Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Topics - Subsky

Pages: [1] 2 3 4 5
Off Topic / Hello to all
« on: October 08, 2011, 07:15:09 pm »

Just wanted to send out a greeting to all.

Although many would say we had our fair share of disagreements, ultimately- I had a ball whilst on this forum.

Player Zone / Crysis Wars - Head Bone Trigger Aimbot
« on: July 17, 2010, 09:45:37 pm »
Hey all

Was going through the footage of all my hacks and came across one in particular I thought I'd share.

Basically, I take a machine gun and turn it into a sniper  :icon_laugh.

Enjoy  :icon_thumbsup

Random Insanity Board / bla bla bla
« on: February 12, 2009, 06:35:54 am »
Ok i need a cbf file with zoom ... BUT for 1.60v and NO ammohack or anything only zoom !!! not more Undetected!!! that zoom in d/l is shit its dont work on hradba206 .... =(

I get warned for posting a link to a very high quality embedded WMV video demonstrating one of the most accurate aimbots around whilst this idiot continues to ask stupid questions that have been answered many times.

It's no surprise why TKC bores me and a lot of other people I know *yawn*.

TKC is defined as a cheating community- but where is this spirit?  There is no sense of community at all; just rules that restrict my freedom to post an interesting video on my site for everyone to view.  Everyone would rather just waste their time with no hopers trying to get their hands on simple hacks.

I've been around here long enough to earn one additional privillage, surely; but it appears that you don't actually want people showing off their skills as TKC members.   Even when I put my name my videos linking to TKC they still weren't allowed so wtf I don't bother anymore.

Personally I think this community is massively fucked up.

Player Zone / My new site with a new high qualitiy video.
« on: February 05, 2009, 06:33:41 pm »
(Movie links must use YouTbe unless section Moderator gives an deleated) is my new site with a brand new high quality video of my aimbot.

I've improved the prediction algorithm and it makes for one of the most accurate aimbots you'll probably ever see.

There has been a few issues with the video not playing in Mozilla, so use IE if possible.

 Warned befor to follow the hosting rules of the Movie Section. Non approved link deleated and offically warned. Get a section Moderator to OK other hosting first next time.
Following the rules is easy...try it.

Player Zone / Crysis Bone Aimbot #2
« on: January 28, 2009, 07:22:46 pm »
Here is my new and improved Crysis Bone-Based Aimbot featuring:

No spread
No recoil
Prediction (incl. ping).

The red dot indicates the old aimbot, the green the new improved aiming system.

It has near perfect accuracy, just need to add projectile time travel prediction.


I want to record keystrokes in a Java window (with good precision) and am wondering if anyone could name a program that will also playback those recorded strokes?

Player Zone / My Major Work for this Semester (3D Game/Engine)
« on: December 07, 2008, 08:44:50 pm »
As most of you may be aware- I have been studying Game Design & Development for the past 2 years; and am finally at the end of the course.

I've made some pretty interesting stuff- and I'd like to show you my major work.

Think of the 2D Tower Defence style of gameplay- and add a 3rd dimension.

There you have it- Crimson Assault.

Check out a video of it on youtube.


Player Zone / Crysis Bone Aimbot by Subsky
« on: November 08, 2008, 09:22:31 am »
A nice little video of me owning everyone with my very own Crysis Bone Aimbot  :icon_o_o.

*Link removed for no connection and forum section rules violation*(Thanks to Smity for the great DivX hosting!).

Includes No Recoil, Box ESP and burst round shots.

I may add additional features like prediction, Bone-ESP, charms, wallhack.



Player Zone / How to turn an anti-cheat against itself...
« on: October 21, 2008, 10:28:51 pm »
A demonstration of me abusing HRADBA206 to remove everyone; including admins- from a Vietcong 1.6 server (reason: cheating). 

It's quite a unique & hularious video- so check it out!  :icon_thumbsup.

www dot


Player Zone / The Vietcong auto-admin logout system.
« on: October 11, 2008, 10:21:05 am »
My private DirectPlay8 proxy dll, where the hooks have been linked to a Lua/Luabind implementation.  Allows for advanced packet capture, reverse engineering & editing.

Allows me to log into a server with no admin privilages- kick another admins out etc.  Here I set the ping kick, & vote kick the admin after I force them to log out.

Video here.

Thanks to Rav3n for the fantastic hosting!

Vietcong 1 & 2 / VC Aimbot problem.
« on: June 25, 2008, 12:13:24 pm »
This is more a question for the elite here, like MrM.

My aimbot isn't rotating correctly.  Ignoring pitch for now, and focusing only on yaw in the 1st quadrant- this is what I have...

Code: [Select]
void CVietcongAimbot::Update()
VC_LOCALPLAYER* pLocalPlayer = this->GetLocalPlayer();
VC_NETPLAYER* pNetTargetPlayer = this->GetNetTargetPlayer();

if( (this->IsOn()) &&
(NULL != pLocalPlayer) &&
(NULL != pNetTargetPlayer) )
float Xdif;
float Zdif;
float Ydif;
float angleR;

//Target player is in 1st quadrant
if(pNetTargetPlayer->pos.x > pLocalPlayer->pos.x && pNetTargetPlayer->pos.z > pLocalPlayer->pos.z)
Xdif = pNetTargetPlayer->pos.x - pLocalPlayer->pos.x;
Zdif = pNetTargetPlayer->pos.z - pLocalPlayer->pos.z;

angleR = atan(Zdif / Xdif);
pLocalPlayer->fYaw = angleR;

... other quadrants removed, only focusing on first for now.

Vietcong stores rotation values as floats in radians IE 2*PI = 1 full revolution.  No need to convert back and forth from degrees etc.

VietcongAimbot.Update() is called from within DrawIndexedPrimitive(); but I've also tried in GetTransform() and SetTransform()...

I can not see anything wrong with the maths either, yet it doesn't work.

Could someone shed some light on this?

Also, Medic- did you reverse the VC 3D vector to be:

Code: [Select]
struct c_Vector3 { float x; float z; float y; };


Yes, I'm back- been busy the past few days... here's a little something new for the forums.

Spoofing & Spamming in DirectPlay8.

Although it's depreciated now, the DirectPlay8 (COM) interface was once used in a range of games to manage (send and receive) their related networking traffic.

I read somewhere that the protocol was reasonably secure from packet editing and spoofing.  Although it held up in regards to spoofing; simply hooking the IDirectPlay8Client interface in a similiar manner as to that used in Direct3D hooks, and logging calls to Send() is all that is needed to create a trival reverse engineering toolkit.

Having familiarity with vietcong in the past- I decided to see what I could come up with in regards to this kind of interface hacking.  I could not find samples of DirectPlay8 source/binary proxy dlls anywhere; and believed no one had attempted the method (publically anyway).  What I found whilst researching was not only several format string vulnerabilities in VC itself- but a certain client packet that contains a source player ID field, which is sent off the server and blindly processed.

I created a movie featuring this method, and one of the exploits I found using it.  I can spoof the source of all kill packets- creating a mass headache for ALL players.  By ripping through the player structures list, it has the ability to kill all players instantly by expoding the nades at their destination, as well as forcing other players to commit suicide.  What's even better is that I can force logged in admins to kill their whole team and instantly receive an autoTK ban.  :icon_laugh.

Here's a screen...

And enough talking- take a look at in in action!
doubleu doubleu doublew dot speedyshare dot chom slash 198691341
(it's WMV) don't see why it can't be linked to.


If I know you and I trust you- feel free to ask for the binaries in PM, it's HOURS of garenteed fun  :icon_thumbsup.

Vietcong 1 & 2 / VCHook5.0 Aimbot Q.
« on: February 06, 2008, 09:44:21 pm »
This can probably be answered only by Medic- or Rainerstoff; if he's still around...

What kind of aimbot is in VCHook5.0?  Engine based, D3D Head Model Rec style or bone?

Thanks in advance :).

1)  Inject the TMR_D3D8.dll into target process using the loader.
2)  Load the D3DTexModelRecTool/ Enable logging (Options->Start Logging)
3a)  [Optional] Set highlighting colour (Options->Set Colour)
3b)  Load map/level with designed models.
4)  Use the hotkeys to cycle through all the rendered models.


Alternatively, if the FX keys conflict with the game use these hotkeys instead.


5a)  [Optional]  You can save and later reload into the tool the models you have selected by File->Save As.
5b)  Dump the selected models to a .c/.cpp file using File-> Dump -> C/C++ Source -> Models -> All Coloured.

6)  Copy the code generated in the file directly into IDirect3DDevice8::DrawIndexedPrimitive().

For a simple wallhack, just disable the ZBuffer, and call DrawIndexedPrimitive()- then renable it eg.

if(...)   //Bunch of statements generated by D3DTexModelRecTool
          //Model Recognition Information For Colour: XXX

          SetRenderState(D3DRS_ZENABLE, D3DZB_FALSE);
          m_pD3Ddev->DrawIndexedPrimitive(PrimitiveType, minIndex, NumVertices, startIndex, primCount);
          SetRenderState(D3DRS_ZENABLE, D3DZB_TRUE);

Please don't move this to the TKC download section yet... I want to make sure it works properly for a range of games first.

If it works/doesn't work, please post what D3D8 games you tested it on so I can improve it/fix bugs.


Player Zone / Crysis Wallhack & Chams Vid Uploaded!
« on: January 16, 2008, 04:43:27 pm »
Finally finished it :icon_thumbsup.

I was getting around 20 FPS even with fraps running  :icon_laugh

^ The black texture applied to the gun is shown only when the player is in cloak mode.


Pages: [1] 2 3 4 5