new methods for catching cheaters on publics

Started by skyjur
20/06/2008 19:31
Page 1 of 1
skyjur20/06/2008 19:31(edited 20/06/2008 19:32)

I haven't analyzed deeply Fatalis` latest script detectors so sorry if I will tell something similar.

Thats a big and very poor-english explanations, I hope you will get the main idea I am trying to explain.

So in this article I am trying to catch is bhop scripts/cheats because it is biggest problem on public servers.

Most of script detectors tries to detect usage of alias like _special.
I hate all methods of amxx coding where I need to use client_cmd. It doesn't work in some cases and sometimes it is annoying for client. Thats why i bother with this stuff.

My method would be a bit different. I have made a plugin in hour or two and it works well enough,

I am trying to analyze usage of +jump command. Usually we are using mwheel to jump. After we roll the wheel it sends around 3~9 jump command which are very close each other.

We can put a counter of jump commands in cmdStart or preThink forwards.

Advantage of putting counter in cmdStart would be higher accuracy.
Advantage of putting counter in preThink: it would be easier to calculate time between 2 jump commands. We can measure this time in frames, it is easier and more comfortable than measuring time as a Float.

My plugin was counting how many jump commands does player. Jump commands must be closer than 6 frames each other. Thats how I noticed how many jump commands sends mwheel. And jump commands sent from mousewheel usually isn't in very same distance. If first and second jump has ~1 frame difference, the 5th and 6th jump usually has 2~4 frame difference (because you can't roll your wheel in very same speed)

Scripts/Cheats however are sending those jump commands in very same distance and a lot of jumps cmd are very close each other. I have put autoban if you make more than 25 jump cmds in short period and it works.

It is also useful to calculate average time between jump commands. Average time for non cheater is usually 1.3~1.7 frames. Scripts makes precise jumps so the time is usually below 1.1 frames. "+jump;wait" also makes this more precise.
(I calculate that time, how many frames pev_buttons has no IN_JUMP, only in cases when time is lower than 6~7 frames)

Logging those average number of jump cmds, average time between jump cmd, average bhop frames and toher stuff is very useful to find some cheaters who are hard to detect.


I cannot show you code now and I don't know when I will be able to code amxx again. Because I have a lo of work with my new laptop and Linux OS which I am trying to install on it. I will spend my summer in my garden, So I can't access my pc which is at home.


So good luck in coding if you where interested :)

BTW I think that it is possible to set up a public server which would be even safer from cheaters than official world records demos. Its because you are sure that physical engine cannot be cheated (it can be in demos). No slowmo hacks and stuff. The only remaining problem is bhoping scripts.

Fatalis20/06/2008 21:36

This will give alot of false positives. I already use something like this to detect if a script is "undetected" by my plugin.

Acidas20/06/2008 23:25

Well, i have i bhop script (i dont use it :D) that even kzm dont detect, but it's non steam, or maybe there is a version on steam, dont care dont use it :D

SchlumPF20/06/2008 23:51

Originally posted by Acidas
Well, i have i bhop script (i dont use it :D) that even kzm dont detect, but it's non steam, or maybe there is a version on steam, dont care dont use it :D


send it to fatalis so he can try to catch it by his plugin when he gets time for amxx else none cares about that unless you release it ofc.

anyway i thought about the same skyjur but as fatalis said you will get and probably will get bad results and unless there is a small possibilty to kick someone who is not using a bhop hack a method for detecting scripts is NOT good even if using client_cmd sux.
i think there might be a way of detecting bhop scripts by checking the engine. i bet there are things which are characteristical for normal and cheated bhoping

PoisoN-21/06/2008 00:15

you cant detect wallhack with integrated bhop

Fatalis21/06/2008 02:07

aka bhop hack, and yes you can.

skyjur21/06/2008 14:11

if it is made good there aren't any bad results, unless someone is reasonably trying to roll his mouse wheel until he gets banned (however that won't be easy to get banned)

Fatalis21/06/2008 15:12

Not all players scroll the same speed, some scroll insanely fast and some have mouses that don't "click" when you scroll them.

Acidas21/06/2008 17:18

The reason is that is not a script or alias its an .exe files :/ Fatalis, pls leave some off your contacts here, i will send it to you so you can check it...

Fatalis21/06/2008 21:31

I already know, and have known for years. Read the XJ news, I already have a detection method for it.

Acidas21/06/2008 22:43

Well, is the method added in kzm v2?

skyjur22/06/2008 11:53(edited 22/06/2008 11:58)

its nearly impossible to make so many nice +jump which are so close each over even with mouse which doesn't click like you said. Mine doesn't click because I have removed those springs which made "click" :D If you spin your wheel too fast again its not good, cos if there will be more than 1 +jump in 2 frames, you won't be jumping. So you must keep a constant speed of your wheel to be like a script and its not natural.

Moreover you might check velocity of player, nobody will be able to spin their mouse like a sick, make a nice bhops and keep his speed 200+,

noqex29/07/2008 13:48

Well, since people made those anti cheat clients, you load and they upload screenshots of the game, couldn't it be possible to make a client that goes through your cstrike folder, and check what programs you have open?, if any suspicious things is found during this scan, it will upload to a website where only admins have access etc?

SchlumPF29/07/2008 14:38

you cant create such a appliaction with amxx but i coudl imagine xj with a ac tool like the esls aeq

Page 1 of 1

Please log in to post replies.