Elimde bir kaynak var fakat biraz şifrelenmiş ve kırılmış gibi gözüküyor, hataları eksikleri bulunuyor. bunu yardımınla çözmeyi planlıyorum sen veya herhangi bilgili biri bana discord adresini atabilir mi? yardımcı olacak sağlam insanlar.
std::wstring s2ws(const std::string& s) {
std::string curLocale = setlocale(LC_ALL, "");
const char* _Source = s.c_str();
size_t _Dsize = mbstowcs(NULL, _Source, 0) + 1;
wchar_t* _Dest = new wchar_t[_Dsize];
wmemset(_Dest, 0, _Dsize);
mbstowcs(_Dest, _Source, _Dsize);
std::wstring result = _Dest;
delete[]_Dest;
setlocale(LC_ALL, curLocale.c_str());
return result;
}DWORD_PTR FindProcessId2(const std::string processName)
{
PROCESSENTRY32 processInfo;
processInfo.dwSize = sizeof(processInfo);
HANDLE processesSnapshot = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, NULL);
if (processesSnapshot == INVALID_HANDLE_VALUE)
return 0;
Process32First(processesSnapshot, &processInfo);
if (!processName.compare(processInfo.szExeFile))
{
CloseHandle(processesSnapshot);
return processInfo.th32ProcessID;
}
while (Process32Next(processesSnapshot, &processInfo))
{
if (!processName.compare(processInfo.szExeFile))
{
CloseHandle(processesSnapshot);
return processInfo.th32ProcessID;
}
}
CloseHandle(processesSnapshot);
return 0;
}void driverdetect()
{
const TCHAR* devices[] = {
_T("\\\\.\\NiGgEr"),
_T("\\\\.\\KsDumper")
_T("\\\\.\\Driver")
};
WORD iLength = sizeof(devices) / sizeof(devices[0]);
for (int i = 0; i < iLength; i++)
{
HANDLE hFile = CreateFile(devices[i], GENERIC_READ, FILE_SHARE_READ, NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL);
TCHAR msg[256] = _T("");
if (hFile != INVALID_HANDLE_VALUE) {
system(XorStr("start cmd /c START CMD /C \"COLOR C && TITLE Protection && ECHO KsDumper Detected. && TIMEOUT 10 >nul").c_str());
KeyAuthApp.log("KsDumper Detected");
exit(0);
}
else
{
}
}
}void error(std::string msg)
{
system(("START CMD /C \"COLOR C && TITLE Protection && ECHO ERROR: " + msg + " Detected. Please close and try again. && TIMEOUT 10 >nul").c_str());
KeyAuthApp.log("" + msg + " Detected");
exit(0);
}void exedetect()
{
if (FindProcessId2(XorStr("KsDumperClient.exe")) != 0)
{
error(XorStr("KsDumper"));
}
else if (FindProcessId2(XorStr("HTTPDebuggerUI.exe")) != 0)
{
error(XorStr("HTTP Debugger"));
}
else if (FindProcessId2(XorStr("HTTPDebuggerSvc.exe")) != 0)
{
error(XorStr("HTTP Debugger Service"));
}
else if (FindProcessId2(XorStr("FolderChangesView.exe")) != 0)
{
error(XorStr("FolderChangesView"));
}
else if (FindProcessId2(XorStr("FileAccessErrorView.exe")) != 0)
{
error(XorStr("FileAccessErrorView"));
}
else if (FindProcessId2(XorStr("FileActivityWatch.exe")) != 0)
{
error(XorStr("FileActivityWatch"));
}
else if (FindProcessId2(XorStr("ProcessHacker.exe")) != 0)
{
error(XorStr("Process Hacker"));
}
else if (FindProcessId2(XorStr("procmon.exe")) != 0)
{
error(XorStr("Process Monitor"));
}
else if (FindProcessId2(XorStr("idaq.exe")) != 0)
{
error(XorStr("IDA"));
}
else if (FindProcessId2(XorStr("idaq64.exe")) != 0)
{
error(XorStr("IDA"));
}
else if (FindProcessId2(XorStr("idaq86.exe")) != 0)
{
error(XorStr("IDA"));
}
else if (FindProcessId2(XorStr("idaq32.exe")) != 0)
{
error(XorStr("IDA"));
}
else if (FindProcessId2(XorStr("Wireshark.exe")) != 0)
{
error(XorStr("WireShark"));
}
else if (FindProcessId2(XorStr("Fiddler.exe")) != 0)
{
error(XorStr("Fiddler"));
}
else if (FindProcessId2(XorStr("Xenos64.exe")) != 0)
{
error(XorStr("Xenos64"));
}
else if (FindProcessId2(XorStr("Cheat Engine.exe")) != 0)
{
error(XorStr("Cheat Engine"));
}
else if (FindProcessId2(XorStr("HTTP Debugger Windows Service (32 bit).exe")) != 0)
{
error(XorStr("HTTP Debugger"));
}
else if (FindProcessId2(XorStr("HTTP Debugger Windows Service (64 bit).exe")) != 0)
{
error(XorStr("HTTP Debugger"));
}
else if (FindProcessId2(XorStr("KsDumper.exe")) != 0)
{
error(XorStr("KsDumper"));
}
else if (FindProcessId2(XorStr("x64dbg.exe")) != 0)
{
error(XorStr("x64DBG"));
}
}void titledetect()
{
HWND window;
window = FindWindow(0, "Process List");
if (window)
{
error(XorStr("IDA"));
}
window = FindWindow(0, "Process List");
if (window)
{
error(XorStr("Cheat Engine"));
}
window = FindWindow(0, "Process List");
if (window)
{
error(XorStr("Cheat Engine"));
}
window = FindWindow(0, "Process List");
if (window)
{
error(XorStr("KsDumper"));
}
window = FindWindow(0, "FolderChangesView");
if (window)
{
error(XorStr("FolderChangesView"));
}
window = FindWindow(0, "HTTP Debugger");
if (window)
{
error(XorStr("HTTP Debugger"));
}
window = FindWindow(0, "Wireshark");
if (window)
{
error(XorStr("Wireshark"));
}
window = FindWindow(0, "The Wireshark Network Analyzer");
if (window)
{
error(XorStr("Wireshark"));
}
window = FindWindow(0, "Fiddler");
if (window)
{
error(XorStr("Fiddler"));
}
window = FindWindow(0, "Progress Telerik Fidder Web Debugger");
if (window)
{
error(XorStr("Fiddler"));
}
}void killdbg()
{
system(XorStr("taskkill /f /im HTTPDebuggerUI.exe >nul 2>&1").c_str());
system(XorStr("taskkill /f /im HTTPDebuggerSvc.exe >nul 2>&1").c_str());
system(XorStr("sc stop HTTPDebuggerPro >nul 2>&1").c_str());
system(XorStr("taskkill /FI \"IMAGENAME eq cheatengine*\" /IM * /F /T >nul 2>&1").c_str());
system(XorStr("taskkill /FI \"IMAGENAME eq httpdebugger*\" /IM * /F /T >nul 2>&1").c_str());
system(XorStr("taskkill /FI \"IMAGENAME eq processhacker*\" /IM * /F /T >nul 2>&1").c_str());
}void debug()
{
while (running)
{
titledetect();
killdbg();
exedetect();
driverdetect();
}
}void main()
{
std::thread anti(debug);
}Aynen öyle bir şey daha olmadıdostum bildiğim kadarıyla böyle bir şey mümkün değil, daha o kadar gelişmedi teknoloji
Demek istediğim programın açık olup olmaması değil. yanlış anlamışsınız
üşenmeyip memory read yapan kodu atmana helal olsun.
