[Tutorial] Creating exploits (NOT DLLS)

Hello. I'm not really an expert of c# or exploit-making for that matter but I've managed to make some (private) exploits. So take my tutorial with a grain of salt because I'm no Gordan Ramsay of exploit-making.

Things you should avoid

- Skidding (something many new (mostly mistakingly) developers do)

- No creativity when developing

Things you should do

- Learn some c# first! At the very least, a novice c# coder can do the maximum of what a skid does

- Learning how to optimize code (help on doing that below)

- Be more creative with what you add! While you can create a good exploit with a good UI, it doesn't mean much if there isn't something new on the table that interests users

Things you can add (mainly for people stumped on ideas)

- Animations for you WinForm (this actually requires proficiency)

- Keybinds (yes this is possible) for executing scripts (e.g. walkspeed or a GUI); which of course requires a check of if the DLL you're using is attached

- Settings files; .json files are one of the simplest ways to do so

- More customization; UI colors, border colors, position of the form when it's loaded, Etc.

Optimizing code

When it comes to coding in c#, you're probably in the range of complete novice to proficient. When it comes to novice coding, there's a few things you should know below (the basics).

Classes

For lua developers, think of it as OOP (object-oriented programming). These are basically types which help you organize informations which you can call.

--------------------

int InjectStatus = 0;

class Files {

     public static string[] Folders = { "Settings", "Scripts", "autoexec" };

}

In this example, to call the strings in the class, you must call the class.

Folders[0] doesn't return as anything unless called with Files.Folders[0]. However, InjectStatus can be called because it was declared outside of the class.

MessageBox.Show(Files.Folders[0]) //Returns as the string "Settings"

--------------------

Arrays

Arrays are basically tables in lua. They can be applied to any sort of variable (e.g. int, string, double, Etc.) and are returned with brackets (  [ ]  ). Unlike lua, the first instance of an array is called with the integer 0.

string[] Names = { "KingMan1000", "PersonFromEarth" }; //The braces (  { }  ) are what start and end the array, the ";" ends it because it gets initialized

MessageBox.Show(Names[0]) //Returns as "KingMan1000"

MessageBox.Show(Names[1]) //Returns as "PersonFromEarth"

--------------------

Methods

These are really important to know. They're basically definitions in python or functions in lua. They are called with brackets which can house parameters or return variables.

string[] Names = { "KingMan1000", "PersonFromEarth" };

void ReturnNames() { //There is no ";" because it doesn't initialize until it's called

     int Names_max = 0;

     foreach (var x in Names) { //Loops through the array Names (so 2 times because there's 2 arrays); x is a placeholder variable

          Names_max++; //Adds 1 to Names_max

     }

     string compiled_names = "";

     foreach (string Name in Names) {

          if (compiled_names == "") //If first loop

               compiled_names = Name;

          if (!compiled_names == "") //If not first loop

               compiled_names += ", " + Name //For example, if compiled_names = "WOW", WOW becomes the same thing but with the added string, so "WOW" and ", " with the name; which becomes "WOW and HELLO" for example if the Name was hello

          if (Name == Names[Names_max]) //If the name is the last name

               return compiled_names //Return the compiled names

     }

}

MessageBox.Show(ReturnNames()) //Returns as "KingMan1000, PersonFromEarth"

That's pretty much it for the most part. It doesn't take much effort to make an exploit, but it does to make a good one.