[poll/release] Tremulous - Wallhack, Colored Models, Health-Hack

[Undergamer]

-- win32

Extract the .exe and .dll directly to your tremulous dir where tremulous.exe is. It uses a modified OGC loader.

It is currently undetected.

-- linux

Install the .zip version of tremulous to any directory then extract the .zip file to the same directory. At that point, make sure the base/vm folder ends up in the trem/base/vm folder, etc...

The exe is modified so that the crc check always returns the correct value. Just dont mess with the .pk3's since I bypassed it so it loads the qvms directly but the checksum is taken from the .pk3's.

It has the same stuff as the windows hack, except the linux version has the building hp hack.

Screenshots:
http://img356.imageshack.us/img356/8236/23979032mu7.jpg (http://imageshack.us)
http://img454.imageshack.us/img454/810/74367356kd6.jpg (http://imageshack.us)
http://img454.imageshack.us/img454/5484/59487330vo1.jpg (http://imageshack.us)

[Lisa]

I wanted to check this game out when I'm at my primary pc again.


So.. sure, I'd like to see you releasing it,
basically you even have to as else this would be private cheat discussion, which is not allowed.


But please attach the file to your post.

[Undergamer]

I wanted to check this game out when I'm at my primary pc again.


So.. sure, I'd like to see you releasing it,
basically you even have to as else this would be private cheat discussion, which is not allowed.


But please attach the file to your post.


I have to switch to my other machine before I upload it since thats my dev machine. Sry about the confusion, shouldn't be more than an a half hour.

[Lisa]

There it is. As I said, gonna check out the game when being at my primary pc again, which may take a while, though.

Got any screenshots?

[Undergamer]

There it is. As I said, gonna check out the game when being at my primary pc again, which may take a while, though.

Got any screenshots?


I'll go make some :) Any requests? I got like 200 kills a few days ago.

[Lisa]

Requests? Well, just of the features this contains such as wallhack or colored models.

[Undergamer]

Requests? Well, just of the features this contains such as wallhack or colored models.


Youtube video should be up when its finished uploading :)

[muaddib]

windows version crashes

on review, backport crashes, you got to run stock tremulous.exe

http://img.photobucket.com/albums/v402/indy_MuadDib/shot0044.jpg

[Undergamer]

windows version crashes

It needs to be installed where tremulous.exe is.

Make sure the exe and dll from inside the zip are right next to the real tremulous.exe.

EDIT: I just tested it on two other machines to be sure. It works :)

[muaddib]

It needs to be installed where tremulous.exe is.

Make sure the exe and dll from inside the zip are right next to the real tremulous.exe.

EDIT: I just tested it on two other machines to be sure. It works :)


it crashes in backport but not stock.

works nicely though.

[Undergamer]

it crashes in backport but not stock.

works nicely though.

W00t!! First positive feedback. Thanks :)

[muaddib]

need to fix that backport, not many still use stock.

[Undergamer]

need to fix that backport, not many still use stock.

I need updated offsets for backport. I've never used it before.

[LoveTenderCare]

Works fine, but I can't get the helmet-radar, as shown on your pictures. I do get the texturehack and the wallhack. Help plz?

[Undergamer]

Works fine, but I can't get the helmet-radar, as shown on your pictures. I do get the texturehack and the wallhack. Help plz?

Its in the linux version.

The windows version is the predecessor of the linux version. I posted both so that neither user would miss out, but the truth is that the linux version is a bit more advanced.

[Fu.Kenny]

Nice job

[boogahboo]

Wow...I could you please email me at ensnared_mc(at)hotmail(dot)com.

I am working on Gnetoo amd64, and emulating 32bit is kinda redundant.....

as well, how do you activate n_aim* etc...style cmds. I realize what they do, i think. But in game it does not work.

[waffles06]

It doesn't work for me when I'm using a guid. I'm using the windows version.

[boogahboo]

then get the stock binary....back up your tremulous qkey file.

and download the tremulous.zip file from http://www.tremulous.net/

come one waffles!


SO DOES YOU FACE!

QUAKE 3 KICKS ASS!

and in case you didn't realize...it's josh....=P

[Undergamer]

It doesn't work for me when I'm using a guid. I'm using the windows version.

Stock client is the only one supported at the moment. I've got a limited amount of time in a week to work on this.

Which is the most used trem client anyways?

Wow...I could you please email me at ensnared_mc(at)hotmail(dot)com.

I am working on Gnetoo amd64, and emulating 32bit is kinda redundant.....

as well, how do you activate n_aim* etc...style cmds. I realize what they do, i think. But in game it does not work.

Those cvars are left over from my initial attempt at writing an aimbot. I ended up #defining out those code blocks, but the cvars never got removed.

In the linux version, some of them do work for turning off the wallhack, glow, building hp, etc...

[LoveTenderCare]

Which is the most used trem client anyways?
http://v1.risujin.org/tremulous/#backport

[Dimax]

i dont think the hp hack is working since i still can die.

[Undergamer]

i dont think the hp hack is working since i still can die.

It displays building health so you can attack the weakest ones. Its especially helpful when your a goon against S1 humans.. Lets you kill all their base turrets very quickly.

[slojoz]

help ppl it doesnt work on me... i tested it on 2 computers with windows and it say thats theres an error, that it detected a problem and it must close<with the loader =( plz help me

how can i activate like the real aimbot? it just make me see through wall and in colors but it doesnt aim as perfect as in the youtube video i saw =S can someone help me plz

[God+Zilla]

it keeps saying the file "loader" is password protected how do i get past this?

[Undergamer]

it keeps saying the file "loader" is password protected how do i get past this?

Short answer, it isn't password protected.

[God+Zilla]

ok maybe i wasnt in the tremulous dir, how do i find that?

[LoveTenderCare]

can you update the windows version so you have radar as default?? If you do that, I'm a happy man ;)

[boogahboo]

Those cvars are left over from my initial attempt at writing an aimbot. I ended up #defining out those code blocks, but the cvars never got removed.

In the linux version, some of them do work for turning off the wallhack, glow, building hp, etc...

I have about 30 different Quake III aimbot sources. Integrating OGC for instance shouldn't be that hard.

Send me the source as a tarball to my email address up there. I'll do the rest.

Thanks man. Good job on this release.

[boogahboo]

Done. I have almost full compatibility with svn rev. 898. I can post a patch against it whenever requested.

[Unibrow]

**** off.. Tremulous is actually a decent game, the devs are alright people, most server admins don't abuse... Why not hack something that isn't opensource? Something run by *****s? Or a complete shit game...

[Lisa]

Hello Unibrow, why attack other users for cheating in a certain game that you like?


Everyone is allowed to cheat in any game he wants to, which you will have to get by with.


According to the rules, your post comes under Provocative Anti-Cheater Activities.

[Unibrow]

Hello Unibrow, why attack other users for cheating in a certain game that you like?


Everyone is allowed to cheat in any game he wants to, which you will have to get by with.


According to the rules, your post comes under Provocative Anti-Cheater Activities.

I'm all for cheating to get security vulnerabilities fixed and for games that are being created by dumbasses who shouldn't be running a game or developing it. I think a person is telling the developer that they're doing something horribly wrong when they're making cheats for a game, whether that be ******* at coding or being awful admins on their game servers. The trem guys are doing nothing wrong...

[Lisa]

Well, general cheating just is this community's concept.

[Unibrow]

Well, general cheating just is this community's concept.
Ah but that doesn't mean I have to like it. To me, cheating in a game that has nothing wrong with it or its developers is like destroying someones property whose done nothing wrong for no reason other than being a complete ass.

[Soviet222]

Ah but that doesn't mean I have to like it. To me, cheating in a game that has nothing wrong with it or its developers is like destroying someones property whose done nothing wrong for no reason other than being a complete ass.

Why the hell do you think its open source? ... its so we can do this stuff there encouraging it. and if you don't like stop posting other people do! so shut up (simple as that) :cool:

oh and good program but you should make one that works with GUID when you have sometime most people that would look for this have one

[boogahboo]

Why the hell do you think its open source? ... its so we can do this stuff there encouraging it. and if you don't like stop posting other people do! so shut up (simple as that) :cool:

oh and good program but you should make one that works with GUID when you have sometime most people that would look for this have one

I already ported it to svn r.898 backport.....waiting for someone to host it for me......:cool:

[shocker154]

it works for me but how do you use health hack? whats point of colored models if there isn;t an aimbot!

[penpencilpaint]

but just 1 question

what values should I use on my colour aimbot for RGB for each team?

ps. using the windows version

[wtf.dunno]

but just 1 question

what values should I use on my colour aimbot for RGB for each team?

ps. using the windows version

Make in-game screenshot, find some program with what you can look for colour (RGB) and then put that...

[boogahboo]

}
/*
================
botAim
================
*/
qboolean botAim( gentity_t *self )
{
vec3_t dirToTarget, dttAdjusted, angleToTarget, angularDiff, xNormal;
vec3_t refNormal = { 0.0f, 0.0f, 1.0f };
float temp, rotAngle;
int vh = 0;
vec3_t top = { 0, 0, 0};
//float accuracyTolerance, angularSpeed;
BG_FindViewheightForClass( self->client->ps.stats[ STAT_PCLASS ], &vh, NULL );
top[2]=vh;
VectorAdd( self->s.pos.trBase, top, top);


//accuracyTolerance = MGTURRET_ACCURACYTOLERANCE;
//angularSpeed = MGTURRET_ANGULARSPEED;

VectorSubtract( self->enemy->s.pos.trBase, top, dirToTarget );

VectorNormalize( dirToTarget );

//CrossProduct( self->s.origin2, refNormal, xNormal );
//VectorNormalize( xNormal );
//rotAngle = RAD2DEG( acos( DotProduct( self->s.origin2, refNormal ) ) );
//RotatePointAroundVector( dttAdjusted, xNormal, dirToTarget, rotAngle );

vectoangles( dirToTarget, angleToTarget );

//SetClientViewAngle( self, angleToTarget );
//VectorCopy( angleToTarget, self->s.angles );
//VectorCopy( self->s.angles, self->client->ps.viewangles );

//immediate turn! turn slower and check self->client->ps.viewangles
self->client->ps.delta_angles[ 0 ] = ANGLE2SHORT( angleToTarget[ 0 ] );
self->client->ps.delta_angles[ 1 ] = ANGLE2SHORT( angleToTarget[ 1 ] );
self->client->ps.delta_angles[ 2 ] = ANGLE2SHORT( angleToTarget[ 2 ] );

return qtrue; //for now assume we have perfect aim. indeed we have

/*
angularDiff[ PITCH ] = AngleSubtract( self->s.angles2[ PITCH ], angleToTarget[ PITCH ] );
angularDiff[ YAW ] = AngleSubtract( self->s.angles2[ YAW ], angleToTarget[ YAW ] );

//if not pointing at our target then move accordingly
if( angularDiff[ PITCH ] < (-accuracyTolerance) )
self->s.angles2[ PITCH ] += angularSpeed;
else if( angularDiff[ PITCH ] > accuracyTolerance )
self->s.angles2[ PITCH ] -= angularSpeed;
else
self->s.angles2[ PITCH ] = angleToTarget[ PITCH ];

//disallow vertical movement past a certain limit
temp = fabs( self->s.angles2[ PITCH ] );
if( temp > 180 )
temp -= 360;

if( temp < -MGTURRET_VERTICALCAP )
self->s.angles2[ PITCH ] = (-360) + MGTURRET_VERTICALCAP;

//if not pointing at our target then move accordingly
if( angularDiff[ YAW ] < (-accuracyTolerance) )
self->s.angles2[ YAW ] += angularSpeed;
else if( angularDiff[ YAW ] > accuracyTolerance )
self->s.angles2[ YAW ] -= angularSpeed;
else
self->s.angles2[ YAW ] = angleToTarget[ YAW ];

AngleVectors( self->s.angles2, dttAdjusted, NULL, NULL );
RotatePointAroundVector( dirToTarget, xNormal, dttAdjusted, -rotAngle );
vectoangles( dirToTarget, self->turretAim );
SetClientViewAngle( self, angleToTarget );

//if pointing at our target return true
if( abs( angleToTarget[ YAW ] - self->s.angles2[ YAW ] ) <= accuracyTolerance &&
abs( angleToTarget[ PITCH ] - self->s.angles2[ PITCH ] ) <= accuracyTolerance )
return qtrue;

return qfalse;
*/
}

/*
================
botCheckTarget
================
*/
qboolean botCheckTarget( gentity_t *self, gentity_t *target, qboolean ignorePainted )
{
trace_t trace;
gentity_t *traceEnt;

if( !target )
return qfalse;

if( !target->client )
return qfalse;

if( target->client->ps.stats[ STAT_STATE ] & SS_HOVELING )
return qfalse;

if( target->health <= 0 )
return qfalse;

if( Distance( self->s.pos.trBase, target->s.pos.trBase ) > MGTURRET_RANGE*3 )
return qfalse;

trap_Trace( &trace, self->s.pos.trBase, NULL, NULL, target->s.pos.trBase, self->s.number, MASK_SHOT );

traceEnt = &g_entities[ trace.entityNum ];

if( !traceEnt->client )
return qfalse;

//if( traceEnt->client && traceEnt->client->ps.stats[ STAT_PTEAM ] == elf->client->ps.stats[ STAT_PTEAM ] )
// return qfalse;

return qtrue;
}


/*
================
botFindEnemy
================
*/
//should return a list of entities
int botFindEnemy( gentity_t *self )
{
int entityList[ MAX_GENTITIES ];
vec3_t range;
vec3_t mins, maxs;
int i, num;
gentity_t *target;

VectorSet( range, MGTURRET_RANGE*3, MGTURRET_RANGE*3, MGTURRET_RANGE*3 );
VectorAdd( self->client->ps.origin, range, maxs );
VectorSubtract( self->client->ps.origin, range, mins );

//find aliens
num = trap_EntitiesInBox( mins, maxs, entityList, MAX_GENTITIES );
for( i = 0; i < num; i++ )
{
target = &g_entities[ entityList[ i ] ];

if( target->client && self!=target )//&& target->client->ps.stats[ STAT_PTEAM ] != self->client->ps.stats[ STAT_PTEAM ] )
{
//if target is not valid keep searching
if( !botCheckTarget( self, target, qfalse ) )
continue;

//we found a target
self->enemy = target;

return Distance( self->s.pos.trBase, target->s.pos.trBase );// qtrue;
}
}

//couldn't find a target
self->enemy = NULL;
return -1;
}

that could help for next release.....say thanks for crawling benmachines' box....woot!

[LoveTenderCare]

it works for me but how do you use health hack? whats point of colored models if there isn;t an aimbot!

you can see enemy's better :bunny:

[Undergamer]

This defeats the purpose of deliberately dark maps :)

[Scrawni]

Nice work Undergamer, works a treat, would like to see more :p.

If you are using hardcoded addresses for the hooks, then i may have a method that could make it alot easier to convert to Stock standard for windows to the backport/GUID version of trem.

[LoveTenderCare]

I would love to see that! :D
Undergamer's hack + backport =L33t!!

[Scrawni]

Well i have already converted the aimbot by null for the GUID version, im sure i can do it for this hack aswell.

[LoveTenderCare]

plz do :bunny:

[Scrawni]

Up to Undergamer, if he does not give me the info i need, then i cannot update it.

[NewPLAYR4]

can you adds nulls aimbot to this with the guid that would be wonderful great hack thanks

[manniL]

Component MSWINSCK.OCX or one of its dependencies not correctly registred ; a file is missing or invalid .

HELP

[Lisa]

I don''t know why this requires the windsock library at all but just google for it / the error, download it, and put it into your system32 directory.

[misoswk]

haha nice thx:)

[gaynessgayness]

Hi bud,

I like your linux work. Are you planning on providing a working aimbot solution?

[Undergamer]

To answer a few questions some of the above posters have:

There will likely be a new release from me for trem 1.2. I suspect with the current hack problem they will want to break them all w/ a massive patch.

As for an aimbot, I usually play alien so I didn't need it.. (esp. w/ a goon on ATCS, s1 in the halls as those who've played w/ me can attest ;) ) If there is going to be an aimbot release, it will be crossplatform and GUID compatible.

Some features that are on the table but havent been coded yet:
* Auto-mara:
Lightning in midair w/ perfect accuracy :)

* Smooth aimbot:
All this bullshit on the trem forums about 'hack detection tutorials' is crap. The nullify bot is really fun but it didn't have any constraints on the aiming functionality. This will be fixed in 3 ways if I add an aimbot: FOV limit, Smooth aim, and perhaps different settings per weapon. :)

* Enhanced wallhack
HP display for players (I experimented w/ this on linux to varying degrees of success already). Bounding boxes... the list is endless.

* Other stuff:
None of that 'delete' key bullshit to spam the console that your experimenting w/ hacks.

Probably incorporate latest SVN.

EDIT: Source released publicly.

[dan003400]

Hello, I'd like to ask you for the source code to your Tremulous cheat, it works great and I'd like to incorporate my uber-tyrant slashes into it.
Thanks and keep up the good work.
- A fellow Linux geek.

[Undergamer]

Hello, I'd like to ask you for the source code to your Tremulous cheat, it works great and I'd like to incorporate my uber-tyrant slashes into it.
Thanks and keep up the good work.
- A fellow Linux geek.

Done :) For the moment it's hosted here (http://rapidshare.com/files/47604729/trem-thzlinux.tar.gz.html):

Up to Undergamer, if he does not give me the info i need, then i cannot update it.

I kind of dropped off the map for a bit. But for future reference, open the tremulous.exe file with the latest freeware version of IDA and search for the VM_Create function bytecode. I sent you a PM.

An easy fix is to compile the trem code, then add two calls to MessageBoxA or printf to the beginning of VM_Create depending on your OS. Recompile. Add breakpoints to these calls in IDA. Then note the bytecode that appears previous to this call (it should be pretty easy as IDA is pretty intuative)

Component MSWINSCK.OCX or one of its dependencies not correctly registred ; a file is missing or invalid .

HELP

There is absolutely NO network code in THZ.


Btw, this is C not VB.. so please stop the FUD.

Hi bud,

I like your linux work. Are you planning on providing a working aimbot solution?

Next version. It'll happen in a few months when I'm off work.

can you adds nulls aimbot to this with the guid that would be wonderful great hack thanks

Nulls aimbot is certainly a starting point. However, I think there is great room for improvement. My aim was to make a crossplatform hack first.

Why the hell do you think its open source? ... its so we can do this stuff there encouraging it. and if you don't like stop posting other people do! so shut up (simple as that) :cool:

oh and good program but you should make one that works with GUID when you have sometime most people that would look for this have one

You hit the nail on the head with this one. GUID will be in the next version when I port to SVN.

it works for me but how do you use health hack? whats point of colored models if there isn;t an aimbot!

The human goon-bot of course :wank: I get far more kills as a goon w/ these colored models than I do with a plain old wallhack.

I would love to see that! :D
Undergamer's hack + backport =L33t!!

W00t a following :) Support only makes it go faster. Mabye the admins could make a trem section in the other FPS category.

[LoveTenderCare]

* Auto-mara:
* Smooth aimbot:
* Enhanced wallhack
* Other stuff:Do want!! :squareeyed:

[heimsger]

Hi all!

The linux release doenst work (for me), using openSUSE 10.2 (if that does matter). When trying to execute it via console I get that:

"error while loading shared libraries: libopenal.so.0: cannot open shared object file: No such file or directory"

And, really, I did install it the way described above. Whats wrong?

Thanks for your work and for help ;-)

[Undergamer]

Hi all!

The linux release doenst work (for me), using openSUSE 10.2 (if that does matter). When trying to execute it via console I get that:

"error while loading shared libraries: libopenal.so.0: cannot open shared object file: No such file or directory"

And, really, I did install it the way described above. Whats wrong?

Thanks for your work and for help ;-)

I suggest you make sure you have openal installed. Secondly, if you still have problems just d/l the source code I posted and in the source directory.

./configure
make clean
make

You will need the appropriate libraries and tools to compile trem. For those I suggest you visit the official trem forums since they should have more specific info that I cant provide (I've never used SuSe... Gentoo for me :) )

g/l

[Slifer123]

Does the wall-hack allow you to shoot thru walls?

[Lisa]

Uhm, no, but look through them.

[Slifer123]

Ah okay. thats what i thought.

[Undergamer]

I posted a new version in another thread. This one has an aimbot and works on both windows + linux the same exact way.

[boogahboo]

Well Undergamer, I got your email.....have you released even parts of thhe source that I sent back to you? I hope not. I want to keep it private for now. Once it's finished I don't give a shit.

[Undergamer]

Well Undergamer, I got your email.....have you released even parts of thhe source that I sent back to you? I hope not. I want to keep it private for now. Once it's finished I don't give a shit.

Naw, I didn't use any of your code. I just took some suggestions I got from a few ppl and coded them. Luckily enough I had about 10 Dr. Peppers + a 10 hr coding spree ending at 7am in the morning :)

[boogahboo]

I can't use your new stuff as you haven't posted your source tree.

Send it to the site I sent to your hotmail. =) We can pull off our shit over there, but keep the address for that site quiet.

EDIT: oh yeah....look into MG patches and find risujin's teamoverlay and the re-enable chat bubbles patches. They're quite helpful. Also, I can make a userdraw for the radar as opposed to that lame square.

[chris_falol]

I so want it im a Windows user and i cant find anywhere to download PLEASE POST LINK

[LoveTenderCare]

I so want it im a Windows user and i cant find anywhere to download PLEASE POST LINK

see the topic for THZ 4.0 for the latest realise

[chris_falol]

but it dosent have health hack

[rawring]

wheres the Dl link?

[LoveTenderCare]

wheres the Dl link?Go to the FusionTHZ site, there are the links :D

[areoseek]

lemme see

[ititit]

thanks a lot

[Wayneman]

LOL i cant find were to get it. I must be retarded because you all found it ok.:P

[LoveTenderCare]

LOL i cant find were to get it. I must be retarded because you all found it ok.:P
Step 1: go to Google (Google is your friend! :D)
Step 2: type in "FusionTHZ"
Step 3: Click the first link, this will bring you to the site.

:roll:

[curien7]

Wow you guys are hacking all ^^
And here are nice Tremulous Hacks THX
And Srry for my English i cant speak good English.

[traxpl]

J like this is hack :) thx

[mel17]

Verry good :) THX!

[moduz87]

-- win32

Extract the .exe and .dll directly to your tremulous dir where tremulous.exe is. It uses a modified OGC loader.

It is currently undetected.

-- linux

Install the .zip version of tremulous to any directory then extract the .zip file to the same directory. At that point, make sure the base/vm folder ends up in the trem/base/vm folder, etc...

The exe is modified so that the crc check always returns the correct value. Just dont mess with the .pk3's since I bypassed it so it loads the qvms directly but the checksum is taken from the .pk3's.

It has the same stuff as the windows hack, except the linux version has the building hp hack.

Screenshots:
http://img356.imageshack.us/img356/8236/23979032mu7.jpg (http://imageshack.us)
http://img454.imageshack.us/img454/810/74367356kd6.jpg (http://imageshack.us)
http://img454.imageshack.us/img454/5484/59487330vo1.jpg (http://imageshack.us)

where is the link?????? O.O and FusionTHZ site isnt workin....maybe they have closed it???

[intake360]

I dont know what happened to the link either :S

[Fiffa]

Does v. 4.0 work undetected on latest Tremulous ?

[smallstop]

ey guys where is the Link i cant find it ^^

[Ping_pong]

The creator removed his link for unknown reason. I re-uploaded the hack in the following link:

http://www.mpcforum.com/showthread.php?t=233794

Thread closed!