[Guide] Tips for trying to avoid simple HackShield detection
As of recently, Hackshield has been detecting a lot of tools. While there are many ways for this to be done, Hackshield currently uses very simple methods for Silkroad. This could change at any time, but for now they seem to be using a really simple protection mode. In this guide, I will go over two approaches that can help, but are not permanent solutions to avoiding Hackshield detection in the most commonly used and detected tools.
ResHack:
Download: ResHack Version 3.4.0 (< 1mb)
We will be using ResHack to change the titles of any GUI related stuff without having to recompile the tool. While being able to recompile a tool can offer more protection through code change, not all tools have source code available. Here is a step by step pictorial guide of modifying an existing tool to help avoid detection:
1. Download and Extract Reshack
Quote:
| Resource HackerTM is a freeware utility to view, modify, rename, add, delete and extract resources in 32bit Windows executables and resource files (*.res). It incorporates an internal resource script compiler and decompiler and works on Win95, Win98, WinME, WinNT, Win2000 and WinXP operating systems. |
We will be using ResHack to change the titles of any GUI related stuff without having to recompile the tool. While being able to recompile a tool can offer more protection through code change, not all tools have source code available. Here is a step by step pictorial guide of modifying an existing tool to help avoid detection:
1. Download and Extract Reshack
