Even Balance's anti-cheat Punkbuster.
Sticky Threads
Use this as you will, it's simply a proof of conept PB still sux IMO. I see a lot of people having issues and here's something to get you started. Basically I was doing some Breakpointing in PB and stumbled upon this lovely buffer outside the code area of pbcl. It seems they are still only...
//Punkbuster used GetSystemTimeAsFileTime for PBSS you know .idata:0045D0E4 ; void __stdcall GetSystemTimeAsFileTime(LPFILETIME lpSystemTimeAsFileTime) .idata:0045D0E4 extrn GetSystemTimeAsFileTime:dword ; CODE XREF: _time+9p void CleanVisuals( LPFILETIME...
For educational purposes only, of course. :) Original plan was to make a public Proof Of Concept for stealing CDKEYS using punkbuster, but eventually it became a problem reading 2nd part of the cdkey, so I gave up for now. Will eventually try on some games other than COD4. ET example: <p> 5...
After detouring a few functions inside pbcl.dll i found that PunkBuster was reading an encoded file called ETKey from the game folder. I opened it and found it for the most part unreadable. I later learned that when pb opens this file, reads the input and generates your GUID based on it. Now i...
/* Anti-PB Plugin (Fixes ZwQueryObject Detection) Credits: CDetour: Tetsuo/LanceVorgin (also check CDetour.cpp) Bits & Bats: RunningBon/panzer/Xen/Sparten/Kosire Volcano Master: h1web EngRish Lessons: Pansemuckl!
/* Just a Simple Program written to load the pb driver externally (Got Debug?) - PizzaPan / Game-Deception! (www.gamedeception.net) Credits: Tetsuo, RunningBon, panzer, Xen, h1web, Sparten, Kosire, Google! */ /* Remember These Simple Rules of Coding to Make the Source...
hi guys, nothing new here... just the adaptation of pb update scan from EvilHack. (Made it specially to Helios who didn't figure out that pb ss code was updated ehehe) I'm using it like this in AAO: CPBUpdateScan PBScan;
Punkbuster Hardware Info. Credits: Tetsuo, RunningBon, Rob, Xen, h1web, Sparten, Kosire. Credits: BlackDove <-> Sorry for forgetting your previous post at nC it didnt cross my mind as its been so long, and iam banned from there since forever, my apologies. I will allow this to be...
Normal Threads
Hi, I have a question, xfire intercept these functions: SwapChainPresent 4fd99230 Release 4fda03f0 Reset 4fda36b0
since pb dont check this function you can hook the function with detours but i released a few days ago the binary for cod4 and there detected it as "pb hack" so you could figure it out what there actually detected anyway its quick easy to find Punkbusters screnshot function you need just to...
has anyone here done extensive packet capturing w/ punkbuster?
Lets start bypassing punkbuster, I want to know with which API's punkbuster use to caught my hook. I will give some information: 1. I just hook EndScene, DIP and Reset ( and also SetCursorPos but I dont Punkbuster scans for that at all ). 2. I hide my module before I hook. 3. And after...
Well,i just started to work on cod4 and i have a question.I found thread from King-Orgy aboat cleaning pbss but that method has been detected and it doesnt work anymore.¸Does somebody have some idea what function could i hook to make pbss clean? I do not beg for any source,i just need some info...
My question is if i hook EndScene: HRESULT WINAPI CD3D::nEndScene( LPDIRECT3DDEVICE9 oDevice ) { return oEndScene( oDevice ); } oEndScene = ( tEndScene )DetourFunction( ( PBYTE )dwInterFace, ( PBYTE )CD3D::nEndScene );
i was wondering does anyone know what Game-Violations.com do to check if a PBSS is real or fake? -f0ut
Hello Everyone ! :) I'm beginner programmer, and I would like to ask you about ByPass PB in Delphi:pirate: Firstly is it possible to ReadMemoryProcess of 'pbcl.dll' and search there some offset which fuction is CHECK or Make ScreenShot. I think about it and i would like to write something like...
Thread title says it all. Am looking for some free2play games that use punkbuster. Want to try something out on them :) Never mind, I'm stupid: http://www.evenbalance.com/ Close please! -nekitamo
First post and all that! Hope this isn't too noobish. I am working on a simple overlay I want on my games (FPS, bit like fraps etc.) and I have no problems with VAC/VAC2 etc. - however when doing anything with COD4, I get a violation of 125120 Disallowed Program/Driver within 5 minutes of...
Hello all. I have been searching a lot on how to play cod2 multiplayer on linux. But punkbuster is kicking me out all the time even though i dont have any cheats. Some guys on other forum have told me that i need to use some cheat ( bypass pb or something ) to play on linux. Can you give me...
Hi, I wanted to ask you something, until April I use this to bypass the scans of pb and it worked well, then I do not I have used. .text:004021AC sub_4021AC proc near ; CODE XREF: sub_402239+2Ep .text:004021AC ; sub_4023AC+2Cp ......
Hurray for alcohol (without whom this wouldn't have been posted)! <p> p 98125086 "*CoD4 MP 1.6 " * \d3d9.dll 021A30A p 90 p p A4 p | 1_8bff558bec6aff68 = 2_558bec83ec485356578d7db8b9120000 <p> p 132941 "?2093" \pbcl.dll \pbcl.dll 5BA33 128 | 1_F847813D <p> c 134180 "?2180" M \pbcl.dll 1000 0 |...
Hi all, i already debugged pbcl.dll and PnkBstrB service and found some cool stuff :D so i want to try out to debug the PB driver, but cannt find out how.. i tried with syser kernel mode debugger , to load the driver file of PB but isnt working... says Failed to Load. I would be very happy...
Hi all I'm trying to bypass punkbuster Screenshot function. im trying to do it in DirectDraw Lock IDirect3DIndexBuffer9::Lock Method Locks a range of index data and obtains a pointer to the index buffer memory.
Just some hex-rays dumps for the current versions figure someone might find these useful. America's Army version 2 v1.739 v2.182 | A1371 America's Army version 2 v1.739 v2.182 | A1371 PBSV.DLL America's Army version 3 v1.741 v2.184 | A1372 Battlefield 1942 v1.457 v2.110 | A1331 Battlefield 2...
hi, i have tried to patch memory of cod4 from many different detoured functions , all of them worked but always detected as well :frown:. so trying to make a memory hack undetectable is impossible ? or are there more advanced ways to do it?
I need a function that tells PB makes a SS true/false. So i can do a if statement when PBSS true. My hack disable. Disable my hack i can do my self. But i dont have a function or something else that detect PBSS. Maybe you know something?
Hi, I have some questions about PB... At the moment I'm trying to bypass the scans done on the code section of cod4 (iw3mp.exe). I saw the scanning of the code section is done by pbcl.dll in the ca export, so I detoured the complete export and dis/enable code modifications when run. But...
Hi, my problem is, that I get a kick for "Disallowed Program/Driver" (if its necessary, I'm going to write down the kick number... pbcl.log seems to be not working atm^^) while using my hack (D3D9 Hack for BF2142). I'm detouring everything with "Microsoft Detours 2.1" (sounds a little bit...
Has anyone had any joy accessing this thing? Ive tried injecting directly have it manually mapped just cannot seem to get into it and i need to to bypass the latest pb. Anyone shed any light please? OR any ideas?
HI all I'm trying to bypass BP with breakpoints, i have set 1 BP at PB SCAN Start function and then when its reached i move it to the end of the Function. EndScene BYTE EndScene_O = {0x55, 0x8b, 0xec, 0x83, 0xe4, 0xf8}; //Original BYTE EndScene_H = {0x68, 0xc9, 0x14, 0x0, 0x10, 0xc3}; ...
Hello all, For the past 2-3 weeks, I have been, at a non-stop basis (read below), working to make my hack undetected again with PB. First of all, let me go ahead and say I m not selling my hack, nor I am giving it out to my friends, I am not one of those people who come here and ask things on a...
Hy, i am making a pb bypass. But i dont know where detours insert jump, in the target function or before ?? and how many bytes? bypass works when i am not using detours, becouse i know where bytes are modified.
its for crysis wars to bypass script hacks any one could help me?
In PB's latest update, they appear to have stopped HW BP's executing. I'm assuming this is at driver level. It's picking up my hook in pbcl.dll, so i'm setting a HW BP on read where im hooking, but it doesn't flag up as been read, yet it kicks me thus thinking ring0. Is anyone aware of any way that...
Hey, PB have started sending different scans to different servers, and they've also blacklisted certain IP ranges (i.e. mine) from accessing the latest scans, so that hack coders can't get a hold of them. Well, think again PB, because anybody with half a brain can bypass that... Anyhow, here...
This is PB's current scan list for CoD 4. I dump these on a regular basis to check for any new scans, although I don't have a huge need to do it nowadays because my hacks automatically check for new scans, as a protection scheme. Anyhow, this might help others obtain a clearer indication of what...
I Searched For PB_P And Not Work I Searched For %c%c And %s NOT_FOUND But Dont Work Plz Help Me I Have Attached The Pbcl.dll! Thanks An dSorry For Bad English ^^
.text:1005A065 loc_1005A065: ; DATA XREF: .data:10063048o .text:1005A065 mov eax, 0D5B374E1h .text:1005A06A mov ecx, offset sub_1000AEE9 .text:1005A06F xor ecx, eax .text:1005A071 mov ...
There are currently 1 users browsing this forum. (0 members & 1 guests)
Use this control to limit the display of threads to those newer than the specified time frame.
Allows you to choose the data by which the thread list will be sorted.
Order threads in...
Note: when sorting by date, 'descending order' will show the newest results first.
Forum Rules
