Garrys Mod 13 Anti-Cheat

[>>oubliet]

The Lua function "include" doesn't call ILuaInterface::RunString so you will not dump every file by hooking into it. Don't use OAC it's a pile of shit and I need to take it down.

[ks_uw-the_cat]

[QUOTE=Johnny Guitar;43812738]and how many skids from MPGH would have a hack like that

cheat detection isn't about catching all the fish in the ocean, just the vast majority

(then screencaps and admins can get the rest :V)[/QUOTE]

1. I don't release my stuff, it's private.
2. It's (casual) ragebot that's supposed to crush skids with uber-lua-hacks and avoid technical detection (anticheats, will probably avoid screen capturing in the future).

This thing bypasses SMAC noshake nospread checking, anti-namestealer and *will* bypass aimbot detector in future, i've already got an idea about that.

[editline]7th February 2014[/editline]

[QUOTE=>>oubliette<<;43817481]The Lua function "include" doesn't call ILuaInterface::RunString so you will not dump every file by hooking into it. Don't use OAC it's a pile of shit and I need to take it down.[/QUOTE]

RunString is called in any case:
include
CompileString(Ex)
RunString(Ex)
SendLua/BroadcastLua (LuaCmd, lua_run_cl)
lua_run
lua_openscript(_cl)

RunString is called recursively, so doing thing like Oub did (pseudocode):

[QUOTE]
void* __stdcall hookedRunString( <things> )
{
UnhookMePls();

void* r = interfaes->RunString(<things>); // RunString gets called recursively here

HookMeBackPls();
return r;
}
[/QUOTE]

is wrong, instead it should be done like this:

[QUOTE]
void* __stdcall hookedRunString( <things> )
{
/*
do things here
*/

__asm MOV ECX, interfaes
return OriginalRunString(<things>);
}
[/QUOTE]

[Kuro Light]

Oh no, stealing clientside lua files!

Like it matters that much... can't do anything without the proper server-side.

[ks_uw-the_cat]

[QUOTE=Kuro Light;43822394]Oh no, stealing clientside lua files!

Like it matters that much... can't do anything without the proper server-side.[/QUOTE]

I just prooved that Oub is wrong.

[MeepDarknessM]

[QUOTE=hacklordwuat;43816137][img]http://i.imgur.com/KeINeyS.png[/img][/QUOTE]

epic list! here's part of mine:
[img]http://puu.sh/6NtFB.png[/img]

[dingusnin]

[QUOTE=MeepDarknessM;43825863]epic list! here's part of mine:
[img]http://puu.sh/6NtFB.png[/img][/QUOTE]

OMG YOUR SO CUUL

Seriously what started out as a serious topic has ended in skids comparing dick sizes.

[MeepDarknessM]

[QUOTE=dingusnin;43826563]OMG YOUR SO CUUL

Seriously what started out as a serious topic has ended in skids comparing dick sizes.[/QUOTE]

or maybe you just derailed it even more and they aren't skids but you are

[Map in a box]

whoa guys easily accessible client lua files they are so useful omg 10/10

[centran]

[QUOTE=dingusnin;43826563]OMG YOUR SO CUUL

Seriously what started out as a serious topic has ended in skids comparing dick sizes.[/QUOTE]

That is what happens to any topic that is created about anti-cheats.

The topic can't be discussed seriously. Anyone who is serious about it knows to keep their stuff private and not talk about it. Any skiddies know to keep their mouth shut and pray their precious script doesn't get detected. Any hackers don't care and will talk shit cause it is simple for them to write a bypass to any anti-cheat. (which is why the people who are serious about their anti-cheats don't talk about it)

So usually end up with a person or people who are trying to detect cheaters slightly confused and frustrated that there is none out there while the hackers jerk it off in their face.

[dingusnin]

[QUOTE=MeepDarknessM;43826699]or maybe you just derailed it even more and they aren't [b] skids but you are[/b][/QUOTE]

It's almost said how that's your best come back. I haven't derailed it even more, if anything I have made it obvious how off topic we currently are.

Everyone who has ever hacked, or written an anti cheat will tell you it's a cat and mouse game, No bypass will ever go un-patched, no patch will ever go un-bypassed.

[MeepDarknessM]

[QUOTE=centran;43827045]That is what happens to any topic that is created about anti-cheats.

The topic can't be discussed seriously. Anyone who is serious about it knows to keep their stuff private and not talk about it. Any skiddies know to keep their mouth shut and pray their precious script doesn't get detected. Any hackers don't care and will talk shit cause it is simple for them to write a bypass to any anti-cheat. (which is why the people who are serious about their anti-cheats don't talk about it)

So usually end up with a person or people who are trying to detect cheaters slightly confused and frustrated that there is none out there while the hackers jerk it off in their face.[/QUOTE]

Why should I help ungrateful people like you? I gladly tested my hack on Aide's server.

Also, people keep their cheats private for the same reason people keep their anticheats private plus a few more reasons (showing off in HvH, not leaking exploits, etc.).

[drak_thing]

So, my curiosity kicked in. But how are the client-side hacks made?
Just overriding sv_allowclua? I know how that's achieved. But I figured VAC would kick in at some point?

[MeepDarknessM]

[QUOTE=Drak_Thing;43827176]So, my curiosity kicked in. But how are the client-side hacks made?
Just overriding sv_allowclua? I know how that's achieved. But I figured VAC would kick in at some point?[/QUOTE]

vac doesn't exist in gmod. yes you CAN override sv_allowcslua; that's how all the people on mpgh do it (because they don't know anything and mindlessly download every hack in the world [VIRUSES INBOUND.]). Many people have learned that not using convars/glua makes your life 1000x easier, so they have made c++ cheats to bypass many things or sometimes even another way to run lua

[Map in a box]

[QUOTE=MeepDarknessM;43827216]vac doesn't exist in gmod. yes you CAN override sv_allowcslua; that's how all the people on mpgh do it (because they don't know anything and mindlessly download every hack in the world [VIRUSES INBOUND.]). Many people have learned that not using convars/glua makes your life 1000x easier, so they have made c++ cheats to bypass many things or sometimes even another way to run lua[/QUOTE]

Good thing VAC does exist in Gmod, then, right?

[MeepDarknessM]

[QUOTE=Map in a box;43827291]Good thing VAC does exist in Gmod, then, right?[/QUOTE]

wrong

[Pandaman09]

[QUOTE=MeepDarknessM;43827305]wrong[/QUOTE]

It does "exist" it just doesn't work as an anti-cheat in the way it does for other games such as COD. VAC on GMod is very old and doesn't do much other than provide a false sense of hope.

[dingusnin]

[QUOTE=MeepDarknessM;43827305]wrong[/QUOTE]

From memory it only detected 2 dlls: baconbot and cl_deco.

[Dynn]

[QUOTE=Pandaman09;43827408]It does "exist" it just doesn't work as an anti-cheat in the way it does for other games such as COD. VAC on GMod is very old and doesn't do much other than provide a false sense of hope.[/QUOTE]

CoD uses PunkBuster.

[c👌de_g🎷]

[QUOTE=MeepDarknessM;43827305]wrong[/QUOTE]

Garry uses his own anticheat, not VAC.

[npypntz]

[QUOTE=code_gs;43828418]Garry uses his own anticheat, not VAC.[/QUOTE]

While the part about Garry using his own anticheat is correct, the latter is not. VAC2 is still being mapped into memory whenever you join a secure server.

[c👌de_g🎷]

[QUOTE=npypntz;43828591]While the part about Garry using his own anticheat is correct, the latter is not. VAC2 is still being mapped into memory whenever you join a secure server.[/QUOTE]

I've never seen anyone banned from GMod by VAC. Is it there uselessly?

[npypntz]

[QUOTE=code_gs;43828611]I've never seen anyone banned from GMod by VAC. Is it there uselessly?[/QUOTE]

VAC is doing most of its scans as it normally would in any other game. However due to GMod allowing people to develop and load their own binary modules it would be a bad idea to issue VAC bans for what is most likely a false positive.

Signature for BaconBot v4's module exists in VAC's database and people have been banned for it (I only remember [url=http://steamcommunity.com/id/TOILETPAPER]this sperg[/url] getting bent, but there were quite a few others as well), however nothing else has been picked up by it because of reasons stated in the previous paragraph.

In conclusion: VAC works, but its findings/reports are ignored due to GMod's nature.

Now can we please stop arguing about VAC already?

[MeepDarknessM]

you're all wrong gac doesn't exist either

[Bo98]

[QUOTE=MeepDarknessM;43829086]you're all wrong gac doesn't exist either[/QUOTE]

Explain the detection and banning of 1000 cheaters. Thanks.

[&gt;&gt;oubliet]

[QUOTE=MeepDarknessM;43829086]you're all wrong gac doesn't exist either[/QUOTE]

I really do hope you're joking, most of the stuff you've send in this thread has been borderline retarded.

My friend sends his regards:

21:51 - Don't hug me I'm scared: have i complained yet about how painful it is seeing meepdarknessmeep flaunt about shit in the anticheat thread like he actually knows what he's talking about?

[c👌de_g🎷]

[QUOTE=MeepDarknessM;43829086]you're all wrong gac doesn't exist either[/QUOTE]

Then how did Garry do the ban wave of 1500 cheaters? Got a list of all players that bought GMod and started drawing names out of a hat?

[AnonTakesOver]

[QUOTE=code_gs;43829340]Then how did Garry do the ban wave of 1500 cheaters? Got a list of all players that bought GMod and started drawing names out of a hat?[/QUOTE]

Wouldn't surprise me

[MeepDarknessM]

[QUOTE=Bo98;43829143]Explain the detection and banning of 1000 cheaters. Thanks.[/QUOTE]

show me evidence it exists in the asm

[Fluffy Taters]

[QUOTE=MeepDarknessM;43829935]show me evidence it exists in the asm[/QUOTE]

[url]http://gac.garrysmod.us/[/url]

I have no idea where you're getting this crazy information. It [i]clearly[/i] exists, but it might as well not because of how easy it is to bypass.

[MeepDarknessM]

[QUOTE=Fluffy Taters;43830907][url]http://gac.garrysmod.us/[/url]

I have no idea where you're getting this crazy information. It [i]clearly[/i] exists, but it might as well not because of how easy it is to bypass.[/QUOTE]

that's old, look at the asm it won't lie

[QUOTE=>>oubliette<<;43829283]I really do hope you're joking, most of the stuff you've send in this thread has been borderline retarded.

My friend sends his regards:

21:51 - Don't hug me I'm scared: have i complained yet about how painful it is seeing meepdarknessmeep flaunt about shit in the anticheat thread like he actually knows what he's talking about?

[/QUOTE]

but you do realize that you can't sleep in the ocean right!?