• Grup Telegram N3 Ngobrol langsung dengan member lain dan dapat kabar rilis terbaru.
    Gabung @n3forum
  • Sejak 2003

    Cara pintas yang dianggap pantas

    Tempat gamer, programmer dan reverser Indonesia berbagi jamu, mod, source code dan tools. Gratis, tanpa iklan di halaman rilis.

    Daftar gratis Masuk Baca aturan

N3 [C++] Membuat Address Logger

Trainers

Trainers

TK A
Level 1
Kode: 
#include <fstream>
#include <Windows.h>
#include <stdio.h>
LPTSTR dwModule = "Audition.exe";
DWORD dwStartAddress, ResultAOB =0;

void MEMwrite(void *adr, void *ptr, int size)
{
DWORD OldProtection;
VirtualProtect(adr,size,PAGE_EXECUTE_READWRITE, &OldProtection);
memcpy(adr,ptr,size);
VirtualProtect(adr,size,OldProtection, &OldProtection);
}

bool Match(const BYTE* pData, const BYTE* bMask, const char* szMask){
for(;*szMask;++szMask,++pData,++bMask)
if(*szMask=='x' && *pData!=*bMask )
return false;
return (*szMask) == NULL;
}
DWORD Pattern(DWORD dwAddress,DWORD dwLen,BYTE *bMask,char * szMask){
for(DWORD i=0; i < dwLen; i++)
if( Match( (BYTE*)( dwAddress+i ),bMask,szMask) )
return (DWORD)(dwAddress+i);
return 0;
}
int __stdcall PFON(void){
dwStartAddress = 0x400000;
do {
dwStartAddress = (DWORD)GetModuleHandle(dwModule);
Sleep(50);
}while(!dwStartAddress);
DWORD dwSize = 0x500000;
DWORD PFNORMAL = Pattern(dwStartAddress,dwSize,(PBYTE)"\x7D\x3F\x33\x33\x73\x3F\x9A\x99","xxxxxx");
DWORD GetADR = PFNORMAL - dwStartAddress;
MEMwrite((void*)GetADR, (PBYTE)"\x00",1 );
return 0;
}
DWORD WINAPI Loopely(LPVOID param){
while(1){
if(GetAsyncKeyState(VK_F3)&1){
PFON();
MessageBeep(MB_ICONINFORMATION);
}
Sleep(50);
}
return 0;
}
BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
if (dwReason == DLL_PROCESS_ATTACH)
{
DisableThreadLibraryCalls(hDll);
if(dwReason == DLL_PROCESS_ATTACH){
MessageBeep(MB_ICONINFORMATION);
CreateThread(0, 0, (LPTHREAD_START_ROUTINE)Loopely, 0, 0, 0);
}
else if(dwReason == DLL_PROCESS_DETACH)
{
}
}
return TRUE;
}
Pada waktu tekan hotkey = langsung DC game nya...


pencerahan gan.
 
B

bhilz

2 SD
Level 2
Trainers said:
Pada waktu tekan hotkey = langsung DC game nya...
pencerahan gan.
Klik untuk membuka…
cba ini om

Kode: 
#include <fstream>
#include <Windows.h>
#include <stdio.h>
LPTSTR dwModule = "Audition.exe";
DWORD dwStartAddress, ResultAOB =0;

void MEMwrite(void *adr, void *ptr, int size)
{
DWORD OldProtection;
VirtualProtect(adr,size,PAGE_EXECUTE_READWRITE, &amp;OldProtection);
memcpy(adr,ptr,size);
VirtualProtect(adr,size,OldProtection, &amp;OldProtection);
}

bool Match(const BYTE* pData, const BYTE* bMask, const char* szMask){
for(;*szMask;++szMask,++pData,++bMask)
if(*szMask=='x' &amp;&amp; *pData!=*bMask )
return false;
return (*szMask) == NULL;
}
DWORD Pattern(DWORD dwAddress,DWORD dwLen,BYTE *bMask,char * szMask){
for(DWORD i=0; i < dwLen; i++)
if( Match( (BYTE*)( dwAddress+i ),bMask,szMask) )
return (DWORD)(dwAddress+i);
return 0;
}

DWORD WINAPI Loopely(LPVOID param){
DWORD PFNORMAL = Pattern(0x400000,0x500000,(PBYTE)"\x7D\x3F\x33\x33\x73\x3F\x9A\x99","xxxxxx");
while(1){
if(GetAsyncKeyState(VK_F3)&amp;1){
MEMwrite((void*)PFNORMAL, (PBYTE)"\x00",1 );
MessageBeep(MB_ICONINFORMATION);
}
Sleep(50);
}
return 0;
}
BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
if (dwReason == DLL_PROCESS_ATTACH)
{
DisableThreadLibraryCalls(hDll);
if(dwReason == DLL_PROCESS_ATTACH){
MessageBeep(MB_ICONINFORMATION);
CreateThread(0, 0, (LPTHREAD_START_ROUTINE)Loopely, 0, 0, 0);
}
else if(dwReason == DLL_PROCESS_DETACH)
{
}
}
return TRUE;
}
 
R

rcd

3 SD
Level 2
Pembuat thread
Trainers said:
Kode: 
#include <fstream>
#include <Windows.h>
#include <stdio.h>
LPTSTR dwModule = "Audition.exe";
DWORD dwStartAddress, ResultAOB =0;

void MEMwrite(void *adr, void *ptr, int size)
{
DWORD OldProtection;
VirtualProtect(adr,size,PAGE_EXECUTE_READWRITE, &OldProtection);
memcpy(adr,ptr,size);
VirtualProtect(adr,size,OldProtection, &OldProtection);
}

bool Match(const BYTE* pData, const BYTE* bMask, const char* szMask){
for(;*szMask;++szMask,++pData,++bMask)
if(*szMask=='x' && *pData!=*bMask )
return false;
return (*szMask) == NULL;
}
DWORD Pattern(DWORD dwAddress,DWORD dwLen,BYTE *bMask,char * szMask){
for(DWORD i=0; i < dwLen; i++)
if( Match( (BYTE*)( dwAddress+i ),bMask,szMask) )
return (DWORD)(dwAddress+i);
return 0;
}
int __stdcall PFON(void){
dwStartAddress = 0x400000;
do {
dwStartAddress = (DWORD)GetModuleHandle(dwModule);
Sleep(50);
}while(!dwStartAddress);
DWORD dwSize = 0x500000;
DWORD PFNORMAL = Pattern(dwStartAddress,dwSize,(PBYTE)"\x7D\x3F\x33\x33\x73\x3F\x9A\x99","xxxxxx");
DWORD GetADR = PFNORMAL - dwStartAddress;
MEMwrite((void*)GetADR, (PBYTE)"\x00",1 );
return 0;
}
DWORD WINAPI Loopely(LPVOID param){
while(1){
if(GetAsyncKeyState(VK_F3)&1){
PFON();
MessageBeep(MB_ICONINFORMATION);
}
Sleep(50);
}
return 0;
}
BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
if (dwReason == DLL_PROCESS_ATTACH)
{
DisableThreadLibraryCalls(hDll);
if(dwReason == DLL_PROCESS_ATTACH){
MessageBeep(MB_ICONINFORMATION);
CreateThread(0, 0, (LPTHREAD_START_ROUTINE)Loopely, 0, 0, 0);
}
else if(dwReason == DLL_PROCESS_DETACH)
{
}
}
return TRUE;
}
Pada waktu tekan hotkey = langsung DC game nya...


pencerahan gan.
Klik untuk membuka…
Pasti ada yang salah.

1. dwSize melebihi besar size target coba aja ganti ke 0x80000

2. Hasil pattern yang salah sehingga menyebabkan logging mengembalikan nilai 0x0 dan ente menggunakan memwrite hasil logging (0x0) maka terjadilah crash

3. Invalid Address pada patching
 
D

Darkgasper

TK A
Level 1
Trainers said:
Kode: 
#include <fstream>
#include <Windows.h>
#include <stdio.h>
LPTSTR dwModule = "Audition.exe";
DWORD dwStartAddress, ResultAOB =0;

void MEMwrite(void *adr, void *ptr, int size)
{
DWORD OldProtection;
VirtualProtect(adr,size,PAGE_EXECUTE_READWRITE, &amp;OldProtection);
memcpy(adr,ptr,size);
VirtualProtect(adr,size,OldProtection, &amp;OldProtection);
}

bool Match(const BYTE* pData, const BYTE* bMask, const char* szMask){
for(;*szMask;++szMask,++pData,++bMask)
if(*szMask=='x' &amp;&amp; *pData!=*bMask )
return false;
return (*szMask) == NULL;
}
DWORD Pattern(DWORD dwAddress,DWORD dwLen,BYTE *bMask,char * szMask){
for(DWORD i=0; i < dwLen; i++)
if( Match( (BYTE*)( dwAddress+i ),bMask,szMask) )
return (DWORD)(dwAddress+i);
return 0;
}
int __stdcall PFON(void){
dwStartAddress = 0x400000;
do {
dwStartAddress = (DWORD)GetModuleHandle(dwModule);
Sleep(50);
}while(!dwStartAddress);
DWORD dwSize = 0x500000;
DWORD PFNORMAL = Pattern(dwStartAddress,dwSize,(PBYTE)"\x7D\x3F\x33\x33\x73\x3F\x9A\x99","xxxxxx");
DWORD GetADR = PFNORMAL - dwStartAddress;
MEMwrite((void*)GetADR, (PBYTE)"\x00",1 );
return 0;
}
DWORD WINAPI Loopely(LPVOID param){
while(1){
if(GetAsyncKeyState(VK_F3)&amp;1){
PFON();
MessageBeep(MB_ICONINFORMATION);
}
Sleep(50);
}
return 0;
}
BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
if (dwReason == DLL_PROCESS_ATTACH)
{
DisableThreadLibraryCalls(hDll);
if(dwReason == DLL_PROCESS_ATTACH){
MessageBeep(MB_ICONINFORMATION);
CreateThread(0, 0, (LPTHREAD_START_ROUTINE)Loopely, 0, 0, 0);
}
else if(dwReason == DLL_PROCESS_DETACH)
{
}
}
return TRUE;
}
Pada waktu tekan hotkey = langsung DC game nya...


pencerahan gan.
Klik untuk membuka…
kalo menurut wa yg salah ada pada jumlah mask nya,
harusnya 'x' nya 8 bukan 6, karena jumlah AOB nya jga ada 8,

coba ubah menjadi :
DWORD PFNORMAL = Pattern(dwStartAddress,dwSize,(PBYTE)"\x7D\x3F\x33\x33\x73\x3F\x9A\x99","xxxxxxxx");
 
S

sarka500

Belum Sekolah
Level 0
hallo gan ada yang bisa bantu ,saya mau tanya bagai mana cara mencari AOB point blank via ollydbg atau IDA
terimakasih gan
 
V

ventox890

Belum Sekolah
Level 0
gan numpang nanya , kok ane bikin autologger setelah di inject keluar ginian ya

Ane make function WriteLog gan, kayaknya ada masalah di situnya, mohon bimbingannya :D
 
F

Febirianto

PAUD
Level 0
kalau mau membuat Address Logger di game PB gimana yah ???
kok saya masih bingung dengna OllyDbg ???
mohon solusinya om :)
 
SilitBurik

SilitBurik

1 SD
Level 2
Level 1
Cukup simple dan mudah di pelajari, sangat membantu sekali untuk menemukan Address yang ingin kita cari :)
 
syh1st

syh1st

PAUD
Level 0
Om RCD Atau Siapa yang paham
Saya mau tanya. Bagaimana mencari sygnature
cara yang lebih detail.
Saya mohon dengan sangat informasi nya

Terima kasih:)
 
F

Febirianto

PAUD
Level 0
gan mau tanya dong ini FindPattern gimana yah ??

0075E9C4 6A 00 PUSH 0
0075E9C6 8B0D 7C6DD800 MOV ECX,DWORD PTR DS:[D86D7C]
0075E9CC E8 9F1E0200 CALL 00780870
0075E9D1 6A 0C PUSH 0C


CALL 00780870

yang di panggil itu om 0x780870
 
Kamu harus masuk atau daftar untuk membalas di sini.
Atas