unkwusr / hlhax

Cheat for goldsrc based games on Linux. Dynamic loaded library

Status

Fortunetly broken after Half-Life 25th anniversary update (because binaries do not export dynamic symbols now). I'm not going to fix this because:

1. I hope hl1 will get some activity again, so I don't want to flood servers with cheaters.
2. I don't see much fun in dealing with byte patterns and offsets.

HlHaxLib

HlHaxLib is a linux hack for games based on goldsource engine so this can work for many games like half-life 1, counter-strike 1.6, etc. For features list see src/funcs.

Demo

Screenshot (click to expand)

Video (click to expand)

hlhax_demo_video.mp4

Startup

1. Clone this repo.

2. Download SDK:

    mkdir sdk
    git clone https://github.com/ValveSoftware/halflife.git sdk/halflife-master

3. Prepare build folder:

    mkdir build
    cd build
    cmake ..

4. Actually build:

    make

5. Start hl1 (preferably from terminal).

6. Inject hax (be sure you are in build folder):

    ./injector.sh load

   P.S. injector runs make every time, so don't worry about modifying sources.

7. Make sure hax loaded fine.

   Check in-game console and find line "hlhax loaded". Also you can try to start typing hx_, cv_ or +hx_ and a completion list should appear.

Credits

Many thanks to all game hacking communities, this is a really big scene. Mostly it's a site www.unknowncheats.me, but also I've seen some archived forum pages of www.gamedeception.net.

Also thanks to russian forum pvpru.com. A long time ago there was many good persons who write stuff and share code/instructions about counter-strike 1.6 .

Unknown Russian site with a lot of useful information about hacks in cs 1.6: http://troll-homepage.narod.ru/

Special thanks to shelru for method of injecting library into process using debugger, which idea I took from extramirror version for linux.

Somewhere in the code I also inserted urls to original sources, but I'm sure that's not all.

hlhax's Issues

funcs wont toggle

Hello I've tried to enable aimbot but it would return "invalid command" on the console

How to open AIM HACK?

The cheat works exactly as I want it to. Good luck to whoever did it. I couldn't find how to open AIM hack. Can you give me your command?

sorry for english. i use translate

10000 as for loop condition

hlhax/src/utils/mem/mem.cpp

Line 10 in 8e8fe17

for(int i = 0; 10000; i++) {

Probably a typo: i < 10000

Cs 1.6

Works on cs 1.6?

sven co-op support ?

Will you make it for CS2?

Will you make it for CS2? Like in your project called Csgoshit. (I couldn't open a topic there because it was archived) A nice cheat for the new CS2 would be great.

(I used google translate)

not work on hl steam arch linux

thread #1, name = 'hl_linux', stop reason = signal SIGSTOP
frame #0: 0xf7f1a579 [vdso]__kernel_vsyscall + 9 [vdso]__kernel_vsyscall:
-> 0xf7f1a579 <+9>: popl %ebp
0xf7f1a57a <+10>: popl %edx
0xf7f1a57b <+11>: popl %ecx
0xf7f1a57c <+12>: retl
thread #2, name = 'hl_linu:disk$0', stop reason = signal SIGSTOP
frame #0: 0xf7f1a579 [vdso]__kernel_vsyscall + 9 [vdso]__kernel_vsyscall:
-> 0xf7f1a579 <+9>: popl %ebp
0xf7f1a57a <+10>: popl %edx
0xf7f1a57b <+11>: popl %ecx
0xf7f1a57c <+12>: retl
thread #3, name = 'hl_linux:sh0', stop reason = signal SIGSTOP
frame #0: 0xf7f1a579 [vdso]__kernel_vsyscall + 9 [vdso]__kernel_vsyscall:
-> 0xf7f1a579 <+9>: popl %ebp
0xf7f1a57a <+10>: popl %edx
0xf7f1a57b <+11>: popl %ecx
0xf7f1a57c <+12>: retl
thread #4, name = 'SDLTimer', stop reason = signal SIGSTOP
frame #0: 0xf7f1a579 [vdso]__kernel_vsyscall + 9 [vdso]__kernel_vsyscall:
-> 0xf7f1a579 <+9>: popl %ebp
0xf7f1a57a <+10>: popl %edx
0xf7f1a57b <+11>: popl %ecx
0xf7f1a57c <+12>: retl
thread #5, name = 'hl_lin:traceq0', stop reason = signal SIGSTOP
frame #0: 0xf7f1a579 [vdso]__kernel_vsyscall + 9 [vdso]__kernel_vsyscall:
-> 0xf7f1a579 <+9>: popl %ebp
0xf7f1a57a <+10>: popl %edx
0xf7f1a57b <+11>: popl %ecx
0xf7f1a57c <+12>: retl
thread #6, name = 'hl_linux:gdrv0', stop reason = signal SIGSTOP
frame #0: 0xf7f1a579 [vdso]__kernel_vsyscall + 9 [vdso]__kernel_vsyscall:
-> 0xf7f1a579 <+9>: popl %ebp
0xf7f1a57a <+10>: popl %edx
0xf7f1a57b <+11>: popl %ecx
0xf7f1a57c <+12>: retl
thread #7, name = 'hl_linux', stop reason = signal SIGSTOP
frame #0: 0xf7f1a579 [vdso]__kernel_vsyscall + 9 [vdso]__kernel_vsyscall:
-> 0xf7f1a579 <+9>: popl %ebp
0xf7f1a57a <+10>: popl %edx
0xf7f1a57b <+11>: popl %ecx
0xf7f1a57c <+12>: retl
thread #8, name = 'BrowserDBThread', stop reason = signal SIGSTOP
frame #0: 0xf7f1a579 [vdso]__kernel_vsyscall + 9 [vdso]__kernel_vsyscall:
-> 0xf7f1a579 <+9>: popl %ebp
0xf7f1a57a <+10>: popl %edx
0xf7f1a57b <+11>: popl %ecx
0xf7f1a57c <+12>: retl
thread #9, name = 'SignalSender', stop reason = signal SIGSTOP
frame #0: 0xf7f1a579 [vdso]__kernel_vsyscall + 9 [vdso]__kernel_vsyscall:
-> 0xf7f1a579 <+9>: popl %ebp
0xf7f1a57a <+10>: popl %edx
0xf7f1a57b <+11>: popl %ecx
0xf7f1a57c <+12>: retl
thread #10, name = 'NetworkChangeNo', stop reason = signal SIGSTOP
frame #0: 0xf7f1a579 [vdso]__kernel_vsyscall + 9 [vdso]__kernel_vsyscall:
-> 0xf7f1a579 <+9>: popl %ebp
0xf7f1a57a <+10>: popl %edx
0xf7f1a57b <+11>: popl %ecx
0xf7f1a57c <+12>: retl
thread #11, name = 'inotify_reader', stop reason = signal SIGSTOP
frame #0: 0xf7f1a579 [vdso]__kernel_vsyscall + 9 [vdso]__kernel_vsyscall:
-> 0xf7f1a579 <+9>: popl %ebp
0xf7f1a57a <+10>: popl %edx
0xf7f1a57b <+11>: popl %ecx
0xf7f1a57c <+12>: retl
thread #12, name = 'Cef_FileThread', stop reason = signal SIGSTOP
frame #0: 0xf7f1a579 [vdso]__kernel_vsyscall + 9 [vdso]__kernel_vsyscall:
-> 0xf7f1a579 <+9>: popl %ebp
0xf7f1a57a <+10>: popl %edx
0xf7f1a57b <+11>: popl %ecx
0xf7f1a57c <+12>: retl
thread #13, name = 'Cef_IOThread', stop reason = signal SIGSTOP
frame #0: 0xf7f1a579 [vdso]__kernel_vsyscall + 9 [vdso]__kernel_vsyscall:
-> 0xf7f1a579 <+9>: popl %ebp
0xf7f1a57a <+10>: popl %edx
0xf7f1a57b <+11>: popl %ecx
0xf7f1a57c <+12>: retl
thread #14, name = 'AppCacheDBThrea', stop reason = signal SIGSTOP
frame #0: 0xf7f1a579 [vdso]__kernel_vsyscall + 9 [vdso]__kernel_vsyscall:
-> 0xf7f1a579 <+9>: popl %ebp
0xf7f1a57a <+10>: popl %edx
0xf7f1a57b <+11>: popl %ecx
0xf7f1a57c <+12>: retl
thread #15, name = 'SDLAudioDev2', stop reason = signal SIGSTOP
frame #0: 0xf7f1a579 [vdso]__kernel_vsyscall + 9 [vdso]__kernel_vsyscall:
-> 0xf7f1a579 <+9>: popl %ebp
0xf7f1a57a <+10>: popl %edx
0xf7f1a57b <+11>: popl %ecx
0xf7f1a57c <+12>: retl
thread #16, name = 'hl_linux', stop reason = signal SIGSTOP
frame #0: 0xf7f1a579 [vdso]__kernel_vsyscall + 9 [vdso]__kernel_vsyscall:
-> 0xf7f1a579 <+9>: popl %ebp
0xf7f1a57a <+10>: popl %edx
0xf7f1a57b <+11>: popl %ecx
0xf7f1a57c <+12>: retl
thread #17, name = 'threaded-ml', stop reason = signal SIGSTOP
frame #0: 0xf7f1a579 [vdso]__kernel_vsyscall + 9 [vdso]__kernel_vsyscall:
-> 0xf7f1a579 <+9>: popl %ebp
0xf7f1a57a <+10>: popl %edx
0xf7f1a57b <+11>: popl %ecx
0xf7f1a57c <+12>: retl
thread #18, name = 'alsoft-mixer', stop reason = signal SIGSTOP
frame #0: 0xf7f1a579 [vdso]__kernel_vsyscall + 9 [vdso]__kernel_vsyscall:
-> 0xf7f1a579 <+9>: popl %ebp
0xf7f1a57a <+10>: popl %edx
0xf7f1a57b <+11>: popl %ecx
0xf7f1a57c <+12>: retl
thread #19, name = 'hl_linux', stop reason = signal SIGSTOP
frame #0: 0xf7f1a579 [vdso]__kernel_vsyscall + 9 [vdso]__kernel_vsyscall:
-> 0xf7f1a579 <+9>: popl %ebp
0xf7f1a57a <+10>: popl %edx
0xf7f1a57b <+11>: popl %ecx
0xf7f1a57c <+12>: retl
thread #20, name = 'hl_linux', stop reason = signal SIGSTOP
frame #0: 0xf7f1a579 [vdso]__kernel_vsyscall + 9 [vdso]__kernel_vsyscall:
-> 0xf7f1a579 <+9>: popl %ebp
0xf7f1a57a <+10>: popl %edx
0xf7f1a57b <+11>: popl %ecx
0xf7f1a57c <+12>: retl

Doesn't work on Steam version anymore

It no longer works in the current version of Counter Strike on Steam. When you select and install "steam_legacy" from the betas section, it only starts when you are dead, the cheat does not work when you are alive in the game. Is there a solution?