![[ 源码 ] - ZERO资源分享](https://cdn.tlmtr.io/_next/image?url=https%3A%2F%2Fimg.tlmtr.io%2Fc%2F2UfzJX%2F6183995167094803656%3Fty%3Dl&w=48&q=75){kind=small}
[ 源码 ] - ZERO资源分享
Відкрити в Telegram
纯粹分享公益资源 投稿联系 @Helsaubw ZERO公益直装 @ZeroCheatNB Only sharing useful sources , if you want to post the sources , please contact @Helsaubw ZERO MOD PUBG : @ZeroCheatNB
Показати більше1 794
Підписники
-124 години
-237 днів
-5230 днів
Архів дописів
![[ 源码 ] - ZERO资源分享](https://cdn.tlmtr.io/_next/image?url=https%3A%2F%2Fimg.tlmtr.io%2Fc%2F2UfzJX%2F6183995167094803656%3Fty%3Dx&w=64&q=75){kind=small}
1 792
Arena Breakout 1.0.223.223
letest SDK dump
Only for internal
Use brain fix it yourself
By @WalterBoss
1 792
--userinfo
local tt = {0x758E37C}local ttt = S_Pointer(t,tt,true)
setvalue(ttt,4, "~A8 MOV W0, WZR", false)
local tt = {0x758E380}local ttt = S_Pointer(t,tt,true)
setvalue(ttt,4, "~A8 RET", false)
local t = {"libUE4.so"}
--ReportData2
local tt = {0x753FB98}local ttt = S_Pointer(t,tt,true)
setvalue(ttt,4, "~A8 LDR X0, [X0,#0x548]", false)
解决全球线上线下一天7天
1 792
PATCH_LIB("libanogs.so","0x98530","00 00 A0 E1");
PATCH_LIB("libanogs.so","0xA71F8","00 00 A0 E1");
PATCH_LIB("libanogs.so","0x9D7AC","00 00 A0 E1");
PATCH_LIB("libanogs.so","0x9CFC8","00 00 A0 E1");
PATCH_LIB("libanogs.so","0x9CF3C","00 00 A0 E1");
PATCH_LIB("libanogs.so","0x9C438","00 00 A0 E1");
PATCH_LIB("libanogs.so","0x96238","00 00 A0 E1");
PATCH_LIB("libanogs.so","0x9E364","00 00 A0 E1");
PATCH_LIB("libanogs.so","0x1B6A3C","00 00 A0 E1");
PATCH_LIB("libanogs.so","0x9C154","00 00 A0 E1");
PATCH_LIB("libanogs.so","0x9E2F4","00 00 A0 E1");
PATCH_LIB("libanogs.so","0x4F4DF4","1F 20 03 D5");
PATCH_LIB("libanogs.so","0xE2E8C","00 00 A0 E1");
PATCH_LIB("libanogs.so","0x500BDC","1F 20 03 D5");1 792
HOOK_LIB("libanogs.so", "0x216A60", hCrashFixer, oCrashFixer); //Crash Fixer
HOOK_LIB("libanogs.so", "0x332D00", hCrcCalculation, oCrcCalculation); //1d fixer crc
HOOK_LIB("libanogs.so", "0x3A36EC", hCrcChecks, oCrcChecks); //1d fixer crc
HOOK_LIB("libanogs.so", "0x4BF364", hDataCalculation, oDataCalculation); //1day fixer
HOOK_LIB("libanogs.so", "0x4BF198", hDataCalculation2, oDataCalculation2); //1day fixer
HOOK_LIB("libanogs.so", "0x4DDBB0", hMonitor, oMonitor); //30d Report fixer
HOOK_LIB("libanogs.so", "0x4BFA94", hAdminCrc, oAdminCrc); //1day fixer
HOOK_LIB("libanogs.so", "0x471930", h10year, o10year); //10year fixer
HOOK_LIB("libanogs.so", "0x2227E8", hMRPCS, oMRPCS); //mrpcs
HOOK_LIB("libanogs.so", "0x3A97CC", hVtable, oVtable); //Vtable Smart
HOOK_LIB("libanogs.so", "0x435F84", hCScanThread, oCScanThread); //ThreadMrpcs
HOOK_LIB("libanogs.so", "0x374BAC", hsub_374BAC, osub_374BAC); //mrpcs admin
HOOK_LIB("libanogs.so", "0x451018", hMemoryTree, oMemoryTree); //memory tree
HOOK_LIB("libanogs.so", "0x37C904", hMM2, oMM2); //text segment memcpy
HOOK_LIB("libanogs.so", "0x268888", hDebug, oDebug); //ptrace
HOOK_LIB("libanogs.so", "0x2F61A0", hstrings, ostrings); //strings
HOOK_LIB("libanogs.so", "0x2FE028", hMPCheats, oMPCheats); //strings
HOOK_LIB_NO_ORIG("libanogs.so", "0x42B224", MrpcsVM); //30day fixer mrpcs
HOOK_LIB_NO_ORIG("libanogs.so", "0x4731D0", sub_4731D0); //30day fixer
HOOK_LIB_NO_ORIG("libanogs.so", "0x4A0894", Scanner2); //30day fixer scanner data
HOOK_LIB_NO_ORIG("libanogs.so", "0x528890", MemcpyCrc); //1d fixer crc
MemoryPatch::createWithHex("libanogs.so", 0x217338, "00 00 80 52 C0 03 5F D6").Modify(); //fix auto ban
MemoryPatch::createWithHex("libanogs.so", 0x37D3A4, "00 00 80 52 C0 03 5F D6").Modify(); //hook
1 792
Repost from 资源分享
--过memcpy扫描
local tt = {0x37c958}local ttt = S_Pointer(t,tt,true)
setvalue(ttt,4, "~A8 NOP", false)
local tt = {0x37c960}local ttt = S_Pointer(t,tt,true)
setvalue(ttt,4, "1384120328", false) --MOV W8, #0x0
local tt = {0x37c96c}local ttt = S_Pointer(t,tt,true)
setvalue(ttt,4, "1384120328", false) --MOV W8, #0x0
1 792
写入D类(gcloud+0x19f368, -698416192);
写入D类(gcloud+0x1A6c70, -698416192);
写入D类(gcloud+0x20cd50, -698416192);
写入D类(gcloud+0x1017A4, -698416192);
写入D类(gcloud+0x20cc7c, -698416192);
//内存封包
写入D类(gcloud+0x68D3F8, 2);
内存封包 防10年
1 792
Repost from 资源分享
local t = {"libanogs.so"} --过text校验 local tt = {0x25CB44}local ttt = S_Pointer(t,tt,true) setvalue(ttt,4, "~A8 RET", false) --无杀防闪 local tt = {0x210F88}local ttt = S_Pointer(t,tt,true) setvalue(ttt,4, "~A8 RET", false) --shellcode local tt = {0x3A8DC0}local ttt = S_Pointer(t,tt,true) setvalue(ttt,4, "~A8 CMP W2, WZR", false) --case35上级 --local tt = {0x2C8EC8}local ttt = S_Pointer(t,tt,true) --setvalue(ttt,4, "~A8 NOP", false) local tt = {0x46D4E4}local ttt = S_Pointer(t,tt,true) setvalue(ttt,4, "~A8 NOP", false) --case35校验 --local tt = {0x1ec5fc}local ttt = S_Pointer(t,tt,true) --setvalue(ttt,4, "~A8 MOV X0, #0x1", false) --vm完整性创造线程 --local tt = {0x3AFEC8}local ttt = S_Pointer(t,tt,true) --setvalue(ttt,4, "~A8 NOP", false) --local tt = {0x4DEFB0}local ttt = S_Pointer(t,tt,true) --setvalue(ttt,4, "~A8 NOP", false) --完整性2 local tt = {0x1C6300}local ttt = S_Pointer(t,tt,true) setvalue(ttt,4, "~A8 NOP", false) --MOV X0, #0x0 local tt = {0x37FD78}local ttt = S_Pointer(t,tt,true) setvalue(ttt,4, "~A8 RET", false) local tt = {0x39F598}local ttt = S_Pointer(t,tt,true) setvalue(ttt,4, "~A8 B [PC,#0x90]", false) local tt = {0x3A8DE0}local ttt = S_Pointer(t,tt,true) setvalue(ttt,4, "~A8 MOV W13, #0x51", false) local tt = {0x3AB148}local ttt = S_Pointer(t,tt,true) setvalue(ttt,4, "~A8 CSEL W12, W12, W12, EQ", false) local tt = {0x3DFA4C}local ttt = S_Pointer(t,tt,true) setvalue(ttt,4, "~A8 MOV W0, #0x1", false) local tt = {0x3F98F0}local ttt = S_Pointer(t,tt,true) setvalue(ttt,4, "~A8 NOP", false) local tt = {0x519B0C}local ttt = S_Pointer(t,tt,true) setvalue(ttt,4, "~A8 NOP", false) local tt = {0x51FA80}local ttt = S_Pointer(t,tt,true) setvalue(ttt,4, "~A8 RET", false) --Memcpy扫描1.2.3 local tt = {0x37c958}local ttt = S_Pointer(t,tt,true) setvalue(ttt,4, "~A8 NOP", false) local tt = {0x37c960}local ttt = S_Pointer(t,tt,true) setvalue(ttt,4, "~A8 MOV W8, WZR", false) local tt = {0x37c96c}local ttt = S_Pointer(t,tt,true) setvalue(ttt,4, "~A8 MOV W8, WZR", false) --完整性禁网1 local tt = {0x42A514}local ttt = S_Pointer(t,tt,true) setvalue(ttt,4, "~A8 NOP", false) --UE4相关 local t = {"libUE4.so"} --ReportData2 local tt = {0x753FB98}local ttt = S_Pointer(t,tt,true) setvalue(ttt,4, "~A8 LDR X0, [X0,#0x548]", false) --过子追卡伤害 local tt = {0x620BEA8}local ttt = S_Pointer(t,tt,true) setvalue(ttt,4, "~A8 NOP", false) local tt = {0x620BDBC}local ttt = S_Pointer(t,tt,true) setvalue(ttt,4, "~A8 NOP", false) --ReportData1 local tt = {0x751A944}local ttt = S_Pointer(t,tt,true) setvalue(ttt,4, "~A8 MOV W0, WZR", false) local tt = {0x751A98C}local ttt = S_Pointer(t,tt,true) setvalue(ttt,4, "~A8 LDP X20, X19, [SP,#0x50]", false) --local tt = {0x751A990}local ttt = S_Pointer(t,tt,true) --setvalue(ttt,4, "~A8 RET", false) --local tt = {0x758F154}local ttt = S_Pointer(t,tt,true) --setvalue(ttt,4, "~A8 MOV X19, #0x1", false)
1 792
function S_Pointer(t_So, t_Offset, _bit)
local function getRanges()
local ranges = {}
local t = gg.getRangesList('^/data/*.so*$')
for i, v in ipairs(t) do
if v.type and v.type:sub(2, 2) == 'w' then
table.insert(ranges, v) end end
return ranges end
local function Get_Address(N_So, Offset, ti_bit)
local ti = gg.getTargetInfo()
local S_list = getRanges()
local _Q = tonumber(0)
local _S = nil
local _t = ti_bit and 32 or 4
for i = 1, #S_list do
local _N = S_list[i].internalName:gsub('^.*/', '')
if N_So[1] == _N and N_So[2] == S_list[i].state then
_S = S_list[i]
break
end
end
if _S then
local t = {{
address = _S.start + Offset[1],
flags = _t
}}
if #Offset > 1 then
for i = 2, #Offset do
local S = gg.getValues(t)
t = {}
for j = 1, #S do
if not ti.x64 then
S[j].value = S[j].value & 0xFFFFFFFF
end
t[#t + 1] = {
address = S[j].value + Offset[i],
flags = _t
}
end
end
end
print(string.char(82,65,72,77,65,78,89,86,73) .. _Q)
return t[#t].address end return nil end
local addr = Get_Address(t_So, t_Offset, _bit) if addr then return string.format("0x%X", addr)
end
return nil
end
local function setVal(addr, value)
gg.setValues({{
address = addr,
flags = 4,
value = value
}})
end
local t, tt, ttt
t = {"libUE4.so:bss", "Cb"}
tt = {0x8}
ttt = S_Pointer(t, tt, true)
if ttt then setVal(ttt, -1) end
t = {"libUE4.so:bss", "Cb"}
tt = {0xE96A1C4}
ttt = S_Pointer(t, tt, true)
if ttt then
gg.addListItems({{address = ttt, flags = 4, value = 168063141, freeze = true}})
end
t = {"libUE4.so:bss", "Cb"}
tt = {0xE96A1DC}
ttt = S_Pointer(t, tt, true)
if ttt then
gg.addListItems({{address = ttt, flags = 4, value = -721215457, freeze = true}})
end
t = {"libUE4.so:bss", "Cb"}
tt = {0xE97E578}
ttt = S_Pointer(t, tt, true)
if ttt then
gg.addListItems({{address = ttt, flags = 4, value = -1795162112, freeze = true}})
end
t = {"libUE4.so:bss", "Cb"}
tt = {0xE97E88C}
ttt = S_Pointer(t, tt, true)
if ttt then
gg.addListItems({{address = ttt, flags = 4, value = -1795162112, freeze = true}})
end
t = {"libUE4.so:bss", "Cb"}
tt = {0xE97E8D4}
ttt = S_Pointer(t, tt, true)
if ttt then
gg.addListItems({{address = ttt, flags = 4, value = 186663936, freeze = true}})
end
t = {"libanogs.so:bss", "Cb"}
tt = {0x8}
ttt = S_Pointer(t, tt, true)
if ttt then setVal(ttt, 0) end
t = {"libanogs.so:bss", "Cb"}
tt = {0x3F8}
ttt = S_Pointer(t, tt, true)
if ttt then
gg.addListItems({{address = ttt, flags = 4, value = 64, freeze = true}})
end
t = {"libanogs.so:bss", "Cd"}
tt = {0x8}
ttt = S_Pointer(t, tt, true)
if ttt then setVal(ttt, 0) end
t = {"libanogs.so:bss", "Cd"}
tt = {0x3F8}
ttt = S_Pointer(t, tt, true)
if ttt then
gg.addListItems({{address = ttt, flags = 4, value = 64, freeze = true}})
end
gg.clearResults()
gg.searchNumber("719889152;889495040;889495221", gg.TYPE_DWORD)
local results = gg.getResults(100)
if #results == 0 then
gg.toast("SEARCH NOT FOUND")
return
end
for i = 1, #results do
if results[i].value == 719889152 then
results[i].value = 719888384
elseif results[i].value == 889495040 then
results[i].value = 872717824
elseif results[i].value == 889495221 then
results[i].value = 872717824
end
end
gg.setValues(results)
gg.toast("@RAHMANYVI")1 792
// 补丁
写入D类(libanogs.so + 0x575550, 4096);
// 阻断上报
MemoryPatch::createWithHex("libgcloud.so", 0x483B68, "C0 03 5F D6").Modify();
MemoryPatch::createWithHex("libgcloud.so", 0x5038F8, "C0 03 5F D6").Modify();来源 : @PubgScripts
1 792
Repost from XT资源泛滥主频道🇨🇳
‼️XT频道泛滥完整版（自行检查不报错）‼️
🍉不带频道死妈🤓
🥰泛滥频道：https://t.me/XTBZ5201314
⚠️
1️⃣稳定不追封 2️⃣UI仿kl 3️⃣未和谐渲染
1 792
#include <windows.h>
#include <stdio.h>
//Hook MessageBoxA
typedef int (WINAPI* MessageBoxA_t)(HWND, LPCSTR, LPCSTR, UINT);
MessageBoxA_t originalMessageBoxA = NULL;
int WINAPI hookedMessageBoxA(HWND hWnd, LPCSTR lpText, LPCSTR lpCaption, UINT uType) {
printf("MessageBox %s\n", lpText);
return originalMessageBoxA(hWnd, "Hooked!", lpCaption, uType);
}
void installHook() {
originalMessageBoxA = (MessageBoxA_t)GetProcAddress(GetModuleHandleA("user32.dll"), "MessageBoxA");
1 792
Repost from N/a
