Forum :: Lounge :: My RAT - Sort of..

Zack posted: (20th Jul 2012, 01:54 am)

Wildsurvival posted: (20th Jul 2012, 12:59 am)

Yes, but the invasion of privacy is too far. I would just create an online list of memory editing/dll injecting programs and shutdown and report the ip to the server using what error suggested.

Thanks for the idea!

That was what I was suggesting...a client-side blacklist. The client can inform the server if it's triggered, and you could maintain the list via an update webpage or something.

---
Wish upon a star!

Plasmastar posted: (20th Jul 2012, 12:08 am)

You might consider going the route of some other people and just adding a client-side program blacklist using WinAPIs like EnumWindows

Hacks such as EO.Addons can easily get around this. It can proxy any WinAPI calls and adjust the results.

---
http://sordie.co.uk
http://twitter.com/@SordieEO

That's a problem but at least it stops some of the skiddies.

---
Andrewbob - I would be on the fucking copter of rofls

Programmer, Web Developer, and Graphics Designer

Sordie posted: (20th Jul 2012, 12:19 pm)

Plasmastar posted: (20th Jul 2012, 12:08 am)

You might consider going the route of some other people and just adding a client-side program blacklist using WinAPIs like EnumWindows

Hacks such as EO.Addons can easily get around this. It can proxy any WinAPI calls and adjust the results.

Doesn't (newer) Windows OS stop system dlls from being loaded anywhere but from the system directories?

---
Wish upon a star!

Plasmastar posted: (20th Jul 2012, 02:33 pm)

Sordie posted: (20th Jul 2012, 12:19 pm)

Plasmastar posted: (20th Jul 2012, 12:08 am)

You might consider going the route of some other people and just adding a client-side program blacklist using WinAPIs like EnumWindows

Hacks such as EO.Addons can easily get around this. It can proxy any WinAPI calls and adjust the results.

Doesn't (newer) Windows OS stop system dlls from being loaded anywhere but from the system directories?

No, quite the opposite. You can even create ".local" files to prevent an application loading core system dll's from the system folder.

If windows prevented this it would create all kinds of problems. What if you had two apps installed both compiled to use different version of the same dll?

http://en.wikipedia.org/wiki/DLL_Hell#Incompatible_versions

---
http://sordie.co.uk
http://twitter.com/@SordieEO

I can keep it totally hidden, unlike spyware. If the players know they have it, what difference would it make anyway? I just am not skilled enough to make a game guard.

 Even games like Combat Arms or World of Warcraft are easily bypassable.

---
The good times are killing me.

Zack posted: (20th Jul 2012, 03:22 pm)

I can keep it totally hidden, unlike spyware. If the players know they have it, what difference would it make anyway? I just am not skilled enough to make a game guard.

 Even games like Combat Arms or World of Warcraft are easily bypassable.

1. I could write software that disables your "RAT"
2. I could write software that gives me access to your "RAT" on peoples machines.
3. Don't do it.

---
http://sordie.co.uk
http://twitter.com/@SordieEO

Plasmastar posted: (19th Jul 2012, 11:53 pm)

That's called, believe it or not, spyware. Go figure.

Wish this community was one where things like the previous post didn't exist. I know this is the lounge but seriously, it adds nothing.

People! When adding a reply, before you press [Submit], think about what you are adding and ask yourself if you are actually contributing or just adding noise.

One will gain you respect and the other will get you KP-1 which you all seem to care about so much.

---
http://sordie.co.uk
http://twitter.com/@SordieEO

Sordie posted: (21st Jul 2012, 12:32 am)


Wish this community was one where things like the previous post didn't exist. I know this is the lounge but seriously, it adds nothing.

People! When adding a reply, before you press [Submit], think about what you are adding and ask yourself if you are actually contributing or just adding noise.

One will gain you respect and the other will get you KP-1 which you all seem to care about so much.

Cult follower #1 reporting in. It wouldn't be EOSERV without it.

---
https://www.youtube.com/watch?v=d_DFVzxsEUc

People will always post daft stuff just to increase there post count (Because people think higher post count makes you more intelligent) lol.

On Topic: I'd never download a server with a RAT in it

---
"Do not take life too seriously. You will never get out of it alive."

Sordie posted: (21st Jul 2012, 12:32 am)


Wish this community was one where things like the previous post didn't exist. I know this is the lounge but seriously, it adds nothing.

People! When adding a reply, before you press [Submit], think about what you are adding and ask yourself if you are actually contributing or just adding noise.

One will gain you respect and the other will get you KP-1 which you all seem to care about so much.

@Sordie i really don't care about my Karma