[gMS v91] Mach Trainer

[Raiden]

wao..at last GMS update their hackshield

If TaiwanMS updated their HS, we have a bypass. FYI, they are still using HSMSCRC and they(TWMS Hackers) like to share anything, and they are mostly pros.

[iLostMyBallz]

cannot tick the hacks lehs, once injected go in maple the hacks cannot be ticked, can any1 hlp me?

ehh u inject into gms or msea de -..-
i tried in gms liao canot

[Machlol]

This is coded for gMS I don't know if it works for MSEA

[xiangloong]

can guarantee its not working for MSEA

[Nerrazzuri]

wao..at last GMS update their hackshield

If TaiwanMS updated their HS, we have a bypass. FYI, they are still using HSMSCRC and they(TWMS Hackers) like to share anything, and they are mostly pros.

Let me give you guys a little guide on how to make your own bypass.

Previously, gMS hooked OpenProcess by giving ERROR_INVALID_PARAMETER status to crash HackShield Processes. Since it is patch, there are a lot of APIs could be hook such as CreateProcess, Process32First, Process32Next and etc.

How to hook?
You can get waffle's CRC Bypass source and read and understand how he hook OpenProcess. A small little hint, you don't need to know how ASM work, C++ basic should be enough for you.

Current MSCRC: 00A1699F.

Enjoy.

[xiangloong]

wao..at last GMS update their hackshield

If TaiwanMS updated their HS, we have a bypass. FYI, they are still using HSMSCRC and they(TWMS Hackers) like to share anything, and they are mostly pros.

Let me give you guys a little guide on how to make your own bypass.

Previously, gMS hooked OpenProcess by giving ERROR_INVALID_PARAMETER status to crash HackShield Processes. Since it is patch, there are a lot of APIs could be hook such as CreateProcess, Process32First, Process32Next and etc.

How to hook?
You can get waffle's CRC Bypass source and read and understand how he hook OpenProcess. A small little hint, you don't need to know how ASM work, C++ basic should be enough for you.

Current MSCRC: 00A1699F.

Enjoy.

sry but im not interested in making bypass or using cheat engine..and did u success with your bypass?

[Raiden]

I have many ideas that I can`t do myself

1. HS Callback (HS detects hack and tells MS to close. We stop it. )
2. Full Bypass - Bypasses any hack program, even CE debuggers.
3. HSLESS - Private Server client w/o ipcheck removal ....... O.O (Get it from RageZone/KryptoDev?)

Okey, the first and second is very powerful. OMG~ The first one, if we did it, OMG. The second one, go buy from china haxors?? The third one, rumored you`ll d/c after a few minutes. It is enough to PE though. (Scroll hack, Warp Hack...)

HS CallBack Function hint:

Code: Select all

mov ecx, 00010501

We can trace this thing until the end. (This memory region assigns Error Codes (0x00010501 HAD) when HS gives an exception)

@Nerrazuri: Hope you take this in mind. Thanks. I`ll try in holidays, if my results are good. If not, playing banned T.T

[Nerrazzuri]

I have many ideas that I can`t do myself

1. HS Callback (HS detects hack and tells MS to close. We stop it. )
2. Full Bypass - Bypasses any hack program, even CE debuggers.
3. HSLESS - Private Server client w/o ipcheck removal ....... O.O (Get it from RageZone/KryptoDev?)

Okey, the first and second is very powerful. OMG~ The first one, if we did it, OMG. The second one, go buy from china haxors?? The third one, rumored you`ll d/c after a few minutes. It is enough to PE though. (Scroll hack, Warp Hack...)

HS CallBack Function hint:

Code: Select all

mov ecx, 00010501

We can trace this thing until the end. (This memory region assigns Error Codes (0x00010501 HAD) when HS gives an exception)

@Nerrazuri: Hope you take this in mind. Thanks. I`ll try in holidays, if my results are good. If not, playing banned T.T

First Method->fail

CallBack Function does not mean telling MapleStory to terminate. It is just where HackShield starts to operate/launch and there are many functions we don't know when HackShield launch.

[Raiden]

I have many ideas that I can`t do myself

1. HS Callback (HS detects hack and tells MS to close. We stop it. )
2. Full Bypass - Bypasses any hack program, even CE debuggers.
3. HSLESS - Private Server client w/o ipcheck removal ....... O.O (Get it from RageZone/KryptoDev?)

Okey, the first and second is very powerful. OMG~ The first one, if we did it, OMG. The second one, go buy from china haxors?? The third one, rumored you`ll d/c after a few minutes. It is enough to PE though. (Scroll hack, Warp Hack...)

HS CallBack Function hint:

Code: Select all

mov ecx, 00010501

We can trace this thing until the end. (This memory region assigns Error Codes (0x00010501 HAD) when HS gives an exception)

@Nerrazuri: Hope you take this in mind. Thanks. I`ll try in holidays, if my results are good. If not, playing banned T.T

First Method->fail

CallBack Function does not mean telling MapleStory to terminate. It is just where HackShield starts to operate/launch and there are many functions we don't know when HackShield launch.

Maybe we can let HS won`t run, to make the THIRD way - HSLESS. Unpacking Themida and removing HS checks, thatz it.

Else, if anyone can KNOW the functions of HS, a bypass can be born from it.

[Nerrazzuri]

I have many ideas that I can`t do myself

1. HS Callback (HS detects hack and tells MS to close. We stop it. )
2. Full Bypass - Bypasses any hack program, even CE debuggers.
3. HSLESS - Private Server client w/o ipcheck removal ....... O.O (Get it from RageZone/KryptoDev?)

Okey, the first and second is very powerful. OMG~ The first one, if we did it, OMG. The second one, go buy from china haxors?? The third one, rumored you`ll d/c after a few minutes. It is enough to PE though. (Scroll hack, Warp Hack...)

HS CallBack Function hint:

Code: Select all

mov ecx, 00010501

We can trace this thing until the end. (This memory region assigns Error Codes (0x00010501 HAD) when HS gives an exception)

@Nerrazuri: Hope you take this in mind. Thanks. I`ll try in holidays, if my results are good. If not, playing banned T.T

First Method->fail

CallBack Function does not mean telling MapleStory to terminate. It is just where HackShield starts to operate/launch and there are many functions we don't know when HackShield launch.

Maybe we can let HS won`t run, to make the THIRD way - HSLESS. Unpacking Themida and removing HS checks, thatz it.

Else, if anyone can KNOW the functions of HS, a bypass can be born from it.

Thats why I said you can hook the APIs I mentioned before.