Counter Strike Source Trainer Example

[bluerein]

As the title says...Shows you how to poke static address

Just includes :

consistency bypass and replicated cvar bypass

This is my first so its probabily abit scrappy but never the less its a working cs:s hack and VAC proof if you follow the instructions in the info!!

Source

expandcollapse popup

; #CSS Simple bypass hack# ====================================================================================================

================
; Name...........: CSS Simple bypass hack
; Description ...: Bypasses consistency and replicated cvars in counter strike source
; Author ........: m-tek
; Homepage.......: www.supex0.co.uk/xforums/
; Remarks .......: My First Autoit trainer!!
; Vac Status ....: Vac Proof of 24/09/2008
; Example .......; Yes
; ====================================================================================================

===========================
 #NoTrayIcon
 #include <NomadMemory.au3>
 #include <GUIConstants.au3>
 #include <GUIConstantsEx.au3>
 #include <Misc.au3>
 #include <Array.au3>
 #include <GUIConstants.au3>
 #include <WindowsConstants.au3>
 #Include <Constants.au3>
 #include <EditConstants.au3>
 
 Opt("GuiOnEventMode", 1)
;hotkeys
 HotKeySet("{ESC}","_exit")
 HotKeySet("{F1}","consistency")
 HotKeySet("{F2}","svcheats")
 
;variables
 $consistency=1
 $svcheats=1
 $GuiWidth = 175
 $GuiHeight = 300
 $xPos = (@DesktopWidth - $GuiWidth) / 2
 $yPos = (@DesktopHeight - $GuiHeight) / 2
 
;does the game exist?
 If ProcessExists("hl2.exe") Then
     $exist=1
     else 
     $exist=0
 EndIf
 if $exist=0 then
         MsgBox(0, "Error", "Please start CS:S first!!")
         exit
 EndIf
 
 
;sv_consistency bypass
 Func consistency()
 if $consistency=1 then
    $ID=_MemoryOpen(ProcessExists("hl2.exe"))
    $Address=0x2004BFE5
    _MemoryWrite($Address, $ID, 1048584427)
    _MemoryClose($ID)
     GUICtrlCreateInput("Consistency Bypass On", 5, 270, 295, 20, $ES_READONLY,  $WS_EX_TRANSPARENT)
     GUICtrlSetBkColor(-1, 0x000000)
     GUICtrlSetColor(-1, 0xff0000)
 ElseIf $consistency=0 Then
    $ID=_MemoryOpen(ProcessExists("hl2.exe"))
    $Address=0x2004BFE5
    _MemoryWrite($Address, $ID, 1048584308)
    _MemoryClose($ID)
    GUICtrlCreateInput("Consistency Bypass Off", 5, 270, 295, 20, $ES_READONLY, $WS_EX_TRANSPARENT)
    GUICtrlSetBkColor(-1, 0x000000)
    GUICtrlSetColor(-1, 0xff0000)
 EndIf
  If $consistency = 1 Then
     $consistency = 0
 Else
     $consistency = 1
 EndIf
 EndFunc
 
;Replicated cvar bypass
  Func svcheats()
 if $svcheats=1 then
    $ID=_MemoryOpen(ProcessExists("hl2.exe"))
    $Address=0x20074C30
    _MemoryWrite($Address, $ID, 1956724971)
    _MemoryClose($ID)
    GUICtrlCreateInput("Sv_cheats Bypass On", 5, 270, 295, 20, $ES_READONLY, $WS_EX_TRANSPARENT)
    GUICtrlSetBkColor(-1, 0x000000)
    GUICtrlSetColor(-1, 0xff0000)
 ElseIf $svcheats=0 Then
    $ID=_MemoryOpen(ProcessExists("hl2.exe"))
    $Address=0x20074C30
    _MemoryWrite($Address, $ID, 1956724853)
    _MemoryClose($ID)   
    GUICtrlCreateInput("Sv_cheats Bypass Off", 5, 270, 3295, 20, $ES_READONLY, $WS_EX_TRANSPARENT)
    GUICtrlSetBkColor(-1, 0x000000)
    GUICtrlSetColor(-1, 0xff0000)
 EndIf
  If $svcheats = 1 Then
     $svcheats = 0
 Else
     $svcheats = 1
 EndIf
 EndFunc
  
 ;exit
  Func _exit()
      Exit
  EndFunc
 ;info
   Func info()
 MsgBox(0, "Autoit cs:s Hack Example", "Vac Proof as of 24/09/08" & @CRLF & "Coded By m-tek"& @CRLF & "************"& @CRLF & "Useage"& @CRLF & "**********"& @CRLF & "Start CS:S"& @CRLF & "Minimize CS:S"& @CRLF & "Start Hack"& @CRLF & "Choose features"& @CRLF & "Close Hack"& @CRLF & "Maximize CS:S"& @CRLF & ""& @CRLF & "Start Owning"& @CRLF & ""& @CRLF & "Get Vac Proof VIP Hacks"& @CRLF & "@ supex0.co.uk"& @CRLF & ""& @CRLF & "(c)2008"& @CRLF & ""& @CRLF & ""& @CRLF & ""& @CRLF & "")
 EndFunc
  
  
 ;<<------lets make the gui
 
 GUICreate("Gui", $GuiWidth, $GuiHeight, $xPos, $yPos, $WS_POPUP)
 GUICtrlCreateLabel(" ", 0, 0, 175, 150, $ES_CENTER, $GUI_WS_EX_PARENTDRAG)
 GUICtrlCreatePic("back.bmp", 0, 0, 175, 300)
 GuiCtrlSetState(-1,$GUI_DISABLE)
 GUISetBkColor(000000)
 GUICtrlCreateInput("Please make a selection....", 5, 270, 295, 20, $ES_READONLY, $WS_EX_TRANSPARENT)
 GUICtrlSetBkColor(-1, 0x000000)
 GUICtrlSetColor(-1, 0xff0000)
 GuiCtrlSetState(-1,$GUI_DISABLE)
 
 
 $Button1 = GUICtrlCreateButton ( "Exit", 130, 240 ,40,20 )
 GUICtrlSetOnEvent($Button1, "_exit")
 GUISetState()
 
 $Button2 = GUICtrlCreateButton ( "Consistency", 5, 210 ,100 ,20 )
 GUICtrlSetOnEvent($Button2, "consistency")
 GUISetState()
 
 $Button3 = GUICtrlCreateButton ( "Cvar Bypass", 5, 240 ,100 ,20 )
 GUICtrlSetOnEvent($Button3, "svcheats")
 GUISetState()
 
 $Button4 = GUICtrlCreateButton ( "Info", 130, 210 ,40,20 )
 GUICtrlSetOnEvent($Button4, "info")
 GUISetState()
;gui end------>>
 
 While 1
     Sleep(100)
     wend

trainer.rar

[EvAsion]

And you think its vac proof because.. you said? How do you know a memory write won't trigger? have you used it in a vac server.. and waited a few weeks to confirm its vac proof? i doubt it..

[BillLuvsU]

I can see your new to the game hacking scene. Its almost become standard to intercept API calls to memory functions and redirect the to a dll dynamicaly generated by the program. Yur directly attacking the game process and that is amazingly detectable, enjoy your ban.

[bluerein]

new to the hacking scene !!!!

Well if your familiar with css then youd know who I am .....

www.supex0.co.uk.....

maker of the legendary coconut memory hack...

Anyway this isnt about it being vac proof its an example of how to make a trainer .....

As I tell my customers "if you dont beleive in our work ....dont use it"........

regards m-tek!!

Edited September 25, 2008 by bluerein

[Izebize]

This looks great!

How can I detect memory addresses?

I want to make a little script, wich sends to the game the "condump; clear" command. Is it possible to do this with cs1.6?

You have included GUIConstants.au3 twice

Edited September 25, 2008 by Izebize

[jvanegmond]

new to the hacking scene !!!!

Well if your familiar with css then youd know who I am .....

lol, I play CS:S all the time, but I've never heard of you.

Nice ego.

[bluerein]

I didnt ask if you played it all the time now did I!!

@ Izebize

im not familiar with cs 1.6 ...whats the condump; clear command do??

Edited September 25, 2008 by bluerein

[jvanegmond]

I didnt ask if you played it all the time now did I!!

I only said your esteemed celebrity status is not so much as you think.

[Izebize]

im not familiar with cs 1.6 ...whats the condump; clear command do??

condump saves the console to a text file, and clear clears the console

[Distrophy]

How did you determine which memory addresses to modify?

[bluerein]

How did you determine which memory addresses to modify?

You need to use cheat engine and/or ollydbug.... heres a radar hack tutorial example...

Radarhack -Mehod 1(using ce)
===================

1 Create a server with 1 bot
2 start server and type "bot_stop 1" in console (bot is now frozen)
3 Start cheat engine and hook hl2.exe
4 first scan unkown value with "Also scan read only memory" checked
5 walk up to bot and aim at him, notice he is visible on radar
6 scan now for "changed value"
7 look away from him untill he isnt visible on radar
8 scan for "changed value"
9 keep repeating steps 5 - 8 untill you have 10 or so address
10 Now aim at him again untill hes visible on radar
11 Bring the address down into the bottom box
12 freeze them all
13 now look away and the player should still be visible
14 now unfreeze 1 at a time untill the player is not visible
15 you have an address
16 right click the address and click "find out what access this address"
17 Theres about 3 or 4 address (from what I remember)
18 Now nop these address one by one untill the player is visible again
19 You now have your radarhack address

Method 2(using ce)
=========


You go T or CT (anything you like).
Then type in the console following to spawn a bot which won't move:
"sv_cheats 1;bot_quota 1;bot_zombie 1"
After you've done that, get infront of it, and Search for it's team value(2 is T, 3 is CT) when you can see the bot at your radar.
Now, look away and wait some time untill you can't see the enemy on your radar anymore, then search "0". Repeat those steps untill you have like 10 or 20 addresses.
Then, get infront of the enemy and Freeze all addresses. Then, go away and you should see that the enemy is still shown at the radar. Now, unfreeze one address and 
wait some time. If nothing happens, repeat these steps untill you've found the right one. Then, do a rightclick at that address and choose "Find out what writes to 
this address", then Simply nop the 3byte Value(XX XX XX XX XX XX to 90 90 90 90 90 90).