Lowest level keyboard input (using a dll)

[tom13]

Hi there,

I have heard that programs are able to notice the difference between keyboard input and AutoIT's send function. So, I was wondering, is there a lower level keyboard input dll so that applications won't be able to notice a difference and thus detect the "fake" keyboard input?

Thanks in advance.

- Tom

PS. I already have such function for the mouse, MouseMovePlus(). See:

Func _MouseMovePlus($X, $Y,$absolute = 0)
    Local $MOUSEEVENTF_MOVE = 1
    Local $MOUSEEVENTF_ABSOLUTE = 32768
    DllCall("user32.dll", "none", "mouse_event", _
            "long",  $MOUSEEVENTF_MOVE + ($absolute*$MOUSEEVENTF_ABSOLUTE), _
            "long",  $X, _
            "long",  $Y, _
            "long",  0, _
            "long",  0)
EndFunc

[YourSpace]

please correct me someone if i am wrong but i do belive the user32.dll dll has the ability to send keystrokes as well... i would reccomend you search google for something along the lines of "sending keystrokes with win32.dll"

sorry this probably isnt of much help.

[Richard Robertson]

Unless the internal structure of AutoIt has changed for the Send and MouseClick functions, they use the user32 functions. Those functions will add an extra parameter that indicates a simulated stroke. I've actually written a global hook that can differentiate between real user and software simulated input. You'd have to go lower than user32 I think.

[tom13]

Unless the internal structure of AutoIt has changed for the Send and MouseClick functions, they use the user32 functions. Those functions will add an extra parameter that indicates a simulated stroke. I've actually written a global hook that can differentiate between real user and software simulated input. You'd have to go lower than user32 I think.

Ah thanks.

So I need a lower level dllcall for mousemovement aswell.

Anyone can help with any of these?

[Richard Robertson]

I believe you'd need an understanding of drivers. Don't quote me on that though.

[tom13]

So this is not possible by using DLLCalls with AutoIt?

Edit: If so, maybe there is some third party command line tool that could do such task when run? (press keys, move mouse)

Edited October 16, 2008 by tom13

[Pain]

As Richard said, the only way is to make your own driver. DllCalls will get recognized as simulated keystrokes. 3rd party program might also get recognized as simulated keystrokes if they doesn't use a custom driver.

[tom13]

A custom driver? why can't everyone use the same driver? Isn't there such driver on the web, or a third party program that uses it?

[Pain]

You can find some drivers if you google it(most of the time where you can find hacks for games), however most likely they will not work for you so you will end up with writing your own driver or just screw the idea.

Try google for "fake keyboard driver".

Edited October 16, 2008 by Pain

[tom13]

You can find some drivers if you google it(most of the time where you can find hacks for games), however most likely they will not work for you so you will end up with writing your own driver or just screw the idea.

Try google for "fake keyboard driver".

Thanks, the program called SCANCODE at http://home.att.net/~short.stop/freesoft/keyb.htm looks interesting.

Is there any way to check if programs are able to detect the difference between this program and a real keyboard?

[Pain]

Unless the internal structure of AutoIt has changed for the Send and MouseClick functions, they use the user32 functions. Those functions will add an extra parameter that indicates a simulated stroke. I've actually written a global hook that can differentiate between real user and software simulated input. You'd have to go lower than user32 I think.

I assume it's possible.

[tom13]

I assume it's possible.

Obviousely, or this whole thread would be pointless.

As I am sure you have understand I meant to ask whether there's any method I am able to use to find out what I need to know.

[Humper]

Write to me if you get how to do it (through PM/warioren@hotmail.com)

Thanks

Regards Humper

[Richard Robertson]

It's impossible to check if a program differentiates between virtual and physical keypresses without a knowledge of debugging/digging or the source code.

[Pain]

Some usefull information: http://msdn.microsoft.com/en-us/library/ms646267.aspx

[tom13]

Thanks people.

Unfortunately I lack the knowledge to create such program myself.

I understand that there is no third party program which could scan for a difference between fake input and real input, already?

- Tom

[FreeFry]

So basically you're wanting to be able to bypass, say a firewall or an anti-virus from detecting that you're sending keystrokes to a hidden irc-client/similar?

[Pain]

Or most likely to be able to cheat on a game with anticheat protection.

[Richard Robertson]

I'm pretty sure it's the latter. I've not seen a firewall that does anything to keystrokes.

[tom13]

It is the latter, yes.

But that does not really influence the problem or situation.