Page 2 of 3

Re: [gMS v91] Mach Trainer

Posted: Fri Nov 05, 2010 5:57 pm
by Raiden
xiangloong wrote:wao..at last GMS update their hackshield
If TaiwanMS updated their HS, we have a bypass. FYI, they are still using HSMSCRC and they(TWMS Hackers) like to share anything, and they are mostly pros.

Re: [gMS v91] Mach Trainer

Posted: Fri Nov 05, 2010 9:52 pm
by iLostMyBallz
lolsee2 wrote:cannot tick the hacks lehs, once injected go in maple the hacks cannot be ticked, can any1 hlp me?
ehh u inject into gms or msea de -..-
i tried in gms liao canot

Re: [gMS v91] Mach Trainer

Posted: Sat Nov 06, 2010 4:29 pm
by Machlol
This is coded for gMS I don't know if it works for MSEA

Re: [gMS v91] Mach Trainer

Posted: Sat Nov 06, 2010 4:45 pm
by xiangloong
can guarantee its not working for MSEA

Re: [gMS v91] Mach Trainer

Posted: Sat Nov 06, 2010 4:59 pm
by Nerrazzuri
Raiden wrote:
xiangloong wrote:wao..at last GMS update their hackshield
If TaiwanMS updated their HS, we have a bypass. FYI, they are still using HSMSCRC and they(TWMS Hackers) like to share anything, and they are mostly pros.
Let me give you guys a little guide on how to make your own bypass.

Previously, gMS hooked OpenProcess by giving ERROR_INVALID_PARAMETER status to crash HackShield Processes. Since it is patch, there are a lot of APIs could be hook such as CreateProcess, Process32First, Process32Next and etc.

How to hook?
You can get waffle's CRC Bypass source and read and understand how he hook OpenProcess. A small little hint, you don't need to know how ASM work, C++ basic should be enough for you.

Current MSCRC: 00A1699F.

Enjoy.

Re: [gMS v91] Mach Trainer

Posted: Sat Nov 06, 2010 5:00 pm
by xiangloong
Nerrazzuri wrote:
Raiden wrote:
xiangloong wrote:wao..at last GMS update their hackshield
If TaiwanMS updated their HS, we have a bypass. FYI, they are still using HSMSCRC and they(TWMS Hackers) like to share anything, and they are mostly pros.
Let me give you guys a little guide on how to make your own bypass.

Previously, gMS hooked OpenProcess by giving ERROR_INVALID_PARAMETER status to crash HackShield Processes. Since it is patch, there are a lot of APIs could be hook such as CreateProcess, Process32First, Process32Next and etc.

How to hook?
You can get waffle's CRC Bypass source and read and understand how he hook OpenProcess. A small little hint, you don't need to know how ASM work, C++ basic should be enough for you.

Current MSCRC: 00A1699F.

Enjoy.
sry but im not interested in making bypass or using cheat engine..and did u success with your bypass?

Re: [gMS v91] Mach Trainer

Posted: Sat Nov 06, 2010 6:24 pm
by Raiden
I have many ideas that I can`t do myself :P

1. HS Callback (HS detects hack and tells MS to close. We stop it. :D)
2. Full Bypass - Bypasses any hack program, even CE debuggers.
3. HSLESS - Private Server client w/o ipcheck removal ....... O.O (Get it from RageZone/KryptoDev?)

Okey, the first and second is very powerful. OMG~ The first one, if we did it, OMG. The second one, go buy from china haxors?? The third one, rumored you`ll d/c after a few minutes. It is enough to PE though. (Scroll hack, Warp Hack...)

HS CallBack Function hint:

Code: Select all

mov ecx, 00010501
We can trace this thing until the end. (This memory region assigns Error Codes (0x00010501 HAD) when HS gives an exception)

@Nerrazuri: Hope you take this in mind. Thanks. I`ll try in holidays, if my results are good. If not, playing banned T.T

Re: [gMS v91] Mach Trainer

Posted: Sat Nov 06, 2010 7:05 pm
by Nerrazzuri
Raiden wrote:I have many ideas that I can`t do myself :P

1. HS Callback (HS detects hack and tells MS to close. We stop it. :D)
2. Full Bypass - Bypasses any hack program, even CE debuggers.
3. HSLESS - Private Server client w/o ipcheck removal ....... O.O (Get it from RageZone/KryptoDev?)

Okey, the first and second is very powerful. OMG~ The first one, if we did it, OMG. The second one, go buy from china haxors?? The third one, rumored you`ll d/c after a few minutes. It is enough to PE though. (Scroll hack, Warp Hack...)

HS CallBack Function hint:

Code: Select all

mov ecx, 00010501
We can trace this thing until the end. (This memory region assigns Error Codes (0x00010501 HAD) when HS gives an exception)

@Nerrazuri: Hope you take this in mind. Thanks. I`ll try in holidays, if my results are good. If not, playing banned T.T
First Method->fail

CallBack Function does not mean telling MapleStory to terminate. It is just where HackShield starts to operate/launch and there are many functions we don't know when HackShield launch.

Re: [gMS v91] Mach Trainer

Posted: Sat Nov 06, 2010 7:11 pm
by Raiden
Nerrazzuri wrote:
Raiden wrote:I have many ideas that I can`t do myself :P

1. HS Callback (HS detects hack and tells MS to close. We stop it. :D)
2. Full Bypass - Bypasses any hack program, even CE debuggers.
3. HSLESS - Private Server client w/o ipcheck removal ....... O.O (Get it from RageZone/KryptoDev?)

Okey, the first and second is very powerful. OMG~ The first one, if we did it, OMG. The second one, go buy from china haxors?? The third one, rumored you`ll d/c after a few minutes. It is enough to PE though. (Scroll hack, Warp Hack...)

HS CallBack Function hint:

Code: Select all

mov ecx, 00010501
We can trace this thing until the end. (This memory region assigns Error Codes (0x00010501 HAD) when HS gives an exception)

@Nerrazuri: Hope you take this in mind. Thanks. I`ll try in holidays, if my results are good. If not, playing banned T.T
First Method->fail

CallBack Function does not mean telling MapleStory to terminate. It is just where HackShield starts to operate/launch and there are many functions we don't know when HackShield launch.
Maybe we can let HS won`t run, to make the THIRD way - HSLESS. Unpacking Themida and removing HS checks, thatz it.

Else, if anyone can KNOW the functions of HS, a bypass can be born from it.

Re: [gMS v91] Mach Trainer

Posted: Sat Nov 06, 2010 7:54 pm
by Nerrazzuri
Raiden wrote:
Nerrazzuri wrote:
Raiden wrote:I have many ideas that I can`t do myself :P

1. HS Callback (HS detects hack and tells MS to close. We stop it. :D)
2. Full Bypass - Bypasses any hack program, even CE debuggers.
3. HSLESS - Private Server client w/o ipcheck removal ....... O.O (Get it from RageZone/KryptoDev?)

Okey, the first and second is very powerful. OMG~ The first one, if we did it, OMG. The second one, go buy from china haxors?? The third one, rumored you`ll d/c after a few minutes. It is enough to PE though. (Scroll hack, Warp Hack...)

HS CallBack Function hint:

Code: Select all

mov ecx, 00010501
We can trace this thing until the end. (This memory region assigns Error Codes (0x00010501 HAD) when HS gives an exception)

@Nerrazuri: Hope you take this in mind. Thanks. I`ll try in holidays, if my results are good. If not, playing banned T.T
First Method->fail

CallBack Function does not mean telling MapleStory to terminate. It is just where HackShield starts to operate/launch and there are many functions we don't know when HackShield launch.
Maybe we can let HS won`t run, to make the THIRD way - HSLESS. Unpacking Themida and removing HS checks, thatz it.

Else, if anyone can KNOW the functions of HS, a bypass can be born from it.
Thats why I said you can hook the APIs I mentioned before.