Jump to content


<Bhs/3 Crypto - Busted


  • This topic is locked This topic is locked
27 replies to this topic

#16 HESS ONE

HESS ONE

    RC Member

  • Clan Members
  • PipPipPipPip
  • 495 posts
  • Gaming Name:>RC|HESSTheONE
  • Level:Constable

Posted September 19, 2011 - 11:10 PM

well said
Posted Image

#17 Jimmy

Jimmy

    ex member

  • Users
  • PipPipPipPip
  • 371 posts
  • LocationWisconsin
  • Gaming Name:Jimmy
  • Level:Marshal

Posted September 20, 2011 - 02:51 PM

http://forums.clan-5...75&hilit=crypto

He posted on Clan 555's Forum so you can keep updated what they do

#18 Profiler

Profiler

    Advanced Member

  • Users
  • PipPipPip
  • 46 posts
  • LocationEmbryo

Posted September 20, 2011 - 07:19 PM

View Postibblecabibble, on September 19, 2011 - 01:27 PM, said:

There are dedicated IPs and dynamic as profiler said. Servers are dedicated because you want to have same ip so people can connect to them with the same address. Comcast customers have dynamic ip's, you have an assigned ip that you can keep for months or even years but thats if you don't disconnect your router and turn it off. Disconnecting and turning off your router for any where from 15 mins to 3 hours causes your ip to be reset and when you reconnect you get assigned a new ip.

I have static IP and I am Comcast user. Sorry but your logic is incorrect. Dynamic IP is given if someone is using DSL, Dial up, etc. No matter how much time i restart my modem i get same IP because it is based on modem MAC.

View Postibblecabibble, on September 19, 2011 - 01:27 PM, said:

wall hacks require a change of code in your opengl file, thats some of what pb scans whenever its looking for hacks your opengl (open graphics language) file, if there are changes that match codes for wallhack or others then it will ban you. So if you're banned for wh then its not from your cfg its from something in your opengl file. Some games use direct X in which case pb scans the direct x (3d) file.

Wrong. None of hacks modify my local openGL files which in fact comes with GPU drivers. PB doesn't scan direct X or OpenGL files. Google on aimbot coding and you will learn more.

View Postibblecabibble, on September 19, 2011 - 01:27 PM, said:

As far as banning him, its probably a safe bet to just on this evidence alone, but I would try and spec him and get a demo not just for proof (already have that) but as a kind of tutorial that can be used later for what to look at to identify WH. Although this maybe hard to do now since now he knows we know and either will change his style of play or more so his name ip and guid and come in as a different player you would have to identify all over again.

Demo for what? He is busted. If he was supposed to be ban by demo then he would have been banned. Note: He is busted by PB and not demo. You really don't have to identify it all over again, if you have Punkbuser enabled, it takes care for you.

View Postibblecabibble, on September 19, 2011 - 01:27 PM, said:

This is kind of why when you're in server you should pm your problem to an admin instead of saying it in open chat so the person doesn't get wise to it then stop and the admin can spec and catch them in that act. Same here, you should probably have sent this as a private message to a high admin on the site instead of posting in open forum where everyone including him can know that he cheats.

Open chat or forums? Oh lord... each bans are listed here openly:

http://www.pbbans.co...-ban-index.html

In what age you are living? Cheater get busted, gets reported on website and in next 1 minute whole word can see who got busted. It results in local server ban and in different games GUID ban i.e. now need to pay $$ again to buy new key.

More or less, he was busted on September 5, 2011 10:10 pm. I notified on forums September 18, 2011 - 10:06 AM
http://www.pbbans.co...d-vb232550.html

Now if server was Punkbuster enabled and PBBans streaming, he would be auto banned and auto notified to server admin on next minute.

You got too much wrong info buddy.
- Linux doesn't need no viruses. The users **** up the system by themselves.
- C++ is a loaded machine gun pointed at your feet with the safety off.

SilEnT Mod Support, Hosting Reviews and Gamers Lounge.

#19 ibblecabibble

ibblecabibble

    Clan Members

  • Clan Members
  • PipPipPipPip
  • 115 posts
  • LocationPittsburgh PA
  • Gaming Name:C)(r!st(Y)a$

Posted September 21, 2011 - 01:25 AM

I know in the past my ip has changed when the power went out for a few hours but it could have been for other reasons. There are other ways to change your IP that more knowledgeable people have found chang ip by changing mac address.

There are also ways to modify your opengl file and create a wallhack, I never said anything about aimbot or it changing opengl file. I'm not claiming much knowledge on  these matters because i do not write scripts for wh or other hacks, but i do know enough that you can create one this way. It has something to do with not drawing the textures on the plane faces, normally textures are only drawn on one side of a plane face, you have to specify in your map if you want both sides drawn. Thats why in the day Marrakesh Streets when you jump on the roof you can see through the walls, its because it wasn't programed to draw the textures on the back side of those planes. By altering your opengl file to recreate that and not draw the textures on the front you can create a type of wh.

It makes sense only to draw textures on one side unless specified because then you would have twice the amount of memory being used for textures that aren't even seen.

If you google how punknutster works youll find that pb scans the memory  address and opengl.dll (its in your system32 fodler) is a running module under et.exe process so this would be scanned. As I said there are ways to modify your opengl file for a wh, i don't know what other ways there are because i'm not scripting these things.

Im not saying we need more evidence  im saying  grab a demo before you ban him to show others what to look for in a wh  user.

posting openly on these forums where pb is not  enabled/streaming would  alert him that he is known now to this servers admins, whereas if he  didn't he would still think this server was an easy target and continue  to hack as if he wasn't known. Now that he knows that this server is on  to him he might try and hide it better and or change his ip guid and  name so he would have to be identified all over again.

Oh yeah and who needs to pay money for a new key in a game that is free, every time you install the game as soon as you log onto your first server a new one is generated for you. This game doesn't require $ for a new key.

You just seem to have too much information buddy :rolleyes:.  I only have some and know that there are other circumstance that exist out there in which the information in mine doesn't always apply. Granted you might have different experiences, but that doesn't make mine incorrect. ;):unsure:
Posted Image

#20 Profiler

Profiler

    Advanced Member

  • Users
  • PipPipPip
  • 46 posts
  • LocationEmbryo

Posted September 21, 2011 - 10:40 AM

View Postibblecabibble, on September 21, 2011 - 01:25 AM, said:

I know in the past my ip has changed when the power went out for a few hours but it could have been for other reasons. There are other ways to change your IP that more knowledgeable people have found chang ip by changing mac address.

That applies to some routers. Comcast basically controls IP on modem MAC and modem MAC are not easy to change. The link given on that is for  PC.

View Postibblecabibble, on September 21, 2011 - 01:25 AM, said:

It has something to do with not drawing the textures on the plane faces, normally textures are only drawn on one side of a plane face, you have to specify in your map if you want both sides drawn. Thats why in the day Marrakesh Streets when you jump on the roof you can see through the walls, its because it wasn't programed to draw the textures on the back side of those planes. By altering your opengl file to recreate that and not draw the textures on the front you can create a type of wh.

It makes sense only to draw textures on one side unless specified because then you would have twice the amount of memory being used for textures that aren't even seen.

Oh lord, you are comparing Marrakesh 'mapping bug' with cheating. It's a simple mapping bug where mapper forgot to put brush. You can simply fix it by using fake brush in map script.

View Postibblecabibble, on September 21, 2011 - 01:25 AM, said:

If you google how punknutster works youll find that pb scans the memory  address and opengl.dll (its in your system32 fodler) is a running module under et.exe process so this would be scanned. As I said there are ways to modify your opengl file for a wh, i don't know what other ways there are because i'm not scripting these things.

Im not saying we need more evidence  im saying  grab a demo before you ban him to show others what to look for in a wh  user.

Again stock PB doesn't scan 'opengl.dll file' unless you run md5 cheat scans from PBBans. Most of the users have ATI or nVidia GPU card or Intel accelerators. The one in system32 folder is pretty useless because once you install GPU, your GPU drivers take over openGL support. Here is where nVidia drivers are best because they have nice openGL support but then again it's different story.

Again there are 100's of cheating demo available here from old bans. You don't need to re invent the whole wheel.

http://www.pbbans.co...statistics.html
http://www.pbbans.co...-ban-index.html


View Postibblecabibble, on September 21, 2011 - 01:25 AM, said:

posting openly on these forums where pb is not  enabled/streaming would  alert him that he is known now to this servers admins, whereas if he  didn't he would still think this server was an easy target and continue  to hack as if he wasn't known. Now that he knows that this server is on  to him he might try and hide it better and or change his ip guid and  name so he would have to be identified all over again.

By posting openly, not only clan members know but everyone visiting forum knows he is busted. So when members are not around, as soon as they see Colombian flag on player, they can keep an eye. This is why you post openly so he and others become aware that cheaters get banned here. We don't play hide and seek. Got busted, get banned. Simple.

More or less this is why server should have punkbuster enabled so that cheaters like him get busted on server itself rather then admins camping in spec and watching each player. This is fact: He was playing on server even after getting busted and even before it. If server had PB, he would be bye bye. No offense to admins intended. I don't like to rely on admins because they also like to play rather specing each good player...

Now please don't tell me, PBBans shouldn't even display ban list publicly... because according to your logic every ban should be kept hidden and only notified to admin. This ain't stone age. It's 21st Century. :)
- Linux doesn't need no viruses. The users **** up the system by themselves.
- C++ is a loaded machine gun pointed at your feet with the safety off.

SilEnT Mod Support, Hosting Reviews and Gamers Lounge.

#21 ibblecabibble

ibblecabibble

    Clan Members

  • Clan Members
  • PipPipPipPip
  • 115 posts
  • LocationPittsburgh PA
  • Gaming Name:C)(r!st(Y)a$

Posted September 21, 2011 - 12:42 PM

View PostProfiler, on September 21, 2011 - 10:40 AM, said:

Oh lord, you are comparing Marrakesh 'mapping bug' with cheating. It's a simple mapping bug where mapper forgot to put brush. You can simply fix it by using fake brush in map script.

Its not a bug, its called polygon face culling. In a polygon solid only the front side is visible. You can prevent opengl from rendering and processing the backside. Its called culling. To use it you must enable it by passing GL_CULL_FACE to glEnable(), then use void glCullFace(GLenum mode) to specify which face to cull.  mode can be GL_FRONT, GL_BACK, or GL_FRONT_AND_BACK, culling both faces won't draw anything at all (heres your potential for WH). The default is GL_BACK.

The map editor was using culling, which saves memory so textures that aren't going to be seen aren't rendered and  processed. All maps are like that, have you ever gotten blown up and then glitch into a wall, when you look around you can see through the backsides of the wall your in, happens to me in the tunnel of oasis all the time. There are ways to create a wrapper around opengl functions to have it operate in a different way, change the mode to GL_FRONT or GL_FRONT_AND_BACK and you have potential to see through walls like when you get blown into one or as seen in Marrakesh roof tops.

check this out opengl32.dll WH!  

By using private messages on the site anyone can send a message to several recipients and the recipients can send it to others etc. without alerting the player who is using hacks. Especially on a server where they think they can get away with it because there is no PB. If server had PB then yes it would be automatically taken care of. Its my logic that if a server doesn't have PB on and it must be done manually there is no reason to make it harder to identify the hack by giving them a heads up and letting them know to change any of a number of things.

Yes there are other demos out there but to have one of a player on this  server (and of this game) might have more interest to players who use  this server. If you can post links of those demos please do because I don't see where to access the demos from the links you gave.
Posted Image

#22 HESS ONE

HESS ONE

    RC Member

  • Clan Members
  • PipPipPipPip
  • 495 posts
  • Gaming Name:>RC|HESSTheONE
  • Level:Constable

Posted September 21, 2011 - 06:39 PM

Alright guys, open another thread to continue your discussions on cheating via bots/scripts/programs etc. Thanks
Posted Image

#23 ibblecabibble

ibblecabibble

    Clan Members

  • Clan Members
  • PipPipPipPip
  • 115 posts
  • LocationPittsburgh PA
  • Gaming Name:C)(r!st(Y)a$

Posted September 22, 2011 - 01:41 AM

View PostHESS ONE, on September 21, 2011 - 06:39 PM, said:

Alright guys, open another thread to continue your discussions on cheating via bots/scripts/programs etc. Thanks

some of the discussion is also about wether you should post openly about a hack user or if you should send it privately to an admin or several players so the hack user isn't alerted. I don't think its that bad to post openly its just it would be easier to manually detect him if he wasn't alerted. What do you think about it?
Posted Image

#24 HESS ONE

HESS ONE

    RC Member

  • Clan Members
  • PipPipPipPip
  • 495 posts
  • Gaming Name:>RC|HESSTheONE
  • Level:Constable

Posted September 22, 2011 - 02:48 AM

There alot of points raised and not all are topic specific. ie. crypto's alleged cheating and what action should RC take.. The points raise by you guys has its own merits, however, this thread was getting too long and I was getting tired trying to read and understand what was being said. So, if you guys can be so kind, please open another proper thread to discuss.
Posted Image

#25 ibblecabibble

ibblecabibble

    Clan Members

  • Clan Members
  • PipPipPipPip
  • 115 posts
  • LocationPittsburgh PA
  • Gaming Name:C)(r!st(Y)a$

Posted September 22, 2011 - 03:09 AM

[edited] i'll do as you suggest and post a new topic asking this question.
Posted Image

#26 Profiler

Profiler

    Advanced Member

  • Users
  • PipPipPip
  • 46 posts
  • LocationEmbryo

Posted September 22, 2011 - 01:57 PM

View Postibblecabibble, on September 21, 2011 - 12:42 PM, said:

Its not a bug, its called polygon face culling. In a polygon solid only the front side is visible. You can prevent opengl from rendering and processing the backside. Its called culling. To use it you must enable it by passing GL_CULL_FACE to glEnable(), then use void glCullFace(GLenum mode) to specify which face to cull.  mode can be GL_FRONT, GL_BACK, or GL_FRONT_AND_BACK, culling both faces won't draw anything at all (heres your potential for WH). The default is GL_BACK.

The map editor was using culling, which saves memory so textures that aren't going to be seen aren't rendered and  processed. All maps are like that, have you ever gotten blown up and then glitch into a wall, when you look around you can see through the backsides of the wall your in, happens to me in the tunnel of oasis all the time. There are ways to create a wrapper around opengl functions to have it operate in a different way, change the mode to GL_FRONT or GL_FRONT_AND_BACK and you have potential to see through walls like when you get blown into one or as seen in Marrakesh roof tops.

By using private messages on the site anyone can send a message to several recipients and the recipients can send it to others etc. without alerting the player who is using hacks. Especially on a server where they think they can get away with it because there is no PB. If server had PB then yes it would be automatically taken care of. Its my logic that if a server doesn't have PB on and it must be done manually there is no reason to make it harder to identify the hack by giving them a heads up and letting them know to change any of a number of things.

Yes there are other demos out there but to have one of a player on this  server (and of this game) might have more interest to players who use  this server. If you can post links of those demos please do because I don't see where to access the demos from the links you gave.

As I said, it's a mapping bug in Marakkesh and Oasis and can be fixed with 'mapping'. You believe or not it's not my concern at all. I am not going to argue on the same topic again and again with the guy who doesn't know basic in PC. You don't even know 1GB RAM = 512MB + 512MB and on top now you are comparing mapping bugs to wallhacking.

http://community.the...dpost__p__41747

More or less if you ever bothered to even check the website which i posted, it has ET demos as well. I am not going to teach you on how to browse website.

http://www.pbbans.co...iew-et-ov2.html

To help you, here are few of many GUID/cheaters busted based on 'demos'.

[PBBans:124774 2009-04-26] a60fc4dbdb9836c5816297debb0521dc "chupacabra" "65.95.*.*" "Caught by Demo AIMBOT"
[PBBans:124775 2009-04-26] 638e1b75c41c498aade79bf0b573ba52 "LuckyLuck" "65.95.*.*" "Caught by Demo MULTIHACK"
[PBBans:122310 2009-04-13] 44b8314d81d720981dfc5b9443326bcf "nbcKR" "99.23.*.*" "Caught by Demo MULTIHACK"
[PBBans:121962 2009-04-10] 4f8844629f694be87da3dc73cbd17306 "WPbcmHVRuIrB" "99.148.*.*" "Caught by Demo MULTIHACK"
[PBBans:121964 2009-04-07] 267a1c28cf71134b92915fe76bf8081e "LeF" "99.148.*.*" "Caught by Demo MULTIHACK"
[PBBans:121965 2009-04-07] c1e65b90aad134d673faf1aa208a1079 "HARRYBALLS" "99.32.*.*" "Caught by Demo AIMBOT"
[PBBans:122685 2009-04-06] b838a48f9461762eb9dbf28ebb5f30c5 "NINJA" "71.233.*.*" "Caught by Demo AIMBOT"
[PBBans:120945 2009-04-05] 432adb5a8786d07b823559e60e268a83 "OWoeOocQ" "99.148.*.*" "Caught by Demo MULTIHACK"
[PBBans:120803 2009-04-04] d5710439a48caa0a50050a79292afa3f "xUtpBB" "99.148.*.*" "Caught by Demo AIMBOT"
[PBBans:120994 2009-04-04] fad6dc0d55fbac8d6f81dfdc545e459f "PDqigYB" "99.148.*.*" "Caught by Demo AIMBOT"
[PBBans:119388 2009-03-27] 1f703f6bda786ffa372ca13cc6b7be8f "TheUnknown" "84.131.*.*" "Caught by Demo MULTIHACK"
[PBBans:119385 2009-03-27] 56cc6b46f506ed8eef06754bb384322d "John" "99.23.*.*" "Caught by Demo AIMBOT"
[PBBans:119383 2009-03-27] 55d8314ba242e64c5982db73ecf7dfd1 "HIgh.Top" "222.236.*.*" "Caught by Demo MULTIHACK"
[PBBans:119375 2009-03-27] bf5c337dc01cd03efdcf3ff90083c09c "BlackSpy" "99.148.*.*" "Caught by Demo MULTIHACK"
[PBBans:118838 2009-03-24] 1e235435fb8641278055dd02c7c65e39 "IoE" "99.148.*.*" "Caught by Demo MULTIHACK"
[PBBans:118836 2009-03-24] 25b79443f73284c532f4257362a8549b "QgILommh" "99.148.*.*" "Caught by Demo MULTIHACK"
[PBBans:118444 2009-03-19] 904e3c18b1fd54a1b2049e7620ef354d "razor" "189.59.*.*" "Caught by Demo AIMBOT"
[PBBans:117865 2009-03-19] 95f8a0b4ae587700b58fef97dc9f0e15 "Noetel" "99.32.*.*" "Caught by Demo MULTIHACK"
[PBBans:114942 2009-03-03] 47ea7c329bae08a442894e33239234f3 "*X-Girl!" "89.160.*.*" "Caught by Demo MULTIHACK"

You can search for above GUID on MBi page and get the ban link and from ban link you get the demos.
Example: http://www.pbbans.co...9-vb118838.html

From ban link you get the demo. You can also browser through PBSS (PB Screenshots taken by PB and bans based on that).

Coming back to your point, your idea is flawed. 2 scenarios of posting about his ban privately or publicly:

1. We PM admin about his ban with busted link.
Result: Admin bans him.

2. We post openly about his ban with busted link.
Result: Admin bans him.

In both the cases he has options to change number of things and come back but in #2 since 'ALL' know he is busted they will keep an eye on server even if he comes back.

Let me ask basic thing first.. have you ever run any ET server in past?

I am going to repeat again one last time:

PB doesn't scan any 'files' aka opengl as you claim.
GPU drivers take over openGL support.
Oasis tunnel bug is mapping bug and can be fixed with mapping.
Bans are already posted publicly on Anti Cheat sites and they don't PM to admins. Ban is ban and should be visible to all players so all know who that looser cheater is.  

Can someone from staff/moderators please close this topic because I am not going to argue with this guy and waist my time.
- Linux doesn't need no viruses. The users **** up the system by themselves.
- C++ is a loaded machine gun pointed at your feet with the safety off.

SilEnT Mod Support, Hosting Reviews and Gamers Lounge.

#27 DimeBag

DimeBag

    Member

  • Users
  • PipPip
  • 22 posts
  • LocationToronto
  • Gaming Name:DimeBag/Mechanical

Posted September 27, 2011 - 04:24 PM

I thought there was something odd about him but just shrugged it off as this is NQ where ping doesn't matter. I remember there was a cvar that if you had an ATI gc it would change something can't remember what exactly, but anyway's on a PB server it would be cheat protected. Which means when you first join the server and open console it will tell you like if say your m_pitch is .015 and the server only allows .016 but you have time to change it. Now to get kicked for having a wallhack that's a 3rd party program imho.

#28 EvO

EvO

    ex member

  • Users
  • PipPipPipPip
  • 244 posts

Posted October 10, 2011 - 04:07 AM

Nuff said.

Topic closed.
[IMG][url="http://i44.tinypic.com/2w6h0mq.gif"]http://i44.tinypic.com/2w6h0mq.gif[/url][/IMG]




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users