Raised This Month: $32 Target: $400
 8% 

[Anticheat] Scan clients temp folder?


Post New Thread Closed Thread   
 
Thread Tools Display Modes
canadianjeff
BANNED
Join Date: Sep 2016
Old 01-13-2022 , 08:01   Re: [Anticheat] Scan clients temp folder?
#11

pretty sure you guys are missing the point here.......... I think this L4D2 visuals aimbot from unknowncheats.me will actually send back fake sv_pure results bypassing the system 100% I know this because I have actually setup a 100% sv_pure server that tested every single file and it still passed and was allowed to play however when I opened it up in ghidra/IDA pro I noticed some new strings that really brought my attention.....
pretty sure alot of these are *cough* *cough* cheat flagged cvars???


Last edited by canadianjeff; 01-13-2022 at 08:03.
canadianjeff is offline
Bacardi
Veteran Member
Join Date: Jan 2010
Location: mom's basement
Old 01-13-2022 , 15:34   Re: [Anticheat] Scan clients temp folder?
#12

well, can you see difference (sv_showimpacts) between server and client from log file, with this plugin example ?

PHP Code:
ConVar sv_showimpacts;

public 
void OnPluginStart()
{
    
sv_showimpacts FindConVar("sv_showimpacts");
    
    if(
sv_showimpacts == nullSetFailState("Can't find cvar sv_showimpacts");
}


public 
void OnClientPutInServer(int client)
{
    if(
IsFakeClient(client))
        return;

    
CreateTimer(10.0delayGetClientUserId(client), TIMER_FLAG_NO_MAPCHANGE);
}

public 
Action delay(Handle timerany data)
{
    
int client GetClientOfUserId(data);

    if(
client == || !IsClientInGame(client))
        return 
Plugin_Continue;




    
QueryCookie cookie QueryClientConVar(client"sv_showimpacts"queryfinishedsv_showimpacts.IntValue);

    if(
cookie == QUERYCOOKIE_FAILED)
    {
        
LogAction(-1, -1"%L QUERYCOOKIE_FAILED sv_showimpacts"client);
    }

    return 
Plugin_Continue;
}

public 
void queryfinished(QueryCookie cookieint clientConVarQueryResult result, const char[] cvarName, const char[] cvarValueany value)
{
    if(
result == ConVarQuery_Okay)
    {
        
LogAction(-1, -1"%L, %s: server=%i, client=%s"clientcvarNamevaluecvarValue);
    }
    else
    {
        
LogAction(-1, -1"%L, Failed %s: ConVarQueryResult %i"clientcvarNameresult);
    }

__________________
Do not Private Message @me
Bacardi is offline
canadianjeff
BANNED
Join Date: Sep 2016
Old 01-13-2022 , 20:57   Re: [Anticheat] Scan clients temp folder?
#13

I got back some interesting results from this plugin you just made

now I am curious why SirPlease ServerRework github does not check for these convars that are clearly in L4D2 Visuals by redogg

https://github.com/SirPlease/L4D2-Co...tings.cfg#L357

Code:
// Confogl Additional
confogl_setcvars
confogl_resetclientcvars

// Client Cvar Tracking        <cvar>                <hasMin> <min>       <hasMax> <max>
confogl_trackclientcvar        "mat_hdr_level"       "1"      "2.0"       "0"      "0.0"
confogl_startclientchecking
I think they are only tracking for something called "mat_hdr_level" which is kinda stupid and I dont even think that "mat_hdr_level" is even a real convar?????


Last edited by canadianjeff; 01-13-2022 at 20:59.
canadianjeff is offline
Bacardi
Veteran Member
Join Date: Jan 2010
Location: mom's basement
Old 01-14-2022 , 01:23   Re: [Anticheat] Scan clients temp folder?
#14

Quote:
Originally Posted by Bacardi View Post
well, can you see difference (sv_showimpacts) between server and client from log file, with this plugin example ?
...
Quote:
Originally Posted by canadianjeff View Post
I got back some interesting results from this plugin you just made
Bacardi is offline
canadianjeff
BANNED
Join Date: Sep 2016
Old 01-14-2022 , 04:03   Re: [Anticheat] Scan clients temp folder?
#15

no secrets to be had here just really pissed that SirPlease server rework never checks for these cvars...

maybe SirPlease wanted people like me to start up Ghidra and find them on our own
canadianjeff is offline
Bacardi
Veteran Member
Join Date: Jan 2010
Location: mom's basement
Old 01-14-2022 , 04:12   Re: [Anticheat] Scan clients temp folder?
#16

Quote:
Originally Posted by canadianjeff View Post
no secrets to be had here just really pissed that SirPlease server rework never checks for these cvars...

maybe SirPlease wanted people like me to start up Ghidra and find them on our own
...I'm just confuse, when I asked simple question, did you get what kind result by my example plugin,
you answer nonsense, get around the question.

So, can't you or not want to give a answer ?
Those are in sourcemod log file, copy/paste here if you see difference.
Bacardi is offline
canadianjeff
BANNED
Join Date: Sep 2016
Old 01-14-2022 , 05:05   Re: [Anticheat] Scan clients temp folder?
#17

do you not know who SirPlease is or do you just not care is that what is the issue here?
canadianjeff is offline
Marttt
Veteran Member
Join Date: Jan 2019
Location: Brazil
Old 01-14-2022 , 12:14   Re: [Anticheat] Scan clients temp folder?
#18

Don't waste your time Bacardi, he always replies like that.

If you want that "SirPlease" check that cvars, the correct place to ask is on GITHUB and TO HIM, requesting it here is just dumb as always.
__________________

Last edited by Marttt; 01-14-2022 at 12:15.
Marttt is offline
Bacardi
Veteran Member
Join Date: Jan 2010
Location: mom's basement
Old 01-14-2022 , 15:07   Re: [Anticheat] Scan clients temp folder?
#19

Dammed.
__________________
Do not Private Message @me
Bacardi is offline
canadianjeff
BANNED
Join Date: Sep 2016
Old 01-14-2022 , 21:07   Re: [Anticheat] Scan clients temp folder?
#20

ok I wont waste my time open these stupid aimbots in Ghidra anymore and share with you the strings I find

not like SirPlease uses Ghidra or IDA PRO and cares about these aimbots nope he doesn't just me I guess

Last edited by canadianjeff; 01-14-2022 at 21:16.
canadianjeff is offline
Closed Thread



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 18:42.


Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Theme made by Freecode