Spoofer example code

[gdtaurine]

Here's a small example of a kernelmode driver that intercepts I/O calls between the PB dll and driver, and attempts to spoof your hardware information when it's being sent back to pbcl.dll.

The driver hooks ZwDeviceIoControlFile by modifying an entry in the System Service Descriptor Table. It's not hard to detect since there is no additional protection, but there are lots of other ways to hook that function.

The IoControlCode is different in every PB version. For the current AA pbcl (v1.125), the code is 0xB3E6D180.

I'm not hardware banned myself, so I've not really tested this in action. It's just an example... Use it while you can, and please let me know if it helps.


PS. Just to state the obvious:
- You should only use this if you are hwbanned already.
- Nothing lasts forever, and PB will detect this soon.

Edit: Added some more spoofer code... Hope it actually works this time.
Edit2: Added MAC address spoofing
Edit3: Changed to using a detour instead of SDT hook, couple of bugfixes
Edit4: Removed MAC spoofer, fixed some bugs: MPC Downloads Link

[gil]

Thanks a lot Taurine.
Nice to see you participating. With this, the forum will sure be more active than it is now.

I'm not HW banned myself, so I can't test it.


Cheers.

[A.Wesker]

thanks buddy

[Galaktikos]

BIT THX -gdtaurine

I have HW ban,
I will test your spoof'er and I will serve results soon .

sry my english

[langefrans]

gonna try it now, gj taurine keep it up

Anyone who is dutch, can explain to me how to use this spoofer exactly i tryed a few things but don't get how to run it. Hopefully a dutch/belgium guy can help me. Thanks in advance

[n()()b_Power]

gonna try it now, gj taurine keep it up

Anyone who is dutch, can explain to me how to use this spoofer exactly i tryed a few things but don't get how to run it. Hopefully a dutch/belgium guy can help me. Thanks in advance

This is the source not the actual program. Read the readme it gives you a very basic idea of what to do.

Taurine good to see you again.

[langefrans]

I readed the readme, but im not very familiar with those things. If someone could explain in a bit easy-way i would appreciate.

[Spider.]

mhh some one test it??? how long u can play with this spoofer??? and when u get banned (again) can u use this spoofer again?

[tamimego]

Taurine thankyou for releasing a public driver setup.
I was wondering if you could help me get this thing to build.
I have been able to get to the build.exe stage no problem just I don't see where it creates the compiled file / files.

Console ScreenShot:
http://img202.imageshack.us/img202/716/compile6tj.jpg

Any help would be greatly appriciated.

[langefrans]

I can't wait to try it. But I don't know how to load the spoofer. Never worked with sources if someone could be so nice to explain me (preferable in dutch if possible) Thank you in advance.

[The-X™]

mhh some one test it??? how long u can play with this spoofer??? and when u get banned (again) can u use this spoofer again?

Do u Guys really read the threads?!?...

I can't wait to try it

...U´ll need to compile it first,and then u could see if it works.

taurine Read me.txt :

How to compile:

First, you'll need to get the Windows Driver Development Kit.

Then, simply open a command prompt, run setenv.bat from the
DDK\bin directory, and run "build.exe" in the spoofer directory.

Tami had a picture in is post,u should see how it works...

[gdtaurine]

I have been able to get to the build.exe stage no problem just I don't see where it creates the compiled file / files.

Console ScreenShot:
http://img202.imageshack.us/img202/716/compile6tj.jpg

You need to run build from the spoofer directory (CcSpoofer in your case).

[langefrans]

any dutch guy can help me with this thingy i don't got a clue how to spoof it plz pm or msg here thank you very much

[gdtaurine]

Allright, here are compiled versions for AA pbcl v1.215 and ET pbcl v1.213. All you need to do is run spoofer.exe. These will not work after PB updates.

You should only use these if you're hwbanned already.

[Ping_pong]

Thnx for your time Taurine.

Long time no see. Hope you will keep this community alive. I really enjoyed seeing people unHW-banned using your tools.

The most thing i like was that pb needed to hire a "more knowledge person" to detect your spoofer.

Greetz Ping_Pong