[N3xtSolutions]

ID: 969496831056838706
https://gyazo.com/70e9a1e0726e423cbb9a18ec7ea0f63a

I really didn't want to spend any time on this but, here we go i guess.

The so-called ESEA/FaceIT proof undetecc cheat made by the highly skilled reverse engineer(13 years) @blaqk (uid=5207384) using an undisclosed ring3 exploit!

Our journey starts with vitamin.exe

This is a .net application that takes an array of bytes(in memory already) and uses runPE to inject into cmd.
This array of bytes happens to be a valid PE image out of the box(shocker)
https://gyazo.com/372b727b1e869cf1f22d9158526127c1
https://gyazo.com/eba0f35f090965b2a2126b38e690a1af


This is the module that does all the undetectable super-secret ring3 exploit stuff.

Let's look at the imports:

https://gyazo.com/842de530edc217ec8dffde14b6fcd459
https://gyazo.com/7a496c6ebcde89d0d220e7c2570fb567

Interesting... secret sauce is maybe a pixel bot?

Here is the main logic:

https://gyazo.com/716c8c54193a657c71fc2b991934a7ff

For those who are not familiar with what you see:

All this does is gets the current cursor position, checks the pixel it is pointing at, and if it matches the desired parameters,
it calls SystemParametersInfo with 0x0071 flag which is SPI_SETMOUSESPEED to change mouse sensitivity.

An aim squeeze(that's what he calls this). It will lower your mouse sensitivity when on an enemy target.

So in conclusion, this is just a quick scam for people to test and get banned after a couple of days. (after paying for the cheat)

Be smart, don't be like this guy.

[SSH]

High quality post, I like it.

[SIM-5049184]

Ah, as I presumed. Thanks

[blaqk]

You have to give admiration for my work though because my work has been undetected for more than year. I knew this was coming but I will stand strong. I knew there was something shady about you but who cares. Good job. I laughed so hard when you said this will get you banned cause it won't. Remember what I gave you was a test cheat not the full cheat ;)

---

I also have to express the fact that you called my cheat "a quick scam" which it is not. This cheat has been undetected ever since I created it. I think this is just quick way for you to discredit me in order to gain trophy points. My cheat is not a scam and it is indeed undetected :)

[Riveryes]

This all reminds me of leguecheat or the esea glow hack from this german/ukrainian guy.

Legitsense

[biscuit deluxe]

You have to give admiration for my work though because my work has been undetected for more than year. I knew this was coming but I will stand strong. I knew there was something shady about you but who cares. Good job. I laughed so hard when you said this will get you banned cause it won't. Remember what I gave you was a test cheat not the full cheat ;)

---

I also have to express the fact that you called my cheat "a quick scam" which it is not. This cheat has been undetected ever since I created it. I think this is just quick way for you to discredit me in order to gain trophy points. My cheat is not a scam and it is indeed undetected :)

Ah yes, the classic "test cheat."

[MindkcuF]

I do like how the guy claims to have given you "half" the cheat after you call him out for blatantly talking shit. Good job

[Menalix]

Ah yes, the classic "test cheat."

hahahah 🤣 so classic

[blaqk]

I do like how the guy claims to have given you "half" the cheat after you call him out for blatantly talking shit. Good job

I hardly think so. If you read his post properly you will know I was not talking rubbish. The cheat actually works and my method of initiating the cheat into memory is out of the box and will evade the anti-cheats scan. The cheat I gave him was indeed a test version and not the full cheat for obvious reasons.

---

hahahah 🤣 so classic

Hey Menalix. Big fan :)

[MindkcuF]

I hardly think so. If you read his post properly you will know I was not talking rubbish. The cheat actually works and my method of initiating the cheat into memory is out of the box and will evade the anti-cheats scan. The cheat I gave him was indeed a test version and not the full cheat for obvious reasons.

Did he pay for this fake test version you gave him, or did he pay for your "real" cheat and never got what he paid for then?

I only ask as he does mention he paid for your cheat, why are you selling test versions

[blaqk]

Did he pay for this fake test version you gave him, or did he pay for your "real" cheat and never got what he paid for then?

I only ask as he does mention he paid for your cheat, why are you selling test versions

Nope he didn't pay anything for the test cheat. If he had paid he would have had the full cheat. If he had mentioned that he paid for the cheat then he is lying and has no place on this forum as he is spreading misinformation.

[MindkcuF]

Nope he didn't pay anything for the test cheat. If he had paid he would have have had the full cheat. If he had mentioned that he paid for the cheat then he is lying and has no place on this forum as he is spreading misinformation.

I believe i miss read it when he mentioned "paying", he isn't spreading misinformation he told us what your "test" cheat does.

[blaqk]

I believe i miss read it when he mentioned "paying", he isn't spreading misinformation he told us what your "test" cheat does.

I used to give all my clients a test cheat for the day for free but obviously had to cut that out. Yes he is explaining roughly how the test cheat works but the full version does so much more.

[N3xtSolutions]

I hardly think so. If you read his post properly you will know I was not talking rubbish. The cheat actually works and my method of initiating the cheat into memory is out of the box and will evade the anti-cheats scan. The cheat I gave him was indeed a test version and not the full cheat for obvious reasons.

---

Hey Menalix. Big fan :)

Hey guys, I discovered runPE!!! very unique much undetected!!

You are insignificant, please move along

[Menalix]

I hardly think so. If you read his post properly you will know I was not talking rubbish. The cheat actually works and my method of initiating the cheat into memory is out of the box and will evade the anti-cheats scan. The cheat I gave him was indeed a test version and not the full cheat for obvious reasons.

What makes you think it evade anti-cheat scans?
RunPE evades anti-virus callbacks for file creation, most anti-cheats doesn't have file creation callbacks.
It doesn't make the memory mapping the data reside in unscannable.

Idk what faceit and esportal do to prevent pixelbots. But ESEA will always catch most, prolly anything when ring3, they log a lot of stuff, enough reports and they'll take a look.

It's better to just state what your cheat is, instead of using false marketing.