Posted March 24, 200619 yr ok i have an idea to block vac2 from banning anyone, basicly what i can gather is that the way vac blocks people is by acually sending a packet of information to a server that blocks a users steam account. Since the packet of data is coming from a steam client and the client is run through someones computer, if you were to sniff the packets this program sent through ethereal which is bound to pick up more then just a cheat packet and find out what kindof packet is sent to the vac server to ban accounts and molest that packet and empty it or block it, vac would be held at a completly worthless state. I'm sure any kindof filter/program block they run is crackable if there even is any, since the client side is run off your computer. You should be able to monitor anything transversed between the client and server, as far as even edit the client's code. So what im planning on doing is running source regularly and checking to see what kindof packets of data are encrypted into the vac server then cracking them and finding out whats being sent back and forth, then just write a program that blocks all the packets being sent to the server and sending out default packets that will have already been recorded to completly forge a regular normal operational client as far as vac is conscerned which will re-allow all cheats and nullify vac. I'm going to need some help with this seeing my current source account is vac banned which royally piss's me off seeing i just tried one for the first time. anyone who wants to help pm me on xfire under shatteredangel. I NEED any information as to how vac client and server operate and and if you created a hack i need to know how vac would pick it up if you know, this way im sure i can find a common grounds as to how vac is catching these things and totally fuck them over. fuck vac. #antivac
March 24, 200619 yr Author yes but if your sending molested packets in place of the others then it might work, which is why im saying sending default packets. plus the only way the server can find out if the client isnt sending packets is from the client so if you alter the client slightly or create a second crack to stop it from closing then your in
March 24, 200619 yr Hmm.. That sounded better... But then the packets won't match the servers, which will disconnect you.
March 24, 200619 yr Author thats why im saying record a basic logon connection and see how the packets fluctuate and create a scripter to write the packets so they do. the packets aren't encrypted so its free grabs. Im not talking about edit every packet sent just the ones to get you on. theres no way in hell vac checks the id's integrity with every packet sent. vac 2 only checks for outside protocal at connection since none of the hacks start when your already running the game so basicly once you get in your home free from what i can tell so far
March 24, 200619 yr Well, i'm pretty sure that something as widely used as VAC wouldn't check your packets just once. For example, if you have something like Protowall or PeerGuardian on when you connect to the server, you won't be able to connect. However, if you turn it on after you connect to the server, it'll most likely drop you. I'm not sure if it still does that, but it used to anyways. Another example would be that, let's say we have an undetected hack, all except one thing. You could go undetected the whole time you play, unless the hack is using a detected method for one aspect. So theoretically, you won't get banned until you turn tht specific function on, and that could be in the middle of a game even. (This was all back in the day though, so I'm not really sure about now.) But anyways, someone was saying that you can't connect to a server if you block/change and of the packets you send out, which it correct. So i'm not sure how far that un-encrypted packet theory is going to get you, might work though... As for modifying a filter program, Peer Guardian 2 is open source I think, try looking it up.
March 24, 200619 yr Author well i checked the packets with ethereal and none of them are encrypted and i ran a source account while monitoring packet flow and vac only popped up once, so what im thinking is acually modifying the client not necessarily the packet flow only, but what im talking about is making it to where the client plays dumb and doesnt send anything but default necessary packets to vac and vac from what im told checks console abnormalities texture abnormalities and game interferance.vac IS NOT the server so server packets are irrelevant because vac is a filter more a less and only picks up on specific packets that are techinically redflagged i guess??? (im still working out kinks in the theory) so what im thinking of now is altering the clients packet flow to the content server which is where vac is running.what i have check is to see if both the literal game server and the content server have to be identical and if theres anything checking the two of them at the same time. which basicly i will alter one and see if it closes. not sure how im going to do this if anyone has any ideas that would be great. basicly login->content server->computer interface->host of server and content server vac fitler ? can you switch them at this point here and molest the packets going to vac filter to look normal and what does it consider to disconnect. the reason this COULD work is BECAUSE of the vac 2 upgrade. ALSO does anyone know why you can join why a vacbanned account through xfire if anyone can figure this out it can be mutated into something very pretty
March 24, 200619 yr ALSO does anyone know why you can join why a vacbanned account through xfire if anyone can figure this out it can be mutated into something very pretty I'm not really to well informed about how VAC works, but it's probably something like this. When you connect to a server from the server list in a game, I could only guess it goes like this: Client -> Master Server -> Child Server. (Where you actually play.) However, with X-Fire, it's maybe like this: Client -> Copy of List (Not Authentic, so no authentic check of you "redflagged" packet. (This is according to your theory by the way.)) -> Child Server. So X-Fire somewhat acts as a proxy for you Steam Account... I guess. But, last Summer (?) and earlier there was a program called Vac Disabler which was just an altered dll file, maybe you could do some more research on that.
March 24, 200619 yr Author yo dude you have someway i could acually talk to you instead of playing forum tag
