HOW TO BYPASS IN HACKSHIELD

As i know K2 is 'really hard' working to prevent all hacks from working. Let's discover what they really do. I can't stop laughing xD.

K2 started to make their own anticheat, that should detect all vip hacks. That is the lamest code what i saw.


its looking like this:

That is the string detection for D3D Hook DLLs

Code:
int DetectCheatNames(someparams)
{
STRING cheats[10] = { "FastAmmo", "FastHealth", "WalkUnderwater", "SilentWalk", "AutoAmmo", "AutoMedic", "VehiclenInvisible", "Boneshot", "Antikick", "Prone", "Invisible" };

STRING bypasshs="BypassHackshield";
for (int i=0; i < 0x7FFFFFFF; i++)
{
for (int d=0; d < 11; d++)
{
if (*(STRING*) == cheats[i] )
{
return hackdetected;
}
}

if (*(STRING*)i == bypasshs && (DWORD)&bypasshs < i)
{
return hackdetected;
}
}
return 0;
}

**********: Easy Filehosting

Code listing:

That function returns 0 if hack is not detected. Idk what it's returning if cheat is detected.

Function what is calling DetectCheatNames() is looking like this:

Code:
if (DetectCheatNames(someparams) == something)
{
SendPacket(PACKET_HACK_INFO, something);
}

**********: Easy Filehosting

The packet id of this is 0x6000 = 24576 so the packet is looking smillar to this:

Code:
130995232 24576 something

It is very possible they are also sending checksums to the server with this packet.

To bypass this exclusive and no 1. anticheat just nop the call at 0x4F7DB8
or
use very stable method like:

Code:
char SWALKTEXT[11];
SWALKTEXT[0] = 'S';
SWALKTEXT[1] = 'i';
SWALKTEXT[2] = 'l';
SWALKTEXT[3] = 'e';
SWALKTEXT[4] = 'n';
SWALKTEXT[5] = 't';
SWALKTEXT[6] = 'W';
SWALKTEXT[7] = 'a';
SWALKTEXT[8] = 'l';
SWALKTEXT[9] = 'k';
SWALKTEXT[10] = 0;

Have Fun !