[Release] Anti-Hook

Bogie

Posts: 131

Threads: 20

Joined: Apr, 2020

Reputation: 31

Posted

so this "winapi hook" where people hook winapi functions such as messageboxa to hide watermarks from exploits like zuesx. this is gay so heres a simple piece of code that will check if the if the functions have been hooked. (looking at u tony)

bool K32Tampered()
{
	std::uintptr_t Protected[] = { std::uintptr_t(MessageBoxA), std::uintptr_t(SetConsoleTitleA), std::uintptr_t(CreateNamedPipeA), std::uintptr_t(ShellExecuteA) };

	for (std::uintptr_t Function : Protected)
		if (*reinterpret_cast<BYTE*>(Function) == 0xE9)
			return true;
	return false;
}

so to use this just have a brain

BOOL APIENTRY DllMain( HMODULE hModule, DWORD  ul_reason_for_call, LPVOID lpReserved )
{
    if (ul_reason_for_call == DLL_PROCESS_ATTACH)
    {
        if (!K32Tampered())
            CreateThread(0, 0, Exploit, 0, 0, 0);
    }
    return TRUE;
}

you could also just create a new thread and loop check because some people can just hook after the dll loads but i doubt they have the mental capacity to do so.

1

https://cdn.discordapp.com/attachments/1007601850402480158/1012351544798224424/littlekillermania.jpg

[DeletedUser]

Posts: 0

Threads: 0

Joined: ?

Reputation:

Replied

Thanks I will definitely use this.

0

0x777_

.

Posts: 2099

Threads: 10

Joined: Sep, 2020

Reputation: 62

Replied

I'll wait for Haxim to sell this aswell

1

Discord : Doctor Doom#0550

pepsi

PePsIDeveloper

Posts: 309

Threads: 6

Joined: Apr, 2021

Reputation: 16

Replied

@61632LMFAOOOOOOOOOOOO

0

Added

I cant wait to use this

0

https://cdn.discordapp.com/attachments/661621789591470090/1013919752294498314/Untitled_1366_768_px_1546_202_px_2.gif

Moon

Posts: 7441

Threads: 314

Joined: Aug, 2020

Reputation: 80

Replied

@0x777_

Wow

0

https://media.discordapp.net/attachments/769721958426083333/958120051641294848/moonBanner_2.png

Haxim

Hi

Posts: 709

Threads: 55

Joined: Feb, 2021

Reputation: 32

Replied

@0x777_ wow nice roast omfg i will sell this so hard kool kool yes very nice roast i am so offended yes i will sell omg omg omg. Yu know what's even better. You are still trying to {f word] me over LOLOL omg omg lol yes i will sell lololol. wow yes i am offended yes wait till you're old and grey and still not see me sell it over this lolol wow u went out of your way to say that which is truely comedy.

0

Why are you here

0x777_

.

Posts: 2099

Threads: 10

Joined: Sep, 2020

Reputation: 62

Replied

Lol want to know what else is truely comedy the fact you say you're going to "change" over a month ago and look what you've done just sold someone elses work.... What's even more funny is you ask the biggest paster in the community to help you.

0

Discord : Doctor Doom#0550

SkieHackerYT

Panda Development Team

Posts: 367

Threads: 88

Joined: Apr, 2019

Reputation: 33

Replied

i think only iDev can implement it on Tony's DLL ( if i'm correct )

0

https://media.discordapp.net/attachments/996322272547704845/1016492646820233246/standard.gif

https://cdn.discordapp.com/attachments/1074291934501290087/1085354909609754775/PelicanDevelopment.gif

PolarBee

Polar

Posts: 1

Threads: 0

Joined: Apr, 2021

Reputation: 0

Replied

Can you Show how to remove the ads or website that will pop up on browser when exploit is injected :)

0

iDevastate

wearedevs.net/Oxygen%20U

Posts: 10

Threads: 2

Joined: Aug, 2020

Reputation: 13

Replied

@PolarBee
dude this is code against people skidding u retard

0

Professional paster, Oxygen U winning

https://cdn.discordapp.com/attachments/917904206524981288/923252748881911828/IMG_2622.png

0x90

dingleberry#2286

Posts: 249

Threads: 26

Joined: Dec, 2020

Reputation: 28

Replied

inb4 PAGE_GUARD
LOL, inb4 they legit just patch ur function

0

https://media.discordapp.net/attachments/834551308173443142/835761259093295124/0x90.gif

[DeletedUser]

Posts: 0

Threads: 0

Joined: ?

Reputation:

Replied

@PolarBee Bro this isnt the winapi hook. This is code to prevent your own dll from people using it on your exploit.

0

Xorenos

Jimmy "The Carpet" Skovic

Posts: 46

Threads: 0

Joined: Feb, 2021

Reputation: 10

Replied

@0x90

yeah that is the flaw with all these functions lol

0

You are a feedback loop.

0x90

dingleberry#2286

Posts: 249

Threads: 26

Joined: Dec, 2020

Reputation: 28

Replied

@Xorenos

When I'm on pc I'll release like 1000 ways to bypass this, all under 10 lines

0

https://media.discordapp.net/attachments/834551308173443142/835761259093295124/0x90.gif

Users viewing this thread: