TeamSpeak hide client information

[Supervisor]

Hey, we really have to start digging into this topic. Sadly I did not manage to reproduce this manually.
It would be really nice if you'd write a quick tutorial on how to do it. Then we can start to work from there to a working patch or plugin

 

[Supervisor]

<02:45:57> "Asphyxia": Cheat engine.
<02:45:59> "Supervisor": float?
<02:46:01> "Supervisor": or int
<02:46:03> "Supervisor": or what
<02:46:05> "Asphyxia": Found exactl value, 4 bytes.
<02:46:09> "Supervisor": ah
<02:46:10> "Asphyxia": Pause game while searching.
<02:46:14> "Asphyxia": ping was 32
<02:46:17> "Asphyxia": find exact value 32
<02:46:20> "Asphyxia": ping changed to 41
<02:46:23> "Asphyxia": next scan 41
<02:46:26> "Asphyxia": changed to 43
<02:46:29> "Asphyxia": only two values left.
<02:46:36> "Asphyxia": Now the values are going all whacky as fuck now.

 

[Supervisor]

ok, letz go
So we do have a few ones doing plugins.. is that an easy one?

 

[Derp]

It's not that simple

Things I noticed while doing some searching

1- The pointers that point to the 2 Ping values ALWAYS change on System Restart

2- In order for the Ping Trick to work, BOTH Values need to be "-1" (The 2 addresses can't have different values)

3- While doing this trick, if you connect to a new server in a new tab, You will crash

NOTE: I have basic knowledge in this stuff, and, from a Beginner's point of view, this plugin will not be easy to make

-Derp

 

[Norvik]

For everybody who don't understand how to do this... watch my video

 

[Supervisor]

@Derp I was able to find the static address for one of the ping values. But first why are there two values? OK, that is it: One value is the ping itself, the other value changes when you switch tabs. so that only shows you the ping you see in the bottom right corner. In did find the static address for the according pointer for my ts client and for my pic (it's different for each pc). Unfortunately we need to find the static address for the other value, if you set the other value to -1 you'll get the receiving data thing. So basically we need someone who is really into cheat engine to find the ssecond static value

 

[Derp]

Well, I think this can't be done finding the pointers of the two values

From what I've seen, there are 2 addresses, One of the addresses always shows the exact ping value, but in order to set the ping, you need both addresses, The second address is a problem, since it changes every time we connect to a new server OR switch tabs.

So, I think the only way to achieve this is : Using the Network Protocol (still need to find the encrypt decrypt functions)

 

[Darksephiro]

Very good exploit : )

 

[TwixEis]

Wow nice exploit !

 

[0day]

I actually wrote a program that worked well with the 32 bit version of ts and worked after reboot/switching servers and etc with this same method. Not sure if any of you have all the installers for various versions and etc, but I am pretty sure it was V 3.0.16 32 bit; I was sloppy and did not note the versions anywhere in the code lol so do not hold me to it...



Unrelated but interesting, I did find that there is a value that changes every time someone opens up your client connection info. Never messed with it though. Would be nice for trolling.

Have a great, Day!

 

[Supervisor]

Hmm, a few days ago someone provided a trainer for this. Unfortunately I still didn't have time to look into it. Where did you get your program? The one we've got works with cheat engine. How is yours working?

 

[0day]

I just wrote a little memory editing program in VB, (Forgive me, I love the ease of creating GUI quickly VB is a nasty habit XD)

It just ran on a loop and set the value to -1

Nopping would probably be more effective.

Sloppy Vb.net code below, hide the small children. HAHA

Spoiler: Are you sure?

Trainer.WritePointerInt32("ts3client_win32", base_address + &H813CC4, New Integer() {&H24, &H50, &HC8, &H2B4, &H10}, -1)
So just TS3+813CC4 and then the offsets

That is the pointer I was using. Sloppy but worked like a charm- Good luck to everyone who messes with it

Edit: Pretty sure this was for 3.0.16

Honestly until I found this site, I thought I was the only one who messed with ts3 or I would have paid more attention and made better comments in my code. I reformat about once every 2 months and only backup the necessities, meaning all notes are usually destroyed about every 2 months lol.

 

[Supervisor]

Well, the pointer for 3.0.18 and 3.0.18.1 is different though

 

[0day]

Yep yep , I am pretty sure this was on the 32bit version of 3.0.16. Not 100% on this though. Might be able to find the old 3.16 installer in some dark cave of some backup I have somewhere XD.

EDIT:
Alright just downloaded the latest version, I see what you guys are talking about now. Before, the ping value (IN CLIENT CONNECTION INFO) would never read -1 for any reason or any negative number for that matter, I say they went from unsigned to signed. :-( Darn the luck. Meh there is always a way. Pressing on.

 

[0day]

I think I have found a new method to do this, I will let you guys know if it works. Don't hold your breath waiting on me though busy few days coming up lol.

 

[fyfywka]

 

[Bluscream]

Nice!

Only x86 or also x64?

 

[fyfywka]

Only for 64x, if need be I will do for 86x

 

[dotface]

Only for 64x, if need be I will do for 86x

Could you upload this?

 

[fyfywka]

Could you upload this?

will be in VIP section when Supervisor look into it