AAO25.com

America's Army => General Chat => Topic started by: Crusader on Wednesday, February 29, 2012, 11:22:06 AM

Title: New idea for better hacking security
Post by: Crusader on Wednesday, February 29, 2012, 11:22:06 AM
an idea i had before i quited for the hackhunter was having a client sided package checking for interactions. This will totally destroy all posibilities to load a Uscript bot since these make extra internaction.

You basicly call interactionmaster and itterate trough all the interactions. This will give a list of all the interactions. Then you check if there is deviation from the interaction. I will try to write to code tonight
Title: Re: New idea for better hacking security
Post by: Jonnym on Wednesday, February 29, 2012, 11:24:09 AM
We currently have this running on the clients..
Is this what you mean?

Code: [Select]
For(I=0;I<MyController.Player.LocalInteractions.Length;I++)
        {
message = String(MyController.Player.LocalInteractions[i]);
Split(message,".",Parts);
if( (Parts[1] ~= "StreamInteraction") || (Parts[1] ~= "SplashInteraction"))
{
}
else
{
MyController.ConsoleCommand("mutate ihacknow "$Parts[1]);
bbanned = true;
}
}
Title: Re: New idea for better hacking security
Post by: Crusader on Wednesday, February 29, 2012, 11:26:56 AM
yep thats what i meant. nice you guys already implemented it.
Title: Re: New idea for better hacking security
Post by: Possessed on Wednesday, February 29, 2012, 19:10:40 PM
using pokes with a bind + text file doesn't write POKED in console, it does write POKED in ArmyOps.log.
and about editob...?
Title: Re: New idea for better hacking security
Post by: Spanky on Wednesday, February 29, 2012, 19:14:20 PM
using pokes with a bind + text file doesn't write POKED in console, it does write POKED in ArmyOps.log.
and about editob...?


I've been meaning to ask Jonny about editobj You'll still get kicked for values via PB but there should be a duplicate anti-poke mod for editobj.
Title: Re: New idea for better hacking security
Post by: Jonnym on Thursday, March 01, 2012, 04:01:46 AM
It don't really matter if you get pokes to work or editobj to work you will still get kicked by other checks for the variabled that have been changed and then your banned and don't get any second chances.
Title: Re: New idea for better hacking security
Post by: Jonnym on Thursday, March 01, 2012, 04:21:28 AM
Quote
You'll still get kicked for values via PB

PB probably won't pick this sort of thing up, but we have a few other things going on in the background that will pick up a variable changed by pokes or editobj in a matter of seconds.
Title: Re: New idea for better hacking security
Post by: Crusader on Thursday, March 01, 2012, 04:29:02 AM
I have analized all the packages saved by assist and i don;t see it. Did i miss the norecoil check? which .u file is it in. also another thing. All these modules can be destroyed using the destroy function by the bot making all software useless. you should add a no destroy varialble to the default properties of the package.
Title: Re: New idea for better hacking security
Post by: Jonnym on Thursday, March 01, 2012, 04:34:48 AM
Its too late for that now...
I'm not doing anymore updates for a while.
Title: Re: New idea for better hacking security
Post by: Crusader on Saturday, March 03, 2012, 07:47:51 AM
i was trying (for education purposes) to set a new hwid by sniffing the udp queries and replacing it with a new hwid. Need to refresh my reverse enginering to fully understnand some things so i thought i will just ask the things i didn;t understand.

i made a program which dos sniff the udp info but was just wondering what the 4the value of the playerlogin request is. is it a encryption hash for the hwid? because it remains constant. i already tried comparing it with hashed ips and hwids but no luck yet. finding what it is.

program:http://www.survivaltas.com/aaoudpreader.zip  (don't worry it dosn't replace the hwid. i would never release something like that)

playerlogin
   -{DG}-_Crusade //username
   ***** //Pass
   WX6icxH2h85syZ4ZqrlDMOMKmVCA //hwid
   7Cp45KSd0MDsJh6DL+BnbpNLSJ4=   <--- what is this? a hash of the hwid ?? or the ip?
playerloginok
   -{DG}-_Crusade                 //username
   084                            //honor
   42975                          //next honor
   813789                         //aaoid
   5t5Wt}m}Ff                     //token
Title: Re: New idea for better hacking security
Post by: Jared on Saturday, March 03, 2012, 11:23:28 AM
Crusade I kno it's a bit off topic but us it possible to replace pb guids in the pb_power list with aao ids?
Title: Re: New idea for better hacking security
Post by: Crusader on Saturday, March 03, 2012, 12:07:48 PM
I think its possible but currently i wouldn;t know how.