AlliedModders - A vtable dumper that even you can use!

Page 2 of 5

Last »

Show 40 post(s) from this thread on one page

AlliedModders (https://forums.alliedmods.net/index.php)

- Snippets and Tutorials (https://forums.alliedmods.net/forumdisplay.php?f=112)

- - A vtable dumper that even you can use! (https://forums.alliedmods.net/showthread.php?t=281859)

asherkin

06-18-2016 18:18

Re: A vtable dumper that even you can use!

Done some work on this over the last couple days to fix the 2 reported issues.

Binaries compiled with older compilers / strange linkage options are now supported (CS 1.6)
Binaries compiled with newer compilers are now supported (Insurgency)

Chdata

06-25-2016 18:29

Re: A vtable dumper that even you can use!

Any plans to support finding those sigs like @_ZN9CTFPlayer10GetMaxAmmoEii from CTFPlayer::GetMaxAmmo

They're easy to find but it's even easier if it can be automated ;p

Powerlord

06-25-2016 19:15

Re: A vtable dumper that even you can use!

Quote:

Originally Posted by Chdata (Post 2430599)

Any plans to support finding those sigs like @_ZN9CTFPlayer10GetMaxAmmoEii from CTFPlayer::GetMaxAmmo

They're easy to find but it's even easier if it can be automated ;p

Signatures aren't vtables...

asherkin

06-25-2016 19:26

Re: A vtable dumper that even you can use!

Quote:

Originally Posted by Chdata (Post 2430599)

Any plans to support finding those sigs like @_ZN9CTFPlayer10GetMaxAmmoEii from CTFPlayer::GetMaxAmmo

No, while it has the information internally, transferring all the symbols (rather than just the virtual ones) from the worker to the main thread would massively increase the processing time for something that is generally useless and quite far outside the scope.

If you have shell access to a Linux or macOS environment and a copy of server_srv.so, it's as simple as:

Code:

nm server_srv.so | grep GetMaxAmmo

xXDeathreusXx

07-03-2016 17:07

Re: A vtable dumper that even you can use!

Quote:

Originally Posted by Potato Uno (Post 2419321)

The irony is that finding signatures is easier than finding offsets, especially for windows.

Great work as always asherkin.

But but but.... Finding offsets was very easy for me, signatures are witchcraft

micapat

12-03-2016 19:00

Re: A vtable dumper that even you can use!

Hi asherkin,

VTable Dumper doesn't seem to work anymore for CS:GO (I'm writing 'CCSPlayer', 'player', 'RemoveAllItems'... nothing appears).
It should be because of the last CS:GO update (Thx Valve).

Are you working on a fix?

asherkin

12-03-2016 19:01

Re: A vtable dumper that even you can use!

There is no fix, you cannot extract data that does not exist.

Valve have removed symbols from the shipped CS:GO binaries.

xXDeathreusXx

12-05-2016 15:18

Re: A vtable dumper that even you can use!

Quote:

Originally Posted by asherkin (Post 2474934)

There is no fix, you cannot extract data that does not exist.

Valve have removed symbols from the shipped CS:GO binaries.

Which I can only assume they did in an attempt to slow down hackers developing cheats

klippy

12-07-2016 06:32

Re: A vtable dumper that even you can use!

Quote:

Originally Posted by xXDeathreusXx (Post 2475441)

Which I can only assume they did in an attempt to slow down hackers developing cheats

More like attempts to avoid server bans by changing skins etc. Cheat developers need the client binary more than the server one.

Mitchell

12-09-2016 17:40

Re: A vtable dumper that even you can use!

Quote:

Originally Posted by asherkin (Post 2474934)

There is no fix, you cannot extract data that does not exist.

Valve have removed symbols from the shipped CS:GO binaries.

So we're SOL if any of the offsets change?

All times are GMT -4. The time now is 06:55.

Page 2 of 5

Last »

Show 40 post(s) from this thread on one page