Custom Cheat Detection

Deophite18 · #1 03-10-2010, 06:42 AM

There is only so much RC can catch on it's own. When I worked on Era I know several people (tig & sales I think) who scripted their own extra detection system for catching programs players were using to gain any sort of advantages. For awhile now myself & others have suspected many people on UN of using programs for advantages mainly in spars. I think management on UN should put in a request with either the GDT or someone skilled and willing to help script something for UN specifically. Just a suggestion but I think it will be very beneficial for the GP's I know suspect things but are unable to provide proof time and time again.

sidthegreat2005 · #2 03-10-2010, 06:53 AM

I don't know how to go about doing this but it would be greatly appreciated. There are many times when we just have to go off instinct of whether or not a player is using a trainer to alter their performance. It would be extremely helpful if the detection system we have was updated to include the new programs out there.

Imperialistic · #3 03-10-2010, 06:56 AM

I believe Tig was working on something big.. maybe even hopefully an addition with the next version.

oo_jazz_oo · #4 03-10-2010, 08:02 AM

I created a system on N-Pulse to detect certain wsu hacking tools...

But I know Graal's cheat detection is horrid. I think it used to just check programs you had open for the words "Memory Editor" or something like that...

But more cheat detection should be developed. Perhaps thats what the GDT should be focusing on? ;P

Deophite18 · #5 03-10-2010, 08:08 AM

Quote:

Originally Posted by oo_jazz_oo

I created a system on N-Pulse to detect certain wsu hacking tools...

Would LOVE UN to have something like this and hopefully even better to detect a broader range of programs

Quote:

Originally Posted by oo_jazz_oo

Perhaps thats what the GDT should be focusing on? ;P

Indeed

DustyPorViva · #6 03-10-2010, 08:17 AM

GameGuard!

benpoke103 · #7 03-10-2010, 08:23 AM

Quote:

Originally Posted by DustyPorViva

GameGuard!

Rootkits!

Deophite18 · #8 03-10-2010, 08:24 AM

Quote:

Originally Posted by benpoke103

Rootkits!

What does rootkits have to do with it?

DustyPorViva · #9 03-10-2010, 08:35 AM

Quote:

Originally Posted by benpoke103

Rootkits!

Sarcasm!

Cubical · #10 03-10-2010, 09:05 AM

Quote:

Originally Posted by Deophite18

What does rootkits have to do with it?

What's love got to do with it?

fowlplay4 · #11 03-10-2010, 05:01 PM

Streety can get in contact with me if he wants what we use on Zodiac.

cbk1994 · #12 03-10-2010, 11:39 PM

Quote:

Originally Posted by fowlplay4

Streety can get in contact with me if he wants what we use on Zodiac.

I'm happy to share what's used on Era for speed hacking as well, but it may or may not be useful to UN. It's my understanding that the WSU trainers simulate staff boots rather than speeding up the client (which is the problem we generally have on Era with xSpeed and the like).

Bell · #13 03-10-2010, 11:42 PM

It makes me feel all warm and cozy inside that you admins are willing to share. I'll point Streety in this direction so he gets the hint in case he misses this thread.

Flares · #14 03-11-2010, 01:39 AM

From what I understand, and I have dealt with this for far too long, neither Zodiac or Era's system will be easily-implementable to UN.

Deophite18 · #15 03-11-2010, 04:04 AM

Quote:

Originally Posted by Flares

From what I understand, and I have dealt with this for far too long, neither Zodiac or Era's system will be easily-implementable to UN.

Well you can at least let a NAT have a look see.

_Zelph · #16 03-11-2010, 07:26 AM

I can script detection for something if I know how it works (i.e. have a copy of the actual software). To be honest I've just never followed up on doing that much because it was never too high on my priority list.

Hiro · #17 03-11-2010, 07:32 AM

Quote:

Originally Posted by _Zelph

I can script detection for something if I know how it works (i.e. have a copy of the actual software). To be honest I've just never followed up on doing that much because it was never too high on my priority list.

this seems to be how UN operates a lot of the time, things just "are not high on the priority list"

Deophite18 · #18 03-11-2010, 07:53 AM

Quote:

Originally Posted by Hiro

this seems to be how UN operates a lot of the time, things just "are not high on the priority list"

Exactly....how is catching cheaters not a high priority? Two out of three of the top servers have had something scripted for awhile now. It doesn't speak well for UN. I hope Streety sets something up.

Quote:

Originally Posted by _Zelph

I can script detection for something if I know how it works (i.e. have a copy of the actual software)

Ill try and find you something

fowlplay4 · #19 03-11-2010, 08:17 AM

Quote:

Originally Posted by Flares

From what I understand, and I have dealt with this for far too long, neither Zodiac or Era's system will be easily-implementable to UN.

Just a small edit to remove Zodiac specific stuff (stat checks) and it's basically a drop-in and add the weapon script to players.

Provides checks for:
- Freezeplayer
- Speedhacking (WSU-brand)
- Wallhack Detection

The only tricky part will be adding exceptions for false positives caused by UNs scripts.

DustyPorViva · #20 03-11-2010, 08:26 AM

Quote:

Originally Posted by fowlplay4

Just a small edit to remove Zodiac specific stuff (stat checks) and it's basically a drop-in and add the weapon script to players.

Provides checks for:
- Freezeplayer
- Speedhacking (WSU-brand)
- Wallhack Detection

The only tricky part will be adding exceptions for false positives caused by UNs scripts.

Tricky is not the word.

Demisis_P2P · #21 03-11-2010, 08:34 AM

Quote:

Originally Posted by DustyPorViva

Tricky is not the word.

i think the word is trialanderror.

cbk1994 · #22 03-11-2010, 09:14 AM

Quote:

Originally Posted by fowlplay4

- Speedhacking (WSU-brand)

Suppose we can get that?

ffcmike · #23 03-11-2010, 12:56 PM

If you do a tiletype or onwall or even a function for your own scripted tile detection on an out of bounds coordinate (ie: -2, -2) that should always be returning true, should it return false the player is likely memory editting.

Though in the case of speed hacking it's alot more complicated if you haven't scripted your own movement as you haven't really got a reliable way to determine how far you should be moving and comparing it to the actual amount you then move in the same process, gradual increases of X/Y on arrow key presses seem to be the way speed and wall hacking occur most frequently (WSU), seems 100% reliable for catching it on Classic and no false alarms as of yet.

For programs that increase computer speed/client framerate it's something you could possibly detect by scripting your own server-synced timevar2 clientside and perhaps every few minutes triggering to the server and comparing it against the servers timevar2.
I haven't really tested anything towards this though, maybe there would be an easier method.

CharlieM · #24 03-11-2010, 02:53 PM

Quote:

Originally Posted by cbk1994

Suppose we can get that?

last I heard WSU tools didnt work with era because of how much more complicated it was to make them for Era compared to UN and Zodiac

_Zelph · #25 03-11-2010, 04:51 PM

Quote:

Originally Posted by Hiro

this seems to be how UN operates a lot of the time, things just "are not high on the priority list"

Thanks for taking what I said completely the wrong way. I am not Unholy Nation, I'm an individual. My priority is finishing some college coursework and getting an internship this summer. It's not like Streety came in here and said it's not a big priority for UN.

This is exactly why I rarely bother posting on these forums. Despite that, my offer still stands.

Hiro · #26 03-11-2010, 08:03 PM

Quote:

Originally Posted by _Zelph

Thanks for taking what I said completely the wrong way. I am not Unholy Nation, I'm an individual. My priority is finishing some college coursework and getting an internship this summer. It's not like Streety came in here and said it's not a big priority for UN.

This is exactly why I rarely bother posting on these forums. Despite that, my offer still stands.

despite the fact that i was talking about UN as a whole and not you in general? of course you are not UN-incarnate: but it's amazing how many times i have been told that such-and-such improvement is not "on the priority list" or "we'll finish it when we finish our current projects" that it seems to be more of a "shut up go away" response which i've gotten from various departments

obviously (i hope) college and internships are vastly more important: that's why i didn't say anything about you specifically-or any staff member specifically, for that matter-i've only just quoted what you said because of the above explanation. you should continue to post on the forums: you do make up a good portion of UN's influence being apart of their higher staff and having played there for so long

cbk1994 · #27 03-11-2010, 11:03 PM

Quote:

Originally Posted by CharlieM

last I heard WSU tools didnt work with era because of how much more complicated it was to make them for Era compared to UN and Zodiac

It's really easy to get past Era's hack detection

. The reason WSU trainers are rarely used on Era is because it's aimed almost completely toward classic servers. The few hacks that actually apply are easily caught by our hack detection.