Ghosts unban strings/address (Possibly)

02-06-2014, 08:38 PM #1

RatchetBooty

Former Staff

2,017

Posts

30,746

Reputation

2

Credits

Former Staff

Nov 2013

NextGenUpdate

(adsbygoogle = window.adsbygoogle || []).push({}); Found some shit in IDA yesterday regarding Ghosts Bans, pretty sure you can reverse the address and write a PPC function for it, then it can bypass the ban message meaning no bans :yes:

    

seg000:00885CA2 00000011 C BD_USERID_BANNED

seg000:00889364 00000020 C EXE_COD_ONLINE_PERM_BAN_CONSOLE

seg000:0088A0BD 00000017 C EXE_COD_TEMP_BAN_HOURS

seg000:0088A192 00000020 C EXE_COD_FEATURE_TEMP_BAN_PLAYER

seg000:0088C57D 00000022 C BD_CHANNEL_PUBLIC_BAN_NOT_ALLOWED

seg000:00832D50 00000013 C anticheat_bancheck

seg000:0087AC88 00000019 C EXE_DEMONWARE_PLAYER_BAN

seg000:0087B60D 00000009 C banCheck

seg000:0087D4D8 0000001F C EXE_COD_ONLINE_TEMP_BAN_PLAYER

seg000:0087EBDA 00000012 C AntiCheatBanCheck

seg000:0087F3C1 00000016 C EXE_COD_TEMP_BAN_DAYS

seg000:00883A54 0000001F C EXE_COD_ONLINE_PERM_BAN_PLAYER

seg000:00883DF6 0000004D C Time in seconds for a player to be banned from the server after being kicked

seg000:00832D50 00000013 C anticheat_bancheck

seg000:00856EC0 0000000A C anticheat

seg000:00856ED0 00000047 C C:\\trees\\iw6\\code_source\\DemonWare\\bdLobby\\bdAntiCheat\\bdAntiCheat.cpp

seg000:00886F8F 00000019 C liveanticheatunknowndvar

seg000:0088029D 00000019 C EXE_DEMONWARE_DISCONNECT

seg000:008861F3 00000022 C PLATFORM_DISCONNECTED_FROM_SERVER

seg000:0087DD55 0000001E C PLATFORM_DEMONWARE_DISCONNECT

If you find anything please post it on the thread, or if you get something working please post on the thread aswell. Let's hope we can find something and get past this stupid ban system !

Last edited by RatchetBooty ; 02-06-2014 at 09:39 PM.

The following 18 users say thank you to RatchetBooty for this useful post:

Hammy, alexcubano, Asian, BroIDontMod, CoDyMoDz1000XD, coreconfusion, djscoopOwnz, joni_djESP, LaRip8, Mango_Knife, Mayimbe17, Pure Havoc, rocketforce, romolo, sauib786, Winter, XxModxX_XxModxX, xXx-.-Moder

02-06-2014, 08:41 PM #2

Mango_Knife

In my man cave

3,599

Posts

38,751

Reputation

34

Credits

Member

Sep 2012

NextGenUpdate

Originally posted by RatchetBooty

Found some shit in IDA yesterday regarding Ghosts Bans, pretty sure you can reverse the address and write a PPC function for it, then it can bypass the ban message meaning no bans :yes:

    

seg000:00885CA2 00000011 C BD_USERID_BANNED

seg000:00889364 00000020 C EXE_COD_ONLINE_PERM_BAN_CONSOLE

seg000:0088A0BD 00000017 C EXE_COD_TEMP_BAN_HOURS

seg000:0088A192 00000020 C EXE_COD_FEATURE_TEMP_BAN_PLAYER

seg000:0088C57D 00000022 C BD_CHANNEL_PUBLIC_BAN_NOT_ALLOWED

seg000:00832D50 00000013 C anticheat_bancheck

seg000:0087AC88 00000019 C EXE_DEMONWARE_PLAYER_BAN

seg000:0087B60D 00000009 C banCheck

seg000:0087D4D8 0000001F C EXE_COD_ONLINE_TEMP_BAN_PLAYER

seg000:0087EBDA 00000012 C AntiCheatBanCheck

seg000:0087F3C1 00000016 C EXE_COD_TEMP_BAN_DAYS

seg000:00883A54 0000001F C EXE_COD_ONLINE_PERM_BAN_PLAYER

seg000:00883DF6 0000004D C Time in seconds for a player to be banned from the server after being kicked

seg000:00832D50 00000013 C anticheat_bancheck

seg000:00856EC0 0000000A C anticheat

seg000:00856ED0 00000047 C C:\\trees\\iw6\\code_source\\DemonWare\\bdLobby\\bdAntiCheat\\bdAntiCheat.cpp

seg000:00886F8F 00000019 C liveanticheatunknowndvar

If you find anything please post it on the thread, or if you get something working please post on the thread aswell.

Lets hope someone will make something good with that.

The following 3 users say thank you to Mango_Knife for this useful post:

Hammy, clark1226, RatchetBooty

02-06-2014, 08:51 PM #3

Hammy

[b]#Hammy4IMGPerms McCoy

[/b]

3,216

Posts

71,375

Reputation

1,029

Credits

Member

Jun 1997

NextGenUpdate

Originally posted by RatchetBooty

Found some shit in IDA yesterday regarding Ghosts Bans, pretty sure you can reverse the address and write a PPC function for it, then it can bypass the ban message meaning no bans :yes:

    

seg000:00885CA2 00000011 C BD_USERID_BANNED

seg000:00889364 00000020 C EXE_COD_ONLINE_PERM_BAN_CONSOLE

seg000:0088A0BD 00000017 C EXE_COD_TEMP_BAN_HOURS

seg000:0088A192 00000020 C EXE_COD_FEATURE_TEMP_BAN_PLAYER

seg000:0088C57D 00000022 C BD_CHANNEL_PUBLIC_BAN_NOT_ALLOWED

seg000:00832D50 00000013 C anticheat_bancheck

seg000:0087AC88 00000019 C EXE_DEMONWARE_PLAYER_BAN

seg000:0087B60D 00000009 C banCheck

seg000:0087D4D8 0000001F C EXE_COD_ONLINE_TEMP_BAN_PLAYER

seg000:0087EBDA 00000012 C AntiCheatBanCheck

seg000:0087F3C1 00000016 C EXE_COD_TEMP_BAN_DAYS

seg000:00883A54 0000001F C EXE_COD_ONLINE_PERM_BAN_PLAYER

seg000:00883DF6 0000004D C Time in seconds for a player to be banned from the server after being kicked

seg000:00832D50 00000013 C anticheat_bancheck

seg000:00856EC0 0000000A C anticheat

seg000:00856ED0 00000047 C C:\\trees\\iw6\\code_source\\DemonWare\\bdLobby\\bdAntiCheat\\bdAntiCheat.cpp

seg000:00886F8F 00000019 C liveanticheatunknowndvar

If you find anything please post it on the thread, or if you get something working please post on the thread aswell. Let's hope we can find something and get past this stupid ban system !

If this is possible and I get my ban lifted, im fucking Ghost up 10x times hard :wag:

The following 4 users say thank you to Hammy for this useful post:

BroIDontMod, Maty360414, RatchetBooty, RedDotDinosaur

02-06-2014, 09:22 PM #4

SC58

Former Staff

4,467

Posts

119,403

Reputation

1,237

Credits

NextGenUpdate Elite

Sep 2012

NextGenUpdate

You must login or register to view this content.
lol

02-06-2014, 09:29 PM #5

Pure Havoc

Do a barrel roll!

141

Posts

1,290

Reputation

0

Credits

Member

Dec 2010

NextGenUpdate

Originally posted by SC58

You must login or register to view this content.
lol

I will learn one day :derp:

02-06-2014, 09:36 PM #6

RatchetBooty

Former Staff

2,017

Posts

30,746

Reputation

2

Credits

Former Staff

Nov 2013

NextGenUpdate

Originally posted by SC58

You must login or register to view this content.
lol

Share your method please???

02-06-2014, 09:38 PM #7

RatchetBooty

Former Staff

2,017

Posts

30,746

Reputation

2

Credits

Former Staff

Nov 2013

NextGenUpdate

Originally posted by SC58

You must login or register to view this content.
lol

I found this... seg000:0088029D 00000019 C EXE_DEMONWARE_DISCONNECT
seg000:008861F3 00000022 C PLATFORM_DISCONNECTED_FROM_SERVER
seg000:0087DD55 0000001E C PLATFORM_DEMONWARE_DISCONNECT

02-06-2014, 09:41 PM #8

SC58

Former Staff

4,467

Posts

119,403

Reputation

1,237

Credits

NextGenUpdate Elite

Sep 2012

NextGenUpdate

Originally posted by RatchetBooty

I found this... seg000:0088029D 00000019 C EXE_DEMONWARE_DISCONNECT
seg000:008861F3 00000022 C PLATFORM_DISCONNECTED_FROM_SERVER
seg000:0087DD55 0000001E C PLATFORM_DEMONWARE_DISCONNECT

try noping stuff
60 00 00 00

02-06-2014, 09:50 PM #9

RatchetBooty

Former Staff

2,017

Posts

30,746

Reputation

2

Credits

Former Staff

Nov 2013

NextGenUpdate

Originally posted by SC58

try noping stuff
60 00 00 00

Ya but dont i need to know how to reverse the address to find the actual offset, idk how to do that..

02-06-2014, 09:53 PM #10

RatchetBooty

Former Staff

2,017

Posts

30,746

Reputation

2

Credits

Former Staff

Nov 2013

NextGenUpdate

Originally posted by SC58

try noping stuff
60 00 00 00

ok well i did something and now it sayins the ghosts server isnt available, so i think im getting close. its not showing im banned but doesnt let me go pastthe error.

The following user thanked RatchetBooty for this useful post:

BroIDontMod