zer0mem0ry / kernelbhop Goto Github PK

Since we're reading, and writing memory from driver and not using winapi. Have you done any esea testing with this source. So will this code bypass esea anti cheat client. Do you have any information on what may trigger a dection. I wanna write a triggerbot using this source for esea.

C:\Windows\SysWOW64\sc.exe create csgo binPath=C:\Release\Driver.sys type=kernel
[SC] CreateService SUCCESS
C:\Windows\system32>C:\Release\dsefix.exe
DSEFix v1.2.0 started
(c) 2014 - 2017 DSEFix Project
Supported x64 OS : 7 and above

Ldr: Windows v6.3 build 9600
Ldr: Warning, improved PatchGuard version present
Ldr: CI.dll loaded for pattern search
Ldr: DSE will be disabled
SCM: Vulnerable driver loaded and opened
Ldr: OpenLdr.u.Out.pvImageBase = 0xFFFFE0004F49D080
Ldr: SUP_IOCTL_SET_VM_FOR_FAST call complete
Ldr: SUP_IOCTL_FAST_DO_NOP
Ldr: Modifying value at address 0xFFFFF80085215360
Ldr: SUP_IOCTL_LDR_FREE
SCM: Unloading vulnerable driver
SCM: Vulnerable driver successfully unloaded
SCM: Driver entry removed from registry
Ldr: Driver file removed
Ldr: Exit

C:\Windows\system32>C:\Windows\SysWOW64\sc.exe start csg
**[SC] StartService FAILED 1275:

This driver has been blocked from loading**

C:\Windows\system32>C:\Release\dsefix.exe -e
DSEFix v1.2.0 started
(c) 2014 - 2017 DSEFix Project
Supported x64 OS : 7 and above

Ldr: Windows v6.3 build 9600
Ldr: Warning, improved PatchGuard version present
Ldr: CI.dll loaded for pattern search
Ldr: DSE will be (re)enabled
SCM: Vulnerable driver loaded and opened
Ldr: OpenLdr.u.Out.pvImageBase = 0xFFFFE0004F49D080
Ldr: SUP_IOCTL_SET_VM_FOR_FAST call complete
Ldr: SUP_IOCTL_FAST_DO_NOP
Ldr: Modifying value at address 0xFFFFF80085215360
Ldr: SUP_IOCTL_LDR_FREE
SCM: Unloading vulnerable driver
SCM: Vulnerable driver successfully unloaded
SCM: Driver entry removed from registry
Ldr: Driver file removed
Ldr: Exit

C:\Windows\system32>pause
Press any key to continue . . .

Your dsefix.exe is out of date, you should update to the new one :)

Could you give me example how i could read float values?

KernelBhop.exe Output:

Found csgo Process Id: 0
Found client.dll ClientBase: 0x0
Found LocalPlayer in client.dll: 0xCCCCCCCC
Found PlayerInGround: 0xCCCCCCCC

As it seems it cant find csgo.. HELP

#define FORCE_JUMP 0x4F66400
#define LOCAL_PLAYER 0xAAC708
#define FFLAGS 0x00000100

(dwForceJump = 0x4F66400)
(dwLocalPlayer = 0xAAC708)

how to fix this.

i know the bsod is caused by patchguard, and not re-enabling the dse in time. i was wondering if the timings to do this properly were well known/if the source (with a 5 second timeout) is the best option

also, tdl is apparently an option which doesn't invoke a bsod. would that work?

Since 64 bit addresses are longer than ULONG size ULONGs are need to replaced with ULONGLONG.