Raised This Month: $12 Target: $400
 3% 

Orpheu: How to make signatures (of bytes)


Post New Thread Reply   
 
Thread Tools Display Modes
klippy
AlliedModders Donor
Join Date: May 2013
Location: Serbia
Old 01-17-2016 , 13:42   Re: Orpheu: How to make signatures (of bytes)
Reply With Quote #101

I'm not sure there is a way to legally acquire cstrike's server DLL without downloading it from Steam yourself. The Linux counterpart of swds.dll is engine_i486.so, and by the way, Linux counterpart of mp.dll is cs.so.
I could upload it for you, because I have both Linux and Windows on my PC and CS installed on both, but I know I am not allowed to upload binary files, so I'm asking for your permission first.
klippy is offline
Bugsy
AMX Mod X Moderator
Join Date: Feb 2005
Location: NJ, USA
Old 01-17-2016 , 13:51   Re: Orpheu: How to make signatures (of bytes)
Reply With Quote #102

Ok, it helps to at least know the file name. I did find it on the net somewhere, I believe sourceforge. I'm not sure how out of date it is though. Let me see if a signature works then we will go from there. Thanks for the help.
__________________
Bugsy is offline
HamletEagle
AMX Mod X Plugin Approver
Join Date: Sep 2013
Location: Romania
Old 01-18-2016 , 06:34   Re: Orpheu: How to make signatures (of bytes)
Reply With Quote #103

https://developer.valvesoftware.com/...m_Installation
You can download the linux version in windows.
__________________
HamletEagle is offline
Rirre
Veteran Member
Join Date: Nov 2006
Old 02-16-2016 , 08:42   Re: Orpheu: How to make signatures (of bytes)
Reply With Quote #104

Someone able to restore the broken images?
Rirre is offline
Arkshine
AMX Mod X Plugin Approver
Join Date: Oct 2005
Old 02-16-2016 , 09:32   Re: Orpheu: How to make signatures (of bytes)
Reply With Quote #105

I've restored the images but I should probably update the tutorial to simplify things.

Essentially, once you know how to display/retrieve bytes, it's just a matter to retrieve the first bytes of each line until you get a unique signature. And you should use by default "?" for "any byte" instead of "*" for "any byte and nothing". Most of case you don't want signature with "*".
__________________
Arkshine is offline
Ghosted
Veteran Member
Join Date: Apr 2015
Location: Georgia
Old 04-30-2016 , 09:28   Re: Orpheu: How to make signatures (of bytes)
Reply With Quote #106

Thanks For Tutor, I Founded Signatures For swds.dll (ReHLDS) for amx 1.8.3
Ghosted is offline
DarthMan
Veteran Member
Join Date: Aug 2011
Old 04-28-2017 , 05:19   Re: Orpheu: How to make signatures (of bytes)
Reply With Quote #107

Quote:
Originally Posted by Arkshine View Post
I've restored the images but I should probably update the tutorial to simplify things.

Essentially, once you know how to display/retrieve bytes, it's just a matter to retrieve the first bytes of each line until you get a unique signature. And you should use by default "?" for "any byte" instead of "*" for "any byte and nothing". Most of case you don't want signature with "*".
Could you please help me here?

PHP Code:
A1 E4 D2 0C 30 83 EC 58  D9 00 DC 05 30 DC 09 30 
Thanks !

Last edited by DarthMan; 04-28-2017 at 05:20.
DarthMan is offline
klippy
AlliedModders Donor
Join Date: May 2013
Location: Serbia
Old 04-28-2017 , 05:30   Re: Orpheu: How to make signatures (of bytes)
Reply With Quote #108

That signature alone can be hard to decipher. You should post the assembly (human readable) and hex too.

Last edited by klippy; 04-28-2017 at 05:30.
klippy is offline
Bugsy
AMX Mod X Moderator
Join Date: Feb 2005
Location: NJ, USA
Old 04-30-2017 , 20:46   Re: Orpheu: How to make signatures (of bytes)
Reply With Quote #109

I created a tool in VB for creating signatures. All you would need to do is copy a block of text from IDA and paste it into the tool and it will generate the entire signature. Maybe I will wait until Arkshine revises the tutorial to make sure my tool has the correct logic.


__________________
Bugsy is offline
Arkshine
AMX Mod X Plugin Approver
Join Date: Oct 2005
Old 05-01-2017 , 04:05   Re: Orpheu: How to make signatures (of bytes)
Reply With Quote #110

Well, I don't have enough knowledge in assembly to affirm whether this opcode is static. As I said in the tutorial, it's easier to take just the first byte of each line until you have a unique signature. No need to bother with the others bytes. It might create longer signatures but doesn't matter much.

And by the way, "?" should be used by default. "?" = any bytes, "*" = any bytes or nothing. Most of time, you want "?".
__________________
Arkshine is offline
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 04:30.


Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Theme made by Freecode