Saturday, November 27, 2010

RCD Base 1.0

1. Buatlah sebuah project baru seperti tutorial sebelumnya, rename dllmain.h menjadi addys.h
2. isikan code seperti dibawah ini
DLLMAIN.C




[sourcecode language="cpp"]
/*
Name: RCD Base
Copyright: RCD
Author: RCD
Date: 22/11/10 15:37
Description: SC Dasar untuk lebih mudah menggunakan RCD Logger
===============================================================
MOHON DESKRIPSI INI JANGAN DIBUANG !
*/
#include "addys.h" // sumber offset dan deklarasi dll
#include <windows.h> // include untuk createthread
#include <stdio.h>
#include <stdlib.h>

LPTSTR PBlankExec = "PointBlank.PBlankExec"; // handle PointBlank.i3Exec
DWORD adrMNZ1, adrMNZ2, adrWallOn, adrWallOff, adrAmmoOn, adrAmmoOff, adrBombermanOn, adrBombermanOff, adrGrenadeOn, adrGrenadeOff = 0; // deklarasi dulu yow

void WriteASM(void *adr, void *ptr, int size) // modul untuk melakukan penulisan ke address asm
{
DWORD OldProtection;
VirtualProtect(adr,size,PAGE_EXECUTE_READWRITE, &OldProtection);
memcpy(adr,ptr,size);
VirtualProtect(adr,size,OldProtection, &OldProtection);
}

int __stdcall HSBypass(void){
// Kosong
// HS Bypass Credit by DRACHE and ME [ RCD ] !!!
return 0; // unhook
}

DWORD WINAPI HackThread(LPVOID param) // Perulangan
{
while (1) { // Jika nilai 1 atau True jalankan fungsi dibawah ini !
// PASSING HACKSHIELD DETECT GAMEHACK
HSBypass();
HSBypass();
HSBypass();
HSBypass();
HSBypass();
HSBypass();
HSBypass();
HSBypass();
HSBypass();
HSBypass();
// Minimize ON
if (GetAsyncKeyState(VK_INSERT)&1) {
MessageBeep(0);
DWORD dwPBlankModule = (DWORD)GetModuleHandleA(PBlankExec);
if (dwPBlankModule > 0) {
adrMNZ1 = dwPBlankModule + (DWORD)OFS_Minimize1;
WriteASM((void *)(adrMNZ1),(void*)(PBYTE)"\x00", 1);
adrMNZ2 = dwPBlankModule + (DWORD)OFS_Minimize2;
WriteASM((void *)(adrMNZ2),(void*)(PBYTE)"\x00", 1);

}
}
// Minimize OFF
if (GetAsyncKeyState(VK_DELETE)&1) {
MessageBeep(0);
DWORD dwPBlankModule = (DWORD)GetModuleHandleA(PBlankExec);
if (dwPBlankModule > 0) {
adrMNZ1 = dwPBlankModule + (DWORD)OFS_Minimize1;
WriteASM((void *)(adrMNZ1),(void*)(PBYTE)"\x01", 1);
adrMNZ2 = dwPBlankModule + (DWORD)OFS_Minimize2;
WriteASM((void *)(adrMNZ2),(void*)(PBYTE)"\x01", 1);

}
}
// WALLSHOT ON
if (GetAsyncKeyState(VK_F5)&1) {
MessageBeep(0);
DWORD dwPBlankModule = (DWORD)GetModuleHandleA(PBlankExec);
if (dwPBlankModule > 0) {
adrWallOn = dwPBlankModule + (DWORD)ADR_Wallshot;
WriteASM((void *)(adrWallOn),(void*)(PBYTE)"\xC3", 1);

}
}
// WALLSHOT OFF
if (GetAsyncKeyState(VK_F7)&1) {
MessageBeep(0);
DWORD dwPBlankModule = (DWORD)GetModuleHandleA(PBlankExec);
if (dwPBlankModule > 0) {
adrWallOff = dwPBlankModule + (DWORD)ADR_Wallshot;
WriteASM((void *)(adrWallOff),(void*)(PBYTE)"\x55", 1);

}
}
// AMMO ON
if (GetAsyncKeyState(VK_HOME)&1) {
MessageBeep(0);
DWORD dwPBlankModule = (DWORD)GetModuleHandleA(PBlankExec);
if (dwPBlankModule > 0) {
adrAmmoOn = dwPBlankModule + (DWORD)ADR_Ammo;
WriteASM((void *)(adrAmmoOn),(void*)(PBYTE)"\xC3", 1);
}
}
// AMMO OFF
if (GetAsyncKeyState(VK_DELETE)&1) {
MessageBeep(0);
DWORD dwPBlankModule = (DWORD)GetModuleHandleA(PBlankExec);
if (dwPBlankModule > 0) {
adrAmmoOff = dwPBlankModule + (DWORD)ADR_Ammo;
WriteASM((void *)(adrAmmoOff),(void*)(PBYTE)"\x55", 1);

}
}
//BOMBERMAN ON
if (GetAsyncKeyState(VK_F1)&1) {
MessageBeep(0);
DWORD dwPBlankModule = (DWORD)GetModuleHandleA(PBlankExec);
if (dwPBlankModule > 0) {
adrBombermanOn = dwPBlankModule + (DWORD)OFS_Bomberman;
WriteASM((void *)(adrBombermanOn),(void*)(PBYTE)"\x00", 1);

}
}
//BOMBERMAN OFF
if (GetAsyncKeyState(VK_F2)&1) {
MessageBeep(0);
DWORD dwPBlankModule = (DWORD)GetModuleHandleA(PBlankExec);
if (dwPBlankModule > 0) {
adrBombermanOff = dwPBlankModule + (DWORD)OFS_Bomberman;
WriteASM((void *)(adrBombermanOff),(void*)(PBYTE)"\x01", 1);

}
}
// Unlimited Grenade ON
if (GetAsyncKeyState(VK_PRIOR)&1) {
MessageBeep(0);
DWORD dwPBlankModule = (DWORD)GetModuleHandleA(PBlankExec);
if (dwPBlankModule > 0) {
adrGrenadeOn = dwPBlankModule + (DWORD)ADR_UnlmtdGrnade;
// Unlimited Grenade type nya beda dari yang lain
// Untuk on : 01 81 50 03 00 00
// Cheat ini akan menambah jumlah grenade setiap lempar, have fun !
WriteASM((void *)(adrBombermanOff),(void*)(PBYTE)"???", 1);// ??? <= pikir sendiri
}
}
// Unlimited Grenade Off
if (GetAsyncKeyState(VK_NEXT)&1) {
MessageBeep(0);
DWORD dwPBlankModule = (DWORD)GetModuleHandleA(PBlankExec);
if (dwPBlankModule > 0) {
adrGrenadeOff = dwPBlankModule + (DWORD)ADR_UnlmtdGrnade;
// Untuk off. Offset Bytes nya adalah = 89 81 50 03 00 00
WriteASM((void *)(adrBombermanOff),(void*)(PBYTE)"???", 1); // ??? <= pikir sendiri
}
}
Sleep(5); // Berikan jeda
}
return (0); // unhook
}
BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
DisableThreadLibraryCalls(hDll); // meringankan kerja dll
if (dwReason == DLL_PROCESS_ATTACH) {
MessageBox (0,"Simple DLL Hack\nPowered by RCD Logger 2.0","RCD Base", MB_OK | MB_ICONINFORMATION);
CreateThread(0, 0, (LPTHREAD_START_ROUTINE)HackThread, 0, 0, 0);
}
return TRUE;
}
[/sourcecode]

ADDYS.H

[sourcecode language="cpp"]
/*
Name: RCD Base
Copyright: RCD
Author: RCD
Date: 22/11/10 15:37
Description: SC Dasar untuk lebih mudah menggunakan RCD Logger
===============================================================
MOHON DESKRIPSI INI JANGAN DIBUANG !
*/
#ifndef __RCD_BASE_H
#define __RCD_BASE_H

#define WIN32_LEAN_AND_MEAN
#include <windows.h>

void WriteASM(void *adr, void *ptr, int size);
DWORD WINAPI HackThread(LPVOID param);
#endif
// ADDYS TEMPELKAN DISINI !!!
[/sourcecode]

3. Cari offset dengan cara menjalankan RCD Logger 2.0
4. Copas hasil logging ke addys.h
5. check dulu kalau ada syntax yang error
6. Build Project dan DLL siap diinject !
Posted by Blog baruku at 4:30 AM 0 comments
Labels: , ,

Wednesday, November 24, 2010

RCD Logger 2.0


Product Name : RCD Logger
Version : 2.0
Released : 23/11/2010
Creator : RCD
Greetz to : [*] _hrd_ : many thx to _hrd_ karena bimbingannya
[*] NoName : addys source base
[*] Gecko : nice tutor on finding bytes !
[*] Ukira : aob grenade, ws, bomberman yang pernah dah dishare :D
Archive Type : ZIP
Included files : =>n3.nfo
=>RCDLogger.exe
Game Target : PointBlank
Anti-Cheat : AhnLab HackShield Pro
Type : Addys Logger
Supported Logged : [*] Minimize
[*] Wallshot
[*] Bomberman
[*] Unlimited Grenade
[*] Ammo
Blog : http://www.richardyusan.wordpress.com
Note Tambahan : Dilarang membuat mirror download tanpa seijin pembuat !
Cara pemakaian : Inject RCD Logger dengan "RCDLogger.exe" lalu jalankan PointBlank, jika proses
logging sudah selesai, hasil log akan langsung dimunculkan !
MD5 Sum : 53D7CE7B6AEF32A8A398FD6EC3C0E27E <~ "RCDLogger.exe"
# jika md5 rcd logger 2 di komputer anda tidak persis seperti dibawah ini
kemungkinan sudah terinfeksi virus

Changes :

[+]Auto OverWrite if result already exist
[+]Auto Open Logger Result
[+]Fixed memory bug "Matching bytes with mask" in windows xp
[+]Find offset speed increased a lot
[+]Support Windows NT
[-]Removed Weapon Addys

 

Virus Total : Click Here

Download Link : Click Here
Posted by Blog baruku at 5:50 AM 0 comments
Labels: ,

Monday, November 22, 2010

[PB] Destructor S. [Bomberman, Minimize, WS]

Tanpa basa basi.....nih langsung ja
Released : 21/11/2010
Creator : RCD
Greetz to : [*] DewaPB
Archive Type : ZIP
Included files : =>suntix.exe
=>suntix.dll
=>n3.nfo
Game Target : PointBlank
Anti-Cheat : AhnLab HackShield Pro
Type : Trainer / Cheat
Cheat/Trainer Effect : [*] WALLSHOT = F5 [ON]
[*] WALLSHOT = F7 [OFF]
[*] Minimize = INSERT [ON]
[*] Minimize = DELETE [OFF]
[*] Bomberman = F1 [ON]
[*] Bomberman = F2 [OFF]
Cara pemakaian : # Cara pakai Minimize : Gunakan ALT+TAB Seperlunya saja, kalau kelamaan BugTrap.
# Cara pakai WS : Sebelum menembak tembok, nonaktifkan dulu Wallshotnya
# Cara pake Bomberman : Kalau agan mati saat play , jangan pencet tombol apa2 diamkan saja sampai respawn, agar tidak terdeteksi automouse, kalau perlu nonaktifkan bomberman biar lebih maknyos. Tested by Me [RCD] 3 jam no BT
# Cara pake WS : Aktifkan Wallshot saat kamu mengklik 'START' dan nonaktifkan tekan sesudah loading atau muncul char orang, pencet 3 kali agar tidak terjadi bugtrap
Blog : http://www.richardyusan.wordpress.com
Note Tambahan : Dilarang membuat mirror download !



Download Link : Click Here




























































































































































































































































AntivirusVersionLast updateResult
AhnLab-V32010.11.21.012010.11.21-
AntiVir7.10.14.562010.11.21-
Antiy-AVL2.0.3.72010.11.22-
Avast4.8.1351.02010.11.21-
Avast55.0.594.02010.11.21-
AVG9.0.0.8512010.11.21-
CAT-QuickHeal11.002010.11.09-
ClamAV0.96.4.02010.11.21-
Command5.2.11.52010.11.21W32/Heuristic-KPP!Eldorado
Comodo68022010.11.22-
DrWeb5.0.2.033002010.11.22-
Emsisoft5.0.0.502010.11.22Gen.Trojan!IK
eSafe7.0.17.02010.11.21-
eTrust-Vet36.1.79892010.11.20-
F-Prot4.6.2.1172010.11.21W32/Heuristic-KPP!Eldorado
F-Secure9.0.16160.02010.11.22Generic.Malware.L!.CF479E09
Fortinet4.2.254.02010.11.20-
IkarusT3.1.1.90.02010.11.22Gen.Trojan
Jiangmin13.0.9002010.11.20-
K7AntiVirus9.68.30412010.11.20-
Kaspersky7.0.0.1252010.11.22-
McAfee5.400.0.11582010.11.22-
McAfee-GW-Edition2010.1C2010.11.22-
Microsoft1.64022010.11.22-
NOD3256372010.11.21-
Norman6.06.102010.11.21-
Panda10.0.2.72010.11.21-
PCTools7.0.3.52010.11.22-
Prevx3.02010.11.22-
Rising22.74.06.032010.11.22Trojan.Win32.Generic.5248814A
Sophos4.59.02010.11.22-
SUPERAntiSpyware4.40.0.10062010.11.22-
Symantec20101.2.0.1612010.11.22-
TheHacker6.7.0.1.0872010.11.20-
TrendMicro9.120.0.10042010.11.22-
TrendMicro-HouseCall9.120.0.10042010.11.22-
VBA323.12.14.22010.11.19-
VIPRE73762010.11.22Trojan.Win32.Generic!BT
ViRobot2010.11.20.41582010.11.22-
VirusBuster13.6.52.12010.11.21-






















Additional information
MD5: dd0d9fdb45335d5fe95717bccbd73e76
SHA1: 96bdcc47d135001911f289291daee82a91df46a7
SHA256: 358fe252420cb129ed821a0aa444393d3ab0b0359d910cc2c50e9208fe7fea0a
File size: 17453 bytes
Scan date: 2010-11-22 06:40:54 (UTC)
Posted by Blog baruku at 5:48 AM 0 comments
Labels: ,

Sunday, November 21, 2010

RCD Logger 1.0

Tutorial :

C&P "I3ExecGN.exe" ke folder PointBlank, jalankan I3ExecGN. Buka loader.exe untuk menginjek RCDLogger ke I3ExecGN.exe.kalau sudah terinject, tekan tombol apa saja agar PointBlank.I3Exec terload ke I3ExecGN.exe. Setelahitu,RCDLogger akan memberikan notifikasi bahwa addys telah di log !. Silahkan cek "addys-rcdlogger.txt" untuk melihathasilnya.

Mohon baca Cara Pemakaian dengan Teliti !

Supported Logged :

[*] Minimize
[*] Wallshot
[*] Bomberman
[*] Addys Weapon : SOPMOD, KRISS, UZI, K2, K1, RPG7, KUKRI, RANGEMASTER, DLL
[*] Ammo

Log Virus Scan

Download Link : Click Here
Posted by Blog baruku at 8:59 AM 0 comments
Labels: ,

Tuesday, November 16, 2010

Light Injector + Source Code

Injector yang dibuat dengan GCC yang memfokuskan ringan memory dan high speed injecting

100% build in GCC, silahkan download Source Code nya dibawah ini :



Download Link : Click Here

 

NB : nama file injector harus sama dengan nama file DLL
contoh :
Nama injector : RCD.exe
maka nama DLL harus : RCD.dll

 

Spoiler untuk Source Code

  • Auto ngecek DLL ada atau tidak

  • Membuka Link

  • Error Handler saat penginjeksian

  • High Speed Injecting

  • Light Memory than other injector


 

Special :
Light Injector menggunakan API LoadLibrary() yang notabene lebih efektif dan cepat dibanding CreateRemoteThread()
Posted by Blog baruku at 12:27 AM 0 comments
Labels: ,

Saturday, November 13, 2010

rcD Packet Editor 1.1 Undetected


Fitur yang telah diperbarui :


-Gak perlu klik "New"

- Type Search Added
- "Save as html" added
- MDI Minimize/Maximize fix
- Docking Added
- Conversion Added
- Heavy GUI changes
- IPC Method changed
- Crashes fixed
- GetSysCallNr.exe -> Heavy Speed increase (3m to <5s)


- Support Windows VISTA not 7



Download Link : Click here


 














































































































































































































































































AntivirusVersionLast updateResult
AhnLab-V32010.11.13.002010.11.12-
AntiVir7.10.13.2352010.11.12-
Antiy-AVL2.0.3.72010.11.13-
Authentium5.2.0.52010.11.13-
Avast4.8.1351.02010.11.12Win32:Trojan-gen
Avast55.0.594.02010.11.12Win32:Trojan-gen
AVG9.0.0.8512010.11.12HackTool.KZE
BitDefender7.22010.11.13Gen:Packer.PESpin.A.LLucayhDl8qi
CAT-QuickHeal11.002010.11.09-
ClamAV0.96.4.02010.11.13PUA.Packed.PESpin
Comodo67032010.11.13Heur.Pck.PESpin
DrWeb5.0.2.033002010.11.13Trojan.PWS.Gamania.9038
Emsisoft5.0.0.502010.11.13Packer.PESpin!IK
eSafe7.0.17.02010.11.11-
eTrust-Vet36.1.79732010.11.13-
F-Prot4.6.2.1172010.11.13W32/Heuristic-210!Eldorado
F-Secure9.0.16160.02010.11.13Gen:Packer.PESpin.A.LLucayhDl8qi
Fortinet4.2.249.02010.11.12-
GData212010.11.13Gen:Packer.PESpin.A.LLucayhDl8qi
IkarusT3.1.1.90.02010.11.13Packer.PESpin
Jiangmin13.0.9002010.11.13Trojan/PSW.Nilage.ekh
K7AntiVirus9.67.29732010.11.12Riskware
Kaspersky7.0.0.1252010.11.13-
McAfee5.400.0.11582010.11.13-
McAfee-GW-Edition2010.1C2010.11.12-
Microsoft1.63012010.11.13-
NOD3256162010.11.13a variant of Win32/HackTool.rPE.A
Norman6.06.102010.11.12-
nProtect2010-11-13.012010.11.13-
Panda10.0.2.72010.11.12Suspicious file
PCTools7.0.3.52010.11.13-
Prevx3.02010.11.13-
Rising22.73.03.062010.11.12-
Sophos4.59.02010.11.13Mal/Packer
Sunbelt72962010.11.13Trojan.Win32.Packer.PESpinv1.32 (ep)
SUPERAntiSpyware4.40.0.10062010.11.13-
Symantec20101.2.0.1612010.11.13WS.Reputation.1
TheHacker6.7.0.1.0832010.11.13-
TrendMicro9.120.0.10042010.11.13Cryp_PESpin
TrendMicro-HouseCall9.120.0.10042010.11.13Cryp_PESpin
VBA323.12.14.22010.11.12-
ViRobot2010.11.13.41452010.11.13-
VirusBuster12.75.1.02010.11.12Packed/PeSpin






















Additional information
MD5: d2108cbff1bfbdfa06acd14ed1a229c8
SHA1: 87375cc06dbce587347a9338cf5e96f774bb1f61
SHA256: e3cb9e7d4f2be25b9cbadf0b84d268ee5ccc56afe53dbd3ec62e2e2e5db808bc
File size: 1927685 bytes
Scan date: 2010-11-13 08:45:23 (UTC)

Sampai saat ini DPE 1.1 Masih undetected dan lebih tahan lama dari Packet Editor yang lain....silahkan buktikan sendiri.... :p
Posted by Blog baruku at 7:51 AM 0 comments
Labels: ,

Wednesday, November 3, 2010

Membuat Pinball DLL Trainer (Offset) dengan DevCpp

Tools :
=> PBALL_HACK_SC    :    Click Here To Download
=> DevCPP        :    Click Here To Download
=> CheatEngine        :    Click Here To Download
=> PINBALL (silahkan DL jika anda belum punya game ini :hilarious:) : Click Here To Download

Credits :
=> CheatEngine by DarkByte
=> WritePointer() by Abujafar
=> DevCPP by BloodShed
=> Pinball Space Cadet by Microsoft

Tutorial :
1. Buka DevCPP|New|Project|Pilih DLL dan C (jangan C++)|Isikan nama project|OK
2. Buka Cheat Engine dan PinBall | Scan Score sampai setidaknya ada 2 buah address|pilih address yang kedua|Scan Pointer|


setting Pointer Scan seperti gambar dibawah ini



nanti klik OK|Pilih tempat Save|Tunggu hasil scan Pointer
3. Kalau sudah ketemu Pointer untuk Score pilih yang paling atas | lihat unsur-unsur nya


PINBALL.EXE+25040 dan Offset 52 :hilarious:
4. Tuliskan static pointer yang sudah ditemukan kedalam cBase.h


5. Scan Balls dan dapatkan Address dasar beserta offsetnya, masukkan seperti ScoreHack di cBase.h
6. Setting DLL yang kamu inginkan ( info pembuat dll, dkk)
7. Silahkan inject DLL kamu ke PINBALL.EXE <--- penulisan harus sama
F12 untuk HackScore
F11 untuk LifeHack
INSERT untuk memunculkan dialog About
8. nih lihat hasilnya :D


Posted by Blog baruku at 1:32 PM 0 comments
Labels: ,
Subscribe to: Posts (Atom)