PunkBuster-Buster & n7.02c WORKING!

[teh_m4st3r]

Since 1:30 this afternoon when the update came out, I've been looking for a way to play the game using n7's new 0.2c hook. I stumbled upon this PunkBuster-Buster which basically disables PB.

Here what you do:

1.) Download the Winject/PunkBuster-Buster ( Link Below )
2.) Start the game using n7's 0.2c
3.) Alt-Tab to your desktop and open Winject. Tell it to load BF2.exe & inject pbuster.exe
4.) It'll say:
Opened: OK!
Injected: OK!
Verified: ERROR!
( Basically, don't fret when this verification error comes up. I think it's some sort of false positive. )

Just ignore & play.

WARNING: This may/maynot get you banned and HW banned. I'm not your parents, don't blame bans on me. I tested this for 5 minutes on a PB Server and took an ss of the console for you.

ALSO: I made NONE of this stuff, use at your own risk, blah blah blah. I didn't make it, I just made instructions because I wasted 6 hours of the day because I wanted to cheat online. Hope this help a LOT of people, see you raging tonight. :devious:

Screenshot:
http://www.ihostphotos.com/imgt/70123.jpg (http://www.ihostphotos.com/show.php?id=70123)

DL link: http://mpcforum.com/showpost.php?p=902433&postcount=3

[Silent Hunter]

only 1 problem with this tho, doesnt pb hardware ban you if you try to disable or alter pb in any way ?

[Chaotik]

If it is anything like the last pbbuster and it gets detected, you will get a HW ban!!!

[mcMike]

Since 1:30 this afternoon when the update came out, I've been looking for a way to play the game using n7's new 0.2c hook. I stumbled upon this PunkBuster-Buster which basically disables PB.

Here what you do:

1.) Download the Winject/PunkBuster-Buster ( Link Below )
2.) Start the game using n7's 0.2c
3.) Alt-Tab to your desktop and open Winject. Tell it to load BF2.exe & inject pbuster.exe
4.) It'll say:
Opened: OK!
Injected: OK!
Verified: ERROR!
( Basically, don't fret when this verification error comes up. I think it's some sort of false positive. )

Good work.
There seems to be something in bf2.exe that inteference with current winject injecting- method. Gotta look of it later.

Here's quick tip since no-one seems to read docs anymore.

Create shortcut for winject to desktop. Go to shortcut properties and in the Target-box add following:
Target:c:\...Winject.exe /exename:bf2.exe /dllname:c:\pbuster.dll /use

Just use dll-path where you have your hack.

Now.
1) Firstly just start winject from that shortcut (it will automaticly "track" bf2.exe)
2) Launch the game for example with tht n7 launhcer and then just press NUMPAD+ and winject will acquire bf2 ProcessID & inject the DLL specified in parameter.
You don't have to ALT-TAB to desktop nor manually select process and dll everytime.

/....wondering why nobody read the frigging docs anymore :smoker:

ps. That works for Winject 1.3 only which can be DL'd from this forum.

[jclbqe]

just a quick question
since the file is not approved
should we just download wininject directly from ?
http://mpcforum.com/showthread.php?t=92986

[Feared]

I wouldn't suggest using this. You'll get a hardware ban for tampering with PB.

I wouldn't suggest using this. You'll get a hardware ban for tampering with PB. THey detected PBBuster in Vietnam.. I don't see why they wont detect it again now.

[enc0de]

work fine one time for me, but later dont work more!

[pwnedz0r]

Since 1:30 this afternoon when the update came out, I've been looking for a way to play the game using n7's new 0.2c hook. I stumbled upon this PunkBuster-Buster which basically disables PB.

Here what you do:

1.) Download the Winject/PunkBuster-Buster ( Link Below )
2.) Start the game using n7's 0.2c
3.) Alt-Tab to your desktop and open Winject. Tell it to load BF2.exe & inject pbuster.exe
4.) It'll say:
Opened: OK!
Injected: OK!
Verified: ERROR!
( Basically, don't fret when this verification error comes up. I think it's some sort of false positive. )

Just ignore & play.

WARNING: This may/maynot get you banned and HW banned. I'm not your parents, don't blame bans on me. I tested this for 5 minutes on a PB Server and took an ss of the console for you.

ALSO: I made NONE of this stuff, use at your own risk, blah blah blah. I didn't make it, I just made instructions because I wasted 6 hours of the day because I wanted to cheat online. Hope this help a LOT of people, see you raging tonight. :devious:

Screenshot:
http://www.ihostphotos.com/imgt/70123.jpg (http://www.ihostphotos.com/show.php?id=70123)



i cant alt -tab with n7bf2 hack cuz i get blackscreen when i get back

any other options?

[mcMike]

i cant alt -tab with n7bf2 hack cuz i get blackscreen when i get back

any other options?

OMG :devious:
People really need to learn to read....

[pwnedz0r]

yes i did it the way it was subscripe above but it wont inject then for me get only errors with version 1.3

[gil]

File Approved, thanks :)

[Sparten]

Gil that file has allready been uploaded once before. is there realy a need for it to be in 2 threads ?
link to other thread:
http://mpcforum.com/showpost.php?p=902433&postcount=3

[pwnedz0r]

is their any other way to inject the dll

cuz the new winject 1.3 only gives me error

and with the other version as posted in this thread i need to alt tab and n7bf20c gives me black screen when i return then

any one have a solution

[gil]

Gil that file has allready been uploaded once before. is there realy a need for it to be in 2 threads ?
link to other thread:
http://mpcforum.com/showpost.php?p=902433&postcount=3
Well, you're the moderator, you tell me :)

I just approved it. You can close it if it's already posted.

[Sparten]

I just approved it. You can close it if it's already posted.

Done :)

[Spontaneous]

1. PunkBuster Buster will give you a global cdkey or hardware ban where using n7 hack alone will not.
2. The black screen problem is due to the n7 hack itself, which common ammoung directx hacks.
3. If you read what mcMike said above, you would see how to fix the inject error and that if you would have read the doc that came with wininject, you wouldnt have this problem in the first place.

[pwnedz0r]

i read the doc
and mike test
and i dont see any solution


C:\winj\Winject.exe /exename:bf2.exe /dllname:c:\pbuster.dll /use

this i start

then start my game when im at login screen i press numpad +

and i only get errors

with winject 1.0 i only get error at verify

and as i see the thread about winject 1.3 more ppl cant get pbuster.dll to work with winject 1.3


any help would be welcom
even when i dont use it in command line but just alt-tab it doesnt work


unable to inject into: BF2.exe

reason 0


any help would be welcome

[mcMike]

C:\winj\Winject.exe /exename:bf2.exe /dllname:c:\pbuster.dll /use

with winject 1.0 i only get error at verify

and as i see the thread about winject 1.3 more ppl cant get pbuster.dll to work with winject 1.3

You said that with earlier than 1.3 Winject it did work and you only got that verify-error?
v1.3 changed injecting mechanism from Detours to CreateRemoteThread->LoadLibary() so that could be the reason. The thing is it can inject any other DLL to any other process but not Pbuster.dll to BF2.exe.

I haven't looked into PBuster.dll and won't as a respect to developer (well done btw). The only thing that comes to my mind is that Pbuster.dll returns False in DllMain() in case DLL_PROCESS_ATTACH. That's why LoadLibrary() fails. Returning false for OS means that DLL was unable to initialize properly. However that is just a speculation since I haven't checked it and haven't get reply from developer yet.

[Sparten]

i read the doc
and mike test
and i dont see any solution


C:\winj\Winject.exe /exename:bf2.exe /dllname:c:\pbuster.dll /use

this i start

then start my game when im at login screen i press numpad +

and i only get errors

with winject 1.0 i only get error at verify

and as i see the thread about winject 1.3 more ppl cant get pbuster.dll to work with winject 1.3


any help would be welcom
even when i dont use it in command line but just alt-tab it doesnt work


unable to inject into: BF2.exe

reason 0


any help would be welcome

Winject is not the only existing injector.
try with DCInjector, you can finde it on http://www.unknowncheats.com/forum/

[pwnedz0r]

yes but can that injector DCinjector be used like (winject 1.3) cuz i cant ALT-tab with the hack N7bf2


if yes can u post the link to the injector

and it works witk winject 1.0 but i cant use that hack with it cuz when alt tab n7bf2 i get blackscreen when i come back



thinks this is a bs thread

i injectected pbuster.dll with winject 1.0 and start game without hack then i injected n7bf202c with winject 1.3 joined a game (hack didnt work prob cuz it needs to be loaded and not hook) but pbuster would at least hide the hack but it didnt i got 2 min kick for multihack using pbuster

[Sparten]

yes but can that injector DCinjector be used like (winject 1.3) cuz i cant ALT-tab with the hack N7bf2

why dont you just try.

if yes can u post the link to the injector

i allready gave you a link to where it can be found, that forum has a search function USE THAT.

[pwnedz0r]

u need to register their first

and i noticed that pbuster.dll aint working anyway


((i injectected pbuster.dll with winject 1.0 and start game without hack then i injected n7bf202c with winject 1.3 joined a game (hack didnt work prob cuz it needs to be loaded and not hook) but pbuster would at least hide the hack but it didnt i got 2 min kick for multihack using pbuster))


so close this BS thread


ps Mike

if pbuster can be loaded with winject 1.0

and not with winject 1.3

i dont think pbuster causes the problem then but winject 1.3

maybe make a new winject like 1.0 but which can be activate whill im in game

[CaptainCox]

Why dont just register to get that DC Injector and at least see if it works before giving up man. If you know your latin, read the Moto in my sig "Putamus Viam Semper Esse " = There is Always a Way.
And why do you ask to close this thread, you did not eaven start it.

[gil]

Winject is not the only existing injector.
try with DCInjector, you can finde it on http://www.unknowncheats.com/forum/
You can also find it in MPCD, the AA:O secton, Injectors folder :)

[pwnedz0r]

((i injectected pbuster.dll with winject 1.0 and start game without hack then i injected n7bf202c with winject 1.3 joined a game (hack didnt work prob cuz it needs to be loaded and not hook) but pbuster would at least hide the hack but it didnt i got 2 min kick for multihack using pbuster))


so how u would explain this

[Sparten]

You can also find it in MPCD, the AA:O secton, Injectors folder :)

i never go near AA, you risk getting a HW ban just for thinking about that game. :)

[CaptainCox]

Could be that N7s hack and that injector just dont work together, havent tried it myself. But again did you try it with the DC injector? Who knows it might work ...and it might not.
That you did not get kicked could be simply as you said "hack didnt work prob cuz it needs to be loaded and not hook" so no kick etc.

[pwnedz0r]

i have dcinjector i see u can auto inject and description where i can type some
so i wonder how i auto inject it

Could be that N7s hack and that injector just dont work together, havent tried it myself. But again did you try it with the DC injector? Who knows it might work ...and it might not.
That you did not get kicked could be simply as you said "hack didnt work prob cuz it needs to be loaded and not hook" so no kick etc.


uhmm but dont u think pbuster had to stop me from getting kicked then


i tried it with dcinjector but when i start game screen stays black and nothing happen

so i wonder did any one (like the topic title said ) get these wininject 1.3 with pbbuster and n7b2 to work???????????

and if some got it to work with winject1.0 how did he alt -tab without getting a blackscreen when i returns

[teh_m4st3r]

Sorry, I forgot to mention I was playing the game in a window. Inside of the readme for n7's hack, there's a way to add something to a shortcut and play the game in a window, not full screen. That's how I was able to alt-tab.

Also - I will try to use this DCInject tonight, and see how it works out. Give me an hour or two, and I'll have new instructions for working it all out.

:cool:

-teh_m4st3r

EDIT:

I've used the method of 1.3 and inputting into the shortcut, it give the same Reason:0 error. 1.0 is the only version that works for this.

[CaptainCox]

Ok to use the DCInjector, simply in top window point towards the DLL you wana inject.
Second Window the Game EXE.
Set to auto Inject to Enable, click ADD so the DLL jumps to the bigger window in the middle, Press Update once just to be sure, this is so the DLL loads next time.
method NORMAL

Start the game and it should inject...thats all.

To play in windowed mode simply right klick your BF2 shortcut, properties,
"C:\Programme\EA GAMES\Battlefield 2\BF2.exe" +menu 1 +fullscreen 0
to change back set fullscreen to 1.

[pwnedz0r]

u used winject 1.0? with n7s hack 202c?

im gonna eat now

speak later

[teh_m4st3r]

u used winject 1.0? with n7s hack 202c?

im gonna eat now

speak later

That is correct.

[gil]

Sparten, the injectors are global, just take a look:

http://www.mpcdownloads.com/_mpc_d0wn_h4x_/AAO/Injectors/

:D

[Sparten]

I know its global, i'm not an *****, why do you think i told him to use it in the first place, i just didnt know it was uploaded on MPC.

[gil]

I know its global, i'm not an *****, why do you think i told him to use it in the first place, i just didnt know it was uploaded on MPC.
Yeah, but you flamed my dear AA :classic:

Anyway, now you know ;)

[pwnedz0r]

That is correct.
`

can u alt tab with n7bf2?

[CaptainCox]

I would recomend MSN or somet if you guys are gona have a 1 on 1 here, its faster and it would for shure not clutter up this thread with 3 word posts.

[GiantBehemoth]

guyz what time is it there..?

------------------------------------

Only kidding ofcourse Capt'n. I was having a little trouble following some parts of this thread when everyone was doing one liner questions. Pwnz0r you may wanna READ the MAIN thread that N7 posted for the hack. Your question is answered in there!

[master86]

`

can u alt tab with n7bf2?
nope it doesnt switch back to the menu ;)
but look at first page theres a workaround :P

[bf194lover]

I haven't looked into PBuster.dll and won't as a respect to developer (well done btw). The only thing that comes to my mind is that Pbuster.dll returns False in DllMain() in case DLL_PROCESS_ATTACH. That's why LoadLibrary() fails. Returning false for OS means that DLL was unable to initialize properly. However that is just a speculation since I haven't checked it and haven't get reply from developer yet.

Its returning "1" (true) on DLL_PROCESS_ATTACH in DllMain(), i verified it.
For sake of completeness ... the statement "doesnt interfere with pb" isnt true.
Any ring3 hook(s) on api that is directly/indirectly used by evenbalance goes fine for hw ban.
Even if it doesnt touch pb client module address space (technically spoken).

If you want to verify make sure to have PEB->BeingDebugged and _EPROCESS.DebugPort reset.
Pass thru right exceptions (single step, inv. lock sequence ...) due to "custom" decryptor.

Regards

[mcMike]

Its returning "1" (true) on DLL_PROCESS_ATTACH in DllMain(), i verified it.

If you want to verify make sure to have PEB->BeingDebugged and _EPROCESS.DebugPort reset.
Pass thru right exceptions (single step, inv. lock sequence ...) due to "custom" decryptor.

Regards

Hello man (long time) and thanks for contributing.
Now that you are here ...

If it is returning true as should what is the reason Winject is not able to inject it? We know that winject can inject basicly anyother DLL to any other process including BF2.exe. Also we know that winject can inject pbuster.dll to any other process. So what gives here? I am currently using minimalistic CreateRemoteThread with pointer to LoadLibraryA() as ThreadStartRoutine and second pointer to chlibname for passthrough argument. chLibname is written to targetspace via VirtualAlloc & writeprocmem.

Thanks for the PEprocess tip. I only briefly searched it when discovered that SEH is not working as is.

edit: Looks like I need some help with PEB and _EPROCESS. How I suppose to patch those in usermode? Even reading them properly would require Undocumented Functions and DDK for ntdll.lib. Any shortcuts or source anywhere?
Anyone?

[pwnedz0r]

any one how to play n7bf2 hack in windows mode

what do i type in the n7bf2.ini ( i know how u do it without the hack but when u point ur hack to the shortcut u still get it in fullmode and what u type in target from the shortcut wont work in the n7bf2.ini

[Nseven]

a little fix for alt + tab, it works if you don't do it too fast, (hack is still detected)
n7bf2_03b.rar (http://nseven.elitecoders.org/n7bf2_03b.rar)

[bf194lover]

edit: Looks like I need some help with PEB and _EPROCESS. How I suppose to patch those in usermode? Even reading them properly would require Undocumented Functions and DDK for ntdll.lib. Any shortcuts or source anywhere?
Anyone?

Reading PEB:

Typical check for "IsDebuggerPresent":

mov eax, large fs:18h ; NT_TIB.Self
mov eax, [eax+30h] ; TEB.Peb
movzx eax, byte ptr [eax+2] ; Peb.BeingDebugged (1 = true, 0 = false)


getting PEB base:


DWORD PebBase(0);
/* Return PEB address for current process address is located at FS:0x30 */
__asm
{
push eax
mov eax, FS:[0x30]
mov [PebBase], eax
pop eax
}
return PebBase;


Writing to PEB: .. reverse above sequence ;P
PEB itself is "documented" at several sites. Just search with google for it.
Alternatively PEB info (along with other native api stuff) can be reviewed in M$ DDK headers.

---
You can fetch _EPROCESS.DebugPort value by using native API.


enum PROCESS_INFO_CLASS { ProcessDebugPort = 7 };
HANDLE hPort(0);
if( NT_SUCCESS( ::NtQueryInformationProcess( hProcess,
static_cast<PROCESSINFOCLASS>(ProcessDebugPort),
&hPort, sizeof(hPort), NULL)) )
{
isDebuggerPresent = (hPort != 0);
}


You could fetch kernel _EPROCESS address too by native API but that wont buy you anything because you have to read kernel memory from that address to get real values.


status = ::NtQuerySystemInformation( SystemHandleInformation, buf, uReturn, &uReturn);
if( status == STATUS_SUCCESS)
{
PSYSTEM_HANDLE_INFORMATION pSysHandle = ( PSYSTEM_HANDLE_INFORMATION )(buf);
for( int ui = 0; ui < pSysHandle->HandleCount; ui++ )
{
if( (pSysHandle->Handles[ui].ProcessId == pid) &&
(pSysHandle->Handles[ui].ObjectTypeNumber == 5))
{
EProcess = (PEPROCESS)(pSysHandle->Handles[ui].Object);
return TRUE;
}
}
}


Writing to _EPROCESS ... either use a kernel debugger, like windbg (local kernel debugging).

Example session:

lkd>!process 0 0
....
PROCESS 8292c940 SessionId: 0 Cid: 00f0 Peb: 7ffdf000 ParentCid: 0128
DirBase: 3d680000 ObjectTable: e2e83c08 HandleCount: 313.
Image: BF2.exe

lkd> dt nt!_EPROCESS 8292c940 DebugPort
+0x0bc DebugPort : 0x82cf7e48

lkd> ed [8292c940+bc] 0

lkd> dt nt!_EPROCESS 8292c940 DebugPort
+0x0bc DebugPort : (null)



or some other tools (which access ring0 thru helper driver).
I used to do this kind of stuff entirely from usermode by utilizing callgates.
But thats pretty advanced stuff and wont work reliably across windows versions.

For EPROCESS structure same applies as PEB.
Use google and/or DDK headers.

For further questions/snippets ask ... we could make a dedicated thread in appropriate subforums (and move this stuff out before it gets too much off-topic here)

Regards

[mcMike]

Reading PEB:
You can fetch _EPROCESS.DebugPort value by using native API.

Hello and thanks.

Took me little longer than I thought but I managed to do it finally with API-way.

Well, actually I am just reading the values with NtQueryInformationProcess() but it seems to work. I can read _EPROCESS->DebugPort and base of PEB and check 3rd BOOL from there for PEB->BeingDebugged.

Great tips as always.

Now I need to find a way resetting them ....

One more thing. For me it seems like PEB=TEB=TIB in some cases?
Resetting TIB with inline asm that I used in early versions of minime.dll does the trick for PEB->BeingDebugged and ofcourse for IsDebuggerPresent() API.

Question: Is it possible to reset _EPROCESS->DebugPort with NtSetInformationProcess() or am I beating the dead horse here?

[tanner892]

I've heard in other Forums(not MPC) that it is resettable
but I actually don't no how though(hope that helps)...

[h4x0rz4lyfe]

Yea I'm pretty sure this can be reset. I've read on some other sites that you can...mess with it a bit, you'll figure it out. :P

[Neptune]

How do I alt tab out of the game while using the hack?

Does anyone get a black screen aswell?

[mcMike]

Yea I'm pretty sure this can be reset. I've read on some other sites that you can...mess with it a bit, you'll figure it out. :P

Hey THANKS man. You can't understand how MUCH that helps.
I mean really. Gee - Is there any way I can ever thank you enaugh for sharing
this overhelming piece of information?
Once again. Thanks.

I don't mean to sound rude (more than I did) but the point of this forum is to share knowledge. We all know that pretty much ANYTHING can be done - it's just a frigging computer with OS with bits etc.

The thing is if you really know something valuable how about you contribute and lay it on?

No offense. ;)

[Ghostv1]

n7bf2_02c, where do i download that hack at :|

[scruie]

n7bf2_02c, where do i download that hack at :|


your new here so i'll be gentle - there is a sticky entitled 'working hacks here' or even the thread by nseven who created this hack would be another good place.

plz search the forums.

[†Chewy†]

where can u get these cheats u say em?
- ncBot v1.80
- N7ET v1.6
- Invoke 1.0e
- AH-1-Beta

[h4x0rz4lyfe]

Hey THANKS man. You can't understand how MUCH that helps.
I mean really. Gee - Is there any way I can ever thank you enaugh for sharing
this overhelming piece of information?
Once again. Thanks.

I don't mean to sound rude (more than I did) but the point of this forum is to share knowledge. We all know that pretty much ANYTHING can be done - it's just a frigging computer with OS with bits etc.

The thing is if you really know something valuable how about you contribute and lay it on?

No offense. ;)


No need to be a smart ass...:P...I just don't remember where I saw it. Srry man.

[CaptainCox]

Hmm mcMike, Yes he is very smart, actualy pretty dam very smart if you ask me.
As fo an Ass.....I would not eaven go there man;)

[mcMike]

No need to be a smart ass...:P...I just don't remember where I saw it. Srry man.

No - my bad. Sorry about that.
I was bumming my head to the wall for almost day because of that...
You see; it's like you're lost in strange city looking for an address and you're all tired there and finally found someone to ask for a help and he says "yes. I know that address is in this city ..."

[h4x0rz4lyfe]

LoL sorry about that. Was a pretty pointless post. I'll quit that. :P

[HappyC]

n7bf2_02c, where do i download that hack at :|


Ye....i realy wona know...caz on hes site its only the
3b or whatever is it calld fore downlode...so if u ppl
can be so kind and give os a link.

TnX a bunch
HappyC

[CaptainCox]

http://www.mpcforum.com/showthread.php?p=888391#post888391
but its detected and its done for V1.0 but as you asked there it is, also in the sticky but under detected!

[shqiptari]

Is there any solution to the problem with wininject 1.3 and punkbuster buster injection which doesnt work? It gives me a message which sais injection didnt work and it sais 0 reasons. It worked once the first time but after that it gives me the same message every time.

Thanx for any suggestions.

[wakko]

where can u get these cheats u say em?
- ncBot v1.80
- N7ET v1.6
- Invoke 1.0e
- AH-1-Beta

well i think that the first three hacks are for Enemy Territory but i do not know what the last one is for... ;)

[Univ|Soldier]

im getting detected as multihack using pbbusterw/ wininject 1.5...anyideas

[teh_m4st3r]

im getting detected as multihack using pbbusterw/ wininject 1.5...anyideas

That's because this thread is really old. None of this works anymore.

I've been trying to get a hold of the creator, but he refuses to answer PMs. So much for a friendly community, eh?

[caliber1942]

wow... here comes the "what have you done for me lately" crowd. nice of you to recognize all the work the "creator" did for this forum in the past....

this is why i don't release to the public- the "friendly" community of BEGGARS like "The Master" (and also because pb will kill it in days).

Realize that the creator is probably not going to release anymore now since it is no longer fun for him to keep updating this for unappreciative peeps.

my 2 cents,
cal

[CaptainCox]

:ha: :ha: :ha: Caliber U SWINE LOL, that is the best pic of you yet man LMFAO here HA HA !
friggin good shot man :ha: :ha: :ha:


(read with deep booming voice, like in comercials....you know what i mean)

How about becoming the "Creator" your self there instead.
Guarantied 2 min of blisfull fame in hack heaven + full free accsess to all the N00B post you can manage, we eaven throw in a cupple of extras, if N00Bs get cought using your hack, they will come to YOU and DEMAND a NEW HACK....NOW!!!.

So join the hapy club of hackmakers this offer is only availible untill end of this week.