All anti cheat programs can be defeated [message #145588] |
Fri, 25 March 2005 03:18 |
|
gibberish
Messages: 366 Registered: May 2003
Karma: 0
|
Commander |
|
|
It is only a question of how much work is necessary.
For example if someone either disassembles or gets the source to the device drivers for both their graphics card and mouse.
It would be possible to link the mouse click to a color change on a certain pixel of the graphics card.
Hence you have a basic click bot.
If the individual never released the source, binary or information about the existence of this hack it is extremely unlikely that any game or anti cheat program could detect it.
If you want to go even more extreme, do it with hardware instead.
Have a camera pointed at your monitor and have a second PC hard wired to the mouse, there is no possibility of detecting it unless the person setting it up is incompetent enough to not build in a "miss factor".
So put the issue to bed and say that there are currently no known hacks but it is possible someone has compromised RG.
PS I know this is far fetched but my point is that some people do go to extreme lengths.
And there is always the possibility someone has missed something simple.
|
|
|
Re: All anti cheat programs can be defeated [message #145592] |
Fri, 25 March 2005 03:46 |
|
Blazer
Messages: 3322 Registered: February 2003 Location: Phoenix, AZ
Karma: 0
|
General (3 Stars) Administrator/General |
|
|
Its almost 4am and I'm tierd, so forgive my coyness.
captain obvious | It is only a question of how much work is necessary.
|
Indeed...with enough work, you could make a nuclear weapon in your garage.
gibberish | For example if someone either disassembles or gets the source to the device drivers for both their graphics card and mouse.
It would be possible to link the mouse click to a color change on a certain pixel of the graphics card.
|
They already have those, they are called click-bots, or color-aimbots. They work so well that nobody actually uses them. Try one out yourself if you want to see how crappy they work and how little advantage they are.
gibberish | Hence you have a basic click bot.
|
Wow you conceived of that all by yourself, and even named it the same name it was called 3 years ago :rolleyes:
gibberish | If the individual never released the source, binary or information about the existence of this hack it is extremely unlikely that any game or anti cheat program could detect it.
|
You are forgetting the mentality of cheaters. Despite what many people think, their goal is not to win. If this was really their goal they would use subtle cheats, just enough to give them an edge. But no, they would rather run around killing everyone, and getting their rocks off everytime someone says "wtf" or yells at them. Their main goal is to piss people off, and they always openly use and brag about their cheats, including how they work.
gibberish | If you want to go even more extreme, do it with hardware instead. Have a camera pointed at your monitor and have a second PC hard wired to the mouse, there is no possibility of detecting it unless the person setting it up is incompetent enough to not build in a "miss factor".
|
What about the SneakerCheat? It's where you run to the other persons house, and kick them in the balls...they take their hands off of their mouse for at least 5 mins, giving you time to run back home and headshot them while they are standing still. OMG SNEAKERCHEAT BYPASSES RENGUARD OMG ONG OMG RG SUX EVERYONE AND THEIR DOGGS ARE CHEATING! RENEGADE IS DOOOOOOMMEEED.
gibberish | So put the issue to bed and say that there are currently no known hacks but it is possible someone has compromised RG.
|
There are actually known hacks for RG (BHS members know how it can be done), but so far nobody has been found using that method or any reports of it. Also, this particular method will be shut down with RG 1.04
gibberish | PS I know this is far fetched but my point is that some people do go to extreme lengths. And there is always the possibility someone has missed something simple.
|
Fortunately Renegade is a small enough community that we havn't really had to battle any "uber hackers" that are wizards at assembly language and whatnot. Even if they tried, BHS has several members with such skills, and we would easily counter any cheat that was concocted. So even IF an RG exploit is discovered, we will immediately stop it. Thats pretty much as safe as you can get.
[Updated on: Sun, 27 March 2005 14:43] Report message to a moderator
|
|
|
|
|
|
|
|
|
|
|
|
All anti cheat programs can be defeated [message #146479] |
Tue, 29 March 2005 16:32 |
|
IRON FART
Messages: 1989 Registered: September 2003 Location: LOS ANGELES
Karma: 0
|
General (1 Star) |
|
|
Quote: |
What about the SneakerCheat? It's where you run to the other persons house, and kick them in the balls...they take their hands off of their mouse for at least 5 mins, giving you time to run back home and headshot them while they are standing still. OMG SNEAKERCHEAT BYPASSES RENGUARD OMG ONG OMG RG SUX EVERYONE AND THEIR DOGGS ARE CHEATING! RENEGADE IS DOOOOOOMMEEED.
|
Well there's protection against that...
What do you think cups are for?
Wear a cup -> When someone kicks you in the nuts, pretend you are in agony -> When they are on their way back to their computer, shoot them while they are AFK.
Quote: |
Quote from IRC
<[Digital]> get man_fucking_a_car.mpg
<[Digital]> ah fuck wrong window
|
|
|
|
|
|
|
All anti cheat programs can be defeated [message #146975] |
Thu, 31 March 2005 17:05 |
|
theplague
Messages: 261 Registered: May 2004
Karma: 0
|
Recruit |
|
|
you know, he has a point, why if there is that few 'uber' asm experts out there? what if they did get into how rg works? even if it's 1/1000 people, then it's that 1 person that has the advantage and that person will discredit RG... rg hasn't been updated in a while now, i'll be waiting for the next patch...
just so you know, asm isn't hard, i did it for some helbreath servers a while back, and the stuff you need to know is minimum, it's just what tools and how you use them.
asm can do amazing stuff.. it can make flash mx 2004 work for free, westwood and ea games fall to their knees.
just don't underestimate them....
/me revises asm *although i have no intention or time to mess with rg* :S
|
|
|
All anti cheat programs can be defeated [message #147031] |
Thu, 31 March 2005 18:32 |
|
ododd
Messages: 40 Registered: March 2005 Location: canada
Karma: 0
|
Recruit |
|
|
ya renegade is an older game and it might be easier to hack directly...
there are three types of people in the world those that can count and those that can't.
|
|
|
|
All anti cheat programs can be defeated [message #147458] |
Sat, 02 April 2005 22:20 |
Kanezor
Messages: 855 Registered: February 2005 Location: Sugar Land, TX, USA
Karma: 0
|
Colonel |
|
|
Really, if you know ASM, then it doesn't matter what type of encryption Renguard is using for network protocols. Just disassemble Renguard and learn the decrypted protocol from the program itself (eg, before it encrypts the data), instead of packet logs.
|
|
|
All anti cheat programs can be defeated [message #147484] |
Sun, 03 April 2005 03:15 |
|
Dan
Messages: 395 Registered: August 2003 Location: UK
Karma: 0
|
Commander |
|
|
lol.... disassemble RenGuard....
I did that to see what anti-disassembling stuff they put in, and I must say, they did a good job. I dont think anyone will be doing much by that approach ;D
But then again, I could be overlooking something because I dont know much ASM
|
|
|
All anti cheat programs can be defeated [message #147597] |
Sun, 03 April 2005 14:19 |
Kanezor
Messages: 855 Registered: February 2005 Location: Sugar Land, TX, USA
Karma: 0
|
Colonel |
|
|
Firstly, the EXE is encrypted, meaning that the EXE loads up and a pre-made decryption algorithm runs on itself (actually not really itself, but for all practical purposes...). You'd have to break that first.
Once you've done that, your main goal should be to aquire the network protocol it uses (assuming you want to bypass Renguard: best way to do that would be to write your own client that emulates Renguard... but allows cheats). Easy enough once you've decrypted the EXE.
Follow the execution path of Renguard starting up (without actually starting up Renguard, as it could detect that you have debuggers not only installed and running, but running on *IT*, so you can only work with disassembly at this point). There's a number of things to watch here. You'd need to look for a few things, especially calls to Winsock. But don't just go straight to that, you really should find out what variables it loads at startup, because it will most likely be sending those variables (encrypted, of course) over the network. Things such as the hashed/encrypted version of your cd key, the name you'd be playing on (which would be the name passed to it on the command line at startup, or if none found there, then the WOL name), and the hashes of various files in your Renegade and Renegade\Data folder.
Anyways... from there, it's easy work.
Unless you know what you're doing (and have the proper tools), the hardest part would be breaking the EXE encryption, in my opinion.
[Updated on: Tue, 05 April 2005 14:25] Report message to a moderator
|
|
|
|
All anti cheat programs can be defeated [message #147720] |
Mon, 04 April 2005 06:24 |
Scorpio9a
Messages: 60 Registered: March 2003 Location: The Netherlands
Karma: 0
|
Recruit |
|
|
Yes, its possible to hack RenGuard, thats something we won't deny, but it takes quiet alot of time to do so. And most simply aren't bothered or simply can't do it.
Kanesor its a bit more complex to do then you think, but the basic outline seems to be pretty good yes and you aren't far from how i would do it.
-Scorpio9a
Nothing is impossible, somethings just requires alot of time.
"Impossible" things done so far together with SK:
RenRem Protocol - Custom Checksum/Encryption
HL2 FileSystem replacement
C&C95 Multiplayer under XP with up to 4 players
|
|
|
All anti cheat programs can be defeated [message #147769] |
Mon, 04 April 2005 11:31 |
|
Dan
Messages: 395 Registered: August 2003 Location: UK
Karma: 0
|
Commander |
|
|
I think we can rest assured, knowing that the people like the kind that hang around EAX barely know much more than how to press a "Download" button. Even if they did, BHS could just change the encryption, so they would have to do it aallll over again. =)
|
|
|
|