Tutorials

[alaxul]

Here goes the tutorials for this amazing game. if you have any requests for tutorials then post it here.

New thread for download links: CLICK (http://www.mpcforum.com/showthread.php?t=132351)

Read this first

BF2 PB Proof - Any Version - How To by alaxul (http://www.mpcforum.com/showthread.php?t=126668)

BF2 Specific Tutorials

Patching BF2 for debuggin by Faldo. (http://www.mpcforum.com/showthread.php?t=96339[/url)

[Tool] HelioS-Reset-DebugPort (32bit/64bit) (http://www.mpcforum.com/showthread.php?t=138634)

Battlefield 2 Hacking Tutorial Part I by Caliber1942. (http://www.mpcforum.com/showthread.php?t=97353[/url)
Direct Download 1.rar (http://www.mpcforum.com/attachment.php?attachmentid=9422[/url) 2.rar (http://www.mpcforum.com/attachment.php?attachmentid=9423[/url)3.rar (http://www.mpcforum.com/attachment.php?attachmentid=9439[/url)

Battlefield 2 Hacking Tutorial Part II by Caliber1942. (http://www.mpcforum.com/showthread.php?p=908743#post908743[/url)
Direct Download 1.rar (http://www.mpcforum.com/attachment.php?attachmentid=9437[/url)2.rar (http://www.mpcforum.com/attachment.php?attachmentid=9438[/url)3.rar (http://www.mpcforum.com/attachment.php?attachmentid=9424[/url)4.rar (http://www.mpcforum.com/attachment.php?attachmentid=9440[/url)5.rar (http://www.mpcforum.com/attachment.php?attachmentid=9441[/url)

Battlefield 2 Hacking Tutorial Part III by Caliber1942. (http://www.mpcforum.com/showthread.php?t=100563[/url)
Direct Download 1.rar (http://www.mpcforum.com/attachment.php?attachmentid=9718[/url)2.rar (http://www.mpcforum.com/attachment.php?attachmentid=9719[/url)3.rar (http://www.mpcforum.com/attachment.php?attachmentid=9720[/url)4.rar (http://www.mpcforum.com/attachment.php?attachmentid=9721[/url)5.rar (http://www.mpcforum.com/attachment.php?attachmentid=9722[/url)6.rar (http://www.mpcforum.com/attachment.php?attachmentid=9723[/url)7.rar (http://www.mpcforum.com/attachment.php?attachmentid=9724[/url)8.rar (http://www.mpcforum.com/attachment.php?attachmentid=9725[/url)

Battlefield 2 Hacking Tutorial Part 4 by Caliber1942. (http://www.mpcforum.com/showthread.php?t=110985[/url)
Direct Download bf2hacktut4.rar (http://www.mpcforum.com/attachment.php?attachmentid=12291[/url)

Enemy Mine/Claymore/C4 Increase & Distinguish Trick by dubbls (http://www.mpcforum.com/showthread.php?t=127812)

Delphi Memory Modification Tutorial & Template 1.0 by dubbls (http://www.mpcforum.com/showthread.php?t=124637)

Other non specific BF2 Tutorials

StealDMA - explanation by mcMike (http://www.mpcforum.com/showthread.php?t=68276)

Theories and methods of memory hacking (http://www.mpcforum.com/showthread.php?t=59378)

Theories and methods of Code-caves (http://www.mpcforum.com/showthread.php?t=63827)

SniperEye - VB tutorial template for hacking (http://www.mpcforum.com/showthread.php?t=67657)

DMA stealing Tut by ShadowsFury (http://www.mpcforum.com/showthread.php?t=68346)

Mini-Map tut (http://www.mpcforum.com/showthread.php?t=58051)

drk's Tutorials
- Testing Code Caves
- Accuracy tut by drk
- Easy way cave
- How to Find off Addresses
drk's Tuts here (http://www.mpcforum.com/showthread.php?t=66276)

OLLY DBG CodeCave PowerPoint Tutorial
OLLY DBG CodeCave TUT here (http://www.mpcforum.com/showthread.php?t=61831)

Coding Tutorials

Wrox C++ Tutorial1.RAR
(http://www.mpcforum.com/attachment.php?attachmentid=10853)Wrox C++ Tutorial2.RAR
(http://www.mpcforum.com/attachment.php?attachmentid=10854)

Links to tools and other helpful sites

Tools:

OpSearcher v1.1. can find the address of OpCodes over multiple patches and is therefore a fast way to update memory based hacks.Made by Kosire.
Thread Link (http://www.mpcforum.com/showthread.php?t=110627) | OpSearcher v1.1 (http://www.mpcforum.com/attachment.php?attachmentid=12202)

OllyDbg Page (http://home.t-online.de/home/Ollydbg/)
T-Search Page (http://membres.lycos.fr/tsearch/) :note Other helpful tools availible here
MaxPowers Page (http://hexsoft.gifgraphix.com/) :note Other helpful tools/tuts/trainer templates availible here
GameHack (http://www.gamehack.com/)

Here is a visual tut. (video capture) of divine shadow defeating DMA
Video Link (http://www.ghu.as.ro/ghtuts/divines1.rar)

Here is a Tut on how to find a dll that can be used to hold a code cave.
Link to Tut (http://www.mpcforum.com/showthread.php?t=58127)

Got a new one here that explains HEX and Assembly a little
Here is this tut (http://www.mpcforum.com/showthread.php?t=17424)

Here is a link with a bunch more tuts(some the same, some different, some new, some old) for explaining TSearch, ArtMoney, OllyDbg, defeating DMA, DMA Pointers, code injection, even a small tut on Visual Basic.
Here is this tut (http://devious.tsongkie.com/downloads.php?id=tutorials)

Just more links to check out

http://www.gamehacking.com/
http://www.ghu.as.ro/ghtuts.php
http://www.extalia.com/home/index.php?sel=guides&cat=basics

I know that a number of tutorials are hard to get a hold of for one reason or another. Here are a number that I have. If anyone has some additional ones they wish to share, post them on this thread.

I suggest the first thing you follow is the below link.

BF2 PB Proof Any version layout by AlaXul
http://www.mpcforum.com/showthread.php?t=126668

This gives you an outline of what you need to do if you know nothing and wish to tackle making your own PB proof hacks using the tools and tutorials available on this site.

Tutorial & Tool List:

- Caliber1942's Battlefield 2 Demo Hacking Tutorial -works up to v1.22 +

*PART I: Finding the player address and the code that reads it.
*PART II: Finding the code that access the GetTeam() function.
*Part III: Tags
*Part IV: FOG

- Captain Cox PowerPoint Code Cave Tutorial
- Sparten DLL Inject Tutorial
- Intel Code Table - Credit's to me for the find :P
- OlleyDbg v110 + ASprotect v1.2, CMD line, Hide Debugger plugin's
- Tsearch 1.6b
- Win32ds893 - Win 32 Dissasembler
- PEiD - Decodes an exe and tells you if it's encrypted and what
language

They can be downloaded at the bottom of this post.
__________________________________________________ __
Question Index

- How to run BF2 in a window?
- How to get rid of the intro movies?
- How to pause BF2 in v1.22+
- Why can't I attach the debugger while following the tutorials?
- What is a DMA address?
- How do I find a DMA address?
- What is a Static Pointer?
- What is a Register?
- What is a Code Cave?
- What is PB?
- What is a Base and Offset address?
- How do I calculate the above formula?
- How do I find the Base address?
- How do I find the offset?
- How do I defeat PB?
- How does PB detect my cheats?
- What is a MD5 Hash?
- Can a MD5 Hash be cracked?
- Should I bother to crack this stuff?
- I've made my own cheats, but they only work in single player. Why?
- Some people claim they have managed to get detected BF2 cheats working even though no one else can even while following their directions exactly.
- I've created my Code Cave but when I start the game it crashes. Why?
- How do I find the DMA address that the Pointer uses?
- I saw a friendly player show up as red. Is this a hack?
- HEX misc points.
- Are there anymore BF2 Wall Glitches?

___________________BF2 Mini FAQ__________________
Tips & Tricks

- How to run BF2 in a window?
* Create a shortcut with the window option
* "BF2.exe" +playNow 1 +menu 1 +fullscreen 1"

- How to get rid of the intro movies?
* rename "\Program Files\EA GAMES\Battlefield 2\mods\bf2\movies"
* to something else. eg: movies.bak

- How to pause BF2 in v1.22+
* in console type: gamelogic.togglepause
* or There is a util that has been posted in the forums that will do it.
* or Create an ASM loop

__________________________________________________ _
Typical Questions:

- Why can't I attach the debugger while following the tutorials?
* You need to reset the debug port. Follow Faldo's tutorial attached below.
* Try using Winject, if that fails using Faldo's tut's will always work. If you followed them and it still did not work, you did something wrong. There are three commonly different ways that this is done. Try each.
* If you have Windows XP 64bit then try this: [Tool] HelioS-Reset-DebugPort (32bit/64bit) (http://www.mpcforum.com/showthread.php?t=138634)

- What is a DMA address?
* Dynamic Memory Address is a random location where an application can store temporary values. This often changes from PC to PC, game to game, level to level, etc. Values stored in DMA's are typically not scanned by PB.

- How do I find a DMA address?
* You can do it the hard way, by searching for value changes over time with a memory scanner like Tsearch, gamehack, or any other tool.
* or The faster way is to locate a Static Pointer that will show you the location of the DMA address. A simple Code Cave will allow you to copy the value of the DMA to a static address and read the value.

- What is a Static Pointer?
* It's a peice of ASM code that stores the location of the DMA address in a register.

- What is a Register?
* A section of the CPU that stores values before execution

- What is a Code Cave?
* A redirection of ASM code to a new location where there is more space to add additional code or to modify the string without PB detecting the changes.
* Example of a simple Code Cave:
RendDX9
111111 jmp 55555 ;Jump to Cave start
111112 mov eax etc etc ; original next ASM line

Cave
55555 je short rendDX9.99999 ; Original Line
55556 jmp 111112 ; Return from cave to next ASM line


- What is PB?
* Punk Buster, an application that checks for changes to the BF2 game in an attempt to prevent cheating.

- What is a Base and Offset address?
* A BASE address is the memory location where an application or DLL starts. The OFFSET is how many bytes from the start the section of code of interest is located.

- How do I calculate the above formula?
* In Windows, click on START / RUN / CALC
* Ensure in VIEW it's set to Scientific
* Click on the HEX button
* Enter your values "DLLbase + Offset = Target Address

- How do I find the Base address?
* OlleyDbg will list it under the Executables view
* GameHack will list it under the loaded modules view
* There are tools on this forum that will display the info

- How do I find the offset?
* You can discover the code yourself and subtract the DLLbase to get the offset
* Search the forums for many posts that give the offsets

- How do I defeat PB?
* Go read up on how PB works, you'll come up with many ways. There is also a link above that takes you to a Tut on how to do it in the most simple way.

- How does PB detect my cheats?
* PB has a number of tricks, the most common being doing an MD5 hash of a section of static memory. If any changes occure to this section the MD5 checksum will be invalid and PB will know that changes have been made.

- What is a MD5 Hash?
* MD5 (Message-Digest algorithm 5) is a widely-used cryptographic hash function with a 128-bit hash value.

- Can a MD5 Hash be cracked?
* Yes, it's simply a question of Time and CPU power. There has also been work done using Rainbow tables to create a database of many encrytion standard hashes. This allows for simple queries to crack the hash rather then a brute force attack. A typical ASCII char set used in an MD5 hash creates a Database of around 1 Tarabyte. There are online services that allow access to this.

- Should I bother to crack this stuff?
* Not if you're reading this Mini FAQ and doing these tut's and are hearing this stuff for the first time. I suggest you simply go out and get yourself laid, you'll have much better success in that venture.

- I've made my own cheats, but they only work in single player. Why?
* In BF2 there are client side cheats and server side cheats. Server side cheats such as Ammo, Health, Damage, etc... are calculated on the Server side of the connection. The only way to cheat here is to have access to the Server memory. Client side cheats, typically visual aids, are calculated on your PC, and therefore can be changes during online play. Things like MiniMap, TAGS, FOG, Distance, etc..

- Some people claim they have managed to get detected BF2 cheats working even though no one else can even while following their directions exactly.
* Often these people have no understanding of what is happening and post their interpretation of the events. You are better off making your own cheats based on the info on this site and save yourself a lot of trouble. The bonus of this is that these techniques apply to all games / software and will save you years of head aches later.

- I've created my Code Cave but when I start the game it crashes. Why?
* Assuming your ASM is correct, chances are the memory you choose for your cave is used by BF2 while the game runs. Try using a different location and watch the area of memory while playing the game to see if it changes. Just because CheatEngine says this is a good cave locations, does not mean it is not used while the game runs.

- How do I find the DMA address that the Pointer uses?
* You need to copy the value of the Pointer register to a empty memory location and then read that value.

eg: 041B14F2 fld [ecx+100] ; Original Pointer

Create Cave
~ 041B14F2 jmp 123456 ; 123456 = Cave location

Cave
~ 123456 fld [ecx+100]
~ 123457 mov [123470], ecx ; Copy the value of ECX to empty memory location of 123470
~ 123458 add [123470], 100 ; Add 100 to empty location of 123470, that way you do not have to do this by hand.
~ 123459 jmp 041B14F3 ; jump back and continue with original code
Now simply read the value of 123470 as a Hex String. This value will be the DMA address.

- I saw a friendly player show up as red. Is this a hack?
* No, this is a bug with BF2. On occasion the packet containing the player team information becomes corrupt and the server displays the player on the incorrect side.

- HEX misc points.
* HEX = numbers 0 to 15 represented as 0123456789ABCDEF
* Base Address = The location in memory where a program or DLL start
* 0x123456, the 0x is not a HEX value, it simply means HEX
* An offset is how many bytes need to be added to the base address to find the target code.

- Are there anymore BF2 Wall Glitches?
* As of 1.22 the old spinning turret glitch has been fixed. There are still however item spawn glitches that I am aware of that will push you inside buildings.

FAQ by: AlaXul@gmail.com
- Stuff to be added as questions come up.

------------------------------------------------------------

I would upload more stuff, but I have reached my max 15 file limit here. Perhaps the mods may wish to raise that limit for my account. Cheers.

[Shadjato]

I have downloded both Cheatengine 4.4 ans 5.0, but cannot find a settings window? The whole form cannot be dispalyed either for some reason, also when the tut refers to:

'Open the processlist (top right of the main CE window)' the process list icon I have is on the left.

Can do most of the steps, but when asked:

''In the main CE window, double-click the text in the middle top where it gives you the PID and process name (IE: 00001214-BF2.EXE) and write down the PEProcess address. ''

When I double click nothing happens. Hopefully Im just being a numpty :)

[battlefield2pwn]

Need someone to walk me through PB proofing and point me in the right direction for everything else. A mentor I guess or something like that. I'm kinda bs. I'm pressed for time so I don't have time to search for everything. PM me if you don't have enough headaches already. What the hell it'd be good for your ego. ; )

edited for too many fn f's

ps. thanks caliber

[RussMPC]

Here goes the tutorials for this amazing game. if you have any requests for tutorials then post it here.

Calibur, not sure if you knew this, but I just d/l'd all 3 files, extracted to there folder names from rar name, and all the tuts are identical to the first

lol

I have downloded both Cheatengine 4.4 ans 5.0, but cannot find a settings window?

Hey Shadjato, had similar probs when i first looked at cheat engine, i use 4.4 personally...

If you follow the instructions as stated, the settings button doesnt look like a button at all, its just below the cheatengine logo top right, just under the close window X, its just says settings, click on it and a new window will pop, also the same for when you have the process name in the top centre of the window, you'll have to click on that too, to get the process address up in another little popup.

Hopes this helps...

P.s.

''In the main CE window, double-click the text in the middle top where it gives you the PID and process name (IE: 00001214-BF2.EXE) and write down the PEProcess address.

the xxxxx1234-bf2-exe has to be double clicked for the peprocess window to pop, you got tired fingers ?

[RussMPC]

Also.....



Just noticed, not sure if its me or something else....

Cal, tut 1, explains how we get a valid addy for get team function

0055a8a0 8B81D8000000 mov eax, [ecx+0xD8]

this is your example...

This is acgieved using the t-Search program, enable debug, auto hack window etc..... all from the orginal value of 15C40AC

ok, so we have had to do what the other tut tells us, in order to get the 'enable debug' function on T-Search to work... (the Green Arrow in the autohack window)

Then, for some reason, tut 2 is missing from all download links, ok so goto tut 3, it seems to recap, only this time is asking us to start using olly to debug bf2, with the original values found in T-Search.....

At this point I cant see how we can have t-search and olly debugging the same prog at the same time after all

"So the address 15C40AC contains the team value for the player. Note that each time you run the game this address could (and likely would) change"

So how do i turn debug in t-search on and off without stopping the program im debugging, or how do i do a t-search type mem search in olly, or even goto the original 1969A694 addy in olly, to find the read write addy's ?

[CaptainCox]

Tutorial 2 is still there, dont understand what the prob is :tired:

[RussMPC]

tut 2 is basically tut 3....lol
still doesnt help with other problems
debug using tsearch AND debug using olly

[CaptainCox]

Use http://www.mpcforum.com/attachment.php?attachmentid=9823
with Winject, be shure to be Spawned when U inject. Will give an error but it works.
If U have XP SP2 Winject should do the trick alone, but read this thread
http://www.mpcforum.com/showthread.php?t=97627&page=1&pp=15
for more info.

[RussMPC]

Thx Cap, gonna try some now

[Hanny]

maby a stuppid Q but in what order is the best way to learn after Battlefield Hacking Tutorial by Caliber1942.

[Spontaneous]

1, 2, 3 maybe? He has the tuts labeled with numbers you know.

[caliber1942]

they are right, the third tutorial link isn't working right or something... i think when the forums update the messages get all out of whack-

maybe it's best to post direct links to the tutorials in the download section in the above area rather than to the threads which seem to change numbers. can a mod do this? for now if you want to find them do a search for hacking battlefield 2 tutorial or something and look for each of the three threads.

also, when i go into the other tutorials, they build on each other. so after tutorial 1, then you have found the getteam() function address and so you shut down tsearch and use olly to do the rest of it. you CAN attach tsearch WITHOUT using AUTOHACK and have olly attached at the same time. there may be instances where you are doing memory searches with Tsearch (not with AUTOHACK, though) while using olly at the same time. if i have you using olly in the tuts, likely i'm not telling you to use the AUTOHACK feature of Tsearch at the same time. going from tutorial 1 to 3 would confuse you and you would be missing info from 2, which tutorial 3 builds upon-

best,
cal

[CaptainCox]

I updated the link so it works, I will try to link directly to the files, but as there is several....lets see what I can do.
You could also get the MPC Cheat Manager HereMPCCM (http://www.mpcforum.com/showthread.php?t=94407[/url)
Its a nice little tool, that will show you whats availible for each game directly.

EDIT: Also added direct links to all the .rar files, so all should be ok now.

[Aztec]

Is there any reason why OllyDbg will not reopen for me after I terminate its process? Battlefield crashed, and wouldn't close until I closed Olly, and Olly had froze, so I terminated the process... and when I try to start up Olly again, it flashes for like a second, then closes.. :paranoid:

[caliber1942]

I updated the link so it works, I will try to link directly to the files, but as there is several....lets see what I can do.
You could also get the MPC Cheat Manager HereMPCCM (http://www.mpcforum.com/showthread.php?t=94407[/url)
Its a nice little tool, that will show you whats availible for each game directly.

EDIT: Also added direct links to all the .rar files, so all should be ok now.

Thanks C.C.!

best,
cal

[SnagglePuss]

Hi guys,
I was just wondering if anyone was in the process of making a step by step guid to make chams or if someone could be so kind as to? i aint begging for hacks here, just asking for a lil help on creatin my own (and for other people creatin theirs). Ive tried the advanced search on cham tutorials and didnt find much, just some code for games like CS:S and BHD. didnt know what to do with it, but it was for visual basic 6.0. I downloaded this from microsoft, but it wont install, just says setup not completed after i click acceptance of terms and conditions. Anywho, IF someone would like to do this then i for one would be very greatful! Thanks in advance.
SnagglePuss

[Chaotik]

If you havn't done any other hacks yet then i wouldn't recommend trying this. It is more advance stuff. You should have a good understanding of what is going on with other hacks before you attempt this!

That is just my opinion tho. Others may feel different. But you can get the d3d starter kit by azorbix over at game-deception.com

hope this helps

[choch85]

Hi guys,
I was just wondering if anyone was in the process of making a step by step guid to make chams or if someone could be so kind as to? i aint begging for hacks here, just asking for a lil help on creatin my own (and for other people creatin theirs). Ive tried the advanced search on cham tutorials and didnt find much, just some code for games like CS:S and BHD. didnt know what to do with it, but it was for visual basic 6.0. I downloaded this from microsoft, but it wont install, just says setup not completed after i click acceptance of terms and conditions. Anywho, IF someone would like to do this then i for one would be very greatful! Thanks in advance.
SnagglePuss

http://forum.game-deception.com/showthread.php?t=5713

Not exactly step by step, but it's pretty straight forward.

[lefrick]

i'm interested too, i'm familiar with c++ and dll but i have no idea for what to do with direct3d hacks, i want to learn the basics, any link is appreciated
Thanks

[legion2 user]

Guys just a quick "off topic"
I just dl'ed keystone C++. I got an o level gcse in general science 20 years ago, apart from that my only experience of puters is Bills window.
My question is; which future version of BF will I be able to hack when I've learnt the stuff?:-) :P

[nzapp]

is there any other link to download the d3d hook ? since it says i do not have permissions to download it , guess cause i just registered or so , any help would be welcome thx

[Shadjato]

Calibur, not sure if you knew this, but I just d/l'd all 3 files, extracted to there folder names from rar name, and all the tuts are identical to the first

lol



Hey Shadjato, had similar probs when i first looked at cheat engine, i use 4.4 personally...

If you follow the instructions as stated, the settings button doesnt look like a button at all, its just below the cheatengine logo top right, just under the close window X, its just says settings, click on it and a new window will pop, also the same for when you have the process name in the top centre of the window, you'll have to click on that too, to get the process address up in another little popup.

Hopes this helps...

P.s.



the xxxxx1234-bf2-exe has to be double clicked for the peprocess window to pop, you got tired fingers ?


Russ

Thanks for the reply, but fie some reason the application is too big for the window, see image, and I still cant see the setting tab.......... a bit frustrating :)


http://www.sendmeimages.com/show.php/62_Image12.jpg

[CaptainCox]

Wrox C++ Tutorial, Been around for awhile, but a realy good tut for C++

[dougmc]

.....

[KiBNboots]

hackings conciderd a field?

[dougmc]

.....

[T0m]

hackings conciderd a field?
I don't pretend to know but I'd say it's both art and science.

thats real nice and all, but stay on topic pls.

thread is about tutorials...kthx

[knicki12]

thanx i reli needed that code caves tut, i dint understand them but now i do, thz for makin my life that little bit easier. :)

[XR8]

Very nice work ....... much appreciated.

[rican]

i want to make a chams hack. Is there any tutorials here that i can learn from or a link to be guided the right way thanks in advance

[Anddos]

hmm the t-search link is down and takes you to a dead lycos page
any other links with it. (dont say google) , as ive searched for a while and not found it.

[Spontaneous]

http://www.xcheater.com/download.aspx?file=cheat_tools/tsearch_16.zip

Gawd how hard was that. Used google to find it.
http://www.google.com/search?hl=en&q=tsearch+download
Top result. If your going to say you searched for a while using google, try a little harder.

[SplIce]

I have a tutorial on how to get stamina and overheating here:
Dark Hex (http://www.darkhex.us/forum/showthread.php?p=79#post79)

Yes I have and alway had MPC as an Affiliate.

[Spontaneous]

You didnt have to put in your post that you are an affiliate. I knew that already :P

[alan123]

will this tutorial work for 1.02 or 1.03? or just for the demo?

[Spontaneous]

All of them.

[alan123]

another question:

When i go into the game and inmediatly minimize the game and get all the files with "2" in them. Then i go back into the game and go to the enemy load out screen? then minimize again and get all the files with "1" in them?

BUT when i try to go into the game and load the map before i even get to the page to start loading the game closes. why and what do i do?

Also how am i supposed to get to 6 files with just swithcing my team back? there are no arrows or anything to indicate what to do. How are you supposed to do it?

thanks

[Skitz_Viper]

learning a bit about the actual game before trying to hack it is useful..

Learn the Battlefield 2 Interface and what everything does within the game before you try creating hacks for it. Or you will have no idea what to do and how to go about it.

[fidgaf]

I forget where I got this but this is the properties of the shortcut you should be using:
"\BF2.exe" +menu 1 +fullscreen 0

[zeus1312]

I dont get it working right, the debugging shit. I did everything described in the tut, but it just doesnt work, i dont get the debugging function of t search working...

[scruie]

zeus1312 give debugportkiller (http://www.mpcforum.com/showpost.php?p=924411&postcount=21) from the Winject thread (http://www.mpcforum.com/showthread.php?t=97627) a go as it seems to work for others.

[XR8]

I dont get it working right, the debugging shit. I did everything described in the tut, but it just doesnt work, i dont get the debugging function of t search working...

Obviously you didnt do it as per the tutorial.....or it would have worked.....read over it again and again if still no luck send me a pm and i will help you through it .

Cheers .XR.

Oh btw are you using the demo or retail version ? if it is the retail you wont be able to attach the debugger untill you debug the port ! see tutorials for methods on doing this .

[zeus1312]

I am using the retail version. Something strange for me was, that the physical address seems to be always 00000000.
Edit: Forget it, dudes, it works now with the WinInject method! Thanx, guys!

[MobMasta]

i want to try out the 1-4 tutorials on bf2 hacking (minimap and etc) .. will they work for the full game (v 1.12) and be undetected by punkbuster?

[Spontaneous]

they will work no matter what game version you have. And they would be DETECTED, but to make an undetected hack, you first need to make a hack rather its detected or not. To make an undetected hack is taking a detected normal hack and take it a step further. The tuts show you how to make a detected normal hack which with the experance can then move onto making an undetected hack.

[pwet]

Easy to say, hard to master :classic:
I dont have any idea how made undetected hack, ofc im just learning the base of hack ( fog, map etc...) thank to caliber tuto and other topics.

Anyway its seems very hard to make undetected hack :/

[Superfunkster]

Okay guys. Spent 3 days now reading the tuts. Got some good informations. But before I spent another 3 days or more, can anyone say "cool, I made an undetected hack"?

Thanks...

[Spontaneous]

If your expecting to make an undetected hack and your just learning how to make hacks, expect to spend atleast 2 weeks time learning stuff. Most of us that have undetected hacks, spent monthes getting our hacks to what they are now. So if your expecting an undetected hack in under a week, your on crack.

[fidgaf]

It took me at least a month of work, advice from everybody and patience to understand everything that these guys are doing so good luck in advance...
Patience is key.

[Spontaneous]

It took me at least a month of work, advice from everybody and patience to understand everything that these guys are doing

Yep. And you still made an undetected hack before an undetected public hack was released.

[Superfunkster]

If your expecting to make an undetected hack and your just learning how to make hacks, expect to spend atleast 2 weeks time learning stuff. Most of us that have undetected hacks, spent monthes getting our hacks to what they are now. So if your expecting an undetected hack in under a week, your on crack.


Hey Spontaneous... Thank you for you information. If I could make a hack within one week using crack, I would use it :-) But naaah, my quesion simply was, if it can be done or not. I read something that it is not possible to make it undetected because of PB's new scan range. But if you guys plays with undeteceted hacks, I will do same... Sooner or later. BTW, in case you made a nice hack. I can remember the last time they ban my GUID, I never got kicked from any server when used it. How the situation is now? If you think your hack is undetected but it's not. Do you get kicked immediately or banned after a month, as last time?

[pwet]

I think when u use hack and in fact it's detected by PB, u're kicked immediatly.

However such as my m8 Superfunkster, I have read fews tuto and I've got somes very nices tips.
By the way, Im little afraid by one thing:
Imagine, u made ur own undecteted hack and use it untill one guys release public hack using the same way to get around PB of ur hack.

U ll be finnally kicked/banned and should find another method untill other guys release public hack ... etc ... etc...
U see what I mean?

Finnally we're not 100% to be un-kicked/banned one day?
Or there is method very safe?

[pkpks]

i downloaded all of the Tut's and read all of them without doing them, just to see if i have the understanding of doing it.

i dont have any ability in programing or makeing a hack i never did it befor so i'm a total n00b in it and you may have fun on my acount at this point...

however i belive i can make all of this without a question...but
at the end of all how do i keep my work and run it when i play multiplayer game, how do i make a program out of this after i finished hacking what i wanted? how can i make myself a small software that i run befor i enter the game that saved my work on the TSearch and OllyDbg ?

please explane me...(oh and be nice i know i'm a n00b yes yes...)

[caliber1942]

you need to pick a language. most people agree that c++ will get you further, but you can do most things with visual basic as well, just not as easy and less coding examples. you can obtain a copy of c++ from lots of places....

anyways, then look for templates for hacks that already have most of the coding done for you. i think there is a link to templates somewhere here already. probably there are several different templates, sometimes several for different languages. some people have picked up $30 books on c++.net and stuff to actually learn a programming language while they are learning to hack. useful stuff. why not gain something from this? anyways, use the template and make a hack that way. if you have questions with so and so and you have tried, then post a thread describing what you are using, how you tried, what is happening, etc. and ask an intelligent question for help. that will get you along the fastest. also, don't try to be spoonfed- in the long run you won't learn anything that way and you will always be reliant on other people for stuff. i hate being reliant and not understand something. i try to learn it so i will not need to be so reliant on others. at any rate, good luck. others have done it and so can you-

try it without punkbuster first and get it to work- then try to get around pb after. makes no sense to do it the other way around first. you won't understand much that way and to be honest, if you haven't coded you won't be able to do it first anyways.

it's two separate problems.... 1) learn to make the hacks 2) learn how to make the hacks work with pb

there is no kool aid or easy way to do this. you have to start from the basics and the beginning just like all of us. there isn't any other way. i can't rip out your BIOS and put a new one in where you know how to do this stuff already. you have to LEARN it. my opinion-
best,
cal

[pkpks]

thats too much for me...i give up :hurt:
i wouldn't mind even pay a few bucks for someone to make me a small privet hack..., after all it will end up more spending money on going learning how to c++ or buy an expensive book.

or just maybe theres someone nice out there that will be whilling to make me one, as for programing stuff c++ Visual Basic, i give up.

[caliber1942]

look- i just found some c++ books online and they are free and we even have a link to it in the sticky-

or you could just "give up"....

-cal

[Mr.}{@x]

quick question. if i wanted to make me a name tag hack "thinks thats what it was called" so i could see the other team on my 3d map that is NOT detected by pb which tut should i use ?

also i remember back in bfv the new pb scans were always posted so we could know what memory they were working under, do you gys till do that ?

thanks guys.

[caliber1942]

there is no tut that i made that goes over getting around pb. however, there is a 3d tags (tags) tut and then you can look into code caves to try and get around pb.

the method used to determine where pb scans can get you banned if you are caught doing it so most peeps don't do the lists anymore-

best,
cal

[Mr.}{@x]

ok, thanks for the info cal

[Xlano]

The tutorials are great!

[thepriest]

Ok I used the method to patch BF2.exe to be able to debug it and when i change the bytes to 0"s in Cheat Engine, then open up Tsearch to use the debugger it works fine for about 1 minute. Then for some reason the 0 bytes in Cheat Engine change and the debugger is no longer working right. Its like the address changed or some of the 0's changed. Is there a way to keep the 0 from changing so the debugger in Tsearch will keep working? Hope someone can understand what im talking about.

[alaxul]

For the nth time, you can find many of the tutorials and tools reuploaded at:

http://www.mpcforum.com/showthread.php?t=132351

[scruie]

alaxul nice work. This should stop those annoying posts about the tuts and download links.

Thank you so much for this.

[scruie]

Updated the first post with new download links.

Thread: CLICK (http://www.mpcforum.com/showthread.php?t=132351)

[alaxul]

It's my thanks for everyone's help on here in introducing me to the wonderful world of assembler.

[scruie]

dude....where is the -Captain Cox PowerPoint Code Cave Tutorial ?


Dude use your eyes: http://www.mpcforum.com/showthread.php?t=131819

[Empire01]

hey guys.. i dont know if this is the place to ask .. but im a noob to hacking games.. but i downloaded some of the TUTs and i got all the way to the part where it says to go to autohack.. enable debugger...then auto hack window.. well i click on enable debugger .. then auto hack window, and it says click on the little green arrow.. but i cant click on it.. it wont let me..so thats as far as i got to making name tags.. im stuck. will someone please help me??

[alaxul]

hey guys.. i dont know if this is the place to ask .. but im a noob to hacking games.. but i downloaded some of the TUTs and i got all the way to the part where it says to go to autohack.. enable debugger...then auto hack window.. well i click on enable debugger .. then auto hack window, and it says click on the little green arrow.. but i cant click on it.. it wont let me..so thats as far as i got to making name tags.. im stuck. will someone please help me??


You need to reset the debug port. Follow Faldo's tutorial.

[scruie]

Olly tuts attachment approved.

[alaxul]

I can't use the calculator, I'm sure I'm doing it wrong.

I click "hex" and try to insert: "dwRendDX9Base + 0x12AB6" but nothing happends. What am I doing wrong?

THanks

*n00bie me* , figured out how now.

This may be a silly question, but are you trying to insert the word "dwRendDX9Base" into the calculator? If so, you missunderstood the meaning. That word refers to the RendDX9.dll start address. Should look something like 41A0000. It will be different for you. So you would do the following in Calc.

41A0000 + 12AB6 = 41B2AB6

A simple rule of thumb. HEX only goes from 0 - F. eg:
0123456789ABCDEF

Hex follows a 15 digit format as opposed to Decimial which follows a 10 digit format.

[nalapala]

This may be a silly question, but are you trying to insert the word "dwRendDX9Base" into the calculator? If so, you missunderstood the meaning. That word refers to the RendDX9.dll start address. Should look something like 41A0000. It will be different for you. So you would do the following in Calc.

41A0000 + 12AB6 = 41B2AB6

A simple rule of thumb. HEX only goes from 0 - F. eg:
0123456789ABCDEF

Hex follows a 15 digit format as opposed to Decimial which follows a 10 digit format.

I did 4090000 + xxxxxx . as i edited, got it working

[teresa]

Dunno if i'm right to post this here, so admins feel free to move it.
I found a good web site with a lot of utility that maybe for experts can be very usefull, i like in this site the olly cos it have a lot of plugins.
check it!
http://www.tinicat.de/hacnho/

[§abre]

what is the exact order for cal's tuts?

The order of calibers tutorials is " I-IV " Alaxul has everything in the proper order for you to get to grips with memory Hacking.

[scruie]

[Tool] HelioS-Reset-DebugPort (32bit/64bit) (http://www.mpcforum.com/showthread.php?t=138634) has been added to tut links.

[scruie]

Added How to Attach de-bugger for 64bit Windows XP:

[Tool] HelioS-Reset-DebugPort (32bit/64bit) (http://www.mpcforum.com/showthread.php?t=138634)

[pinx]

is there any tutorial to make bp proof? coz all these hacks are useless...

[SupraGod]

that is making your own undetected hack from scratch correct ..

If your expecting to make an undetected hack and your just learning how to make hacks, expect to spend atleast 2 weeks time learning stuff. Most of us that have undetected hacks, spent monthes getting our hacks to what they are now. So if your expecting an undetected hack in under a week, your on crack.

Congrats on your work .. any teaser pics !

It took me at least a month of work, advice from everybody and patience to understand everything that these guys are doing so good luck in advance...
Patience is key.

[c0rruptt]

I have a problem with TSearch. Everything in the first Tutorial has worked except when i use the "Autohack" feature in it. When I load the form, all the controls and context menus are disabled. Any help? Just in case i can't get this to work, is there another program i can set breakpoints to BF2.exe's functions?

[edit] oops, forgot BF2.exe had to be patched first. correct me if im wrong.

[T0m]

hi, has anyone programmend a undetectable hack? i m to stupit for programming :'(
pls send me @ a PM

first of all, begging for hacks isnt allowed here on MPC. And second, you only have one post, you must have 15 posts before you use the PM system.

pls read the forum rules <<>>http://www.mpcforum.com/faq.php?faq=mpcrules_faq_item
and pls read the forum FAQ <<>>http://www.mpcforum.com/faq.php?faq=vb_faq

[scruie]

hi, has anyone programmend a undetectable hack? i m to stupit for programming :'(
pls send me @ a PM


Guessing your too stupid to read the rules: No begging for hacks/cheats or anything else!!

[LB/Fred_Durst]

So now i've done those tut's and i understand code caving now, so how do i make my dll's now. What program should i use..


code caving isnt working anymore.
PB will detect you and ban your key. (but with your mem hacking knowledge u can try to make hax (trainer) for gamecopy - and gameburnworld hehe)

u should switch over to directX hacking. but learning mem hacking is a good start to continue with c++ and d3d.
hf

p.s: use TMK (trainer maker kit ; u can make your detected code caves there ,too)

[pl0x]

I'm familiar with C++ and i've downloaded a source code of a multi-hack written in d3d9 and C++ so i think i'm just gonna change it around a little. But then i need to change the C++ into a single .dll. How do i do this? Ty in advance:bandit:

[netgott]

@corrupt: no u have to clean your debug port, cause bf2 fakes saying it is debugged, to prevent other debuggers to be used...
cleaning your debug port makes it possible for u to attach a debugger... e.g. ollydbg or the autohack debugger thing in tsearch! so use.
so use the thing scruie posted one post before u in #22 (HelioS-Reset-DebugPort 32bit/64bit)! HF :)

[NoS]

When i try to get the peprocess number its just 00000000 every program. why is this?

[scruie]

PM me your email and ill send it to you.

Cheers .XR.
---------------


Just attach the file here as I'm sure others would find it useful. And it's one that I haven't got in my own DB of files from here.

[Cyclone]

I found the attachment elsewhere but thanks anyway XR8!
I have attached the tut for other people who cant find it :)

But can someone upload faldos code cave tut please?

Heres a mirror incase the attachment doesnt work:

www.gamescentral.ws/beginnertut.rar

[caliber1942]

the files can also be found here i think:

http://www.mpcforum.com/showthread.php?t=146400

go to you see them lower-

best,
cal

[tuppes08]

Hello,

i have some question about the tutorial:

1. if i make a hack base on the tutorial. Will PB find this hack?

2. what will be habbend, if PB find my hack?

3. Is there a other way to build my own hack that only show Taks and PB didn't find him?

Tuppes

[alaxul]

Hello,

i have some question about the tutorial:

1. if i make a hack base on the tutorial. Will PB find this hack?

There is a section that talks about avoiding PB. You have a long road ahead of you. First you will need to learn how to create a hack, then you can worry about defeating PB.

2. what will be habbend, if PB find my hack?

To date, these types of hacks simply cause a PB 2 min kick.

3. Is there a other way to build my own hack that only show Taks and PB didn't find him?

Sorry, don't know what Taks are.

Tuppes

[Sin...HAx]

the first time i used the tutorials i got it 1st time usin bf2 1.3but wen i came to debug it on tsearch it wouldn't let me(the 1st bf2 tutorial) any1 no y?

[spyder886]

ok ive looked at all the turorials and cannot follow. And i just realized im in the wrong section so sorry but its basically the same process anyways. Im playing call of duty and have 2 hacks to run at the same time. Can i just get a simple explanation on how to inject 2 programs during game play? do i do it during the game play? and i cant figure out what files to inject. like how do i inject them? do i inject the .exe file or what!? sorry for this but can someone just get my noob self an answer? haha thank you

[alaxul]

From the Winject Readme:

Start winject, select process to inject into, select DLL you want to inject and click inject. The injection is verified automaticly by re-enumerating modules loaded in target process.

[scruie]

Not 100% sure but you could have two instances of Winject running - at least it has worked for me in the past.

[biohazzz]

Coding Tutorials

Wrox C++ Tutorial1.RAR
Wrox C++ Tutorial2.RAR

The links doesent work anymore ;'(

can some one upload those 2 rars again pls? my friend learned coding from that and he dont got the files anymore 2 i realy want em :S.

[scruie]

Coding Tutorials

Wrox C++ Tutorial1.RAR
Wrox C++ Tutorial2.RAR

The links doesent work anymore ;'(

can some one upload those 2 rars again pls? my friend learned coding from that and he dont got the files anymore 2 i realy want em :S.


Attached to the first post. Look at the attached files for the download.

[PX-338]

Just an FYI, all of Calibur's tutorial downloads are broken.

[scruie]

Just an FYI, all of Calibur's tutorial downloads are broken.

They have been reuploaded by axual. Please double check as they are there.

[redwing26]

sorry if this has been covered as this is a big thread, anyway i went to the link reccomended which said these file links no longer work so I changed accordingly. Im looking for a working link to this

Neuer Ordner.part1.rar

and al the other tutorials none of them work for me ........If someone cant find me a link that works would it be possible to send as much info on dasm and modern game nocds to my mail? Ive been working with ollydbg and dasm but its only my older games I can do .......this is the first modern game ive seen info on , so I would be extremely grateful as all i come across for cracking and assembly seems to be dead links

[whoodiestyle]

no of the hacking tut links work can anyone fix this?

[walafay]

Thank you Cal, you did a great job on your tut's, very easy to learn, and you Point out important parts clearly at all times.

The tutorials worked perfectly on retail BF2 1.4 up until you had to find a certain called from value in the Call stack of main thread window, I did not find the exact value, but I read ahead, and did some "creative thinking" and got my own value that worked! Thanks, the tutorial is so great that it made my brain understand how things work.

I got exited that it worked started to play the game... and then I open squad window the game crashed :P...
anyway.. it was my fault, i didnt NOP the rest of the stuff.. that was listed in the tutorial.

anyway this is pretty good for my first 2 hours on this stuff! thanks! I am a total newb to this.

[OverlordQ]

Yea, none of the tutorial links work :(

[scruie]

Yea, none of the tutorial links work :(

Did you scroll down to the bottom of the post and see all the new links in a pretty little box?

Those links work!

[RetroSole]

ammo is server sided are u sure? i found my ammo address for my pistol and froze it , it worked, but im havin a hell of a time finding my health, i counted all the lil bars theres 28 of them ( i think) im scanning under 4 bytes exact value, ive scanned many times and failed to find my health address, any input is greatly appreciated thanks, and btw, im doing this in the DEMO in a single player match... not sure if that makes a difference

[wraptoar]

i dunno... im PRETTY sure ammo wont be client sided... and as for health... 28 is under one byte isnt it?

[scruie]

Ammo and health has always been held server-side in BF series; at least when played online.

You can have an unlimited ammo/health hack ofr single players but it will never work online.

[ap0rtal]

Sorry, but a cant download any tutorials (.rar). I get only a blanc screen and nothing happens.

Anyone know another download links to the tutorials?

[Tetsuo Umezawa]

I have same Problem ap0rtal has. When i tried to download those rar tut's i only see a white page. Are the links down?

[alaxul]

Scroll to the bottom of the post. All the files have been reposted and can be downloaded directly.

[Tetsuo Umezawa]

Right I found them there thanx alaxul.

First of all I'am new to this Forum.
I'm from Germany, I joined it because i want to make my own hack for BF2.
I never made hacks before, but with this very :cool: sticky post, long time to read and understand those tuts, understandig of source code and my basic programming knowledge i was able to do my own hack soon.
I understand u mods if someone ask "how to do a hack" and you say "look it's all here".

This Thread is a awesome job. and nearly all about makin private Hacks is explained. Rest can be found somewhere else ("Google" and read).

[moscher]

Right I found them there thanx alaxul.

First of all I'am new to this Forum.
I'm from Germany, I joined it because i want to make my own hack for BF2.
I never made hacks before, but with this very :cool: sticky post, long time to read and understand those tuts, understandig of source code and my basic programming knowledge i was able to do my own hack soon.
I understand u mods if someone ask "how to do a hack" and you say "look it's all here".

This Thread is a awesome job. and nearly all about makin private Hacks is explained. Rest can be found somewhere else ("Google" and read).


KÖNNTEST DU DICH BITTE MAL BEI MIR MELDEN ???????

ICQ 314734452

[scruie]

KÖNNTEST DU DICH BITTE MAL BEI MIR MELDEN ???????

ICQ 314734452

Post in english or provide a translation as per the rules.

[xxalex9393xx]

hidaskljnsdfsa

[scruie]

hidaskljnsdfsa

User has been banned for spamming

[Shaan]

please upload files in a safe place.

ty

[Shaan]

Please Upload these files in a safe place::cry:
like:
divshare.com
rapidshare.de

[bossjas]

kosire or someone (rather kosire) please make a aq hack that really works with upgrade 33 plz

[repoman1]

Does anyone know how to make an aimbot?
if so could you give me some pointers on beggining one?
thanks much.=)

[kashingyiu]

Anyone know another download links to the tutorials?

[homersimpson247]

When I connect to Battle Field 2 to do a fog hack, I found the address that contains the fog/viewdistance and get to the point when I need to enable the debugger I click on it and it does not enable. When I open the auto hack window there is no green arrow (breakpoint button) lit up to push. PLEASE HELP!

[Spontaneous]

This is due to not resetting the Debugger attached. You see, with BF2 and BF2142, EA built in their own debugger. Since you can only have 1 debugger attached at a time, you need to reset the value that shows there is a debugger attached, allowing you to attach your own debugger. Please go through the available tuts as it is shown how to reset this and continue. Otherwise look around the forums. Not only does WinInject have a feature built into it for resetting this, but there are other dlls and ways provided through out the forums.

[SgtCortes69us]

I'm trying to download the tutorial but all I got is a blank page. The only thing that I got was a pps file but theres only pictures, nothing else but pictures.

How can I get the tutorials?

Jelp please:cry:

[Spontaneous]

Check the later pages for an updated link to download, not just first page.

[SgtCortes69us]

I've reading the "Caliber1942 BF2CheatTut1. and theres some files that I can't open, and theres say , "Double click on the file MainLoop-v01.pb, which will load it into PureBasic" what program open those files? I need that to continue with the tutorial.

Any help appreciated.

[Spontaneous]

which will load it into PureBasic

Gee I wonder if PureBasic is the program you need then? If you plan on being able to make cheats for games, your going to have to use your brain a little more.

[RisenSoldie]

Awesome tutes list, gonna keep me busy over this weekend going through it all. Thankyou :D