[CS:S Memory Hack] NoFlash + NoSmoke

[SURV1V3]

Updated offsets. :)
Thanks to KN4CK3R for his tutorial. :D

EDIT: Tutorial Link:
http://www.oldschoolhack.de/forum/showthread.php?id=65 (ALL CREDITS GO TO KN4CK3R)

#include <iostream> 
#include <windows.h>

using namespace std; 

BYTE flash[5] = { 0xE9, 0x5E, 0x04, 0x00, 0x00 }; 
BYTE smoke[5] = { 0xE9, 0x04, 0x01, 0x00, 0x00 }; 

int main() 
{ 
	cout << "[CS:S] NoFlash + NoSmoke Hack" << endl << "coded by ProChiller" << endl;
	HWND fenster = NULL; 
	while(fenster == NULL)
	{ 
		fenster = FindWindow (NULL, TEXT ("Counter-Strike Source")); 
		Sleep(100); 
	} 
	cout << "CS:S has been found!" << endl;
	
	DWORD prozessid; 
	GetWindowThreadProcessId(fenster, &prozessid); 
	
	HANDLE handleprozess; 
	handleprozess = OpenProcess(PROCESS_ALL_ACCESS, FALSE, prozessid); 
	
	DWORD puffer = NULL; 
	WriteProcessMemory(handleprozess,(void*)(0x241D1D5D),&flash,sizeof(flash),&puffer); 
	WriteProcessMemory(handleprozess,(void*)(0x2418E2AA),&smoke,sizeof(smoke),&puffer); 
	
	CloseHandle(handleprozess); return 0; 
}

This hack will get you banned! It's not VAC2 secure!

[Lawgiver]

Nice, but be more innovative!

I've had a quick look at the function you were patching..

I came up with this:

#include <iostream> 
#include <windows.h>
#include <limits>

using namespace std; 

int main() 
{ 
	cout << "[CS:S] NoFlash + NoSmoke Hack" << endl << "coded by ProChiller" << endl;
	HWND fenster = NULL; 
	while(fenster == NULL)
	{ 
		fenster = FindWindow( NULL, "Counter-Strike Source" ); 
		Sleep(100); 
	} 
	cout << "CS:S has been found!" << endl;

	DWORD prozessid; 
	GetWindowThreadProcessId(fenster, &prozessid); 

	HANDLE handleprozess; 
	handleprozess = OpenProcess(PROCESS_VM_READ|PROCESS_VM_WRITE|PROCESS_VM_OPERATION, FALSE, prozessid); 

	DWORD dwData = 0x0;
	DWORD dwClassInstance = NULL;


	for( ;; Sleep( 100 ) )
	{
		if( !ReadProcessMemory( handleprozess, (LPVOID)0x243B51C4, &dwClassInstance, 4, NULL ) )
			cout << "RPM FAILED!" << endl;
		if( !WriteProcessMemory( handleprozess, (LPVOID)( dwClassInstance + 0xFD0 ) , &dwData, 4, NULL ) )
			cout << "WPM FAILED!" << endl;
	}


}

That should be VAC proof since it only changes data, no code.

[SURV1V3]

Nice, but be more innovative!

I've had a quick look at the function you were patching..

I came up with this:

#include <iostream> 
#include <windows.h>
#include <limits>

using namespace std; 

int main() 
{ 
	cout << "[CS:S] NoFlash + NoSmoke Hack" << endl << "coded by ProChiller" << endl;
	HWND fenster = NULL; 
	while(fenster == NULL)
	{ 
		fenster = FindWindow( NULL, "Counter-Strike Source" ); 
		Sleep(100); 
	} 
	cout << "CS:S has been found!" << endl;

	DWORD prozessid; 
	GetWindowThreadProcessId(fenster, &prozessid); 

	HANDLE handleprozess; 
	handleprozess = OpenProcess(PROCESS_VM_READ|PROCESS_VM_WRITE|PROCESS_VM_OPERATION, FALSE, prozessid); 

	DWORD dwData = 0x0;
	DWORD dwClassInstance = NULL;


	for( ;; Sleep( 100 ) )
	{
		if( !ReadProcessMemory( handleprozess, (LPVOID)0x243B51C4, &dwClassInstance, 4, NULL ) )
			cout << "RPM FAILED!" << endl;
		if( !WriteProcessMemory( handleprozess, (LPVOID)( dwClassInstance + 0xFD0 ) , &dwData, 4, NULL ) )
			cout << "WPM FAILED!" << endl;
	}


}

That should be VAC proof since it only changes data, no code.

Thanks! :)
Soon gonna buy a new CS:S Account and try if it's VAC undetected. :D

[AD7Dauti7]

lawgiver
please read ur pm

[entername]

HWND fenster = NULL;

Isn't that kind of silly because when you define a variable isn't it always null?
Sorry I didn't know, just curious.

[SURV1V3]

HWND fenster = NULL;

Isn't that kind of silly because when you define a variable isn't it always null?
Sorry I didn't know, just curious.

Maybe, IDK but aslong it works I don't care. :D
:smiley_904:

[BoTk4]

Thanks! :)
Soon gonna buy a new CS:S Account and try if it's VAC undetected. :D

lol buy a new account and create 2 accounts get the guest pass of the main css account to the second one.. there you can test it

or get some cheap hacked account

[SURV1V3]

lol buy a new account and create 2 accounts get the guest pass of the main css account to the second one.. there you can test it

or get some cheap hacked account

:D
That's a good idea. :)
Thanks.
Gonna buy it in the next few days.

[entername]

Can I get a link to the tutorial (you could just c+p it into the tut section)? I would appreciate it.

[Lawgiver]

:D
That's a good idea. :)
Thanks.
Gonna buy it in the next few days.

If you want you can present me one quest pass. :D <3

[SURV1V3]

If you want you can present me one quest pass. :D <3

K gonna PM you when I bought CSS and got a guest pass. :D

Can I get a link to the tutorial (you could just c+p it into the tut section)? I would appreciate it.

I can do it for you but it's in German. :)

[entername]

K gonna PM you when I bought CSS and got a guest pass. :D



I can do it for you but it's in German. :)

I'll get my mom to read it for me. She is fluent in germ3n.

[SURV1V3]

I'll get my mom to read it for me. She is fluent in germ3n.

Lawl ok. :D
Gonna edit it to the first post.

[entername]

flashbang_white

HINT HINT HINT HINT

search for that & jmp it

:)

[Lawgiver]

HWND fenster = NULL;

Isn't that kind of silly because when you define a variable isn't it always null?
Sorry I didn't know, just curious.

No, it gets a random value.

( At all coders: I know its not really random but the variable that was there in the stack before.. )

Try:

int* ptr;
if( ptr )
 *ptr = 1;

It could work but it could crash.. you never know and thats why its bad. (:

[huPo1337]

so anyone tested PRO CHILLERS code ? VAC PROOF?
0x243B51C4 from where did he got that ?
ive searched at memory for that but not found.

[huPo1337]

lol is that forum dead ? no answers lol

[SURV1V3]

so anyone tested PRO CHILLERS code ? VAC PROOF?
0x243B51C4 from where did he got that ?
ive searched at memory for that but not found.

I can't test it because I only have an acc from 2004 with 49 games and I don't want that acc to get banned. :O
So you have to test it by yourself.

Btw: ProChiller = Me :O I changed my name

[huPo1337]

i just tested on non vac and it works pretty good iam not going to risk my account but i would like to know why he used that address and how i can get them i tryed to find the address with Ollydbg but i cant find it i searched for effects/flashbang in client but there is other address then the 0x243... at the second method is only no flash ... why he named it ["no flash no smoke"] if its only no flash by the way could some one help me to make a ESP ?? couse i want to learn dat but hard to get started with it my biggest problem is to get the correct offsets and adresses

[SURV1V3]

i just tested on non vac and it works pretty good iam not going to risk my account but i would like to know why he used that address and how i can get them i tryed to find the address with Ollydbg but i cant find it i searched for effects/flashbang in client but there is other address then the 0x243... at the second method is only no flash ... why he named it ["no flash no smoke"] if its only no flash by the way could some one help me to make a ESP ?? couse i want to learn dat but hard to get started with it my biggest problem is to get the correct offsets and adresses

First post by me is NoFlash + NoSmoke
The second one from Lawgiver IDK :O

name for smoke in ollydbg is: smokegrenade%d
I'm not sure anymore and too lazy to search it again :P

aVitamin posted a esp source here on the forum and there are the names for the addresses in it

[huPo1337]

well yea i allready seen aVitamins ESP source code but i cant get it to work lol.
because there some offset out of date and i dont know how he find offsets like the screen resolution or some hard offsets how he can find them lol.
after the update some of them got renamed
and the smoke ive found too but there is an address 0x243... from the second post that i dont get why he used that and where to find.

[SURV1V3]

why dont you ask him per pm? :O

[huPo1337]

well i could ask him but i think he get those questions each day so he can ignore it. because its for him noob questions lol.

[neurel111]

for noflash its better to just write to the alpha value (its always either 200 or 255 depending on how flashed you are) just keep writing 0 to it (its original value) and any flashes thereafter will last for a fraction of a second before vanishing, vac2 proof too. the offset is pbase + 0xfd4