HackShield Analysis

SaptaAgunk · 2010-12-24, 09:53 AM

So ..
what the Game Master?
so the cheat can be detected?

illustrative examples:
1 - yesterday = cheat the cheaters made in the form of DLL injection / Trainer = 100% work
2 - today = the Game Master to do something on his game yesterday did not work = Cheat
3 - tomorrow = the cheaters cheat again to make work 100% = Cheat
4 - and so on

questions:
1. What made the game master?
2. How will the game master to do it? please tell me!
3. And if I can cheat that we make permanent? how it?

Dwar · 2010-12-24, 10:14 AM

The best way is to keep any cheats private...
How they detect cheats? They define a signature - special byte-pattern that characterize your app (dll), then they add sig to the HS base and after update HS scanner will detect your cheat

gosicks · 2010-12-24, 12:28 PM

yea.... it much you share hack for public its make stronger anti cheat program...

SaptaAgunk · 2010-12-28, 10:52 AM

previous sorry sir Dwar. because I asked too much. ^_^

please edit this source code:
- saptaBASE.C = .C
- saptaBASE.H = .H

I asked for help to Sir Dwar to edit or modify the "source code" that, because on the 20th of december until now "source code" that has been detected by hackshield.

I've tried to edit it for 3 days with no rest and no its results

so that sir do is make what "source code" is to be strong so it is not detected by hackshield

these details.
- source code = devc + +
- type = DLL injection or trainer
- function = cheat game pointblank - write pointer or the write address
- anti-cheat = hackshield pro
- status = detected on 20 december 2010

This explanation
- beforethe 20th of december = inject cheat in the game >>play the game safe with a cheat without being detected ( undetect)
- on 20 december = cheat in inject into the game [secure without problems]>> play games>> 15 minutes later>> game crashes (source code detected)

I beg you sir to take the time so it can do the "source code for me"
or can make the source code that works the same as mine

this for the mutual benefit in a forum

thanks a lot ^ _ ^

irakezas · 2012-02-23, 01:51 PM

So basically no way to break hackShield?

Ahta · 2012-04-03, 10:33 PM

Originally Posted by irakezas

So basically no way to break hackShield?

There is absolutely a way to "break" HackShield. As Dwar said, HS installs itself as a driver, which means it has access to Kernel memory making it "privileged" code. So in order to usurp HS you have to be in ring0; the highest level code can reside (Or lowest, depending on how you look at it.)

Dwar's theory gave me a good idea, but sadly the only HS game I ever played was MapleStory, and it doesn't run on Vista (Or at least my version of Vista). As he said, your best bet is not to leverage HS but rather remove it, and replace it with your own "HackShield" which would emulate the original, but only return "Everything is ok" messages.
(I've heard that depending on the game, simply emulating HS to the client is enough, it depends on how closely the game server communicates with the HS server.)

To this day there isn't a anti-cheat engine which is unbreakable, the same as there isn't an anti-virus that can't be fooled.
If any part of the system is on your hard drive it can be bypassed, as it depends on your PC to return information; and you have control over your PC.

I realize this is my first post. I just stumbled onto PGC a few days ago and I'm enjoying the material very much so far.
I just hate to see someone think AC engines are impossible to bypass.

XxharCs · 2012-06-02, 06:26 PM

Can be "HasSetupDataEvent" found in the client or in the HS ? because i am analyzing it and everytime if i want to scan for the pointer i get that error: Error in line 1(HasSetupDataEvent): This address specifier is not valid
and after some secs the game gets closed

do i need to hook ZwQueryInformationProcess to avoid this, or do i need to work with the olly ?

inesbrasil · 2012-08-21, 01:08 PM

my doubts
file ahnrpt.UA

that file makes from ? DWAR ?

game your folder hackshild has only ahnrpt.UA ?

serves to that?

someone know to serves???

help please doubts

luquai · 2012-10-10, 12:26 PM

I read post bypass hshield but how do pass with game online login with web? I dont known ,i need edit lancher when login account then by pass hshield. help me!

andiliuz · 2013-11-26, 04:54 PM

i think we should unpack Ehsvc.dll , then we change code in Ehsvc.dll .

that work for me .

Thread: HackShield Analysis

Thread Tools

The Following User Says Thank You to Ahta For This Useful Post:

The Following User Says Thank You to inesbrasil For This Useful Post:

9Dragons game pass hshield then log mutil account

unpack

hackshield analysis

Hackshield callback

hackshield emulator

detected and terminated hacking tool program

Posting Permissions