search

LWSS / Fuzion

Fuzion is a free-as-in-freedom CSGO cheat for linux
GNU General Public License v3.0
336 stars 149 forks source link

[Feature Request] - Set Medals server-side #269

Open 70001 opened 5 years ago

70001 commented 5 years ago

The medals which are displayed to other users are set by a package send from the client to the steam server.

There is no server-side check whether the user really owns these medals.

It would be nice to have a feature to spoof these medals (which then will be visible to other players in MM).

The only problem is that the packet setting the medals is sent upon csgo starting. I am not sure how to exactly get this working the correct way.

Reference: https://www.unknowncheats.me/forum/counterstrike-global-offensive/206569-setmymedals.html [1] https://www.unknowncheats.me/forum/counterstrike-global-offensive/245745-intercepting-game-coordinator-messages.html [2]

TuxLinus commented 5 years ago

You can send any packet at any time to the server. It not has to be sent on start of CS:GO.

KNO56 commented 5 years ago

This was actually a pretty (((large))) feature that got implemented into some P2Cs and even Indigo about half a year ago. I personally haven't checked it out since then, but iirc I was in a lobby recently with someone who was spoofing their rank, so that's still possible too.

LWSS commented 5 years ago

First we should get these 2 hooks

oSendMessage =              (SendMessageFn)                 H::SteamGameCoordinator->HookFunction((DWORD)Hooks::SendMessage, 0);
oRetrieveMessage =          (RetrieveMessageFn)             H::SteamGameCoordinator->HookFunction((DWORD)Hooks::RetrieveMessage, 2);

Then what I think people do is sig the constructor of the packet or if it's protobufs I think we can just make them if we know the layout

maikel233 commented 5 years ago

This was actually a pretty (((large))) feature that got implemented into some P2Cs and even Indigo about half a year ago. I personally haven't checked it out since then, but iirc I was in a lobby recently with someone who was spoofing their rank, so that's still possible too.

What i did was just copy pasted the indigo sources and converted the hooks. Bcuz the indigo hooks were detected. It was a pain in the @SS to make that work tho.

telans commented 5 years ago

Is this still possible?

maikel233 commented 4 years ago

Is this still possible?

Yes