be working anytime soon.

 

[whhacker93]

hmm, hope this works out.

 

[death4u2]

wow ur gay photoshop moar.

 

[ThievingSix]

Sorry death I already called it =)