Skip to content

Improve structure, fix timestamp bypass, fix parser, etc. #54

Open
ELF-Nigel wants to merge 83 commits intoKeyAuth:mainfrom
ELF-Nigel:main
Open

Improve structure, fix timestamp bypass, fix parser, etc. #54
ELF-Nigel wants to merge 83 commits intoKeyAuth:mainfrom
ELF-Nigel:main

Conversation

@ELF-Nigel
Copy link

No description provided.

@github-actions
Copy link

github-actions bot commented Mar 1, 2026

The KeyAuth owner has been notified of your pull request. Please wait for him to review it. This could take several days.

@ELF-Nigel
Copy link
Author

Watchdog was removed as it was causing applications to force exit, fixing it and will reapply the changes.

@ELF-Nigel
Copy link
Author

Adding a periodic check instead of the watchdog loop as a workaround, converting CIRP transition block.

@ELF-Nigel
Copy link
Author

Referring to other examples with the time tamper bypass, patching it via library.

@ELF-Nigel
Copy link
Author

all commit changes:

  • fixed curl escape leaks and safer signature timestamp parsing
  • substring extraction to avoid out‑of‑range crashes
  • validated string_to_timet parsing
  • made chat message parsing robust to invalid payloads
  • reduced error() command‑injection surface
  • fixed a bad c_str() concat in download()
  • improved killEmulator.hpp safety (#pragma once, GetCurrentProcess handle)
  • added hosts‑file override detection for API host
  • added module path checks (System32/SysWOW64) and duplicate core‑DLL detection
  • added core DLL signature verification and RWX section detection
  • added user‑writable module path detection
  • added hypervisor detection (CPUID + registry + driver artifacts)
  • changed timestamp validation to reject forward/back skew (120s)
  • added function prologue snapshot/compare for critical functions
  • added executable‑region checks for critical functions to detect inline hooks
  • expanded prologue/region checks to integrity/error/section functions
  • removed watchdog thread and replaced with lightweight periodic checks in checkInit
  • added timing anomaly check (wall vs steady clock)
  • switched HTTP request buffers to RAII (std::make_unique) to avoid leaks
  • pushed every commit to main as changes were made

@ELF-Nigel
Copy link
Author

Pull request is being reviewed and tested, feel free to use the fork unless the request is pulled and merged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant