search

t1f7 / scp-internal-il2cpp

il2cpp internal cheat for SCP SL
58 stars 15 forks source link

Injector? #36

Open totorowldox opened 3 years ago

totorowldox commented 3 years ago

Long time no see. I'm back to play SCPSL now.

But when I updated the offsets and tried to inject the dll. I find that the LoadLibrary is no longer work. I also tried SetThreadContext but failed with WinError 87. So how can I inject it now? Do ya have any solutions?

totorowldox commented 3 years ago

The public injectors will be banned, and I have no idea how to make an injector.

t1f7 commented 3 years ago

The public injectors will be banned, and I have no idea how to make an injector.

Hi. I released AC bypass on UC.

So how can I inject it now? Do ya have any solutions?

Manual map would still work fine, but you have to rewrite import section mapping to use anything else than using hooked LoadLibrary. You could remove hook from injector to bypass limits.

CreateThread, GetModuleHandle and some other functions are also hooked by AC.

fzp0 commented 3 years ago

maybe thats a bit overkill but i use modmapper loaded with kdmapper

t1f7 commented 3 years ago

maybe thats a bit overkill but i use modmapper loaded with kdmapper

This base is detected as is, I'm not sure kernel injector would make it UD. Currently the best way (in my opinion) would be to keep external (as they have literally nothing against them)

t1f7 commented 2 years ago

actually there's an easy way to inject. the two moments you're getting detected are:

1) Thread creation (even RemoteThread), it is handled with TLS callbacks. Suspend the game before injection and resume after. TLS callback won't trigger while suspended.

2) LoadLibrary is hooked and would trigger on injection, because injector has to solve imports of your DLL. You could remove hook from LoadLibrary while game is suspended to complete an UD injection.

have fun.