Anticheat Update Tracking

#1

Post by not-matthias » Sun, Jun 29, 2025, 9:06 PM UTC

Anticheat Update Tracking
not-matthias.github.io

Re: Anticheat Update Tracking

#2

Post by preciousoo » Mon, Jun 30, 2025, 2:35 AM UTC

Funny how the most advanced anti cheat just gives version info and executables in one nicely human friendly package. No need for gimmicks when you the work speaks for itself

fwiw I couldn't find the endpoint in question for vanguard, but I did find for all the riot games

Re: Anticheat Update Tracking

#3

Post by b8 » Mon, Jun 30, 2025, 3:08 AM UTC

Or just download and check the hash against older versions.

Re: Anticheat Update Tracking

#4

Post by nulld3v » Mon, Jun 30, 2025, 3:24 AM UTC

Very nice walk-through on the reverse engineering process.

Also, they linked this post that made my jaw drop: https://www.unknowncheats.me/forum/anti-cheat-bypass/667333-...

Apparantly BattleEye anti-cheat had an exploit where hackers could permanently ban any player they wanted. BattleEye allowed anybody to log in as a "game server" so hackers simply booted up a fake server, told BattleEye that "player X has logged in and is doing a bunch of suspicious stuff" and then player X's account was no more...

I'm sorry, why do we trust these guys again?

Re: Anticheat Update Tracking

#5

Post by ronsor » Mon, Jun 30, 2025, 3:34 AM UTC

nulld3v wrote: post #4

Very nice walk-through on the reverse engineering process. Also, they linked this post that made my jaw drop: https://www.unknowncheats.me/forum/anti-cheat-bypass/667333-... Apparantly BattleEye anti-cheat had an exploit where hackers could permanently ban any player they wanted. BattleEye allowed anybody to log in as a "game server" so hackers simply booted up a fake server, told BattleEye that "player X has logged…

Because game companies force you to in order to play.

Re: Anticheat Update Tracking

#6

Post by bpbp-mango » Mon, Jun 30, 2025, 4:39 AM UTC

my friends got me in to valorent for a time, but I found the idea of a kernel level anticheat far too invasive

Re: Anticheat Update Tracking

#7

Post by rak » Mon, Jun 30, 2025, 4:54 AM UTC

ESEA shipped their client and anti-cheat with a free bitcoin miner back in the day: https://en.wikipedia.org/wiki/ESEA_League#Bitcoin_mining_inc...

Re: Anticheat Update Tracking

#8

Post by ethan_smith » Mon, Jun 30, 2025, 5:52 AM UTC

nulld3v wrote: post #4

Very nice walk-through on the reverse engineering process. Also, they linked this post that made my jaw drop: https://www.unknowncheats.me/forum/anti-cheat-bypass/667333-... Apparantly BattleEye anti-cheat had an exploit where hackers could permanently ban any player they wanted. BattleEye allowed anybody to log in as a "game server" so hackers simply booted up a fake server, told BattleEye that "player X has logged…

This BattleEye exploit demonstrates a classic failure of trust boundary definition - they effectively created a system where client attestation was accepted without proper authentication or verification.

Re: Anticheat Update Tracking

#9

Post by 7bit » Mon, Jun 30, 2025, 6:57 AM UTC

bpbp-mango wrote: post #6

my friends got me in to valorent for a time, but I found the idea of a kernel level anticheat far too invasive

Most online Games require kernel Level anti Cheat.

Re: Anticheat Update Tracking

#10

Post by maeln » Mon, Jun 30, 2025, 7:37 AM UTC

7bit wrote: post #9

bpbp-mango wrote: post #6

my friends got me in to valorent for a time, but I found the idea of a kernel level anticheat far too invasive

Most online Games require kernel Level anti Cheat.

No, very few of them actually use kernel level anti cheat. Really the only game that use them is Riot's games and Counter Strike private league FACEIT (as far as I remember).