From 77b52da44b263df4884be2f35f885d8edccbb6fa Mon Sep 17 00:00:00 2001
From: boris <wzn@moneybot.cc>
Date: Wed, 19 Dec 2018 00:13:24 +1300
Subject: added new loader project :)

merry christmas
---
 csgo-loader/csgo-client/Login/RemoteLogin.hpp | 78 +++++++++++++++++++++++++++
 1 file changed, 78 insertions(+)
 create mode 100644 csgo-loader/csgo-client/Login/RemoteLogin.hpp

(limited to 'csgo-loader/csgo-client/Login/RemoteLogin.hpp')

diff --git a/csgo-loader/csgo-client/Login/RemoteLogin.hpp b/csgo-loader/csgo-client/Login/RemoteLogin.hpp
new file mode 100644
index 0000000..e543d27
--- /dev/null
+++ b/csgo-loader/csgo-client/Login/RemoteLogin.hpp
@@ -0,0 +1,78 @@
+#pragma once
+
+#include <cstdint>
+#include <algorithm>
+#include <vector>
+
+using ByteArray = std::vector<uint8_t>;
+
+namespace Login {
+	// Login header that is sent over to the server
+	struct RemoteLoginHeader {
+		// The first four bytes are encoded by the client.
+		// This will carry the client version which can be checked.
+		uint32_t    m_ClientHeader;
+
+		// The username is raw text.
+		// TODO: Hash the password client-side.
+		char		m_Username[128];
+		char		m_Password[128];
+
+		// This will provide the hardware ID of the machine.
+		uint32_t	m_HardwareId;
+
+		// These fields will be set according
+		// to security check results.
+		uint8_t		m_IntegrityBit1; // Detour detected on NTDLL function
+		uint8_t		m_IntegrityBit2; // Detour detected on dummy function
+		uint8_t     m_IntegrityBit3; // Virtual machine/Debugger detected
+		uint8_t		m_IntegrityBit4; // m_IntegrityBit1 | m_IntegrityBit2 | m_IntegrityBit3 (checksum)
+	};
+
+	// Possible server responses
+	// The hardware ID is encoded (XORed with the message ID) within the message for
+	// shadow ban/forum ban purposes. :)
+	enum RemoteLoginResponse : uint8_t {
+		OUTDATED_CLIENT     = 'A', // '[000A:{HWID}] Your client is outdated. Please download the latest client at 'moneybot.cc'.'
+		ACCESS_AUTHORISED   = 'B', // Allows the user to continue with injection.
+		INVALID_CREDENTIALS = 'C', // '[000C:{HWID}] Your credentials are invalid. Please check your spelling and try again.'
+		USER_BANNED			= 'D', // '[000D:{HWID}] Your account is banned. Please contact 'admin@moneybot.cc' for additional information.'
+		INVALID_HARDWARE	= 'E', // '[000E:{HWID}] Please contact an administrator to request a hardware ID reset.'
+		INTEGRITY_FAILURE	= 'F', // '[000F:{HWID}] Failed to verify session. Please contact an administrator.' AKA the 'shadow ban', blacklists user from loader but not from forums.
+		NO_SUBSCRIPTION		= 'G', // '[000G:{HWID}] No active subscription.'
+		ACCESS_SPECIAL_USER = 'H', // Allows the user to continue, sets the m_SpecialAccess var
+	};
+
+	// Runs the security checks and creates the login header to send to the server.
+	class RemoteLoginTransaction {
+		RemoteLoginHeader m_Header;
+	
+	public:
+		// Initialises the header.
+		void Start(const char *Username, const char *Password);
+
+		// Obtains the hardware ID of the current machine in use.
+		uint32_t GetHardwareId();
+
+		// Queries the WMI for data.
+		ByteArray DoWmiQuery(const char *Query);
+
+		// Translates server response, determines whether or not the
+		// user can access the client. NOTE: Server will drop the client if
+		// the response is not ACCESS_AUTHORISED.
+		bool TranslateResponse(ByteArray &RawResponse);
+
+		ByteArray GetHeader() {
+			ByteArray Header;
+			
+			// Copy header to the ByteArray.
+			Header.insert(
+				Header.begin(),
+				(uint8_t *)&m_Header,
+				(uint8_t *)&m_Header + sizeof RemoteLoginHeader
+			);
+
+			return Header;
+		}
+	};
+}
\ No newline at end of file
-- 
cgit v1.2.3