Punkbuster Strings

Originally Posted by *Marneus901*

lol, no it was yours, you forgot a ) in your if statement

Code:

    if(strcmp((char*)Dest[2], """))
    strcpy(Dest,""Dw"WR_US_18_2692364498" 9");

btw, you had to typecast the Dest[2], because it was a char then, rather than comparing with a char*.

XD I know =X Which is why I tried to remove it before you saw it, but you obviously already saw it.

Lol, Well, I'm seriously heading to bed, later.

well stupid me, went to go play with only freezing addresses, didnt use logger, and got banned for a multihack... i think i have one more usuable email T.T

do we have anymore ideas for as to finding out the first part of the string for the pbcl.dll md5 hash check?

Originally Posted by *Marneus901*

Lets try and figure out this :

B c 289B0 FAFFFF0074068B9D xxxxxxxxxxxxxxxxxxxyyyyxxxxxxxxyyyyxxxxxxxxxxxxxxx xxxxxx 8C297D47C4503265B082D336B43DD42C

I quote

// if the pszCheckString's first char is |: Files white list check
// if the pszCheckString's first char is B: Cvar check
// if the pszCheckString's first char is N: MD5 check
// if the pszCheckString's first char is E: Key bind check

This must be the Cvar check.

Originally Posted by *Marneus901*

GuerrillaMail.com » Disposable Temporary E-Mail Address use this for making emails for bypass test accounts

thank you juppeli!

anyways, Jetamay, Cvars are for like freezing values right (or checks those) correct?

Not too sure, possibly.

I did a little bit of research, I think I found out:
Bmk GetTickCount 5 c9c9c9c9c9 (PBCL's MD5 Hash =0 0=)

lol that might be why that string keeps popping up? LOL time for testing!!!

he original MD5 of the PBCL.dll is - f2222ea29755b78dc00ce40db164a722

heres my if statement...

Code:

if(strcmp(Dest, "Bmk GetTickCount 5 c9c9c9c9c9"))
strcpy(Dest, "Bmk GetTickCount 5 c9c9c9c9c9 f2222ea29755b78dc00ce40db164a722");

Originally Posted by *Marneus901*

lol that might be why that string keeps popping up? LOL time for testing!!!

heres my if statement...

Code:

if(strcmp(Dest, "Bmk GetTickCount 5 c9c9c9c9c9"))
strcpy(Dest, "Bmk GetTickCount 5 c9c9c9c9c9 f2222ea29755b78dc00ce40db164a722");

use strstr, because if you change pbcl, you'll get
Bmk GetTickCount 5 c9c9c9c9c9 Some other MD5 checksum.

strcmp will return false if its not exactly the same,however strstr will return true if a part of the string is in dest.

Here's what I got

Code:

if(strstr(Dest,"Bmk GetTickCount 5 c9c9c9c9c9"))
strcpy(Dest, "Bmk GetTickCount 5 c9c9c9c9c9 F2222EA29755B78DC00CE40DB164A722");

o, well, got another temp account banned. I checked the reason, it was "Ignoring Queries" or whatever that means... ill try google...

blah, im not banned. just d/ced

Description:
This violation occurs when vital information is lost while being sent between the PunkBuster client and server. This is due to dropped packets often caused by limited bandwidth, a bad connection, or faulty routing.
Example:
[MM.DD.YYYY HH:MM:SS] VIOLATION (IGNORING QUERIES) #9003: NAME (slot #X) Losing Key Packets [GUID(-) PL.AY.ER.IP:PORT]

Never Bannable
Description:
This violation occurs when vital information is lost while being sent between the PunkBuster client and server. This is due to dropped packets often caused by limited bandwidth, a bad connection, or faulty routing.
Example:
[MM.DD.YYYY HH:MM:SS] VIOLATION (IGNORING QUERIES) #9003: NAME (slot #X) Losing Key Packets [GUID(-) PL.AY.ER.IP:PORT]

Never Bannable

Heres the rest of the PB reasons...
PunkBuster Explanations :: Americas Army Account History

I understand now what you were saying regarding strstr, ill retry because yea... duh...

D: We should try hooking the sockets? I really don't want to get into that, lets try and assure there is no other solution, if there isn't, we may have to hook the incoming and out coming sockets, starting with logging them.

bleh, really dont wanna get into socket and BS like that, never tried it, dont really want to either...

but i retried with the strstr() that you said, and i got IGNORING QUERIES #9006

who the hell has acually bypassed PunkBuster? this is really frustrating LOL...

---------------------------------

IEAX : 14878020

count : 10
STRING : J(†pnone

{{}}PATCHED WITH{{}}
IEAX : 14878020

count : 10
STRING : J(†pnone
---------------------------------

IEAX : 14878020

count : 10
STRING : J(†pnone

{{}}PATCHED WITH{{}}
IEAX : 14878020

count : 10
STRING : J(†pnone
---------------------------------

IEAX : 14878020

count : 10
STRING : J(†pnone

{{}}PATCHED WITH{{}}
IEAX : 14878020

count : 10
STRING : J(†pnone
---------------------------------

IEAX : 14878020

count : 10
STRING : J(†pnone

{{}}PATCHED WITH{{}}
IEAX : 14878020

count : 10
STRING : J(†pnone
---------------------------------

IEAX : 14878020

count : 10
STRING : J(†pnone

{{}}PATCHED WITH{{}}
IEAX : 14878020

count : 10
STRING : J(†pnone
---------------------------------

IEAX : 14878020

count : 10
STRING : J(†pnone

{{}}PATCHED WITH{{}}
IEAX : 14878020

count : 10
STRING : J(†pnone
---------------------------------

IEAX : 14878020

count : 10
STRING : J(†pnone

{{}}PATCHED WITH{{}}
IEAX : 14878020

count : 10
STRING : J(†pnone
---------------------------------

IEAX : 14878020

count : 10
STRING : J(†pnone

{{}}PATCHED WITH{{}}
IEAX : 14878020

count : 10
STRING : J(†pnone
---------------------------------

IEAX : 14878020

count : 10
STRING : J(†pnone

{{}}PATCHED WITH{{}}
IEAX : 14878020

count : 10
STRING : J(†pnone
---------------------------------

IEAX : 14878020

count : 10
STRING : J(†pnone

{{}}PATCHED WITH{{}}
IEAX : 14878020

count : 10
STRING : J(†pnone
---------------------------------

IEAX : 14878020

count : 10
STRING : J(†pnone

{{}}PATCHED WITH{{}}
IEAX : 14878020

count : 10
STRING : J(†pnone
---------------------------------

The thing is, where not getting to the next command, string, because the server isn't receiving anything from the client, so its not requesting anything but the thing it just requested, I think we have to send our results to the server some how in order to reach the next step. Which is why we may need to log the sockets and see what the fuck is going on =/

bleh i got somewere... change the strcmp with the WarRock.exe MD5 check, to strstr...
you still get banned, but i lasted about 4-5 rounds. Heres my log
btw, it was a reason not even listed under the violations page!!!!
so now, no need for sockets just yet, and hopefully not at all...

PB HACK #132045
http://pastebin.com/f591fe2a3

Originally Posted by *Marneus901*

You mean the CRC check? I didn't get one down for warrocks MD5 check, What are you replacing with what?

Remember how we were saying this string was bad?

B c 55FA0 E82B6F0100594050 xxxxxxxxxxyyyyxxxxxxxxxxxxxxxxxxxxxxxxxx F7D7C2E305C952605E179120A79DA84A

That string is GOOD
but this string is BAD

B c 55FA0 E82B6F0100594050 xxxxxxxxxxyyyyxxxxxxxxxxxxxxxxxxxxxxxxxx 0FA842A687759B5E1B3A80B2D1DF5F03

dunno what its checking. But yeah...
ill try just returning the good one...

Code:

	//Unknown String
	if(strstr(Dest, "B c 55FA0 E82B6F0100594050 xxxxxxxxxxyyyyxxxxxxxxxxxxxxxxxxxxxxxxxx"))
		strcpy(Dest, "B c 55FA0 E82B6F0100594050 xxxxxxxxxxyyyyxxxxxxxxxxxxxxxxxxxxxxxxxx F7D7C2E305C952605E179120A79DA84A");
	//-----------------------------------------

but as for the WarRock.exe MD5 hash check... here ya go...

Code:

	//This string is for WarRock.exe MD5 check.
	if(strstr(Dest, ""Dw"WR_US_18_"))strcpy(Dest,""Dw"WR_US_18_2692364498" 9");
	//-----------------------------------------

-------------------------------------

With the Unknown string, dunno if it worked or not T.T
I played a game for a couple rounds, the game ended, as soon as i hit ready, or hit the lobby, i got banned, same reason PB HACK #132045

log T.T

Code:

B+200000 100000 1424129BB6A2F91BDA71D849F6F0A5EE
AMy dx C:WINDOWSsystem32d3d8.dll size=1179648 md5=42803EC60803C1A0754671E9183458F1
B+300000 100000 BF26F6099AB0BEA2DDB01B7E0FABCEA0
B+400000 91fff 822ED0618B62EF08A5E517568E97076B
B* d3d8.dll 10347  1_8bff558bec6aff6858c1aa6d64a10000
Bmk OpenProcess 21 518D04245068********6A00FF15********50FF15 8bff558bec83ec208b45108945f88b45
Bmk GetTickCount 5 c9c9c9c9c9 ba0000fe7f8b02f762040facd018c390
B	c 55FA0 E82B6F0100594050 xxxxxxxxxxyyyyxxxxxxxxxxxxxxxxxxxxxxxxxx E84B9F358CDD499936FDD0A082AE8EE4

EDIT: blah, i know why, i was returning the wrong amount of spaces with the unknown string T.T (i put a space rather than a tab)

Ok, retried using a TAB
immediate ban as soon as i joined a game after hitting my hotkey...

Code:

B+200000 100000 1424129BB6A2F91BDA71D849F6F0A5EE
AMy dx C:WINDOWSsystem32d3d8.dll size=1179648 md5=42803EC60803C1A0754671E9183458F1
B+300000 100000 BF26F6099AB0BEA2DDB01B7E0FABCEA0
B+400000 91fff 822ED0618B62EF08A5E517568E97076B
B* d3d8.dll 10347  1_8bff558bec6aff6858c1aa6d64a10000
Bmk OpenProcess 21 518D04245068********6A00FF15********50FF15 8bff558bec83ec208b45108945f88b45
Bmk GetTickCount 5 c9c9c9c9c9 ba0000fe7f8b02f762040facd018c390
B	c 55FA0 E82B6F0100594050 xxxxxxxxxxyyyyxxxxxxxxxxxxxxxxxxxxxxxxxx E84B9F358CDD499936FDD0A082AE8EE4
B	c 55FA0 E82B6F0100594050 xxxxxxxxxxyyyyxxxxxxxxxxxxxxxxxxxxxxxxxx 91E67C726A8869669D6AA794174DD5CF

Punkbuster Strings

Post a Reply

Similar Threads

Tags for this Thread