1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
|
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<title>s1nical - Detection</title>
<link rel="icon" type="image/jpg" href="/favicon.jpg" sizes="128x128">
<!-- Site metadata -->
<meta name="description" content="Detection Information">
<meta property="og:description" content="Detection Information">
<meta property="og:title" content="s1nical - Detection">
<meta property="twitter:card" content="summary">
<meta property="twitter:site" content="@9inny">
<meta property="og:image" content="">
<meta property="og:url" content="https://kyzer.co/detection">
<link rel="apple-touch-icon" sizes="128x128" href="/favicon.jpg">
<link rel="icon" type="image/jpg" href="/favicon.jpg" sizes="128x128">
<link rel="canonical" href="https://kyzer.co/detection">
<link rel="author" href="humans.txt" />
<!-- Schema.org Stuff -->
<script type="application/ld+json">
{
"name": "s1nical",
"alternateName": "s1n",
"description": "Detection Information",
"headline": "Detection Information",
"url": "https://kyzer.co/detection",
"image": "",
"sameAs": [
"https://twitter.com/9inny",
"https://github.com/8cy",
"https://www.reddit.com/user/s1nical/"
],
"publisher": {
"@type": "Organization",
"logo": {
"@type": "ImageObject",
"url": ""
}
},
"@type": "WebSite",
"@context": "http://schema.org"
}
</script>
<!-- External Links -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/trianglify/0.3.1/trianglify.min.js"></script>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/2.1.4/jquery.min.js"></script>
<script src="https://code.jquery.com/jquery-1.10.2.js"></script>
<!-- CSS Links -->
<link rel="stylesheet" href="/about/css/main.css">
<link rel="stylesheet" href="/about/css/navigation-bar.css">
<link rel="stylesheet" href="/about/css/loader-animation.css">
<link rel="stylesheet" href="/about/css/blog-slider.css">
<style>
html {
overflow-x: hidden;
}
</style>
<!-- Invisible Scripts -->
<script src="/js/loader-animation.js"></script>
<script src="/js/redirect-to-mobile.js"></script>
</head>
<body>
<!-- Visable Scripts -->
<script>
// Background only renders based on the original browser window size when
// starting to load the site. Due to rendering issues, I don't think I
// can do it other wise.
///////////////
// SCRIPT #1 //
///////////////
// If light mode detected, in reality, if nothing is detected lmao
// Dark mode feature was removed lol
// Set up base pattern
var pattern = Trianglify({
height: window.innerHeight * 3.23, // White: #fdfbfb, Salmon: #cc3300
width: window.innerWidth,
// Christmas Colours:
x_colors: ['#040404', '#f9f9f9', '#fffff4', '#fbf7f5', '#d55454'], // Cappuccino: ['#854442', '#3c2f2f', '#fff4e6', '#be9b7b', '#4b3832']
y_colors: ['#f9f1f1', '#f9f9f9', '#fffff4', '#fbf7f5', '#f9f1f1'], // Random colour generator: "#"+((1<<24)*Math.random()|0).toString(16)
//
// Normal Colours:
// x_colors: ['#040404', '#f9f9f9', '#fffff4', '#fbf7f5', '#d55454'],
// y_colors: ['#f9f1f1', '#f9f9f9', '#fffff4', '#fbf7f5', '#f9f1f1'],
//
// Christmas Colours:
// x_colors: ['#0F8A5F', '#f9f9f9', '#fffff4', '#fbf7f5', '#CC231E'],
// y_colors: ['#f9f1f1', '#f9f9f9', '#fffff4', '#fbf7f5', '#f9f1f1'],
//
variance: 10, // Gives it more style
seed: Number.parseInt(Math.floor(Math.random() * 100)), // TODO: Live seed transitioning.
cell_size: 160 // Cell size
});
// REMOVED bc looked ugly
// If dark mode detected
// if (matchMedia('(prefers-color-scheme: dark)').matches) {
// var pattern = Trianglify({
// height: window.innerHeight, // White: #fdfbfb, Salmon: #cc3300
// width: window.innerWidth,
// x_colors: ['#040404', '#111111', '#111111', '#111111', '#d55454'], // Cappuccino: ['#854442', '#3c2f2f', '#fff4e6', '#be9b7b', '#4b3832']
// y_colors: ['#f9f1f1', '#111111', '#111111', '#111111', '#f9f1f1'], // Random colour generator: "#"+((1<<24)*Math.random()|0).toString(16)
// variance: 10, // Gives it more style
// seed: Number.parseInt(Math.floor(Math.random() * 100)), // TODO: Live seed transitioning.
// cell_size: 160 // Cell size
// });
// }
// // Canvas
// document.body.appendChild(pattern.canvas())
// SVG
document.body.appendChild(pattern.svg())
// // PNG
// var png = document.createElement('img')
// png.src = pattern.png()
// document.body.appendChild(png)
///////////////
// SCRIPT #2 //
///////////////
$('.title-wrapper').css('width', window.innerWidth);
$('.title-wrapper').css('height', window.innerHeight);
var time = 10,
$paths = $('body').find('svg').find('path'),
pathCollection = $paths.get(),
count = $paths.length;
// // Log variable "count"
// console.log(count);
pathCollection.sort(function () {
return Math.random() * 10 > 5 ? 1 : -1;
});
function showText() {
var title = $('h1'),
subtitle = $('h2');
title.removeClass('hidden');
setTimeout(function () {
subtitle.removeClass('hidden');
}, 500);
}
setTimeout(function () {
$.each(pathCollection, function (i, el) {
var $path = $(this);
setTimeout(function () {
$path.css('opacity', '1');
}, time)
time += 10;
if (i + 1 === count) {
setTimeout(function () {
showText();
}, 2000);
}
});
}, 2000);
</script>
<!-- Navigation Bar -->
<div class="navigation-bar">
<nav class="nav">
<a href="/home/" class="nav-item" active-color="orange">Home</a>
<!-- Had `is-active` after it but removed it due to not highlighting. -->
<a href="#" class="nav-item" active-color="green">About</a> <!-- About -->
<!--<a href="https://p.s1n.pw/" class="nav-item" active-color="blue">Portfolio</a> <!-- Testimonials -->
<a href="https://kyzer.co/status" class="nav-item" active-color="red">Status</a> <!-- Blog -->
<!--<a href="/cars/" class="nav-item" active-color="rebeccapurple">Cars</a> <!-- Contact -->
<!--<a href="https://nani.s1n.pw" class="nav-item" active-color="rebeccapurple">Nani?!</a>-->
<span class="nav-indicator"></span>
</nav>
</div>
<div class="bio">
<div class="links">
<div class="blog-slider" style="height: 2860px; width: 100%">
<p class="desc" id="introduction" style="color: #a52233; font-weight: bold; text-align: left; font-size: 18px; position: relative; left: 5.5%">
Warning: "Experienced Pasters" May find the following post cringy.<br>
This thread is for newcomers without any knowledge about how to protect your Paste from VAC.
</p>
<p class="desc" style="color: #3399ff; font-weight: bold; text-align: left; font-size: 18px; margin: 0; position: relative; left: 5.5%">
Since you asked for it, I'll do a simple Step by Step Tutorial for braindeads on how to protect your Pastes from VAC Signature Scans etc (Make them Undetected).<br>
<span style="color: #3366ff;">You don't need to do any of those steps if you are using your 100% self-coded Cheat since the code shouldn't be public.</span>
</p>
<br>
<p class="desc" id="remove-features" style="word-wrap: break-word; white-space: pre-wrap; text-align: left; font-size : 17px">
<span style="font-weight: bold; font-size: 20px">1. Change Signature</span>
First, you will need the Project File of your Paste. You won't be able to protect it properly with the DLL only.
(I'll use Riptide for this Step)
1.1 Remove Features:
Only keep features you will really need.
Removing unnecessary features will change the signature and speed up the cheat. Also, you'll maybe fix crashes without knowing it.
Don't remove the Checkboxes only, also remove the Functions. Search with "CTRL + F" for relateable functions you don't need.
For example, if you want to remove Knifebot, Remove the Knifebot.cpp and Knifebot.h. Also remove the Saving and Loading Convars in Settings.cpp and Settings.h.
Stuff like this "<code>#define CVAR_KNIFEBOT_ACTIVE</code>, "<code>knf_Active</code>" or this "<code>extern bool knf_Active;</code>".
Of course, you have to remove the Checkboxes in Client.cpp and "class CKnifebot" in Client.h too.
If you want to remove features like Damage Indicator you also have to remove all the Stuff in Esp.cpp, Client.cpp and Settings.cpp/h. Search with CTRL + F for "DamageIndicator" and remove
everything you can find.
For example this stuff:
"<code>void CEsp::DrawDamageIndicator()...." and this "std::vector<DamageIndicator_t> DamageIndicator;</code>"
etc.
</p>
<p class="desc" id="rename-functions-features" style="word-wrap: break-word; white-space: pre-wrap; text-align: left; font-size : 17px">
<span style="font-weight: bold; font-size: 20px">1.2 Rename Functions and Features:</span>
<span style="font-size: 15px">User Advice: Please Save a Source Backup in case you break features with the next Step.</span>
If you have the time to, you can rename all features in Riptide / Indigo and other Pastes.
For example rename "Backtrack".
Open your Client.cpp and search for "Backtrack".
You will probably find something like this:
<code>ImGui::Checkbox("Backtrack", &Settings::Aimbot::aim_Backtrack);</code>
Now Rename "<code>aim_Backtrack</code>". You can do CTRL + H if you don't want to remove everything manually. Be careful, you can break some features with CTRL + H.
In the first Field write "<code>aim_Backtrack</code>" and in the second any other name. For example "RewindKill".
Now change the Search Options to "Entire Solution" and press on the Replace All Button (Red Circled Button in the Picture).
This will Replace all functions named <code>aim_Backtrack</code> with RewindKill.
</p>
<p class="desc" id="junkcode" style="word-wrap: break-word; white-space: pre-wrap; text-align: left; font-size : 17px">
<span style="font-weight: bold; font-size: 20px">1.3 Add Junkcode:</span>
<span style="font-size: 15px">User Advice: Please Save a Source Backup in case you break features with the next Step.
I don't care if Junkcode is a Meme. VAC scans for signature and Junk changes signature a lot. It works for me so I suggest you to use it.</span>
Why do you need Junkcode / What is Junkcode?
Imagine you wrote an exam on your Computer and the Teacher checks if you copied something from the Internet. He will take random sentences from your exam and search online if you copied them. VAC
is kind of similar. It scans randomly for code and searches in the Database for detected Code. You use "undetected" Junkcode to mess up your source code. The more Junkcode you have, the harder it
will be for VAC to find detected code. With a lot of Junk, VAC picks up the Junkcode instead of your source code, so the detection will be false. I know, It's definitely not the way how VAC works
but the easiest way to explain VAC to newcomers.
I suggest you, don't use Auto Junk Adder. They only add Junk Code at the end of your CPP Files. If you want to be safe, add Junk between the Source Code and not only at the end of your source.
This Step will take a lot of time if you do it manually without auto junk adder, but it will be a lot safer. The longer it takes, the safer it will be.
Add Junkcode to every single .CPP File. Don't add Junk to your .h (headerfiles). If you have Protobuf, ("protobuf" folder with files) add Junk to all .pb.cc files.
You can use this Website for c++ Junk: <a href="https://junkcode.gehaxelt.in/">https://junkcode.gehaxelt.in/</a>.
If you use C# use this: <a href="https://pasters.cc/showthread.php?tid=5017">https://pasters.cc/showthread.php?tid=5017</a></span>.
The Junkcode changes everytime you reload the Website. Only use the same Junkcode once on all CPP Files. That means, don't C&P the Junkcode and Paste the same Junk 2 times at the same Page.
I suggest you to add +50% Junkcode of the actual CPP file. 50% Junk and 50% cheat code.
GIF: <a href="https://imgur.com/aQU4qQD">https://imgur.com/aQU4qQD</a></span>
</p>
<p class="desc" id="-disable-optimizations" style="word-wrap: break-word; white-space: pre-wrap; text-align: left; font-size : 17px">
<span style="font-weight: bold; font-size: 20px">1.4 Disable Optimization Settings</span>
Open your Project Settings and Disable all Optimization Settings.
If you don't know how to do that:
- Right Click on Solution and open Options.
- Press on C/C++, Open Optimizations
- Optimization should be "Disabled (/Od),
- Change Everything else to No/Neither/Disabled
</p>
<p class="desc" id="signbench" style="word-wrap: break-word; white-space: pre-wrap; text-align: left; font-size : 17px">
<span style="font-weight: bold; font-size: 20px">1.5 Signbench</span>
Sigbench will show you the percentage amount of difference between the old default dll and your junkprotected dll.
You need JAVA for this. Install this if you haven't already <a href="https://java.com/de/download/">https://java.com/de/download/</a>
<a href="/detection/assets/Sigbench.jar">Download Sigbench</a><!--: http://www.mediafire.com/file/6k0mh81gf3y4vqg/Sigbench_%255Bunknowncheats.me%255D_.zip/file-->
You need your Junkprotected DLL (without vmprotect or themida) and the default DLL (Without Junk).
Open Sigbench. Drag&Drop the protected dll on the left and the default on the right side of Sigbench.
Change the Sig size to 16 and press Benchmark. This can take a while (up to 5 Minutes if your PC is garbage).
Do this step 5 times. If the average is below 45% you should add more Junk. Average +50% = decent. Average +75% = good, your safe.
It should look somehow like this: <a href="https://imgur.com/6kOpTCv">https://imgur.com/6kOpTCv</a>
</p>
<p class="desc" id="protect" style="word-wrap: break-word; white-space: pre-wrap; text-align: left; font-size : 17px">
<span style="font-weight: bold; font-size: 20px">2. Protect your Cheat</span>
<span style="font-size: 15px">This step will protect your cheat from Skids, trying to crack your dll and steal the source.
It also changes the Signature difference up to 99% but nobody knows if this actually makes your cheat undetected (works for me tho).</span>
I've been banned a lot with VMProtect so I suggest you to use Themida.
Download Crack: <a href="http://www.mediafire.com/file/yv4dkz2zmqnaeq3/Themida.zip/file">http://www.mediafire.com/file/yv4dkz2zmqnaeq3/Themida.zip/file</a>
Some of you told me it crashes with Themida. That's because of the Compression. Disable "Application" in the "Compression" options.
Enable all those Settings: <a href="https://imgur.com/a/2hEvpA6">https://imgur.com/a/2hEvpA6</a>
Now just Protect it and you Dll should be VAC Safe.
You can check your Final dll with sigbench again. If you have an average difference +80% your dll should be safe.
Tipps:
- Play the first 10 Matchmaking Matches without any cheats for a good trust factor.
- Don't share your Dll with anyone.
- Use an Undetected Injector and only Inject in Main Menu. Don't inject Ingame.
</p>
<p class="desc" id="outro" style="color: #cc3333; font-weight: bold; text-align: left; font-size: 17px; position: relative; left: 5.5%">
There are definitely more ways to protect your cheat. Those are Basics.
</p>
</div>
</div>
</div>
<!-- Loading Animation -->
<div class="loader-wrapper">
<div class="loader">
<row>
<span></span>
<span></span>
<span></span>
</row>
<row>
<span></span>
<span></span>
<span></span>
</row>
<row>
<span></span>
<span></span>
<span></span>
</row>
</div>
</div>
</body>
</html>
|