• Unfortunately, we have experienced significant hard drive damage that requires urgent maintenance and rebuilding. The forum will be a state of read only until we install our new drives and rebuild all the configurations needed. Please follow our Facebook page for updates, we will be back up shortly! (The forum could go offline at any given time due to the nature of the failed drives whilst awaiting the upgrades.) When you see an Incapsula error, you know we are in the process of migration.

Protect a game from a kernel driver

TheGodFather

Newbie Spellweaver
Joined
Apr 9, 2018
Messages
29
Reaction score
3
Hello guys.
I was trying to make a clone of anti-cheats with one feature wich block access to the game from any program or tool. like popular anti-cheat or like UGK-Anti Cheat does.

I dont know the idea of how to make it. its just about a kernel driver poop.

if anyone can help me or give me a hint.


Pictures :-





 
Sort by date Sort by votes

Ryusaki

Newbie Spellweaver
Joined
Oct 28, 2019
Messages
7
Reaction score
2
If you are in kernel mode, you could use
You must be registered to see links
to intercept OpenProcess attempts from user mode.
Obs: I wouldn't recommend hooking syscalls.
 
Upvote 0

TheGodFather

Newbie Spellweaver
Joined
Apr 9, 2018
Messages
29
Reaction score
3
Ryusaki said:
If you are in kernel mode, you could use
You must be registered to see links
to intercept OpenProcess attempts from user mode.
Obs: I wouldn't recommend hooking syscalls.
Click to expand...

Thank you so much,

I am noob to kernel driver stuff so can you give me a simple code or some github repo for an example
 
Upvote 0

Flipend0

Junior Spellweaver
Joined
Dec 29, 2016
Messages
180
Reaction score
101
I personally would not recommend touching drivers if you have no idea how they work. Especially if it's going to be intended as an Anti Cheat service for your Clients. Unless you have the financial ability to add a CSC to the driver to whatever game you're working on. Otherwise you're going to have to inform all users to Disable Driver Signature Enforcement.

I just build my house made anti cheat in Usermode instead. I run integerty checks and hash the entire application after I implement my own modifications. This way, if any after modifications gets detected. I simply just close the entire client down.
 
Upvote 0

TheGodFather

Newbie Spellweaver
Joined
Apr 9, 2018
Messages
29
Reaction score
3

I got a way to protect my game through some vuldriver.

i edit the code and got these result wich is so pretty




After edit code and hook some syscalls and run the game under SYSTEM

 
Upvote 0
You must log in or register to reply here.