Solved HELP me on making Debugger such like Cheat Engine become UNDETECTABLE.

[kitaiman]

Hi,

I have a problem here, when ever I try to debug a game process a error will come out that say "Hack Detected' which is caused by the Anti-Cheat program. Then I trying search why the debugger get detected and how it detected. Then I find out that the Anti-Cheat program protect or hook DbgBreakingpoint, DbgUiRemotebreaking, NtDeviceIoControlFile, NtOpenProcess, NtProtectVirtualMemory, NtReadVirtualMemory, NtWriteVirtualMemory to detect when ever a cheat program like Cheat Engine hook on them.

So, my question is how to unhook them from the anti-Cheat program to make Cheat engine become detectable?

 

[Rake]

Open Cheat Engine > Settings > Dubugger Options > Debuger interface config
Check the option "Try to prevent detection of the debugger".

Use VEH debugger

read
https://guidedhacking.com/threads/how-to-get-started-with-anticheat-bypass.9882/

 

[kitaiman]

nah don't worry about the ban stuff... The game that I trying to hack is only ban the id player not my ip .. So if I get detected I only make a new id .. So can you help me..

 

[kitaiman]

Why, it against a rule or something?

 

[kitaiman]

Ermm..... you want me to change string or something in cheat engine so it can't cannot be detected by anti-cheat. But I make a short cut for that because I manage to hide cheat engine process from being detected by the anti-cheat which I able to scan memory on the game process then edit or change them. The only thing is detected when ever I try to attach debugger to the game process then it become detected. I think that anti-cheat protect this DbgBreakingpoint, DbgUiRemotebreaking, NtDeviceIoControlFile, NtOpenProcess, NtProtectVirtualMemory, NtReadVirtualMemory, NtWriteVirtualMemory from being hook.

 

[kitaiman]

Thank you for the info, but the thing is I want make the anti-cheat to unhook the function so I can use the cheat engine with out getting error of detected.

 

[kitaiman]

Sorry for late reply, I'm already done that but still get detected.