Go To Post

Seit gestern gibt es Only registered and activated users can see links. und nicht nur Only registered and activated users can see links..



Wenn ihr also einen Google+ Account habt, dann followed doch OldSchoolHack.

Hier der Link zur Google+ Fanseite:
https://plus.google.com/108595726226353968233

Ich hoffe, dass ich in nächster Zeit etwas aktiv dort sein kann.



Wer stattdessen bei Facebook ist, kann sicher der Only registered and activated users can see links. anschließen:
https://www.facebook.com/OldSchoolHack

greetz KN4CK3R

Go To Post

nich übertreiben mit der mehrarbeit

greetz KN4CK3R

Go To Post

Ja, ich weiß, dass es schon ein paar Tage her ist, aber der liebe Gabe hat sich zu Wort gemeldet. Wer nicht gesehen hat, was da abging, kann das hier nachholen:

Only registered and activated users can see links.
(obere Hälfte)

Go To Post

OldSchoolHack - BP - Half-Life 2 DM - RC16
by KN4CK3R

0. injector and dll must have the SAME name (osh.exe, osh.dll or whatever)
1. start HL2DM
2. start injector
3. read the infos in the HL2DM console
4. play

FAQ:
Q: How do I open the menu?
A: Press Insert / Einfügen.

Q: The game often crashes for me.
A: Try out the windowmode.

Q: Why can't I move the mouse?
A: You only can move the GUI mouse if you are ingame.

Need more help?
https://www.oldschoolhack.me/forum/support/7160,howtouse-osh-bp.html

Changes:
- Offset Updates

Features:

- Crosshair

- sv_cheats Bypass
- sv_consistency Bypass
- Modelwireframe
- no Particles
- Fullbrightmode
- no Sky

- ESP Box
- ESP Name
- ESP Healthbar
- Radar
- Radar Name
- Radar Healthbar
- Chatspy (read teamsay etc)

happy fragging
https://www.oldschoolhack.me
Only registered and activated users can see links.

Download [HL2DM] OldSchoolHack BP HL2DM RC16

Go To Post

OldSchoolHack - Day of Defeat:Source - BP - RC61
by KN4CK3R

0. injector and dll must have the SAME name (osh.exe, osh.dll or whatever)
1. start DoD:S and wait while loading
2. start oshbpdods.exe
3. read the infos in the DoDS console
4. play

Changes:
- updated offsets

FAQ:
If the game crashes for you, try to use the windowmode.
Need more help?
https://www.oldschoolhack.me/forum/support/7160,howtouse-osh-bp.html

Features:

- sv_pure Bypass
- sv_pure Bypass (zBlock)
- Replicated CVAR Bypass

- sv_cheats Bypass / NUM1
- sv_consistency Bypass / NUM2
- Modelwireframe / NUM3
- no Particles / NUM4
- Fullbrightmode / NUM5
- no Sky / NUM6
- no Recoil / NUM7

happy fragging
https://www.oldschoolhack.me
Only registered and activated users can see links.
Only registered and activated users can see links.

Download OldSchoolHack BP DoDS RC61

Go To Post

OldSchoolHack - BP - Team Fortress 2 - RC32
by KN4CK3R

0. injector and dll must have the SAME name (osh.exe, osh.dll or whatever)
1. start TF2
2. start injector
3. read the infos in the TF2 console
4. play

FAQ:
Q: How do I open the menu?
A: Press Insert / Einfügen.

Q: The game often crashes for me.
A: Try out the windowmode.

Q: Why can't I move the mouse?
A: You only can move the GUI mouse if you are ingame.

Need more help?
https://www.oldschoolhack.me/forum/support/7160,howtouse-osh-bp.html

Changes:
-Offset Updates

Features:

- Crosshair

- sv_cheats Bypass
- sv_consistency Bypass
- Modelwireframe
- no Particles
- Fullbrightmode
- no Sky

- ESP Box
- ESP Name
- ESP Healthbar
- Radar
- Radar Name
- Radar Healthbar
- Chatspy (read teamsay etc)

happy fragging
https://www.oldschoolhack.me
Only registered and activated users can see links.

Download OldSchoolHack BP TF2 RC32

Go To Post

Hello, everyone. This is a redux of SuperNovaAO's [Orange Box] Generic Bypasser.

The program is written in C# and is entirely dynamic and external, except for the writes.

The program was written for the .NET 2.0 framework and requires the .NET 2.0 Framework.

This does the exact same thing SuperNovaAO's did, which is just sigscan for the function's address, then write JMP over the JNZ opcode. Nothing more, nothing less.

The bypasser has support for:
Alien Swarm
Bloody Good Time
Counter-Strike: Source
Day of Defeat: Source
Dystopia
Garry's Mod
Half-Life 2 Deathmatch
Insurgency
Left 4 Dead
Left 4 Dead 2
Team Fortress 2
The Ship
Zombie Panic! Source

Notes:

Enable Achievements is the only function that writes to client.dll. While writing anything to hl2.exe is bad, writing to client.dll is even worse.

Pressing F7 will toggle all 5 functions at once.

If the user selects something for the game that the game doesn't have, (like $ignorez bypass for L4D) the bypasser will ignore it.

VAC STATUS: UNDETECTED as of 09/13/2011

Credits:

-SuperNovaAO (Durp)
-Syntroniks for helping me with C#.
-atom0s for his C# FindPattern class.
-cht1 for giving me LinqBridge.

Changelog:

v1.0:
Initial Release

v1.1
Added GetModuleBaseSafe to prevent users with the intro playing from crashing the bypasser.
Fixed CSS/DODS users having problems with the Enable achievements function.

v1.2
Fixed infinite loop condition introduced from GetModuleBaseSafe.
Forced hl2.exe to close if there was an error.
Fixed incorrect spelling of sv_cheats.

v1.3
Added new option "$ignorez blacklist bypass."
Shifted hotkeys.

v1.4
Changed project name from OBBypasser to Source Bypasser.
Changed the no options selected message box to include the game's title instead of the executable's name.
Changed the timer intervals from once every 1/10th of a second to once every 1/4th of a second.
Changed the method of consistency bypass to be more reliable.
Fixed Ignorez signature failure notice saying: "Pure signature failed."
Fixed other programs containing "hl2" in the executeable name from triggering the bypasser.
Added support for the Left 4 Dead series.
Added support for Alien Swarm.
Added support for The Ship.
Added support for Bloody Good Time.
Added support for Zombie Panic! Source.
Added support for Insurgency.
Added support for Garry's Mod.
Added more error checking.

v1.41
Fixed Ignorez signature check using Pure's signature address instead of Ignorez's.

v1.42
Fixed Alien Swarm sv_cheats bypass.
Fixed potential problem in the error handling for sv_cheats and achievements.

v1.5
Converted the project to a .NET 2.0 project. (Thank's cht1)
Added support for Dystopia.
Download GenericBypas for SourceEngine

Go To Post

Freude am Reversen

greetz KN4CK3R

Go To Post

Tagchen,

heute habe ich angefangen wieder eine ESP Version meines CSS Hacks zu machen. Da ich nicht das SDK benutzen, muss ich alle Funktionen von Hand nachbauen. Vorteil dadran ist, dass man für kleinere Hacks auf das SDK verzichten kann und dadurch die DLL sehr klein gehalten wird.

Hier schonmal mein Anfang:

typedef void* (*CreateInterfaceFn)(const char *pName, int *pReturnCode);
 
CreateInterfaceFn CaptureFactory(char *FactoryModuleName)
{
	CreateInterfaceFn ret = NULL;
 
	while(!ret)
	{
		HMODULE FactoryModule = GetModuleHandleA(FactoryModuleName);
 
		if(FactoryModule)
			ret = reinterpret_cast<CreateInterfaceFn>(GetProcAddress(FactoryModule,"CreateInterface"));
 
		Sleep(10);
	}
 
	return ret;
}
 
void *CaptureInterface(CreateInterfaceFn Fn, char *InterfaceName)
{
	unsigned long *ret = NULL;
 
	while(!ret)
	{
		ret = reinterpret_cast<unsigned long*>(Fn(InterfaceName,NULL));
		Sleep(10);
	}
 
	return ret;
}
 
DWORD cEntList = *(DWORD*)CaptureInterface(CaptureFactory("client.dll"),"VClientEntityList003");
DWORD cEngine = *(DWORD*)CaptureInterface(CaptureFactory("engine.dll"),"VEngineClient013");
 
int GetLocalPlayer()
{
	int ret = 0;
	_asm
	{
		MOV ECX, DWORD PTR DS:[cEngine]
		MOV EAX, DWORD PTR DS:[ECX]
		CALL DWORD PTR DS:[EAX+0x30]
		MOV ret, EAX
	}
	return ret;
}
 
CBaseEntity *GetEntityByIndex(int index)
{
	CBaseEntity *ret = null;
	_asm
	{
		MOV ECX, DWORD PTR DS:[cEntList]
		MOV EAX, DWORD PTR DS:[ECX]
		PUSH index
		CALL DWORD PTR DS:[EAX+0xC]
		MOV ret, EAX
	}
	if(ret == null)
		return null;
	_asm
	{
		MOV EDX, DWORD PTR DS:[ret]
		MOV ECX, EAX
		CALL DWORD PTR DS:[EDX+0x1C]
		MOV ret, EAX
	}
	return ret;
}
 
CBaseEntity *GetLocalEntity()
{
	return GetEntityByIndex(GetLocalPlayer());
}
 
int GetMaxEntities()
{
	int ret = 0;
	_asm
	{
		MOV ECX, DWORD PTR DS:[cEntList]
		MOV EAX, DWORD PTR DS:[ECX+0x24]
		MOV ret, EAX
	}
	return ret;
}

Wer will, darf gern was beisteuern. Visiblechecks und so fehlen zB noch.

greetz KN4CK3R

Go To Post

Update:

const char *GetBaseEntityClassName(CBaseEntity *entity)
{
	DWORD add = ((DWORD)entity)+0x8;
	const char *ret;
	_asm
	{
		MOV ESI, entity
		LEA EDI, DWORD PTR DS:[ESI+0x8]
		MOV EAX, DWORD PTR DS:[EDI]
		MOV ECX, EDI
		CALL DWORD PTR DS:[EAX+0x8]
		MOV EAX, DWORD PTR DS:[EAX+0x8]
		MOV ret, EAX
	}
	return ret;
}
 
bool GetPlayerInfo(int index, player_info_t *pInfo)
{
	bool ret = false;
	_asm
	{
		MOV ECX, DWORD PTR DS:[cEngine]
		MOV EAX, DWORD PTR DS:[ECX]
		PUSH pInfo
		PUSH index
		CALL DWORD PTR DS:[EAX+0x20]
		MOV ret, AL
	}
	return ret;
}
 
bool GetBaseEntityIsDormant(CBaseEntity *entity)
{
	bool ret = false;
	_asm
	{
		MOV ECX, entity
		LEA EAX, DWORD PTR DS:[ECX+0x8]
		MOV EAX, DWORD PTR DS:[EAX]
		CALL DWORD PTR DS:[EAX+0x20]
		MOV ret, AL
	}
	return ret;
}

greetz KN4CK3R

Go To Post

und das nächste Update:

Vector GetBaseEntityEyePosition(CBaseEntity *entity)
{
	Vector *eye = (Vector*)((DWORD)entity+0xE0);
	return *GetBaseEntityOrigin(entity)+*eye;
}
 
float *GetWorldToScreenMatrix()
{
	float *ret;
	_asm
	{
		MOV ECX, cEngine
		MOV EAX, DWORD PTR DS:[ECX]
		CALL DWORD PTR DS[EAX+0x90]
		MOV ret, EAX
	}
	return ret;
}
 
bool GetVisible(Vector &start, Vector &end)
{
	trace_t tr;
	Ray_t ray;
	ray.Init(start,end);
	__asm
	{
		MOV ECX, cEngineTrace
		MOV EAX, DWORD PTR DS:[ECX]
		LEA EDX, tr
		PUSH EDX
		PUSH 0
		//PUSH 0x4602400B
		PUSH 0x4600400B
		LEA EDX, ray
		PUSH EDX
		CALL DWORD PTR DS:[EAX+0x10]
	}
	return (tr.fraction > 0.97f);
}

greetz KN4CK3R

Go To Post

Update für GetBaseEntityOrigin, die alte Version hatte nen Bug:

Vector *GetBaseEntityOrigin(CBaseEntity *entity)
{
	Vector *ret;
	_asm
	{
		MOV ECX, entity
		MOV EAX, DWORD PTR DS:[ECX]
		CALL DWORD PTR DS:[EAX+0x24]
		MOV ret, EAX
	}
	return ret;
}
 
Vector *GetBaseEntityViewAngle(CBaseEntity *entity)
{
	Vector *ret;
	_asm
	{
		MOV ECX, entity
		MOV EAX, DWORD PTR DS:[ECX]
		CALL DWORD PTR DS:[EAX+0x28]
		MOV ret, EAX
	}
	return ret;
}

greetz KN4CK3R

Go To Post

weitergehts

int GetBaseEntityIndex(CBaseEntity *entity) //k
{
	return *(int*)((DWORD)entity+IndexOffset);
}
 
char GetBaseEntityLifeState(CBaseEntity *entity) //k
{
	return *(char*)((DWORD)entity+LifeStateOffset);
}
 
int GetBaseEntityHealth(CBaseEntity *entity) //k
{
	return *(int*)((DWORD)entity+HealthOffset);
}
 
int GetBaseEntityFlags(CBaseEntity *entity) //k
{
	return *(int*)((DWORD)entity+FlagsOffset);
}
 
int GetBaseEntityTeamNum(CBaseEntity *entity) //k
{
	return *(int*)((DWORD)entity+TeamNumOffset);
}
 
bool IsConnected()
{
	bool ret = false;
	_asm
	{
		MOV ECX, DWORD PTR DS:[cEngine]
		MOV EAX, DWORD PTR DS:[ECX]
		CALL DWORD PTR DS:[EAX+0x6C]
		MOV ret, AL
	}
	return ret;
}

greetz KN4CK3R

Go To Post

und hier noch was schönes. Die RadarPLayer Klasse:

class cRadarPlayer
{
public:
	int valid;
	char unknown0[12];
	char name[32];
	int team;
	int health;
	Vector origin;
	Vector viewangles;
};
 
cRadarPlayer *GetRadarPlayerByIndex(int index)
{
	cRadarPlayer *ret = null;
	_asm
	{
		MOV ECX, DWORD PTR DS:[cRadarPlayerArray]
		MOV EAX, index
		LEA EAX, DWORD PTR DS:[EAX+EAX*0x4]
		SHL EAX, 6
		LEA EAX, DWORD PTR DS:[EAX+ECX+0x28]
		MOV ret, EAX
	}
	return ret;
}

Wie man allerdings an die cRadarPlayerArray Adresse kommt, lass ich euch selbst herausfinden, die Aktion hat mich grad 2 Stunden gekostet.

greetz KN4CK3R

Go To Post

danke, aber die Header Dateien kenne ich natürlich, allerdings stehe ich mit den UserMessages im Moment etwas auf Kriegsfuß, da ein DispatchUserMessage Hook irgendwelchen Mist zutage fördert, der nicht stimmen kann.

greetz KN4CK3R

Go To Post

whatever, 123 is the offset

greetz KN4CK3R

Go To Post

just have a look in OllyDbg.
There is something like this:

mov eax, classPoint //like engine class
call [eax + 0x123]  //0x123 is your needed functionpointer

greetz KN4CK3R

Go To Post

es gibt viele Battlefields...falls du das 3er meinst, dafür kenne ich nichts

greetz KN4CK3R

Go To Post

das geilste was ich in letzter Zeit gesehen habe

greetz KN4CK3R

Go To Post

hat schöne VIP Funktionen (mein favo. ist INVISIBLE und STW! )
Only registered and activated users can see links.

Download ThunderLabs D3D