The framework is basically your generic module system. it automatically runs and includes / AddCSLuaFiles, etc based on the prefix of the file in the modules folder, etc: cl_lol.lua, sv_lol.lua and sh_lol.lua. However, the main focus on this is my antihack. Basically:
[list]
[*]Checks if sv_scriptenforcer isn't 1 every 30 seconds.
[*]Checks if host_framerate isn't 0 every 30 seconds.
[*]Checks if sv_cheats isn't 0 every 30 seconds.
[*]Checks if host_timescale isn't 1 every 30 seconds.
[*]Checks if voice_input isn't 0 every 30 seconds.
[*]Loads before EVERYTHING else.
[*]Locks the 'hook' and 'debug' metatables from being changed.
[*]Disables RunString, debug.getlocal, debug.getupvalue
[*]Obfuscated
[*]Blocks all hooks except the whitelisted ones in a table.
[*]Blocks all modules/packages except the whitelisted ones in a table.
[*]Checks to see if itself exists
[*]Kicks all of the minority MD5 luaState hashes every 30 seconds.
[*]Has a module for logging to garrysmod/garrysmod/rot/logs/BLAH.txt
[*]Detects Baconbot [b]( Should I release it with this? Comwalk might do a dick move and fix it )[/b]
[*]Detects any hacks using gmcl_sqlite to switch states.
[*]Comes with some end-user plugins: sv_logging.lua, cl_debugmenu.lua, sv_debugmenu.lua, sv_admin.lua, sv_cleanmaps.lua
[*][highlight]Is more compatible than Fregna Antihack and Gbpsanticheat.[/highlight]
[/list]
Some example logs:
[b]Antihack-Baconbot.txt[/b]
[quote]
[01:52:26] [Warning] RoflWaffle > STEAM_0:1:25793464 > -snip-
[01:58:57] [Warning] RoflWaffle > STEAM_0:1:25793464 > -snip-
[02:18:51] [Warning] RoflWaffle > STEAM_0:1:25793464 > -snip-
[02:37:14] [Warning] RoflWaffle > STEAM_0:1:25793464 > -snip-
[/quote]
[b]Antihack-Require.txt[/b]
[quote]
[01:39:45] [Warning] Reece > STEAM_0:1:22860119 > -snip- > deco
[01:52:26] [Warning] RoflWaffle > STEAM_0:1:25793464 > -snip- > deco
[01:58:57] [Warning] RoflWaffle > STEAM_0:1:25793464 > -snip- > deco
[02:18:51] [Warning] RoflWaffle > STEAM_0:1:25793464 > -snip- > deco
[02:37:14] [Warning] RoflWaffle > STEAM_0:1:25793464 > -snip- > deco
[01:23:52] [Warning] tehhotbox > STEAM_0:1:26475362 > -snip- > sqlite2
[04:10:25] [Warning] Hal (a.k.a Minato Tea) > STEAM_0:0:20793381 > -snip- > sqlite2
[04:12:40] [Warning] Hal (a.k.a Minato Tea) > STEAM_0:0:20793381 > -snip- > sqlite2
[/quote]
[b]Antihack-Initialization-Fails[/b]
[quote]
[06:58:34] [Warning] Phyncs > STEAM_0:1:17469438 > -snip-
[07:19:51] [Warning] Kidders > STEAM_0:0:6006424 > -snip-
[07:52:39] [Warning] Kidders > STEAM_0:0:6006424 > -snip-
[08:37:00] [Warning] Taulan > STEAM_0:0:30909873 > -snip-
[08:39:18] [Warning] calvindixon12 > STEAM_0:0:32993752 > -snip-
[10:27:50] [Warning] Dot > STEAM_0:1:19110433 > -snip-
[11:47:10] [Warning] [GAME] Hax and White™ > STEAM_0:0:31977805 > -snip-
[01:09:32] [Warning] BlackCrackuh > STEAM_0:1:31931788 > -snip-
[02:17:36] [Warning] fallingflamez > STEAM_0:0:18734539 > -snip-
[04:18:37] [Warning] Twinkie Slamer > STEAM_0:0:14284761 > -snip-
[04:34:22] [Warning] superstepa > STEAM_0:1:16822831 > -snip-
[06:26:10] [Warning] [Xero] Newbie > STEAM_0:1:5843052 > -snip-
[06:34:45] [Warning] [Xero] Newbie > STEAM_0:1:5843052 > -snip-
[12:21:06] [Warning] Phyncs > STEAM_0:1:17469438 > -snip-
[12:44:18] [Warning] TordCake > STEAM_0:1:32908471 > -snip-
[02:34:40] [Warning] |TS| Ninjataco > STEAM_0:1:14468899 > -snip-
[02:51:21] [Warning] Kimbo Slice > STEAM_0:0:15443213 > -snip-
[02:52:20] [Warning] Ts x Scope > STEAM_0:0:24561696 > -snip-
[03:39:27] [Warning] EG| Mr.Jrt |CANDEH| > STEAM_0:0:20538028 > -snip-
[04:48:29] [Warning] Forrestbob > STEAM_0:1:18606489 > -snip-
[05:46:15] [Warning] Phyncs > STEAM_0:1:17469438 > -snip-
[05:47:47] [Warning] joestoes > STEAM_0:1:9880894 > -snip-
[06:20:49] [Warning] Phyncs > STEAM_0:1:17469438 > -snip-
[08:22:00] [Warning] Tank5932 > STEAM_0:0:33637824 > -snip-
[08:51:06] [Warning] Duck > STEAM_0:1:15163304 > -snip-
[10:39:09] [Warning] βlack roses > STEAM_0:0:25606656 > -snip-
[/quote]
[b]Antihack-MD5-Fails.txt[/b]
[quote]
[08:03:42] [Warning] manual > STEAM_0:0:19948554 > -snip- > 352d86b294d03d71c62a9d1409c72565[02:25:22] [Warning] FeralWolven > STEAM_0:1:18785741 > -snip- > 41d28b06d1048e5664906b610868cb28
[02:25:22] [Warning] Helix Nebula <3 > STEAM_0:0:16458788 > -snip- > 41d28b06d1048e5664906b610868cb28
[02:25:23] [Warning] TEA_TREE ☢ > STEAM_0:1:19805047 > -snip- > 41d28b06d1048e5664906b610868cb28
[02:41:34] [Warning] Can I has chezburger :3 > STEAM_0:0:16637147 > -snip- > 68dd5aa8c70ba97f13a2a9531a3e430b
[03:13:10] [Warning] Can I has chezburger :3 > STEAM_0:0:16637147 > -snip- > 8f9a660893546ec1350d19c8c58536a4
[03:21:12] [Warning] Can I has chezburger :3 > STEAM_0:0:16637147 > -snip- > 8f9a660893546ec1350d19c8c58536a4
[/quote]
My main motivation for releasing this was seeing all of the Lua "Anti-Hacks" that don't really cut it. I also thought it would be selfish to keep this to myself. What do you guys think I should do?
I say it would make it easier to get around, by that I mean someone with your source could more easily find a way around it.
I think you should give it to anyone credible who asks, with a use for it.
[QUOTE=butters757;23437526]I laughed.[/QUOTE]
I was using the player metatable in my function ( bad habit ) instead of ply, and that overrided the player metatable causing _R.Player:Ban not to work. It's fixed now and he's permabanned. :science:
[QUOTE=Helix Alioth;23437548]I was using the player metatable in my function ( bad habit ) instead of ply, and that overrided the player metatable causing _R.Player:Ban not to work. It's fixed now and he's permabanned. :science:[/QUOTE]
It wasn't that, it's just that I know him. :v:
Actually if someone broke it, you might just fix it for the better.
Snipping the IPs now, don't want to cause any harm to anyone [img]http://www.facepunch.com/fp/rating/heart.png[/img]
[editline]03:54AM[/editline]
Snipped all IPs.
Good job pepperbroni. (It is like all my posts have bro in them anymore.) You've spent much time on this as I remember, you always talk about it. I think you should release it to prevent the most extreme lua hackers.
I'm obfuscating it more right now, so hold on. I'll release it soon. But I won't include the Baconbot detection as that would piss off Flapjack :v:.
Besides, if you have the brain to use this you should be able to code something up to detect Baconbot, if not add me on Steam and I'll talk to you about it.
[01:52:26] [Warning] RoflWaffle > STEAM_0:1:25793464 > -snip- > deco
[01:58:57] [Warning] RoflWaffle > STEAM_0:1:25793464 > -snip- > deco
[02:18:51] [Warning] RoflWaffle > STEAM_0:1:25793464 > -snip- > deco
[02:37:14] [Warning] RoflWaffle > STEAM_0:1:25793464 > -snip- > deco
Why do you have this in? Its no good to ban someone for saying "RoflWaffle".
:wtc:
Thats baconbot detection, not detecting if someone said RoflWaffle
RoflWaffle is a person who has bacon bot. -snip-
[QUOTE=Helix Alioth;23437396][b]( Should I release it with this? Comwalk might do a dick move and fix it )[/b][/QUOTE]
If he's been to a server with it, it's probably already fixed.
Lua AntiCheats are useless unless completely serverside. Scriptenforcer and MD5Enforcement is pretty much all you need to keep out the majority.
[QUOTE=slayer3032;23492240]If he's been to a server with it, it's probably already fixed.
Lua AntiCheats are useless unless completely serverside. Scriptenforcer and MD5Enforcement is pretty much all you need to keep out the majority.[/QUOTE]
this
Even though bypassing SE takes 5 seconds.
^^ It takes you 5 seconds Wow you must be using cheatengine lol
I now use hashes of hooks :v:
Example:
[quote]
{ "64c41fa3500870b586a916c915218ba31c206da2", "18defd782a6185c88409c84261fd59dbc1b80e74", "ebedcc5eb915dd1519a1ecb88ae14e48b3e9f518" };
[/quote]
Surprisingly, it doesn't take long to compute. Some clients encrypted around 203 strings in 5-15 seconds.
It depends, are you willing to patch quickly if someone figures it out, or are you doing a sort of "final, public" release like FapHack is?
[QUOTE=nicatronTg;23501476]It depends, are you willing to patch quickly if someone figures it out, or are you doing a sort of "final, public" release like FapHack is?[/QUOTE]
Hope so.
Sorry, you need to Log In to post a reply to this thread.
