Results 1 to 10 of 10
  1. #1
    Vitrix Maggot
    Vitrix Maggot is offline
    Member-in-training Vitrix Maggot's Avatar
    Join Date
    2013 Apr
    Location
    Brasil
    Posts
    58
    Thanks Thanks Given 
    0
    Thanks Thanks Received 
    43
    Thanked in
    24 Posts
    Rep Power
    0

    Source Bypass Xtrap (para estudos)

    Eai pessoal minha primeira vês aqui com vocês, então resolvi postar uma source para vocês estudaram como burlar Xtrap !! Postarei muito mais coisas pra ajudar ^^


    Hello everybody my first you see here with you, so I decided to post a source you studied how to evade Xtrap! I'll post more things to help ^ ^



    library Project2;

    uses
    SysUtils,
    Windows,
    Dialogs,
    Forms,
    Classes,
    ShellApi,
    Unit1 in 'Unit1.pas' {Form1};

    {$R *.res}
    procedure ExitProc(uExitCode : DWORD);stdcall;
    begin
    end;

    function TerminateProc(Proc : THandle;uExitCode : DWORD) : DWORD;stdcall;
    begin
    result := 8;
    end;

    procedure HookThis(Lib, Func : String;CallBack : Pointer);
    begin
    Place := GetProcAddress(LoadLibrary(PChar(Lib)), PChar(Func));
    VirtualProtect(Place, 6, PAGE_READWRITE, ProtecaoAntiga);
    PBYTE(DWORD(Place))^ := $E9;
    PDWORD(DWORD(Place) + 1)^ := (DWORD(CallBack) - (DWORD(Place)) -5);
    VirtualProtect(Place, 6, ProtecaoAntiga, ProtecaoAntiga);
    end;

    function CreateThr(lpThreadAttribute : Pointer;dwStackSize : Cardinal;lpStartAddress, lpParameter : Pointer;dwCreationFlag, ThreadID : Cardinal) : Cardinal;stdcall;
    var
    dwTemp1, dwTemp2 : DWORD;
    i : integer;
    hModule, dwFunc : DWORD;
    Command : string;
    CreateRemoteThreadEx : function (hProcess : Cardinal;lpThreadAttribute : Pointer;dwStackSize : Cardinal;lpStartAddress, lpParameter : Pointer;dwCreationFlag : DWORD; lpAttributeList : Pointer;ThreadID : Cardinal) : Cardinal;stdcall;
    begin
    i := 0;
    CreateRemoteThreadEx := GetProcAddress(GetModuleHandle('kernel32.dll'), 'CreateRemoteThreadEx');
    if (GetModuleHandle('XTrapVa.dll') <> 0) then begin
    hModule := GetModuleHandle('XTrapVa.dll');
    dwFunc := DWORD(GetProcAddress(hModule, 'XProc3'));
    dwTemp1 := DWORD(lpStartAddress) - hModule;
    dwTemp2 := DWORD(lpStartAddress) - dwFunc;
    if ((dwTemp1 = $17C0) or (dwTemp2 = $2D510) or (dwTemp2 = $321E0)) then begin
    result := CreateRemoteThreadEx(DWORD(-1), lpThreadAttribute, dwStackSize, lpStartAddress, lpParameter, CREATE_SUSPENDED, nil, ThreadID);
    Exit;
    end;
    end;
    result := CreateRemoteThreadEx(DWORD(-1), lpThreadAttribute, dwStackSize, lpStartAddress, lpParameter, dwCreationFlag, nil, ThreadID);
    end;

    begin
    HookThis('ntdll.dll', 'RtlExitUserProcess', @ExitProc);
    HookThis('ntdll.dll', 'ZwTerminateProcess', @TerminateProc);

    MessageBoxA(0, 'You´re now full bypassed.', 'By Vitrix!', MB_ICONEXCLAMATION);
    begin
    end;

    begin
    CreateThread(nil, Vt, @Vitrix, nil, Vt, Vt);
    end;
    end.
    Sobre o bypass:

    Este bypass hooka 3 APIS do windows, a principal dela é a "CreateThread",
    assim o ''Game'' não criar as threads do x-trap.

    This bypass hooka APIS three windows, the main it is the "CreateThread"
    '' Game'' so do not create the threads of x-trap.

    uma dica importante é sempre dar pack nas dll com (themida,aspack ..) fazendo com que dificulte com que o xtrap ache as threads !

    an important tip is to always pack with the dll (Themida, ASPack ..) causing hamper with the Xtrap find the threads!
    Last edited by Vitrix Maggot; 2013-04-12 at 07:59 PM.

  2. The Following 3 Users Say Thank You to Vitrix Maggot For This Useful Post:


  3. #2
    leeonardo
    leeonardo is offline
    Moderator leeonardo's Avatar
    Join Date
    2012 Jan
    Location
    Here I am.
    Posts
    2,219
    Thanks Thanks Given 
    48
    Thanks Thanks Received 
    3,122
    Thanked in
    737 Posts
    Rep Power
    15
    Don't forget, need write in English, anyway, nice work, will be very useful for who want learn more about hacks.


    É pra ficar com medo?



    Apenas observo...



    Não faço nenhum tipo de venda de hack no jogo, então se in game ver algum "Leonardo PGC" não acredite, pois será alguém tentando te roubar.

  4. The Following User Says Thank You to leeonardo For This Useful Post:


  5. #3
    Vitrix Maggot
    Vitrix Maggot is offline
    Member-in-training Vitrix Maggot's Avatar
    Join Date
    2013 Apr
    Location
    Brasil
    Posts
    58
    Thanks Thanks Given 
    0
    Thanks Thanks Received 
    43
    Thanked in
    24 Posts
    Rep Power
    0
    Quote Originally Posted by leeonardo View Post
    Don't forget, need write in English, anyway, nice work, will be very useful for who want learn more about hacks.
    Sorry this already neat! ^^

  6. The Following 2 Users Say Thank You to Vitrix Maggot For This Useful Post:


  7. #4
    gundulapek
    gundulapek is offline
    New member
    Join Date
    2012 Feb
    Posts
    24
    Thanks Thanks Given 
    0
    Thanks Thanks Received 
    1
    Thanked in
    1 Post
    Rep Power
    0
    thank you for share, i will test it soon

  8. The Following User Says Thank You to gundulapek For This Useful Post:


  9. #5
    Vitrix Maggot
    Vitrix Maggot is offline
    Member-in-training Vitrix Maggot's Avatar
    Join Date
    2013 Apr
    Location
    Brasil
    Posts
    58
    Thanks Thanks Given 
    0
    Thanks Thanks Received 
    43
    Thanked in
    24 Posts
    Rep Power
    0
    Quote Originally Posted by gundulapek View Post
    thank you for share, i will test it soon
    So depending on your version of Xtrap you changed some, an important tip is to always pack with the dll (Themida, ASPack ..) causing hamper with the Xtrap find the threads!

  10. The Following User Says Thank You to Vitrix Maggot For This Useful Post:


  11. #6
    gundulapek
    gundulapek is offline
    New member
    Join Date
    2012 Feb
    Posts
    24
    Thanks Thanks Given 
    0
    Thanks Thanks Received 
    1
    Thanked in
    1 Post
    Rep Power
    0
    i have problem when i execute the code, but it think because of the address

  12. #7
    gundulapek
    gundulapek is offline
    New member
    Join Date
    2012 Feb
    Posts
    24
    Thanks Thanks Given 
    0
    Thanks Thanks Received 
    1
    Thanked in
    1 Post
    Rep Power
    0
    When i try to execute the code I must made some modification but still have problem, need time to fix it

    Please register or login to download attachments.


  13. #8
    rokeys
    rokeys is offline
    New member
    Join Date
    2012 Aug
    Posts
    20
    Thanks Thanks Given 
    1
    Thanks Thanks Received 
    0
    Thanked in
    0 Posts
    Rep Power
    0
    good,nice work,thanks

  14. #9
    monsterhunter
    monsterhunter is offline
    Member-in-training monsterhunter's Avatar
    Join Date
    2012 Apr
    Posts
    181
    Thanks Thanks Given 
    65
    Thanks Thanks Received 
    203
    Thanked in
    57 Posts
    Rep Power
    0
    good bro ... is to post a tutorial for people ... how best to use this knowledge?
    Anime One Piece muito show

  15. #10
    MyOwn
    MyOwn is offline
    Guest
    Join Date
    2014 Feb
    Posts
    3
    Thanks Thanks Given 
    1
    Thanks Thanks Received 
    0
    Thanked in
    0 Posts
    Rep Power
    0
    Thanks Can i ask you what mean this Line
    Code:
    if ((dwTemp1 = $17C0) or (dwTemp2 = $2D510) or (dwTemp2 = $321E0)) then begin
    ?

Similar Threads

  1. Replies: 4
    Last Post: 2015-12-03, 09:56 AM
  2. [C++] Source Bypass Xtrap (para estudos)
    By Vitrix Maggot in forum C/C++
    Replies: 13
    Last Post: 2014-05-17, 10:17 PM
  3. Hackshield Bypass Source
    By Dwar in forum Anti-Cheat Systems
    Replies: 3
    Last Post: 2012-10-22, 07:57 PM
  4. Replies: 11
    Last Post: 2011-09-21, 02:15 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •