EverScan - An Open Source Warden Scanner menu

User Tag List

Page 1 of 2 12 LastLast
Results 1 to 15 of 21
  1. #1
    DarkLinux's Avatar Former Staff
    CoreCoins Purchaser Authenticator enabled
    Reputation
    1584
    Join Date
    May 2010
    Posts
    1,824
    Thanks G/R
    188/531
    Trade Feedback
    16 (100%)
    Mentioned
    6 Post(s)
    Tagged
    0 Thread(s)

    EverScan - An Open Source Warden Scanner


    Info:
    EverScan is an open source Warden scanner. EverScan does not need updates, unless Warden changes... The address and length of the scan will be dumped to a file. The address and length will also be displayed in game. B/c of the scanning method used EverScan could hook and crash wow. The last time I release a warden scanner people asked "what does it do?" -_- So EverScan just tells you what address not to change when coding a hack or bot.


    You will need :

    -Microsoft DirectX SDK (June 2010) (included, still need End-User Runtime)

    -Detours Express 3.0 (included)

    -An injector (use CE or something)

    -WoW trial account




    How to use :

    -Set wow to Directx 9

    -Log in, must be in game for Warden to load

    -Open CE or anything and inject EverScan.dll and run SetHooks

    CE -> Memory View -> Tools -> Inject Dll -> EverScan.dll -> Yes -> SetHooks -> Ok


    Set up compiler :
    http://darkenedlinux.com/mmowned/EverScan/1.png

    http://darkenedlinux.com/mmowned/EverScan/2.png

    http://darkenedlinux.com/mmowned/EverScan/3.png

    You will need to change the path to the Directories in the project.

    Include Directories
    Detours Express 3.0\include
    Microsoft DirectX SDK (June 2010)\Include

    Library Directories
    Microsoft Research\Detours Express 3.0\lib.X86
    Microsoft DirectX SDK (June 2010)\Lib\x86


    ScreenShot:




    Download : EverScan v1.0


    Virus Scan : EverScan v1.0 Virustotal


    Other :
    Leave a comment if you have any improvements or ideas. I do not take credit as lots of the code I have found from all over the web. I would like this to be a community project that we can all work on and make it better Also Rep / comment if you like it and would like to see more

    Also, Do it your self
    http://www.ownedcore.com/forums/worl...ml#post2107572 (Simple Warden Check)
    Last edited by DarkLinux; 06-24-2016 at 10:52 PM.

    EverScan - An Open Source Warden Scanner
  2. Thanks eSko, CrazyCo (2 members gave Thanks to DarkLinux for this useful post)
  3. #2
    l0l1dk's Avatar Elite User

    Reputation
    499
    Join Date
    Sep 2010
    Posts
    342
    Thanks G/R
    1/6
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Nice work. +4 Rep.

    Also, you could redirect scans in the .text and .rdata sections to the WoW binary (don't redirect .data though, see here ([Question] Warden Scanner and hooking)), or just check against a list of known scans if you wanted to stop Warden from detecting hacks by looking for modified bytes.
    Last edited by l0l1dk; 09-24-2012 at 02:19 AM.

  4. #3
    DisturbingEffect's Avatar Contributor
    Reputation
    123
    Join Date
    Mar 2009
    Posts
    382
    Thanks G/R
    0/5
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Great work mate!

  5. #4
    Cypher's Avatar Kynox's Sister's Pimp
    Reputation
    1356
    Join Date
    Apr 2006
    Posts
    5,368
    Thanks G/R
    0/4
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    ​Good job mate.

  6. #5
    DarkLinux's Avatar Former Staff
    CoreCoins Purchaser Authenticator enabled
    Reputation
    1584
    Join Date
    May 2010
    Posts
    1,824
    Thanks G/R
    188/531
    Trade Feedback
    16 (100%)
    Mentioned
    6 Post(s)
    Tagged
    0 Thread(s)
    Thanks everyone for the support! Anything I should add?

  7. #6
    eracer's Avatar Contributor
    Reputation
    201
    Join Date
    Feb 2011
    Posts
    75
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Could you maybe make the dump feature work better? now it just closes out the file when you hit F6, so if you hit it again after another address shows up it doesn't do anything.
    I am thinking make it repopulate the text file and close it out every time the F6 key is pressed.

    nice work

  8. #7
    DarkLinux's Avatar Former Staff
    CoreCoins Purchaser Authenticator enabled
    Reputation
    1584
    Join Date
    May 2010
    Posts
    1,824
    Thanks G/R
    188/531
    Trade Feedback
    16 (100%)
    Mentioned
    6 Post(s)
    Tagged
    0 Thread(s)
    Ya, I guess I could add that Ill try and update it tonight...

    or just add

    Code:
    seekp(ios::end);
    after the dump.open

  9. #8
    oldmanofmen's Avatar Member
    Reputation
    12
    Join Date
    Jan 2010
    Posts
    104
    Thanks G/R
    4/3
    Trade Feedback
    3 (100%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    This is really interesting work but when I try to run this it will only display the scans in the text file and not inside WoW. I'm running WoW under directX9. Otherwise, great work!
    Last edited by oldmanofmen; 12-02-2012 at 10:03 AM.

  10. #9
    Wilbo007's Avatar Contributor CoreCoins Purchaser
    Reputation
    80
    Join Date
    Jun 2011
    Posts
    210
    Thanks G/R
    5/3
    Trade Feedback
    3 (100%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    can I use this on my main account

  11. #10
    DarkLinux's Avatar Former Staff
    CoreCoins Purchaser Authenticator enabled
    Reputation
    1584
    Join Date
    May 2010
    Posts
    1,824
    Thanks G/R
    188/531
    Trade Feedback
    16 (100%)
    Mentioned
    6 Post(s)
    Tagged
    0 Thread(s)
    Hmm odd, it crashes.. Ill look into why its doing that... I dont think you would want to use this on your main account.. It would be funny if Blizzard patched my hook..

  12. #11
    oldmanofmen's Avatar Member
    Reputation
    12
    Join Date
    Jan 2010
    Posts
    104
    Thanks G/R
    4/3
    Trade Feedback
    3 (100%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by DarkLinux View Post
    Hmm odd, it crashes.. Ill look into why its doing that... I dont think you would want to use this on your main account.. It would be funny if Blizzard patched my hook..
    Yes, I managed to fix that problem after stepping through the assembly code in WoW. There's a NULL pointer in function bool hook(DWORD HookAddress, DWORD CaveAddress), the pointer byteP points to NULL and is then written to with E9. Hope that helps, and thanks again.

  13. #12
    oldmanofmen's Avatar Member
    Reputation
    12
    Join Date
    Jan 2010
    Posts
    104
    Thanks G/R
    4/3
    Trade Feedback
    3 (100%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    I think your PatternScan function is broken it always seems to return 0 (false).

  14. #13
    DarkLinux's Avatar Former Staff
    CoreCoins Purchaser Authenticator enabled
    Reputation
    1584
    Join Date
    May 2010
    Posts
    1,824
    Thanks G/R
    188/531
    Trade Feedback
    16 (100%)
    Mentioned
    6 Post(s)
    Tagged
    0 Thread(s)
    The method I used to find Warden is really bad.. Its fast but does not always work If the RegionSize, State or Type of the code block warden is in changes the pattern scan will not work. But I like speed And it works.. hmm that odd..

    Last edited by DarkLinux; 12-02-2012 at 11:26 PM.

  15. #14
    oldmanofmen's Avatar Member
    Reputation
    12
    Join Date
    Jan 2010
    Posts
    104
    Thanks G/R
    4/3
    Trade Feedback
    3 (100%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by DarkLinux View Post
    The method I used to find Warden is really bad.. Its fast but does not always work If the RegionSize, State or Type of the code block warden is in changes the pattern scan will not work. But I like speed And it works.. hmm that odd..

    Got it working finally, really excellent work you've got here.

    I very rarely give rep out on here but this is definitely deserving of all the rep I can give, +3 rep from me!

  16. #15
    Natrist's Avatar Member
    Reputation
    11
    Join Date
    Mar 2013
    Posts
    146
    Thanks G/R
    9/3
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Very great program!
    I'd give you rep but I don't have any to give. >.<

Page 1 of 2 12 LastLast

Similar Threads

  1. Wow hack for 2.3.3 [Open Source] Delphi
    By robotkid in forum WoW Memory Editing
    Replies: 15
    Last Post: 05-23-2018, 10:53 PM
  2. [source] C# Warden scanner
    By Wildbreath in forum WoW Memory Editing
    Replies: 7
    Last Post: 03-18-2014, 01:46 AM
  3. MMOGLIDER is going OPEN SOURCE!
    By Premium-mmo in forum Community Chat
    Replies: 9
    Last Post: 09-26-2013, 11:37 PM
  4. DampeBot (Open source)
    By swollen in forum World of Warcraft Bots and Programs
    Replies: 14
    Last Post: 03-23-2008, 10:03 AM
  5. Glider Status in your signature *OPEN SOURCE*
    By Marlo in forum World of Warcraft Bots and Programs
    Replies: 8
    Last Post: 09-16-2007, 05:12 PM
All times are GMT -5. The time now is 05:00 PM. Powered by vBulletin® Version 4.2.3
Copyright © 2024 vBulletin Solutions, Inc. All rights reserved. User Alert System provided by Advanced User Tagging (Pro) - vBulletin Mods & Addons Copyright © 2024 DragonByte Technologies Ltd.
Digital Point modules: Sphinx-based search