No Spread Hack

[Fawkes]

Wait what, my little brother downloaded that exact same "Cheat engine" program to cheat on flash games. You can hack source games with it?

[TacoNinja]

[QUOTE=CombineGuru;19927969]Hey, in March 2009 I used cheat engine to speedhack on a server. I did it for a month.

[url]http://steamcommunity.com/id/smartseth/[/url]

Oh look, not VAC banned.

[b]There is no vac in gmod.[/b][/QUOTE]

There ARE VAC secured servers, it IS new info to me that it isn't used. You get informative, rate my past posts disagree.

[|FlapJack|]

I don't normally use the cheat engine. I have a bind on my keyboard which bypasses SE ( Or SE2 ), loads my Lua aimbot. I also have another bind which speedhacks.

Although, thanks for the menu environment menu idea. Really neat, I'll probably write one.

tl;dr version: I used the cheat engine to prove VAC does not exist.

[aVoN]

Like said before, VAC is included in GMod but not active/banning at all.
I used techniques which could have got me VAC-Banned but I'm not (MS Detours) - legit ([url=http://www.facepunch.com/showthread.php?t=886944]hooking to the engine for module-usage[/url]) and "non-legit" ([url=http://www.daggeringcats.com/images//GarrysMod/hax3.png]bypassing SE2[/url])

[TacoNinja]

[QUOTE=|FlapJack|;19953325]
tl;dr version: I used the cheat engine to prove VAC does not exist.[/QUOTE]

The cheat engine DOES exist, apparently it's just unused. Join a server with a shield symbol and it DOES say "This server is VAC secure". VAC is THERE, just unmonitored.

[aVoN]

[QUOTE=TacoNinja;19979228]The cheat engine DOES exist, apparently it's just unused. Join a server with a shield symbol and it DOES say "This server is VAC secure". VAC is THERE, just unmonitored.[/QUOTE]

It has been said, VAC is available in GMod but doesn't ban/detect cheats.

[lilezek]

[QUOTE=Jawalt;18030306]You could accurately predict the spread if you have access to the seed and number generator used.[/QUOTE]

What about:

[lua]
local spread = Vector(math.random(),math.random(),math.random())
local bulletdirection = owner:GetAimVector() + spread
[/lua]

Could this be hijacked?

[|FlapJack|]

Yes.

[lilezek]

[QUOTE=|FlapJack|;20007285]Yes.[/QUOTE]

How? It is purelly serversided.

[aVoN]

You can predict the weapon-spread and compesate it. That's not hard.
You just need to predict the randomseed (easy with access to the Source SDK - MD5_PseudoRandom) and know about the spread-vector of your weapon you want to compensate.

[Gbps]

Then set the viewangles of the local player with the compensates vector and you have nospread.

[lilezek]

[QUOTE=aVoN;20015274]You can predict the weapon-spread and compesate it. That's not hard.
You just need to predict the randomseed (easy with access to the Source SDK - MD5_PseudoRandom) and know about the spread-vector of your weapon you want to compensate.[/QUOTE]

Just do a new random... Something like:

[lua]
newrandom = function()
local a = string.sub(tostring(CurTime()), 1,1)
local b = CurTime()
local c = os.tick() -- or whatever to get the processor tick count.
local d = a + b / c
if d > 1 then
d = d / 10 ^ string.len(tostring(math.floor(d)))
end
return d
end
[/lua]

[Dlaor]

[QUOTE=lilezek;20022473]Just do a new random... Something like:

[lua]
newrandom = function()
local a = string.sub(tostring(CurTime()), 1,1)
local b = CurTime()
local c = os.tick() -- or whatever to get the processor tick count.
local d = a + b / c
if d > 1 then
d = d / 10 ^ string.len(tostring(math.floor(d)))
end
return d
end
[/lua][/QUOTE]
That won't make the server use that function. And it won't predict weapon spread either.

[editline]04:47PM[/editline]

[QUOTE=aVoN;20015274]You can predict the weapon-spread and compesate it. That's not hard.
You just need to predict the randomseed (easy with access to the Source SDK - MD5_PseudoRandom) and know about the spread-vector of your weapon you want to compensate.[/QUOTE]
[cpp]//========= Copyright © 1996-2005, Valve Corporation, All rights reserved. ============//
//
// Purpose: Generic MD5 hashing algo
//
//=============================================================================//

#ifndef CHECKSUM_MD5_H
#define CHECKSUM_MD5_H

#ifdef _WIN32
#pragma once
#endif

// 16 bytes == 128 bit digest
#define MD5_DIGEST_LENGTH 16

// MD5 Hash
typedef struct
{
unsigned int buf[4];
unsigned int bits[2];
unsigned char in[64];
} MD5Context_t;

void MD5Init( MD5Context_t *context );
void MD5Update( MD5Context_t *context, unsigned char const *buf, unsigned int len );
void MD5Final( unsigned char digest[ MD5_DIGEST_LENGTH ], MD5Context_t *context );

char *MD5_Print(unsigned char *digest, int hashlen );

unsigned int MD5_PseudoRandom(unsigned int nSeed);

#endif // CHECKSUM_MD5_H[/cpp]
Hmm... :v:

[lilezek]

[QUOTE=Dlaor;20022862]That won't make the server use that function. And it won't predict weapon spread either.
[/QUOTE]

Yup, I know, but what about doing new spread system with that new random system? If hijacker doesn't get the script, can't calculate the random.

[Dlaor]

[QUOTE=lilezek;20023084]Yup, I know, but what about doing new spread system with that new random system? If hijacker doesn't get the script, can't calculate the random.[/QUOTE]
As long as the function is only in init.lua yeah, then it could work. There would be no prediction though. (will result in laggy weapons)

[Wizey!]

Would result in hax, And people requesting something to be mingy.

[Cardcapture1]

My (somewat) personal aimbot/BaconBot_v3 has no spread and yes it is a module. I love watching this thread lol.

[_Jailer]

[QUOTE=Kert97;19944448]Wait what, my little brother downloaded that exact same "Cheat engine" program to cheat on flash games. You can hack source games with it?[/QUOTE]

You can hack anything with it...

[aVoN]

[QUOTE=Dlaor;20022862]That won't make the server use that function. And it won't predict weapon spread either.

[editline]04:47PM[/editline]

[cpp]//========= Copyright © 1996-2005, Valve Corporation, All rights reserved. ============//
//
// Purpose: Generic MD5 hashing algo
//
//=============================================================================//

#ifndef CHECKSUM_MD5_H
#define CHECKSUM_MD5_H

#ifdef _WIN32
#pragma once
#endif

// 16 bytes == 128 bit digest
#define MD5_DIGEST_LENGTH 16

// MD5 Hash
typedef struct
{
unsigned int buf[4];
unsigned int bits[2];
unsigned char in[64];
} MD5Context_t;

void MD5Init( MD5Context_t *context );
void MD5Update( MD5Context_t *context, unsigned char const *buf, unsigned int len );
void MD5Final( unsigned char digest[ MD5_DIGEST_LENGTH ], MD5Context_t *context );

char *MD5_Print(unsigned char *digest, int hashlen );

unsigned int MD5_PseudoRandom(unsigned int nSeed);

#endif // CHECKSUM_MD5_H[/cpp]
Hmm... :v:[/QUOTE]

The idea behind this is, you need to know the random-seed which is generated by the MD5_PeseudoRandom function from a sort of timer which is synced between server and client.

Once you have this, you can predict a shots direction (shotmanipulator - search that in the SDK).
With that, you can kick a player's view in the oppsosite direction of the bullet-spread to compensate it.

This works and I have already used it.

[Lily]

I looked into the weapons in Orangebox a while ago. But i might be wrong about this but...
It seems like it change the players view angles. And fire the bullets next frame. So if you want a no spread hack you can just kick back the view within one frame. I might be completly wrong

[lilezek]

[QUOTE=aVoN;20041141]This works and I have already used it.[/QUOTE]

What does lua to calculate random? or random lua function is derived from source's one?

[LuaStoned]

[QUOTE=Cardcapture1;20033926]My (somewat) personal aimbot/BaconBot_v3 has no spread and yes it is a module. I love watching this thread lol.[/QUOTE]

Too bad that BBv3 sucks balls. :)

[|FlapJack|]

[QUOTE=Cardcapture1;20033926]My (somewat) personal aimbot/BaconBot_v3 has no spread and yes it is a module. I love watching this thread lol.[/QUOTE]

$15 to Avaster doesn't make it personal.

[aVoN]

[QUOTE=lilezek;20042050]What does lua to calculate random? or random lua function is derived from source's one?[/QUOTE]

Lua's random-generator is independant of the one source uses for the shotmanipulator (which is used to calculate weapon spread).

[Chad Mobile]

Guys, there IS VAC and it DOES ban in Garrys Mod
Source: [url]http://www.garry.tv/?p=841[/url]
[quote=Garry]It already is enabled. It has been since GMod launched.[/QUOTE]

[|FlapJack|]

[QUOTE=Chad Mobile;20236114]Guys, there IS VAC and it DOES ban in Garrys Mod
Source: [url]http://www.garry.tv/?p=841[/url][/QUOTE]

No it doesn't.

[Chad Mobile]

Read the page. It is active AND banning in Garry's Mod.

[yakahughes]

[QUOTE=Chad Mobile;20258193]Read the page. It is active AND banning in Garry's Mod.[/QUOTE]

No.

[QUOTE=| FlapJack |;18031984]Or you could set the seed to 0 (So as the spread will be 0, as multiplying by 0...)[/QUOTE]

No, I've done it, it doesn't work.

Thanks avon for the shotmanipulation keyword, searching it :D

EDIT: Actually shotmanipulation yields 0 results, but shot_manipulation is a different story.

[Chad Mobile]

I'm pretty sure if Garry says there is VAC in Garry's Mod, and it's active and banning...IT IS.

[|FlapJack|]

[QUOTE=yakahughes;20258297]No.

No, I've done it, it doesn't work.

Thanks avon for the shotmanipulation keyword, searching it :D

EDIT: Actually shotmanipulation yields 0 results, but shot_manipulation is a different story.[/QUOTE]

I know, I figured it out since.

[editline]12:06PM[/editline]

[QUOTE=Chad Mobile;20258309]I'm pretty sure if Garry says there is VAC in Garry's Mod, and it's active and banning...IT IS.[/QUOTE]

If Garry says you should jump off a cliff, does that mean you have to jump off a cliff?