Want to make your own hack?

[Spontaneous]

This thread will contain all the links you will need to get started.

I know all of you are thinking well how to I make a hack that is not detected by PunkBuster. Well before you even get that far you need to learn how to make the hacks being detected. Once you got all the hacks done, then you can make it undetected from there. So lets begin.


StealDMA - explanation by mcMike (http://www.mpcforum.com/showthread.php?t=68276)

Ok until all the future tuts are released, here is a some by faldo.
Theories and methods of memory hacking (http://www.mpcforum.com/showthread.php?t=59378)
Theories and methods of Code-caves (http://www.mpcforum.com/showthread.php?t=63827)

SniperEye - VB tutorial template for hacking (http://www.mpcforum.com/showthread.php?t=67657)

DMA stealing Tut by ShadowsFury (http://www.mpcforum.com/showthread.php?t=68346)

Step 1. Concepts and ideas
Tut to be posted soon.

Step 2. Mini-Map hack
Mini-Map tut here (http://www.mpcforum.com/showthread.php?t=58051)

Step 3. NameTags hack
Tut to be posted soon.

Step 4. HealthTags hack
Tut to be posted soon.

Step 5. Console hack
Tut to be posted soon.

Step 6. Accuracy hack
Tut to be posted soon.

Step 7. Mine Warning hack
Tut to be posted soon.

Step 8. Sniper Breathing hack
Tut to be posted soon.

Step 9. No Fog
Tut to be posted soon.

Step 10. Sniper Overlay
Tut to be posted soon.

Step 11. How to use OllyDbg
Tut to be posted soon.

Step 12. How to put all this into a trainer using Visual Basic 6(vb6)
Tut to be posted soon.

Step 13. How to turn off the hacks once they are on
Tut to be posted soon.

Step 14. How to find the PunkBuster scan range list
Tut to be posted soon.

Step 15. How to do codecaves to get around where PunkBuster scans.
Tut to be posted soon.

Step 16. How to disable PunkBusters ScreenShot
Tut to be posted soon.

drk's Tutorials
- Testing Code Caves
- Accuracy tut by drk
- Easy way cave
- How to Find off Addresses
drk's Tuts here (http://www.mpcforum.com/showthread.php?t=66276)

OLLY DBG CodeCave PowerPoint Tutorial
OLLY DBG CodeCave TUT here (http://www.mpcforum.com/showthread.php?t=61831)


Links to tools and other helpful sites

Tools:
OllyDbg Page (http://home.t-online.de/home/Ollydbg/)
T-Search Page (http://membres.lycos.fr/tsearch/) :note Other helpful tools availible here
MaxPowers Page (http://hexsoft.gifgraphix.com/) :note Other helpful tools/tuts/trainer templates availible here
GameHack (http://www.gamehack.com/)

Here is a visual tut. (video capture) of divine shadow defeating DMA
Video Link (http://www.ghu.as.ro/ghtuts/divines1.rar)

Here is a Tut on how to find a dll that can be used to hold a code cave.
Link to Tut (http://www.mpcforum.com/showthread.php?t=58127)

Got a new one here that explains HEX and Assembly a little
Here is this tut (http://www.mpcforum.com/showthread.php?t=17424)

Here is a link with a bunch more tuts(some the same, some different, some new, some old) for explaining TSearch, ArtMoney, OllyDbg, defeating DMA, DMA Pointers, code injection, even a small tut on Visual Basic.
Here is this tut (http://devious.tsongkie.com/downloads.php?id=tutorials)

Just more links to check out
http://www.gamehacking.com/
http://www.ghu.as.ro/ghtuts.php
http://www.extalia.com/home/index.php?sel=guides&cat=basics

Heres a explaination that caliber did of "NOP"
Basically a nop is an opcode that an assembler uses to take up space. nop or NOP means No OPeration. therefore we use it to change assembly opcode commands (like JMP SHORT 0x4099A0) into commands that don't do anything (NOP). you can take instructions and make it look to the computer like they aren't there by changing them into NOPs.
For instance, if an instruction checks to see if you are on one team or the other, if you NOP that instruction then the computer might draw the map as if you are on either or both teams- make sense? we use NOPS to get rid of checks, tests, compares, jumps, conditional statements, etc.

[insomniac1488]

Thanks a ton, can't wait for the rest of them. Can we expect the others in the near future?

[whitefolks]

Mini map tut works great..was able to hack it on my first try :)..cant figure out what to do now though :)

[tazilla]

so when are you going to post the tuts on the rest of the ones u have listed?

[Spontaneous]

They are coming. In the mean time, check out faldos tut as it covers quite a few of the unreleased tuts. I been busy working on Phatom v4(non-pb) which is adding assignable hotkeys and such.

[udigom]

I had to blend your tut and Faldo's together to finally figure out how to get my mini-map addresses! So thanks to both of you.

[udigom]

Also.. I apologize in advance for my noobishness. What do I use to read your source? I dl'ed it and I assume I need to use notepad, or do I need to get some sort of freeware VB compiler to read it?
I thought your code was in ASM--the injectable part for BF, but it looks as if the buttons on the facade are in VB?

uh..*meep*

sheepish and embarressed Udigom.

[Sparten]

you need to use VB....

[udigom]

Hi Sparten-

Where can I get a freeware version of VB?

Thanks in advance- Udi

[1337]

I tryed to find the minimap address at the upper left box. I changed every 1 to 2 and if nothing didnt happen i changed it back. and 2 to 1 too. T-search found 59 addresses and i changed all addresses with values 1 or 2. And like i told you after that i changed them to theyre original values, but nothing didnt happen i tryed them all out.

I found a address what kept changing back. Like when i changed it to 1 it changed to 2 back.

And i used scoreboard, enter>scoreboard and then watched it.

[Sparten]

Hi Sparten-

Where can I get a freeware version of VB?

Thanks in advance- Udi

i dont think a free version is avalible, and talking of warez on the forum is not allowed..

[1337]

Please could you anserw..


I tryed to find the minimap address at the upper left box. I changed every 1 to 2 and if nothing didnt happen i changed it back. and 2 to 1 too. T-search found 59 addresses and i changed all addresses with values 1 or 2. And like i told you after that i changed them to theyre original values, but nothing didnt happen i tryed them all out.

I found a address what kept changing back. Like when i changed it to 1 it changed to 2 back.

And i used scoreboard, enter>scoreboard and then watched it.

[CaptainCox]

Look, Narow down the search to maybe 4-6 adresses max before starting to change the values. sounds to me like you mixed a 1 for 2 somewhere down the line while searching.
BE SURE! wich team you are on when searching or the result is crap.
So, AXIS (Vietnameese)=1 Allies(USA)=2
Just be careful when searching and make sure you are on the AXIS team when searching for 1 etc.
You will be able to get it down to atleast 8 adresess doing it the right way, not 59

[1337]

Now i just cant enable debugger?

[CaptainCox]

Klick-AutoHack-Enenable Debugger or?
And you have to have the game attached to tsearch...

[Mordred]

Thanks Spont those tuts are awesome.

[bfvplaya]

Ok, idea for a code cave. Instead of using executable ranges that are currently 0 (which probably very few exist), what about finding offsets that contain code normally not used during actual game play and just overwriting that code? Maybe a better way to hide the cave?

[Spontaneous]

no because even if not used often or not at all there could be major side effects. Its almost impossible to find out what is and is not used. There could be a call here, jump there. And for what? To hide a codecave? PB dont even scan codecaves so why you tryying to hide it?

[udigom]

I am at a sticking point because I can't view source without owning a copy of VB. Let my fellow 'po boys know! Gotta have VB to SEE, or can you possibly make a text based copy of the source? Please? :)

Udi

[Mordred]

VB isnt that hard to get if u know where to look..

[Spontaneous]

I will not put the source in text. That makes no sense to do that. The source is for you to get an idea how to put your hacks into VB, not so you can just use my addresses.

Mordred, it sure sounds like your suggesting to get a pirated copy of VB which such talk is not allowed here.

[test0r]

I am at a sticking point because I can't view source without owning a copy of VB. Let my fellow 'po boys know! Gotta have VB to SEE, or can you possibly make a text based copy of the source? Please? :)

Udi

You wanna hack but dont know how to use windows? Please learn that first before trying to hack...lol

[Spontaneous]

Very true test0r. notepad.exe and write.exe does wonders for opening things.

[whitefolks]

Yes it does......... I use notepad to view sponts source code. I dont own a copy of VB, but from what i have read here (and i might be wrong) but isnt VB more or less for making the actual trainer?. Its not easy to understand the source code while viewing it in notepad, but ater a bit its not hard to see whats going on.

[Spontaneous]

yes. Its for making the actual trainer. The .exe. The source code is compiled by VB into a .exe. So all that coding in the source code is in the .exe.

[udigom]

You wanna hack but dont know how to use windows? Please learn that first before trying to hack...lol

Yes, I want to hack, and I was asking a simple question to guide me toward that end. Perhaps your huge genious mind can't wrap itself around the fact that some of us are new to this. If you can't help me, then please refrain from belittling me. I was under the impression because of prior posts that I needed VB to fully view the source even tho I seemed to have the ability to view it with notepad.

Peace, Udi


Yes it does......... I use notepad to view sponts source code. I dont own a copy of VB, but from what i have read here (and i might be wrong) but isnt VB more or less for making the actual trainer?. Its not easy to understand the source code while viewing it in notepad, but ater a bit its not hard to see whats going on.

My point exactly. I saw the code, but from other responses in other threads I thought I might need VB. So I was confused :classic:

Spontaneous from another thread said;


yes. Its for making the actual trainer. The .exe. The source code is compiled by VB into a .exe. So all that coding in the source code is in the .exe.


As for opening my sourcecode. There is no freeware of VB. VB = Microsoft Visual Basic. VB6 you can find on ebay for about $50 to $60. Otherwise you can buy VB.Net for $110 from microsoft.




That's where I get the idea I needed VB to open it Spon.

Peace, Udi

[Ocicat]

Did the game code for the minimap change a lot in v1.2?

I have no trouble finding the dynamic team address, but I just can't find the right jnz after I breakpoint, and I've done this hack a few times on versions earlier than 1.1.

Should I still be looking for a plain old jnz (not short)?

Thanks

[NOPing for Food]

You can get vb for under $10 on ebay. If you are in college, you can get it for free or almost free from your school if they have a deal with MS.

[CaptainCox]

Did the game code for the minimap change a lot in v1.2?

I have no trouble finding the dynamic team address, but I just can't find the right jnz after I breakpoint, and I've done this hack a few times on versions earlier than 1.1.

Should I still be looking for a plain old jnz (not short)?

Thanks

its a JE for both

[Ocicat]

Thanks, Captain.

I figured they'd probably get around to overhauling the code eventually. :squareeye

[n00bys]

My hack is almost complete, but i cant figured out one thing and thats the mine,-trapswarning and the 3d-warning from the enemy!
I have tried difference things with t-search, I get only the breakpoint-address, what I think thats the Team-Hack, but not the right address in it, only the address wich dissapeared the friendly mine- and trapwarning, but I dont want these one :laugh:!
Can someone give me a little tut or something how to find the right address?
Thanks!

Edit: I have found the address, tnx anyway!:bis01:

[PITA11]

Faldo is working on a new project...that I believe is relevant to this thread http://www.mpcforum.com/showthread.php?t=72780 :

[irishkreme]

Hey guys, im simply confused here i have been looking at the tuts for a while and there are many ptions open to work with, but would someone show me a realistic place to start that in the end wont be detected by PB. I dont care how long it takes me to learn i just want somthing that wont be detected. I have looked in many different threads with tuts in them but in the end spon. is there to say they wont work anymore becase PB scans it ect ect. so simply what what be the best to start with that doesnt end up detected??? any ideas.... thanks

[Spontaneous]

Learn how to use DMA pointers and DMA stealing methods. Then learn SEH methods. With a combo of them things, you can do every hack without being detected currently. All tuts that involve NOPing for the most part is now useless since PB detects that method. There really are no tuts on DMA pointers really but the link pita gave does explain DMA pointers somewhat. As for DMA stealing there are 2 tuts availible in the BF1942 forums. There is also a tut for SEH in the BF1942 forums.
http://www.mpcforum.com/showthread.php?t=74320
http://www.mpcforum.com/showthread.php?t=68276
http://www.mpcforum.com/showthread.php?t=68346
http://www.mpcforum.com/showthread.php?t=67657
http://www.mpcforum.com/showthread.php?t=63405

[Sapphire9800]

will any of these tuts even work now since so many months have passed, i dont even know where to start

[scruie]

Learn how to use DMA pointers and DMA stealing methods. Then learn SEH methods. With a combo of them things, you can do every hack without being detected currently. All tuts that involve NOPing for the most part is now useless since PB detects that method. There really are no tuts on DMA pointers really but the link pita gave does explain DMA pointers somewhat. As for DMA stealing there are 2 tuts availible in the BF1942 forums. There is also a tut for SEH in the BF1942 forums.
http://www.mpcforum.com/showthread.php?t=74320
http://www.mpcforum.com/showthread.php?t=68276
http://www.mpcforum.com/showthread.php?t=68346
http://www.mpcforum.com/showthread.php?t=67657
http://www.mpcforum.com/showthread.php?t=63405


the old nop and codecave methods no longer work - PB detected. but still good to go thru as they teach how to use the porgrams used. so prolly best to go and do a non-PB proof nop hack, just to get the feel of things.
after that move on to the DMA and SEH stuff. spont post quoted here gives the info on all that.

search and ask - everyone will help.

[buchholzs]

Hi guys, after studying these fine tutorials I was able to make my own fog/viewdistance hack. Seems that DMA pointer stealing is still not detected :bandit:

Thanks for all the good stuff!

[Fujitsu]

Thanks !

[anhtuanvnn]

U must to use VB crack,if not... u can't do anything...and u have the game can be used...have fun

[loganbo]

how do you hack i did it once by mistake when i first got the game and didnt know about hacks and i whant to do the xp hack again but how how do you hack.

for what???