• Detecting External Cheats (Using Lua)
    5 replies, posted
Hey, I have read past threads about these, and I have found some AntiCheats do come well prepared for these "External Cheat" situations, but none really give out a good answer. I have wondered, how do anticheats do it? Some External Cheats use C++/Dll/exes and sadly VAC does not play it's role here, is there a way to detect these kinds of cheaters using lua? Of course, Moderation is always good for Garry's Mod servers, but Moderation is not always there, and some AntiCheats do more than what you want, in good or a bad way, it would be nice to have an idea on where to start to remove these kinds of Cheats from a server. (I do know some are undetectable completely, but at least most will be caught)
In my personal opinion I would say that the reason people aren't very open about how anti-cheat addons are made is due to the fact that it gives the people who are cheating a way to counter said-addons. If you want to get valuable information out of someone who knows what they're doing without getting vague explanations I would suggest contacting the authors of anti-cheat addons and talking with them on how to do so. Which sounds paranoid but as soon as you put it on the internet there will be patches for it.
Yeah I do understand that, and I could do that approach, but not alot of AntiCheat developers are "Ready to talk" about it either. I will try though. I'm just looking on where to start, so I could teach myself on how to detect these.
The best place to start would be the same place that offers the cheats. Deconstruct their code - and figure out how to counter it... would be the essentials. It's a constant war of updates so... just be prepared for the long hall
Clientsided anticheats that detect C++ cheats such as VAC work by checking the process memory for signatures that are on a blacklist. For obvious reasons we can't do this in gLua, but what we can do is make serversided detections that detect common cheat features such as aimbot, bunnyhop, autoshoot, etc. There are also a few clientside detection methods that I'm aware of that can detect some/most C++ cheats but I'm not going to share those.
Can be easily spoofed, sadly.
Sorry, you need to Log In to post a reply to this thread.