Raised This Month: $73 Target: $400
 18% 

[Anticheat] Scan clients temp folder?


Post New Thread Reply   
 
Thread Tools Display Modes
canadianjeff
AlliedModders Donor
Join Date: Sep 2016
Old 01-13-2022 , 09:01   Re: [Anticheat] Scan clients temp folder?
Reply With Quote #11

pretty sure you guys are missing the point here.......... I think this L4D2 visuals aimbot from unknowncheats.me will actually send back fake sv_pure results bypassing the system 100% I know this because I have actually setup a 100% sv_pure server that tested every single file and it still passed and was allowed to play however when I opened it up in ghidra/IDA pro I noticed some new strings that really brought my attention.....
pretty sure alot of these are *cough* *cough* cheat flagged cvars???

__________________

Last edited by canadianjeff; 01-13-2022 at 09:03.
canadianjeff is offline
Bacardi
Veteran Member
Join Date: Jan 2010
Location: mom's basement
Old 01-13-2022 , 16:34   Re: [Anticheat] Scan clients temp folder?
Reply With Quote #12

well, can you see difference (sv_showimpacts) between server and client from log file, with this plugin example ?

PHP Code:
ConVar sv_showimpacts;

public 
void OnPluginStart()
{
    
sv_showimpacts FindConVar("sv_showimpacts");
    
    if(
sv_showimpacts == nullSetFailState("Can't find cvar sv_showimpacts");
}


public 
void OnClientPutInServer(int client)
{
    if(
IsFakeClient(client))
        return;

    
CreateTimer(10.0delayGetClientUserId(client), TIMER_FLAG_NO_MAPCHANGE);
}

public 
Action delay(Handle timerany data)
{
    
int client GetClientOfUserId(data);

    if(
client == || !IsClientInGame(client))
        return 
Plugin_Continue;




    
QueryCookie cookie QueryClientConVar(client"sv_showimpacts"queryfinishedsv_showimpacts.IntValue);

    if(
cookie == QUERYCOOKIE_FAILED)
    {
        
LogAction(-1, -1"%L QUERYCOOKIE_FAILED sv_showimpacts"client);
    }

    return 
Plugin_Continue;
}

public 
void queryfinished(QueryCookie cookieint clientConVarQueryResult result, const char[] cvarName, const char[] cvarValueany value)
{
    if(
result == ConVarQuery_Okay)
    {
        
LogAction(-1, -1"%L, %s: server=%i, client=%s"clientcvarNamevaluecvarValue);
    }
    else
    {
        
LogAction(-1, -1"%L, Failed %s: ConVarQueryResult %i"clientcvarNameresult);
    }

__________________
Do not Private Message @me
Bacardi is offline
canadianjeff
AlliedModders Donor
Join Date: Sep 2016
Old 01-13-2022 , 21:57   Re: [Anticheat] Scan clients temp folder?
Reply With Quote #13

I got back some interesting results from this plugin you just made

now I am curious why SirPlease ServerRework github does not check for these convars that are clearly in L4D2 Visuals by redogg

https://github.com/SirPlease/L4D2-Co...tings.cfg#L357

Code:
// Confogl Additional
confogl_setcvars
confogl_resetclientcvars

// Client Cvar Tracking        <cvar>                <hasMin> <min>       <hasMax> <max>
confogl_trackclientcvar        "mat_hdr_level"       "1"      "2.0"       "0"      "0.0"
confogl_startclientchecking
I think they are only tracking for something called "mat_hdr_level" which is kinda stupid and I dont even think that "mat_hdr_level" is even a real convar?????

__________________

Last edited by canadianjeff; 01-13-2022 at 21:59.
canadianjeff is offline
Bacardi
Veteran Member
Join Date: Jan 2010
Location: mom's basement
Old 01-14-2022 , 02:23   Re: [Anticheat] Scan clients temp folder?
Reply With Quote #14

Quote:
Originally Posted by Bacardi View Post
well, can you see difference (sv_showimpacts) between server and client from log file, with this plugin example ?
...
Quote:
Originally Posted by canadianjeff View Post
I got back some interesting results from this plugin you just made
Bacardi is offline
canadianjeff
AlliedModders Donor
Join Date: Sep 2016
Old 01-14-2022 , 05:03   Re: [Anticheat] Scan clients temp folder?
Reply With Quote #15

no secrets to be had here just really pissed that SirPlease server rework never checks for these cvars...

maybe SirPlease wanted people like me to start up Ghidra and find them on our own
__________________
canadianjeff is offline
Bacardi
Veteran Member
Join Date: Jan 2010
Location: mom's basement
Old 01-14-2022 , 05:12   Re: [Anticheat] Scan clients temp folder?
Reply With Quote #16

Quote:
Originally Posted by canadianjeff View Post
no secrets to be had here just really pissed that SirPlease server rework never checks for these cvars...

maybe SirPlease wanted people like me to start up Ghidra and find them on our own
...I'm just confuse, when I asked simple question, did you get what kind result by my example plugin,
you answer nonsense, get around the question.

So, can't you or not want to give a answer ?
Those are in sourcemod log file, copy/paste here if you see difference.
Bacardi is offline
canadianjeff
AlliedModders Donor
Join Date: Sep 2016
Old 01-14-2022 , 06:05   Re: [Anticheat] Scan clients temp folder?
Reply With Quote #17

do you not know who SirPlease is or do you just not care is that what is the issue here?
__________________
canadianjeff is offline
Marttt
Veteran Member
Join Date: Jan 2019
Location: Brazil
Old 01-14-2022 , 13:14   Re: [Anticheat] Scan clients temp folder?
Reply With Quote #18

Don't waste your time Bacardi, he always replies like that.

If you want that "SirPlease" check that cvars, the correct place to ask is on GITHUB and TO HIM, requesting it here is just dumb as always.
__________________

Last edited by Marttt; 01-14-2022 at 13:15.
Marttt is offline
Bacardi
Veteran Member
Join Date: Jan 2010
Location: mom's basement
Old 01-14-2022 , 16:07   Re: [Anticheat] Scan clients temp folder?
Reply With Quote #19

Dammed.
__________________
Do not Private Message @me
Bacardi is offline
canadianjeff
AlliedModders Donor
Join Date: Sep 2016
Old 01-14-2022 , 22:07   Re: [Anticheat] Scan clients temp folder?
Reply With Quote #20

ok I wont waste my time open these stupid aimbots in Ghidra anymore and share with you the strings I find

not like SirPlease uses Ghidra or IDA PRO and cares about these aimbots nope he doesn't just me I guess
__________________

Last edited by canadianjeff; 01-14-2022 at 22:16.
canadianjeff is offline
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 14:57.


Powered by vBulletin®
Copyright ©2000 - 2022, vBulletin Solutions, Inc.
Theme made by Freecode