Finding an Anti-Cheat and bypass it.

Hexui Undetected CSGO Cheats Sinkicheat PUBG Cheat

keto

Dank Tier Donator
Nobleman
May 25, 2013
151
1,648
1
Hello folks,

I'd like to know if there is a way to find out if an anti cheat is used and if so, which one. I'd also like to know if you guys can tell me where I can learn everything about bypassing. :)

Regards
PSYCHO
 

GAFO666

Hacker
Meme Tier VIP
Aug 19, 2012
520
3,188
23
Oo nearly every game has on its wiki or at least on google the info which anticheat is used ;)
bypassing, idk no1 ever made a propper release on that which is comprehensible ....
 

NTvalk

Hacker
Meme Tier VIP
Jul 6, 2013
499
3,108
8
bypassing is very anti-cheat specific, if you don't know where to start you probably won't come far with it anyway. Since most anti-cheats also have anti-anti-anti-cheats.
 

c5

Kim Kong Trasher
Dank Tier VIP
Dank Tier Donator
Jul 19, 2012
1,187
12,638
76
bypassing is very anti-cheat specific, if you don't know where to start you probably won't come far with it anyway. Since most anti-cheats also have anti-anti-anti-cheats.
And anti-anti-anti-cheats can have anti-anti-anti-anti-anti-cheats if the anti-cheat is very sophisticated :trollface:
 

keto

Dank Tier Donator
Nobleman
May 25, 2013
151
1,648
1
You are right. But where should I start so? :foreveralone:
 

ParadyneTech

Newbie
Aug 28, 2014
1
1,854
0
I am new to the forum, but I would tell you to begin by gaining an understanding of what the "anti-cheat" is doing and how it goes about doing it. Advice for checking wiki/google is a good start, but remember that most decent defenses aren't going to broadcast what they are doing. Get a good grasp of what the defense is doing. This kind of knowledge is essential in building any kind of work around. Think of it like adaptive problem solving...the more you know about the problem the easier it will be to successfully solve it.

Perhaps it is acting as a rootkit and intercepting mouse commands...or maybe the anti cheat is checking to see if you are using known cheat tools...or the one I am currently trying to wrap my brain around arbitrarily (though I know its algorythmn based) alters random memory bytes multiple times a second so memory scanners are almost worthless. Any solution will be very specific to the type of "anti-cheat" you are experiencing!
 

keto

Dank Tier Donator
Nobleman
May 25, 2013
151
1,648
1
First of all I'd try to find out which kind of protection exists.
- Process Detection (Cheat Engine (not attached!), WPE, Process Hacker...)
- Module Detection (Dll Injection)
- Handle Detection (Cheat Engine after attaching)
- Memory Detection (checks on special memory regions via checksums)
- Memory Protection (protects the whole VM to let OpenProcess fail)
Of course this list can be made much longer.

Every Anti-Cheat uses different methods of course but it's always worth a try to check WIN APIs.

K32EnumProcesses/EnumProcesses/Process32First/Process32Next sometimes are used for Process Detection.
I also saw Ant-iCheats using FindWindow.
X-Trap uses ReadProcessMemory for Process Detection.

K32EnumModules/EnumModules/Module32First/Module32Next can be used for Module Detection.
But Manual Mapping or Ereasing the PE header is a more efficient way then hooking all those APIs (in my opinion).

Some anti cheats use a driver to scan for the open handles. OpenService/OpenSCManager/CreateService might be used for this.
Sometimes it is possible to simply unload the driver using CloseService.

The Memory Detection is (most of the time) part of the process internal module of the Anti-Cheat's dll.
This probably can't be done with WIN API hooks. Reversing a lot of parts of the Anti-Cheat is necessary.

Like the scanning for open handles the Memory Protection can be done with an external driver which lets OpenProcess/ZwOpenProcess fail.
Unloading might works - maybe it doesn't.


I hope this little list didn't confuse anyone more and to anyone who disagrees with my points:
I'm just telling about my experience - the methods/hints I wrote helped/worked for me and of course can't be applied to any Anti-Cheat.
Thanks for sharing your experience. This kinda gave me a little basic understanding on what an anti-cheat even does, lol! So the best thing is, besides known to create stuff probably to got strong reversing skills, did I catch that point correctly? :p
 
Attention! Before you post:

Read the How to Ask Questions Guide
99% of questions are answered in the Beginner's Guide, do it before asking a question.

No Hack Requests. Post in the correct section.  Search the forum first. Read the rules.

How to make a good post:

  • Fill out the form correctly
  • Tell us the game name & coding language
  • Post everything we need to know to help you
  • Ask specific questions, be descriptive
  • Post errors, line numbers & screenshots
  • Post code snippets using code tags
  • If it's a large project, zip it up and attach it

If you do not comply, your post may be deleted.  We want to help, please make a good post and we will do our best to help you.

Community Mods