View Full Version : PunkBuster-Buster dont work...
cR4ck3N
26th June 2005, 19:24
hm...
with pbuster.dll it didnt work
Windows XP Sp2
amd64 3200+
gforce 5700
1024ram
winject1.2 & winject1.3 cant hook into BF2.exe ...
minime.dll work
http://www.ihostphotos.com/show.php?id=67726
pbuster.dll not
http://www.ihostphotos.com/show.php?id=67727
i can both load it into explorer.exe, powerstrip.exe, trillian.exe ... but in bf2.exe i only get a error
Spontaneous
26th June 2005, 19:51
Dont know where you are getting this pbuster.dll since I am not away of any release with such a dll.
cR4ck3N
26th June 2005, 20:06
should run with winject... but it didnt work ....
holydiver
26th June 2005, 20:11
If you are trying to inject a .dll using the DEH method BF2/punkbuster has protection against this. If this is what your trying to do. you will have to try DMA stealing or another way.
cR4ck3N
26th June 2005, 20:18
for the most ppl it work... with the dll/loader ... but i dont know why not for me :(
Chaotik
26th June 2005, 20:57
Is that one testor made a long time ago???
CaptainCox
26th June 2005, 22:22
I guess it is , and it did create alot of CdKey bans....eventualy, was good I guess back then. Forget about PBBuster as its OOOOOOOLD!
Nseven
26th June 2005, 22:33
this pbbuster is new it was made by pansemuckl (yesterday)
CaptainCox
26th June 2005, 22:37
AH HA My bad....hear he is one of the guys over at NetCoders, infact the founder.
Spontaneous
26th June 2005, 23:58
Still I would not use anything like this anyways. It will most likely lead to hardware bans. Plus everyone that I know that taken on PB for disabling it that did public releases, failed. Why? They always found a way to detect it. If its a public release, it will get detected. There is also a lot of checks PB has in it that most people dont realize. Best of luck to pansemuckl tho. I give him credit for just tryying.
cR4ck3N, as for you. I would suggest going to where you got pbbuster.dll from and asking for help there. Personally it sounds like you might have the wrong PB version installed(if its pb version dependant which I am willing to bet it is). But since it was not offically released here, we can not give you any support for it. I highly doubt its WinInject giving you the problem.
Just another warning: this hack will lead to ether cdkey bans or hardware bans. Use at your own risk.
muhko
27th June 2005, 02:29
Has anyone bothered to decompile the DLL yet to see what method it is using to disable PB?
p3n1
27th June 2005, 14:55
Has anyone bothered to decompile the DLL yet to see what method it is using to disable PB?
I Thought it's against the rules, to decompile/hack a hack?
Spontaneous
27th June 2005, 15:00
Where did you hear that p3n1?
p3n1
27th June 2005, 15:03
Where did you hear that p3n1?
I thought, i was reading it somewhere here, stealing hacks from others..
if it isn't so, i goes against my ethics, to decompile a *working* hack. it doesn't bother me, if s.o. decompiles my stuff, but i would'nt do that on others...
muhko
27th June 2005, 15:06
Maybe you got a little confused reading the unpacking safedisc thread?
All hacks posted here are decompiled by staff to check for viruses, keystealers etc prior to auth'ing the download.
It seems this DLL is packed nicely, Spont have you had time to have a look with IDA yet?
Spontaneous
27th June 2005, 15:10
Well there is no such rule sorry to say. In fact most of the addresses used in these trainers can be found out by using trainer spy. Plus mods such as myself sometimes need to decompile a hack to make sure there is no cdkey stealers in it. Yes it is bad ethics to steal someones coding but it happens all the time and there really is nothing we can do about it. And the reason muhko was sayying it was for detection/banning reasons.
p3n1
27th June 2005, 15:13
Maybe you got a little confused reading the unpacking safedisc thread?
All hacks posted here are decompiled by staff to check for viruses, keystealers etc prior to auth'ing the download.
It seems this DLL is packed nicely, Spont have you had time to have a look with IDA yet?
I am well aware of that mods *have* to decompile hacks, that's for the security of everybody. It has to be done. But i thought, taking code from other undetected hacks might be against some law, but i was wrong, i see.
PEID doesn't find anything on it besides renamed/extra sections.
EDIT: IDA says, the import table is destroyed, so your guess was right, it's packed or at least looks like.
Schooler
27th June 2005, 16:53
[QUOTE=Spontaneous Yes it is bad ethics to steal someones coding but it happens all the time and there really is nothing we can do about it. [/QUOTE]
I completely agree Spontaneous, take ffor instance my last bfv hack Omooga(named after my x-wife, she was a real Cow). Some bastage stole all my code and just changed the name alittle.
:crazy:
Spontaneous
27th June 2005, 17:11
Schooler, yep, I just copy/pasted from your hack(right goggles?)
muhko, no I havent until just now. nculp06w, hmm looks like 8 random chars. Doesnt UPX Scrambler change it to 8 random chars? Anyways, it is nicely packed. His readme says it dont mess with PB directly so it is most likely just a detour of api. Problem is it still is not allowing PB to do its job correctly of detecting hacks, hence why it will most likely lead to global-bans of some sort.
Schooler
27th June 2005, 17:24
Schooler, yep, I just copy/pasted from your hack(right goggles?)
Crap, you've found me out. Nice work Sherlock :paranoid:
LkCuMeSnap
27th June 2005, 17:58
Schooler, yep, I just copy/pasted from your hack(right goggles?)
muhko, no I havent until just now. nculp06w, hmm looks like 8 random chars. Doesnt UPX Scrambler change it to 8 random chars? Anyways, it is nicely packed. His readme says it dont mess with PB directly so it is most likely just a detour of api. Problem is it still is not allowing PB to do its job correctly of detecting hacks, hence why it will most likely lead to global-bans of some sort.
Well it's very simple. And it will work unless PB updates. PBuster defeats
md5 checks(!) on detected hacks. But it can't make hacks undetected which
are detected by method, like memory corruption. So it may work on some
hacks, but not for all of them.
Reported to work with:
Old N7's
Old icebots
Old Deliverances
Old ncBot
Old BigMac ET hook
And as already mentioned, PBuster does not interfere with PB at all. So
Spontaneous, once again it's you. But for the protocol: There is no trojan stuff
inside my hacks. They are packed to annoy rippers and anti cheats.
But as you recommend not to use such tools, I like to remind y'all that you
get HW banned for using multihacks nowadays, although PB is not touched
in any kind. evilBalance does not stick to their EULA (HW bans just for messing
around with Punkbuster).
Or maybe it's just some sort of misunderstanding? Evenbalance considers
the act of cheating as an interference too?! Anyways, but thats the way it is.
So if you can't handle the risk, don't even visit cheat sites at all.
This would make you as a mod of MPC obsolete. Another appreciated side-effect.
Spontaneous
27th June 2005, 18:20
Actually in the bf series, multi-hacks have not ever been given hardware bans. We know the limits very well. I released many of hacks for the BF series and not one single hardware ban. Even after changing the hacks to not be detected several times. They could have said using codecaves was avoiding detection and give global-bans(guid, which is cdkey based, or hardware). I can tell you with a 90% assurence if a hack will be global banned or not.
I can tell you that p3n1s hack will most likely get guid(cdkey) bans for it restoring the orignal game code after stealing the dma. I can tell you that n7s dx hack and spartens accuracy hack will only receive temp bans.
What exact multi-hacks you know of will give people global bans? I would like to take a look at them.
PBBuster does not edit PB directly. BUT that does not mean that it dont interfere with PB. It does too interfere with PB by defeating md5 checks PB does. Thus why this would recieve hardware bans.
Evenbalence does not consider cheating as an interference. Most cheats do not interfere with PBs detection of the hack.
Of course there is always a risk in cheating. We just try limiting the risk by warning people of what the results most likely be. It wont make MPC obsolete, MPC is the largest cheating community there is. But if people go around getting people hardware banned, like pbbuster will, of course its going to hurt people coming to cheating sites.
Why is it that most people that are hardware banned coming from different games where they got the hardware ban from? Why havent more people in the bf series been hardware banned? Why is it, that when a hack gets released, most of the experts(not just me) say which ones will get global-bans. Both the periods of daz hacks being released, many said it would get global-bans, and it did. Yet after my 6 monthes(one of the longest periods of hacks going around PB) of releasing hacks, not once did people recieve global bans. Now why is that do you think? All the hacks that got global banned avoided detection(which is interfering with PBs functions of detecting the hack in the first place). Why is it I never put a screenshot blocker in my hack? Interferes with PBs functions. I always left my hack to be detected by PB so people would never got global-banned. How long do you think it will be before people get global-bans from pbbuster? So now people will not only have to run their hacks, but run something to hide from the detection of hacks, plus a hardware spoofer just to play on pb servers.
vBulletin® v3.7.0, Copyright ©2000-2008, Jelsoft Enterprises Ltd.