subject:"\[hlds_linux\] TriggerBot\/Prediction hack\(Crit hack\/No spread\) detection plugin"

What the hell? Servers can tell the client to take screenshots *and*
tell them to upload them to the server? Whatever happened about
privacy?

2012/9/8 lwf l...@rocketblast.com:
 http://etf2l.org/forum/general/topic-21038/page-24/?recent=406717#post-406387

 This is absolutely brilliant, great job! Now just imagine having
 something like Greenlight to go through those...

 I'm not even going to bother asking you to open source it but please,
 at least consider releasing a stable version with that doesn't open
 connection (no auto-update or reports to you or anywhere else, no
 offense) and has no undocumented features (now or later). I'd really
 like to use this, we should have had this long ago.

 On Wed, Apr 11, 2012 at 7:23 PM, AnAkIn . anakin...@gmail.com wrote:
 Hi,

 As Valve is too lazy to do anything about hacks, I started working
 back in January on a plugin that can detect:
 - POTENTIAL triggerbotters
 - Prediction hacks (crit hacks/no spread hacks)
 - An anti-speedhack bypass exploit

 Triggerbots:
 To make it clear as some people I gave it to didn’t understand, the
 detection is kind of “heuristic” (I won’t explain in detail, if I do
 then the cheat coders will bypass it in no time), so it’s not because
 someone got detected that he is surely cheating. It’s just a tool to
 help you find people that can potentially cheat and you can just check
 the STV demos then to confirm that they cheat or not.

 The most detections for a single person in the less timespan you will
 find in the log, the more likely he is using a triggerbot.

 Prediction hacks:
 I guess this is what will interest most people on this list, it
 detects the crit hacks that does 100% crits all the time which is an
 engine exploit which has been added into many hacks lately. It's also
 used for various no spread/low spread hacks.

 The detections get printed to a log called TriggerBotDetections.log in
 tf/ (and are also sent to me) on EVERY MAP change or when all players
 have disconnected from the server. It’s important to note this
 otherwise you could loose all the detections (especially if your
 server automatically restarts every night). There is a simple reason
 for this: writing in a file while you play can cause lags, especially
 if someone is getting detected a lot.

 Download: http://tftrue.redline-utilities.net/TriggerBotDetector.zip

 --
 Best regards,
 AnAkIn

 ___
 To unsubscribe, edit your list preferences, or view the list archives, 
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-09-10 Thread Ross Bemrose

Not only that, but it sounds like there's a way for servers to force 
clients to execute commands not marked FCVAR_SERVER_CAN_EXECUTE, which 
would be a security hole.


On 9/10/2012 9:47 AM, Drogen Viech wrote:

What the hell? Servers can tell the client to take screenshots *and*
tell them to upload them to the server? Whatever happened about
privacy?

2012/9/8 lwf l...@rocketblast.com:

http://etf2l.org/forum/general/topic-21038/page-24/?recent=406717#post-406387

This is absolutely brilliant, great job! Now just imagine having
something like Greenlight to go through those...

I'm not even going to bother asking you to open source it but please,
at least consider releasing a stable version with that doesn't open
connection (no auto-update or reports to you or anywhere else, no
offense) and has no undocumented features (now or later). I'd really
like to use this, we should have had this long ago.

On Wed, Apr 11, 2012 at 7:23 PM, AnAkIn . anakin...@gmail.com wrote:

Hi,

As Valve is too lazy to do anything about hacks, I started working
back in January on a plugin that can detect:
- POTENTIAL triggerbotters
- Prediction hacks (crit hacks/no spread hacks)
- An anti-speedhack bypass exploit

Triggerbots:
To make it clear as some people I gave it to didn’t understand, the
detection is kind of “heuristic” (I won’t explain in detail, if I do
then the cheat coders will bypass it in no time), so it’s not because
someone got detected that he is surely cheating. It’s just a tool to
help you find people that can potentially cheat and you can just check
the STV demos then to confirm that they cheat or not.

The most detections for a single person in the less timespan you will
find in the log, the more likely he is using a triggerbot.

Prediction hacks:
I guess this is what will interest most people on this list, it
detects the crit hacks that does 100% crits all the time which is an
engine exploit which has been added into many hacks lately. It's also
used for various no spread/low spread hacks.

The detections get printed to a log called TriggerBotDetections.log in
tf/ (and are also sent to me) on EVERY MAP change or when all players
have disconnected from the server. It’s important to note this
otherwise you could loose all the detections (especially if your
server automatically restarts every night). There is a simple reason
for this: writing in a file while you play can cause lags, especially
if someone is getting detected a lot.

Download: http://tftrue.redline-utilities.net/TriggerBotDetector.zip

--
Best regards,
AnAkIn

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

Presumably it's all there in the SDK and i have to say it's an awesome 
feature. If i would have to guess, Valve propably uses same thing on VAC 
as extra proof of cheating.


No one wouldn't even be alarmed if they didn't know such feature exists 
on this plugin or on the server they play on. I tested this yesterday 
and already got 1 cheater caught. Besides, it only takes screenshots. No 
desktop shots, just ingame footage.


-ics

10.9.2012 16:47, Drogen Viech kirjoitti:

What the hell? Servers can tell the client to take screenshots *and*
tell them to upload them to the server? Whatever happened about
privacy?

2012/9/8 lwf l...@rocketblast.com:

http://etf2l.org/forum/general/topic-21038/page-24/?recent=406717#post-406387

This is absolutely brilliant, great job! Now just imagine having
something like Greenlight to go through those...

I'm not even going to bother asking you to open source it but please,
at least consider releasing a stable version with that doesn't open
connection (no auto-update or reports to you or anywhere else, no
offense) and has no undocumented features (now or later). I'd really
like to use this, we should have had this long ago.

On Wed, Apr 11, 2012 at 7:23 PM, AnAkIn . anakin...@gmail.com wrote:

Hi,

As Valve is too lazy to do anything about hacks, I started working
back in January on a plugin that can detect:
- POTENTIAL triggerbotters
- Prediction hacks (crit hacks/no spread hacks)
- An anti-speedhack bypass exploit

Triggerbots:
To make it clear as some people I gave it to didn’t understand, the
detection is kind of “heuristic” (I won’t explain in detail, if I do
then the cheat coders will bypass it in no time), so it’s not because
someone got detected that he is surely cheating. It’s just a tool to
help you find people that can potentially cheat and you can just check
the STV demos then to confirm that they cheat or not.

The most detections for a single person in the less timespan you will
find in the log, the more likely he is using a triggerbot.

Prediction hacks:
I guess this is what will interest most people on this list, it
detects the crit hacks that does 100% crits all the time which is an
engine exploit which has been added into many hacks lately. It's also
used for various no spread/low spread hacks.

The detections get printed to a log called TriggerBotDetections.log in
tf/ (and are also sent to me) on EVERY MAP change or when all players
have disconnected from the server. It’s important to note this
otherwise you could loose all the detections (especially if your
server automatically restarts every night). There is a simple reason
for this: writing in a file while you play can cause lags, especially
if someone is getting detected a lot.

Download: http://tftrue.redline-utilities.net/TriggerBotDetector.zip

--
Best regards,
AnAkIn

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-09-10 Thread Asher Baker

On Mon, Sep 10, 2012 at 3:35 PM, ics i...@ics-base.net wrote:
 Presumably it's all there in the SDK and i have to say it's an awesome
 feature.

The file transfer stuff is, the plugin is using an (likely now very
short lived, I'd be surprised if it made the end of the week) exploit
to take the actual screenshot.

On Mon, Sep 10, 2012 at 3:35 PM, ics i...@ics-base.net wrote:
 Presumably it's all there in the SDK and i have to say it's an awesome
 feature. If i would have to guess, Valve propably uses same thing on VAC as
 extra proof of cheating.

 No one wouldn't even be alarmed if they didn't know such feature exists on
 this plugin or on the server they play on. I tested this yesterday and
 already got 1 cheater caught. Besides, it only takes screenshots. No desktop
 shots, just ingame footage.

 -ics

 10.9.2012 16:47, Drogen Viech kirjoitti:

 What the hell? Servers can tell the client to take screenshots *and*
 tell them to upload them to the server? Whatever happened about
 privacy?

 2012/9/8 lwf l...@rocketblast.com:


 http://etf2l.org/forum/general/topic-21038/page-24/?recent=406717#post-406387

 This is absolutely brilliant, great job! Now just imagine having
 something like Greenlight to go through those...

 I'm not even going to bother asking you to open source it but please,
 at least consider releasing a stable version with that doesn't open
 connection (no auto-update or reports to you or anywhere else, no
 offense) and has no undocumented features (now or later). I'd really
 like to use this, we should have had this long ago.

 On Wed, Apr 11, 2012 at 7:23 PM, AnAkIn . anakin...@gmail.com wrote:

 Hi,

 As Valve is too lazy to do anything about hacks, I started working
 back in January on a plugin that can detect:
 - POTENTIAL triggerbotters
 - Prediction hacks (crit hacks/no spread hacks)
 - An anti-speedhack bypass exploit

 Triggerbots:
 To make it clear as some people I gave it to didn’t understand, the
 detection is kind of “heuristic” (I won’t explain in detail, if I do
 then the cheat coders will bypass it in no time), so it’s not because
 someone got detected that he is surely cheating. It’s just a tool to
 help you find people that can potentially cheat and you can just check
 the STV demos then to confirm that they cheat or not.

 The most detections for a single person in the less timespan you will
 find in the log, the more likely he is using a triggerbot.

 Prediction hacks:
 I guess this is what will interest most people on this list, it
 detects the crit hacks that does 100% crits all the time which is an
 engine exploit which has been added into many hacks lately. It's also
 used for various no spread/low spread hacks.

 The detections get printed to a log called TriggerBotDetections.log in
 tf/ (and are also sent to me) on EVERY MAP change or when all players
 have disconnected from the server. It’s important to note this
 otherwise you could loose all the detections (especially if your
 server automatically restarts every night). There is a simple reason
 for this: writing in a file while you play can cause lags, especially
 if someone is getting detected a lot.

 Download: http://tftrue.redline-utilities.net/TriggerBotDetector.zip

 --
 Best regards,
 AnAkIn

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-09-10 Thread Ross Bemrose

(I added hlds to the To list as well, since this affects both Windows 
and Linux servers)


The problem is that it appears to be running client commands that the 
server isn't supposed to have access to.  AND uploading files from a 
client's machine back to the server.  AND sending them to the author of 
the plugin; you did catch that part, right?


The plugin's author won't even send the source code to the admins of 
ETF2L, let alone anyone else.  Which means, unless you decompile it, you 
have no idea what it's doing.  Heck, even if you DO decompile it, you 
may have no idea what it's doing... decompilation isn't exactly the 
easiest thing to read.


So... you have Security by Obscurity that is itself bypassing the game 
client's security.


On 9/10/2012 10:35 AM, ics wrote:
Presumably it's all there in the SDK and i have to say it's an awesome 
feature. If i would have to guess, Valve propably uses same thing on 
VAC as extra proof of cheating.


No one wouldn't even be alarmed if they didn't know such feature 
exists on this plugin or on the server they play on. I tested this 
yesterday and already got 1 cheater caught. Besides, it only takes 
screenshots. No desktop shots, just ingame footage.


-ics

10.9.2012 16:47, Drogen Viech kirjoitti:

What the hell? Servers can tell the client to take screenshots *and*
tell them to upload them to the server? Whatever happened about
privacy?

2012/9/8 lwf l...@rocketblast.com:
http://etf2l.org/forum/general/topic-21038/page-24/?recent=406717#post-406387 



This is absolutely brilliant, great job! Now just imagine having
something like Greenlight to go through those...

I'm not even going to bother asking you to open source it but please,
at least consider releasing a stable version with that doesn't open
connection (no auto-update or reports to you or anywhere else, no
offense) and has no undocumented features (now or later). I'd really
like to use this, we should have had this long ago.

On Wed, Apr 11, 2012 at 7:23 PM, AnAkIn . anakin...@gmail.com wrote:

Hi,

As Valve is too lazy to do anything about hacks, I started working
back in January on a plugin that can detect:
- POTENTIAL triggerbotters
- Prediction hacks (crit hacks/no spread hacks)
- An anti-speedhack bypass exploit

Triggerbots:
To make it clear as some people I gave it to didn’t understand, the
detection is kind of “heuristic” (I won’t explain in detail, if I do
then the cheat coders will bypass it in no time), so it’s not because
someone got detected that he is surely cheating. It’s just a tool to
help you find people that can potentially cheat and you can just check
the STV demos then to confirm that they cheat or not.

The most detections for a single person in the less timespan you will
find in the log, the more likely he is using a triggerbot.

Prediction hacks:
I guess this is what will interest most people on this list, it
detects the crit hacks that does 100% crits all the time which is an
engine exploit which has been added into many hacks lately. It's also
used for various no spread/low spread hacks.

The detections get printed to a log called TriggerBotDetections.log in
tf/ (and are also sent to me) on EVERY MAP change or when all players
have disconnected from the server. It’s important to note this
otherwise you could loose all the detections (especially if your
server automatically restarts every night). There is a simple reason
for this: writing in a file while you play can cause lags, especially
if someone is getting detected a lot.

Download: http://tftrue.redline-utilities.net/TriggerBotDetector.zip

--
Best regards,
AnAkIn

___
To unsubscribe, edit your list preferences, or view the list 
archives, please visit:

https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list 
archives, please visit:

https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list 
archives, please visit:

https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



___
To unsubscribe, edit your list preferences, or view the list archives, 
please visit:

https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-09-10 Thread TOM -


how can i install this plugin ?

  
  
___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

I know what it does and i'm fine with it. Open Source isn't always best 
solution especially on anticheat systems as cheat developers can see 
what it does and do countermeasures. I'm also pretty sure Valve will do 
something that kills the screenshot feature as they did long ago to 
server plugins that were able to execute commands on clients.


-ics

10.9.2012 17:40, Ross Bemrose kirjoitti:
(I added hlds to the To list as well, since this affects both Windows 
and Linux servers)


The problem is that it appears to be running client commands that the 
server isn't supposed to have access to.  AND uploading files from a 
client's machine back to the server.  AND sending them to the author 
of the plugin; you did catch that part, right?


The plugin's author won't even send the source code to the admins of 
ETF2L, let alone anyone else.  Which means, unless you decompile it, 
you have no idea what it's doing.  Heck, even if you DO decompile it, 
you may have no idea what it's doing... decompilation isn't exactly 
the easiest thing to read.


So... you have Security by Obscurity that is itself bypassing the game 
client's security.


On 9/10/2012 10:35 AM, ics wrote:
Presumably it's all there in the SDK and i have to say it's an 
awesome feature. If i would have to guess, Valve propably uses same 
thing on VAC as extra proof of cheating.


No one wouldn't even be alarmed if they didn't know such feature 
exists on this plugin or on the server they play on. I tested this 
yesterday and already got 1 cheater caught. Besides, it only takes 
screenshots. No desktop shots, just ingame footage.


-ics

10.9.2012 16:47, Drogen Viech kirjoitti:

What the hell? Servers can tell the client to take screenshots *and*
tell them to upload them to the server? Whatever happened about
privacy?

2012/9/8 lwf l...@rocketblast.com:
http://etf2l.org/forum/general/topic-21038/page-24/?recent=406717#post-406387 



This is absolutely brilliant, great job! Now just imagine having
something like Greenlight to go through those...

I'm not even going to bother asking you to open source it but please,
at least consider releasing a stable version with that doesn't open
connection (no auto-update or reports to you or anywhere else, no
offense) and has no undocumented features (now or later). I'd really
like to use this, we should have had this long ago.

On Wed, Apr 11, 2012 at 7:23 PM, AnAkIn . anakin...@gmail.com wrote:

Hi,

As Valve is too lazy to do anything about hacks, I started working
back in January on a plugin that can detect:
- POTENTIAL triggerbotters
- Prediction hacks (crit hacks/no spread hacks)
- An anti-speedhack bypass exploit

Triggerbots:
To make it clear as some people I gave it to didn’t understand, the
detection is kind of “heuristic” (I won’t explain in detail, if I do
then the cheat coders will bypass it in no time), so it’s not because
someone got detected that he is surely cheating. It’s just a tool to
help you find people that can potentially cheat and you can just 
check

the STV demos then to confirm that they cheat or not.

The most detections for a single person in the less timespan you will
find in the log, the more likely he is using a triggerbot.

Prediction hacks:
I guess this is what will interest most people on this list, it
detects the crit hacks that does 100% crits all the time which is an
engine exploit which has been added into many hacks lately. It's also
used for various no spread/low spread hacks.

The detections get printed to a log called 
TriggerBotDetections.log in

tf/ (and are also sent to me) on EVERY MAP change or when all players
have disconnected from the server. It’s important to note this
otherwise you could loose all the detections (especially if your
server automatically restarts every night). There is a simple reason
for this: writing in a file while you play can cause lags, especially
if someone is getting detected a lot.

Download: http://tftrue.redline-utilities.net/TriggerBotDetector.zip

--
Best regards,
AnAkIn

___
To unsubscribe, edit your list preferences, or view the list 
archives, please visit:

https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list 
archives, please visit:

https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list 
archives, please visit:

https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



___
To unsubscribe, edit your list preferences, or view the list 
archives, please visit:

https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



___
To unsubscribe, edit your list preferences, or view the list archives, 
please visit:

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

The difference is that it's common knowledge that punkbuster takes
screenshots, whereas it is done in some obscure and hidden way in
anakins plugin, i really hope these exploits are going to be fixed

2012/9/10 ics i...@ics-base.net:
 I know what it does and i'm fine with it. Open Source isn't always best
 solution especially on anticheat systems as cheat developers can see what it
 does and do countermeasures. I'm also pretty sure Valve will do something
 that kills the screenshot feature as they did long ago to server plugins
 that were able to execute commands on clients.

 -ics

 10.9.2012 17:40, Ross Bemrose kirjoitti:

 (I added hlds to the To list as well, since this affects both Windows and
 Linux servers)

 The problem is that it appears to be running client commands that the
 server isn't supposed to have access to.  AND uploading files from a
 client's machine back to the server.  AND sending them to the author of the
 plugin; you did catch that part, right?

 The plugin's author won't even send the source code to the admins of
 ETF2L, let alone anyone else.  Which means, unless you decompile it, you
 have no idea what it's doing.  Heck, even if you DO decompile it, you may
 have no idea what it's doing... decompilation isn't exactly the easiest
 thing to read.

 So... you have Security by Obscurity that is itself bypassing the game
 client's security.

 On 9/10/2012 10:35 AM, ics wrote:

 Presumably it's all there in the SDK and i have to say it's an awesome
 feature. If i would have to guess, Valve propably uses same thing on VAC as
 extra proof of cheating.

 No one wouldn't even be alarmed if they didn't know such feature exists
 on this plugin or on the server they play on. I tested this yesterday and
 already got 1 cheater caught. Besides, it only takes screenshots. No desktop
 shots, just ingame footage.

 -ics

 10.9.2012 16:47, Drogen Viech kirjoitti:

 What the hell? Servers can tell the client to take screenshots *and*
 tell them to upload them to the server? Whatever happened about
 privacy?

 2012/9/8 lwf l...@rocketblast.com:


 http://etf2l.org/forum/general/topic-21038/page-24/?recent=406717#post-406387

 This is absolutely brilliant, great job! Now just imagine having
 something like Greenlight to go through those...

 I'm not even going to bother asking you to open source it but please,
 at least consider releasing a stable version with that doesn't open
 connection (no auto-update or reports to you or anywhere else, no
 offense) and has no undocumented features (now or later). I'd really
 like to use this, we should have had this long ago.

 On Wed, Apr 11, 2012 at 7:23 PM, AnAkIn . anakin...@gmail.com wrote:

 Hi,

 As Valve is too lazy to do anything about hacks, I started working
 back in January on a plugin that can detect:
 - POTENTIAL triggerbotters
 - Prediction hacks (crit hacks/no spread hacks)
 - An anti-speedhack bypass exploit

 Triggerbots:
 To make it clear as some people I gave it to didn’t understand, the
 detection is kind of “heuristic” (I won’t explain in detail, if I do
 then the cheat coders will bypass it in no time), so it’s not because
 someone got detected that he is surely cheating. It’s just a tool to
 help you find people that can potentially cheat and you can just check
 the STV demos then to confirm that they cheat or not.

 The most detections for a single person in the less timespan you will
 find in the log, the more likely he is using a triggerbot.

 Prediction hacks:
 I guess this is what will interest most people on this list, it
 detects the crit hacks that does 100% crits all the time which is an
 engine exploit which has been added into many hacks lately. It's also
 used for various no spread/low spread hacks.

 The detections get printed to a log called TriggerBotDetections.log in
 tf/ (and are also sent to me) on EVERY MAP change or when all players
 have disconnected from the server. It’s important to note this
 otherwise you could loose all the detections (especially if your
 server automatically restarts every night). There is a simple reason
 for this: writing in a file while you play can cause lags, especially
 if someone is getting detected a lot.

 Download: http://tftrue.redline-utilities.net/TriggerBotDetector.zip

 --
 Best regards,
 AnAkIn

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



 ___
 To unsubscribe, edit your list

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

Like i said you wouldn't even care if you didn't know about such feature 
existed on this plugin. Anakin isn't some mojo from backalley who tries 
to exploit everyone. Plugin takes screenshots that reveal cheaters. 
Nothing else. Granted, you don't know that for sure as it isn't open 
source but that's what it does.


I¨'m all in for extra tools to get cheaters out as we ban more cheaters 
than VAC catches (if we look back 2 months after ban was issued by us, 
VAC doesn't get nearly all of them). I'm even helping with reporting 
every single cheater through Steamcommunity because i know it also helps.


-ics

10.9.2012 17:54, Drogen Viech kirjoitti:

The difference is that it's common knowledge that punkbuster takes
screenshots, whereas it is done in some obscure and hidden way in
anakins plugin, i really hope these exploits are going to be fixed

2012/9/10 ics i...@ics-base.net:

I know what it does and i'm fine with it. Open Source isn't always best
solution especially on anticheat systems as cheat developers can see what it
does and do countermeasures. I'm also pretty sure Valve will do something
that kills the screenshot feature as they did long ago to server plugins
that were able to execute commands on clients.

-ics

10.9.2012 17:40, Ross Bemrose kirjoitti:


(I added hlds to the To list as well, since this affects both Windows and
Linux servers)

The problem is that it appears to be running client commands that the
server isn't supposed to have access to.  AND uploading files from a
client's machine back to the server.  AND sending them to the author of the
plugin; you did catch that part, right?

The plugin's author won't even send the source code to the admins of
ETF2L, let alone anyone else.  Which means, unless you decompile it, you
have no idea what it's doing.  Heck, even if you DO decompile it, you may
have no idea what it's doing... decompilation isn't exactly the easiest
thing to read.

So... you have Security by Obscurity that is itself bypassing the game
client's security.

On 9/10/2012 10:35 AM, ics wrote:

Presumably it's all there in the SDK and i have to say it's an awesome
feature. If i would have to guess, Valve propably uses same thing on VAC as
extra proof of cheating.

No one wouldn't even be alarmed if they didn't know such feature exists
on this plugin or on the server they play on. I tested this yesterday and
already got 1 cheater caught. Besides, it only takes screenshots. No desktop
shots, just ingame footage.

-ics

10.9.2012 16:47, Drogen Viech kirjoitti:

What the hell? Servers can tell the client to take screenshots *and*
tell them to upload them to the server? Whatever happened about
privacy?

2012/9/8 lwf l...@rocketblast.com:


http://etf2l.org/forum/general/topic-21038/page-24/?recent=406717#post-406387

This is absolutely brilliant, great job! Now just imagine having
something like Greenlight to go through those...

I'm not even going to bother asking you to open source it but please,
at least consider releasing a stable version with that doesn't open
connection (no auto-update or reports to you or anywhere else, no
offense) and has no undocumented features (now or later). I'd really
like to use this, we should have had this long ago.

On Wed, Apr 11, 2012 at 7:23 PM, AnAkIn . anakin...@gmail.com wrote:

Hi,

As Valve is too lazy to do anything about hacks, I started working
back in January on a plugin that can detect:
- POTENTIAL triggerbotters
- Prediction hacks (crit hacks/no spread hacks)
- An anti-speedhack bypass exploit

Triggerbots:
To make it clear as some people I gave it to didn’t understand, the
detection is kind of “heuristic” (I won’t explain in detail, if I do
then the cheat coders will bypass it in no time), so it’s not because
someone got detected that he is surely cheating. It’s just a tool to
help you find people that can potentially cheat and you can just check
the STV demos then to confirm that they cheat or not.

The most detections for a single person in the less timespan you will
find in the log, the more likely he is using a triggerbot.

Prediction hacks:
I guess this is what will interest most people on this list, it
detects the crit hacks that does 100% crits all the time which is an
engine exploit which has been added into many hacks lately. It's also
used for various no spread/low spread hacks.

The detections get printed to a log called TriggerBotDetections.log in
tf/ (and are also sent to me) on EVERY MAP change or when all players
have disconnected from the server. It’s important to note this
otherwise you could loose all the detections (especially if your
server automatically restarts every night). There is a simple reason
for this: writing in a file while you play can cause lags, especially
if someone is getting detected a lot.

Download: http://tftrue.redline-utilities.net/TriggerBotDetector.zip

--
Best regards,
AnAkIn

___
To unsubscribe, edit your list preferences, or view the list

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

He should atleast force a tag into sv_tags when this plugin is
installed so i can avoid all those servers

2012/9/10 ics i...@ics-base.net:
 Like i said you wouldn't even care if you didn't know about such feature
 existed on this plugin. Anakin isn't some mojo from backalley who tries to
 exploit everyone. Plugin takes screenshots that reveal cheaters. Nothing
 else. Granted, you don't know that for sure as it isn't open source but
 that's what it does.

 I¨'m all in for extra tools to get cheaters out as we ban more cheaters than
 VAC catches (if we look back 2 months after ban was issued by us, VAC
 doesn't get nearly all of them). I'm even helping with reporting every
 single cheater through Steamcommunity because i know it also helps.

 -ics

 10.9.2012 17:54, Drogen Viech kirjoitti:

 The difference is that it's common knowledge that punkbuster takes
 screenshots, whereas it is done in some obscure and hidden way in
 anakins plugin, i really hope these exploits are going to be fixed

 2012/9/10 ics i...@ics-base.net:

 I know what it does and i'm fine with it. Open Source isn't always best
 solution especially on anticheat systems as cheat developers can see what
 it
 does and do countermeasures. I'm also pretty sure Valve will do something
 that kills the screenshot feature as they did long ago to server plugins
 that were able to execute commands on clients.

 -ics

 10.9.2012 17:40, Ross Bemrose kirjoitti:

 (I added hlds to the To list as well, since this affects both Windows
 and
 Linux servers)

 The problem is that it appears to be running client commands that the
 server isn't supposed to have access to.  AND uploading files from a
 client's machine back to the server.  AND sending them to the author of
 the
 plugin; you did catch that part, right?

 The plugin's author won't even send the source code to the admins of
 ETF2L, let alone anyone else.  Which means, unless you decompile it, you
 have no idea what it's doing.  Heck, even if you DO decompile it, you
 may
 have no idea what it's doing... decompilation isn't exactly the easiest
 thing to read.

 So... you have Security by Obscurity that is itself bypassing the game
 client's security.

 On 9/10/2012 10:35 AM, ics wrote:

 Presumably it's all there in the SDK and i have to say it's an awesome
 feature. If i would have to guess, Valve propably uses same thing on
 VAC as
 extra proof of cheating.

 No one wouldn't even be alarmed if they didn't know such feature exists
 on this plugin or on the server they play on. I tested this yesterday
 and
 already got 1 cheater caught. Besides, it only takes screenshots. No
 desktop
 shots, just ingame footage.

 -ics

 10.9.2012 16:47, Drogen Viech kirjoitti:

 What the hell? Servers can tell the client to take screenshots *and*
 tell them to upload them to the server? Whatever happened about
 privacy?

 2012/9/8 lwf l...@rocketblast.com:



 http://etf2l.org/forum/general/topic-21038/page-24/?recent=406717#post-406387

 This is absolutely brilliant, great job! Now just imagine having
 something like Greenlight to go through those...

 I'm not even going to bother asking you to open source it but please,
 at least consider releasing a stable version with that doesn't open
 connection (no auto-update or reports to you or anywhere else, no
 offense) and has no undocumented features (now or later). I'd really
 like to use this, we should have had this long ago.

 On Wed, Apr 11, 2012 at 7:23 PM, AnAkIn . anakin...@gmail.com
 wrote:

 Hi,

 As Valve is too lazy to do anything about hacks, I started working
 back in January on a plugin that can detect:
 - POTENTIAL triggerbotters
 - Prediction hacks (crit hacks/no spread hacks)
 - An anti-speedhack bypass exploit

 Triggerbots:
 To make it clear as some people I gave it to didn’t understand, the
 detection is kind of “heuristic” (I won’t explain in detail, if I do
 then the cheat coders will bypass it in no time), so it’s not
 because
 someone got detected that he is surely cheating. It’s just a tool to
 help you find people that can potentially cheat and you can just
 check
 the STV demos then to confirm that they cheat or not.

 The most detections for a single person in the less timespan you
 will
 find in the log, the more likely he is using a triggerbot.

 Prediction hacks:
 I guess this is what will interest most people on this list, it
 detects the crit hacks that does 100% crits all the time which is an
 engine exploit which has been added into many hacks lately. It's
 also
 used for various no spread/low spread hacks.

 The detections get printed to a log called TriggerBotDetections.log
 in
 tf/ (and are also sent to me) on EVERY MAP change or when all
 players
 have disconnected from the server. It’s important to note this
 otherwise you could loose all the detections (especially if your
 server automatically restarts every night). There is a simple reason
 for this: writing in a file while you play can cause lags,
 especially
 if someone is

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

Will alias jpeg and alias screenshot prevent this from taking screenshots?

2012/9/10 Drogen Viech drogenvi...@googlemail.com:
 He should atleast force a tag into sv_tags when this plugin is
 installed so i can avoid all those servers

 2012/9/10 ics i...@ics-base.net:
 Like i said you wouldn't even care if you didn't know about such feature
 existed on this plugin. Anakin isn't some mojo from backalley who tries to
 exploit everyone. Plugin takes screenshots that reveal cheaters. Nothing
 else. Granted, you don't know that for sure as it isn't open source but
 that's what it does.

 I¨'m all in for extra tools to get cheaters out as we ban more cheaters than
 VAC catches (if we look back 2 months after ban was issued by us, VAC
 doesn't get nearly all of them). I'm even helping with reporting every
 single cheater through Steamcommunity because i know it also helps.

 -ics

 10.9.2012 17:54, Drogen Viech kirjoitti:

 The difference is that it's common knowledge that punkbuster takes
 screenshots, whereas it is done in some obscure and hidden way in
 anakins plugin, i really hope these exploits are going to be fixed

 2012/9/10 ics i...@ics-base.net:

 I know what it does and i'm fine with it. Open Source isn't always best
 solution especially on anticheat systems as cheat developers can see what
 it
 does and do countermeasures. I'm also pretty sure Valve will do something
 that kills the screenshot feature as they did long ago to server plugins
 that were able to execute commands on clients.

 -ics

 10.9.2012 17:40, Ross Bemrose kirjoitti:

 (I added hlds to the To list as well, since this affects both Windows
 and
 Linux servers)

 The problem is that it appears to be running client commands that the
 server isn't supposed to have access to.  AND uploading files from a
 client's machine back to the server.  AND sending them to the author of
 the
 plugin; you did catch that part, right?

 The plugin's author won't even send the source code to the admins of
 ETF2L, let alone anyone else.  Which means, unless you decompile it, you
 have no idea what it's doing.  Heck, even if you DO decompile it, you
 may
 have no idea what it's doing... decompilation isn't exactly the easiest
 thing to read.

 So... you have Security by Obscurity that is itself bypassing the game
 client's security.

 On 9/10/2012 10:35 AM, ics wrote:

 Presumably it's all there in the SDK and i have to say it's an awesome
 feature. If i would have to guess, Valve propably uses same thing on
 VAC as
 extra proof of cheating.

 No one wouldn't even be alarmed if they didn't know such feature exists
 on this plugin or on the server they play on. I tested this yesterday
 and
 already got 1 cheater caught. Besides, it only takes screenshots. No
 desktop
 shots, just ingame footage.

 -ics

 10.9.2012 16:47, Drogen Viech kirjoitti:

 What the hell? Servers can tell the client to take screenshots *and*
 tell them to upload them to the server? Whatever happened about
 privacy?

 2012/9/8 lwf l...@rocketblast.com:



 http://etf2l.org/forum/general/topic-21038/page-24/?recent=406717#post-406387

 This is absolutely brilliant, great job! Now just imagine having
 something like Greenlight to go through those...

 I'm not even going to bother asking you to open source it but please,
 at least consider releasing a stable version with that doesn't open
 connection (no auto-update or reports to you or anywhere else, no
 offense) and has no undocumented features (now or later). I'd really
 like to use this, we should have had this long ago.

 On Wed, Apr 11, 2012 at 7:23 PM, AnAkIn . anakin...@gmail.com
 wrote:

 Hi,

 As Valve is too lazy to do anything about hacks, I started working
 back in January on a plugin that can detect:
 - POTENTIAL triggerbotters
 - Prediction hacks (crit hacks/no spread hacks)
 - An anti-speedhack bypass exploit

 Triggerbots:
 To make it clear as some people I gave it to didn’t understand, the
 detection is kind of “heuristic” (I won’t explain in detail, if I do
 then the cheat coders will bypass it in no time), so it’s not
 because
 someone got detected that he is surely cheating. It’s just a tool to
 help you find people that can potentially cheat and you can just
 check
 the STV demos then to confirm that they cheat or not.

 The most detections for a single person in the less timespan you
 will
 find in the log, the more likely he is using a triggerbot.

 Prediction hacks:
 I guess this is what will interest most people on this list, it
 detects the crit hacks that does 100% crits all the time which is an
 engine exploit which has been added into many hacks lately. It's
 also
 used for various no spread/low spread hacks.

 The detections get printed to a log called TriggerBotDetections.log
 in
 tf/ (and are also sent to me) on EVERY MAP change or when all
 players
 have disconnected from the server. It’s important to note this
 otherwise you could loose all the detections (especially if your
 server automatically

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-09-10 Thread Steve Tomaszewski

Why are you so worried about it taking screenshots? They said it can only
take shots of game footage.

I think this is a great idea and should not be patched. It's probably the
most indefinite proof that someone is cheating. And having their steam id
and everything would get them out of a community that would be better
without any cheaters. If you want to use hacks, stand up your own server and
pay for it then see how many people stay there.

-Original Message-
From: hlds_linux-boun...@list.valvesoftware.com
[mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Drogen Viech
Sent: Monday, September 10, 2012 11:19 AM
To: Half-Life dedicated Linux server mailing list
Subject: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread)
detection plugin

Will alias jpeg and alias screenshot prevent this from taking
screenshots?

2012/9/10 Drogen Viech drogenvi...@googlemail.com:
 He should atleast force a tag into sv_tags when this plugin is 
 installed so i can avoid all those servers

 2012/9/10 ics i...@ics-base.net:
 Like i said you wouldn't even care if you didn't know about such 
 feature existed on this plugin. Anakin isn't some mojo from backalley 
 who tries to exploit everyone. Plugin takes screenshots that reveal 
 cheaters. Nothing else. Granted, you don't know that for sure as it 
 isn't open source but that's what it does.

 I¨'m all in for extra tools to get cheaters out as we ban more 
 cheaters than VAC catches (if we look back 2 months after ban was 
 issued by us, VAC doesn't get nearly all of them). I'm even helping 
 with reporting every single cheater through Steamcommunity because i know
it also helps.

 -ics

 10.9.2012 17:54, Drogen Viech kirjoitti:

 The difference is that it's common knowledge that punkbuster takes 
 screenshots, whereas it is done in some obscure and hidden way in 
 anakins plugin, i really hope these exploits are going to be fixed

 2012/9/10 ics i...@ics-base.net:

 I know what it does and i'm fine with it. Open Source isn't always 
 best solution especially on anticheat systems as cheat developers 
 can see what it does and do countermeasures. I'm also pretty sure 
 Valve will do something that kills the screenshot feature as they 
 did long ago to server plugins that were able to execute commands 
 on clients.

 -ics

 10.9.2012 17:40, Ross Bemrose kirjoitti:

 (I added hlds to the To list as well, since this affects both 
 Windows and Linux servers)

 The problem is that it appears to be running client commands that 
 the server isn't supposed to have access to.  AND uploading files 
 from a client's machine back to the server.  AND sending them to 
 the author of the plugin; you did catch that part, right?

 The plugin's author won't even send the source code to the admins 
 of ETF2L, let alone anyone else.  Which means, unless you 
 decompile it, you have no idea what it's doing.  Heck, even if you 
 DO decompile it, you may have no idea what it's doing... 
 decompilation isn't exactly the easiest thing to read.

 So... you have Security by Obscurity that is itself bypassing the 
 game client's security.

 On 9/10/2012 10:35 AM, ics wrote:

 Presumably it's all there in the SDK and i have to say it's an 
 awesome feature. If i would have to guess, Valve propably uses 
 same thing on VAC as extra proof of cheating.

 No one wouldn't even be alarmed if they didn't know such feature 
 exists on this plugin or on the server they play on. I tested 
 this yesterday and already got 1 cheater caught. Besides, it only 
 takes screenshots. No desktop shots, just ingame footage.

 -ics

 10.9.2012 16:47, Drogen Viech kirjoitti:

 What the hell? Servers can tell the client to take screenshots 
 *and* tell them to upload them to the server? Whatever happened 
 about privacy?

 2012/9/8 lwf l...@rocketblast.com:



 http://etf2l.org/forum/general/topic-21038/page-24/?recent=4067
 17#post-406387

 This is absolutely brilliant, great job! Now just imagine 
 having something like Greenlight to go through those...

 I'm not even going to bother asking you to open source it but 
 please, at least consider releasing a stable version with 
 that doesn't open connection (no auto-update or reports to you 
 or anywhere else, no
 offense) and has no undocumented features (now or later). I'd 
 really like to use this, we should have had this long ago.

 On Wed, Apr 11, 2012 at 7:23 PM, AnAkIn . anakin...@gmail.com
 wrote:

 Hi,

 As Valve is too lazy to do anything about hacks, I started 
 working back in January on a plugin that can detect:
 - POTENTIAL triggerbotters
 - Prediction hacks (crit hacks/no spread hacks)
 - An anti-speedhack bypass exploit

 Triggerbots:
 To make it clear as some people I gave it to didnt 
 understand, the detection is kind of heuristic (I wont 
 explain in detail, if I do then the cheat coders will bypass 
 it in no time), so its not because someone got detected that 
 he is surely cheating. Its just a tool to help you find

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-09-10 Thread Erik-jan Riemers

You mean all the cheaters can avoid that server?

2012/9/10 Drogen Viech drogenvi...@googlemail.com

 He should atleast force a tag into sv_tags when this plugin is
 installed so i can avoid all those servers

 2012/9/10 ics i...@ics-base.net:
  Like i said you wouldn't even care if you didn't know about such feature
  existed on this plugin. Anakin isn't some mojo from backalley who tries
 to
  exploit everyone. Plugin takes screenshots that reveal cheaters. Nothing
  else. Granted, you don't know that for sure as it isn't open source but
  that's what it does.
 
  I¨'m all in for extra tools to get cheaters out as we ban more cheaters
 than
  VAC catches (if we look back 2 months after ban was issued by us, VAC
  doesn't get nearly all of them). I'm even helping with reporting every
  single cheater through Steamcommunity because i know it also helps.
 
  -ics
 
  10.9.2012 17:54, Drogen Viech kirjoitti:
 
  The difference is that it's common knowledge that punkbuster takes
  screenshots, whereas it is done in some obscure and hidden way in
  anakins plugin, i really hope these exploits are going to be fixed
 
  2012/9/10 ics i...@ics-base.net:
 
  I know what it does and i'm fine with it. Open Source isn't always best
  solution especially on anticheat systems as cheat developers can see
 what
  it
  does and do countermeasures. I'm also pretty sure Valve will do
 something
  that kills the screenshot feature as they did long ago to server
 plugins
  that were able to execute commands on clients.
 
  -ics
 
  10.9.2012 17:40, Ross Bemrose kirjoitti:
 
  (I added hlds to the To list as well, since this affects both Windows
  and
  Linux servers)
 
  The problem is that it appears to be running client commands that the
  server isn't supposed to have access to.  AND uploading files from a
  client's machine back to the server.  AND sending them to the author
 of
  the
  plugin; you did catch that part, right?
 
  The plugin's author won't even send the source code to the admins of
  ETF2L, let alone anyone else.  Which means, unless you decompile it,
 you
  have no idea what it's doing.  Heck, even if you DO decompile it, you
  may
  have no idea what it's doing... decompilation isn't exactly the
 easiest
  thing to read.
 
  So... you have Security by Obscurity that is itself bypassing the game
  client's security.
 
  On 9/10/2012 10:35 AM, ics wrote:
 
  Presumably it's all there in the SDK and i have to say it's an
 awesome
  feature. If i would have to guess, Valve propably uses same thing on
  VAC as
  extra proof of cheating.
 
  No one wouldn't even be alarmed if they didn't know such feature
 exists
  on this plugin or on the server they play on. I tested this yesterday
  and
  already got 1 cheater caught. Besides, it only takes screenshots. No
  desktop
  shots, just ingame footage.
 
  -ics
 
  10.9.2012 16:47, Drogen Viech kirjoitti:
 
  What the hell? Servers can tell the client to take screenshots *and*
  tell them to upload them to the server? Whatever happened about
  privacy?
 
  2012/9/8 lwf l...@rocketblast.com:
 
 
 
 
 http://etf2l.org/forum/general/topic-21038/page-24/?recent=406717#post-406387
 
  This is absolutely brilliant, great job! Now just imagine having
  something like Greenlight to go through those...
 
  I'm not even going to bother asking you to open source it but
 please,
  at least consider releasing a stable version with that doesn't
 open
  connection (no auto-update or reports to you or anywhere else, no
  offense) and has no undocumented features (now or later). I'd
 really
  like to use this, we should have had this long ago.
 
  On Wed, Apr 11, 2012 at 7:23 PM, AnAkIn . anakin...@gmail.com
  wrote:
 
  Hi,
 
  As Valve is too lazy to do anything about hacks, I started working
  back in January on a plugin that can detect:
  - POTENTIAL triggerbotters
  - Prediction hacks (crit hacks/no spread hacks)
  - An anti-speedhack bypass exploit
 
  Triggerbots:
  To make it clear as some people I gave it to didn’t understand,
 the
  detection is kind of “heuristic” (I won’t explain in detail, if I
 do
  then the cheat coders will bypass it in no time), so it’s not
  because
  someone got detected that he is surely cheating. It’s just a tool
 to
  help you find people that can potentially cheat and you can just
  check
  the STV demos then to confirm that they cheat or not.
 
  The most detections for a single person in the less timespan you
  will
  find in the log, the more likely he is using a triggerbot.
 
  Prediction hacks:
  I guess this is what will interest most people on this list, it
  detects the crit hacks that does 100% crits all the time which is
 an
  engine exploit which has been added into many hacks lately. It's
  also
  used for various no spread/low spread hacks.
 
  The detections get printed to a log called
 TriggerBotDetections.log
  in
  tf/ (and are also sent to me) on EVERY MAP change or when all
  players
  have disconnected from the server.

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-09-10 Thread Peter Svensson

I suppose it takes screenshots of steamchats, that is not ok.

2012/9/10 Erik-jan Riemers riem...@binkey.nl

 You mean all the cheaters can avoid that server?

 2012/9/10 Drogen Viech drogenvi...@googlemail.com

  He should atleast force a tag into sv_tags when this plugin is
  installed so i can avoid all those servers
 
  2012/9/10 ics i...@ics-base.net:
   Like i said you wouldn't even care if you didn't know about such
 feature
   existed on this plugin. Anakin isn't some mojo from backalley who tries
  to
   exploit everyone. Plugin takes screenshots that reveal cheaters.
 Nothing
   else. Granted, you don't know that for sure as it isn't open source but
   that's what it does.
  
   I¨'m all in for extra tools to get cheaters out as we ban more cheaters
  than
   VAC catches (if we look back 2 months after ban was issued by us, VAC
   doesn't get nearly all of them). I'm even helping with reporting every
   single cheater through Steamcommunity because i know it also helps.
  
   -ics
  
   10.9.2012 17:54, Drogen Viech kirjoitti:
  
   The difference is that it's common knowledge that punkbuster takes
   screenshots, whereas it is done in some obscure and hidden way in
   anakins plugin, i really hope these exploits are going to be fixed
  
   2012/9/10 ics i...@ics-base.net:
  
   I know what it does and i'm fine with it. Open Source isn't always
 best
   solution especially on anticheat systems as cheat developers can see
  what
   it
   does and do countermeasures. I'm also pretty sure Valve will do
  something
   that kills the screenshot feature as they did long ago to server
  plugins
   that were able to execute commands on clients.
  
   -ics
  
   10.9.2012 17:40, Ross Bemrose kirjoitti:
  
   (I added hlds to the To list as well, since this affects both
 Windows
   and
   Linux servers)
  
   The problem is that it appears to be running client commands that
 the
   server isn't supposed to have access to.  AND uploading files from a
   client's machine back to the server.  AND sending them to the author
  of
   the
   plugin; you did catch that part, right?
  
   The plugin's author won't even send the source code to the admins of
   ETF2L, let alone anyone else.  Which means, unless you decompile it,
  you
   have no idea what it's doing.  Heck, even if you DO decompile it,
 you
   may
   have no idea what it's doing... decompilation isn't exactly the
  easiest
   thing to read.
  
   So... you have Security by Obscurity that is itself bypassing the
 game
   client's security.
  
   On 9/10/2012 10:35 AM, ics wrote:
  
   Presumably it's all there in the SDK and i have to say it's an
  awesome
   feature. If i would have to guess, Valve propably uses same thing
 on
   VAC as
   extra proof of cheating.
  
   No one wouldn't even be alarmed if they didn't know such feature
  exists
   on this plugin or on the server they play on. I tested this
 yesterday
   and
   already got 1 cheater caught. Besides, it only takes screenshots.
 No
   desktop
   shots, just ingame footage.
  
   -ics
  
   10.9.2012 16:47, Drogen Viech kirjoitti:
  
   What the hell? Servers can tell the client to take screenshots
 *and*
   tell them to upload them to the server? Whatever happened about
   privacy?
  
   2012/9/8 lwf l...@rocketblast.com:
  
  
  
  
 
 http://etf2l.org/forum/general/topic-21038/page-24/?recent=406717#post-406387
  
   This is absolutely brilliant, great job! Now just imagine having
   something like Greenlight to go through those...
  
   I'm not even going to bother asking you to open source it but
  please,
   at least consider releasing a stable version with that doesn't
  open
   connection (no auto-update or reports to you or anywhere else, no
   offense) and has no undocumented features (now or later). I'd
  really
   like to use this, we should have had this long ago.
  
   On Wed, Apr 11, 2012 at 7:23 PM, AnAkIn . anakin...@gmail.com
   wrote:
  
   Hi,
  
   As Valve is too lazy to do anything about hacks, I started
 working
   back in January on a plugin that can detect:
   - POTENTIAL triggerbotters
   - Prediction hacks (crit hacks/no spread hacks)
   - An anti-speedhack bypass exploit
  
   Triggerbots:
   To make it clear as some people I gave it to didn’t understand,
  the
   detection is kind of “heuristic” (I won’t explain in detail, if
 I
  do
   then the cheat coders will bypass it in no time), so it’s not
   because
   someone got detected that he is surely cheating. It’s just a
 tool
  to
   help you find people that can potentially cheat and you can just
   check
   the STV demos then to confirm that they cheat or not.
  
   The most detections for a single person in the less timespan you
   will
   find in the log, the more likely he is using a triggerbot.
  
   Prediction hacks:
   I guess this is what will interest most people on this list, it
   detects the crit hacks that does 100% crits all the time which
 is
  an
   engine exploit which has been added into

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-09-10 Thread Steve Tomaszewski

Steamchat is a separate program run over top the game. If your executing a
Screenshot on hl2.exe for example, it cannot interfere with
steamoverlay.exe. The two cannot communicate.

-Original Message-
From: hlds_linux-boun...@list.valvesoftware.com
[mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Peter
Svensson
Sent: Monday, September 10, 2012 11:34 AM
To: Half-Life dedicated Linux server mailing list
Subject: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread)
detection plugin

I suppose it takes screenshots of steamchats, that is not ok.

2012/9/10 Erik-jan Riemers riem...@binkey.nl

 You mean all the cheaters can avoid that server?

 2012/9/10 Drogen Viech drogenvi...@googlemail.com

  He should atleast force a tag into sv_tags when this plugin is 
  installed so i can avoid all those servers

  2012/9/10 ics i...@ics-base.net:
   Like i said you wouldn't even care if you didn't know about such
 feature
   existed on this plugin. Anakin isn't some mojo from backalley who 
   tries
  to
   exploit everyone. Plugin takes screenshots that reveal cheaters.
 Nothing
   else. Granted, you don't know that for sure as it isn't open 
   source but that's what it does.

   I¨'m all in for extra tools to get cheaters out as we ban more 
   cheaters
  than
   VAC catches (if we look back 2 months after ban was issued by us, 
   VAC doesn't get nearly all of them). I'm even helping with 
   reporting every single cheater through Steamcommunity because i know
it also helps.

   -ics

   10.9.2012 17:54, Drogen Viech kirjoitti:

   The difference is that it's common knowledge that punkbuster 
   takes screenshots, whereas it is done in some obscure and hidden 
   way in anakins plugin, i really hope these exploits are going to 
   be fixed

   2012/9/10 ics i...@ics-base.net:

   I know what it does and i'm fine with it. Open Source isn't 
   always
 best
   solution especially on anticheat systems as cheat developers can 
   see
  what
   it
   does and do countermeasures. I'm also pretty sure Valve will do
  something
   that kills the screenshot feature as they did long ago to server
  plugins
   that were able to execute commands on clients.

   -ics

   10.9.2012 17:40, Ross Bemrose kirjoitti:

   (I added hlds to the To list as well, since this affects both
 Windows
   and
   Linux servers)

   The problem is that it appears to be running client commands 
   that
 the
   server isn't supposed to have access to.  AND uploading files 
   from a client's machine back to the server.  AND sending them 
   to the author
  of
   the
   plugin; you did catch that part, right?

   The plugin's author won't even send the source code to the 
   admins of ETF2L, let alone anyone else.  Which means, unless 
   you decompile it,
  you
   have no idea what it's doing.  Heck, even if you DO decompile 
   it,
 you
   may
   have no idea what it's doing... decompilation isn't exactly the
  easiest
   thing to read.

   So... you have Security by Obscurity that is itself bypassing 
   the
 game
   client's security.

   On 9/10/2012 10:35 AM, ics wrote:

   Presumably it's all there in the SDK and i have to say it's an
  awesome
   feature. If i would have to guess, Valve propably uses same 
   thing
 on
   VAC as
   extra proof of cheating.

   No one wouldn't even be alarmed if they didn't know such 
   feature
  exists
   on this plugin or on the server they play on. I tested this
 yesterday
   and
   already got 1 cheater caught. Besides, it only takes screenshots.
 No
   desktop
   shots, just ingame footage.

   -ics

   10.9.2012 16:47, Drogen Viech kirjoitti:

   What the hell? Servers can tell the client to take 
   screenshots
 *and*
   tell them to upload them to the server? Whatever happened 
   about privacy?

   2012/9/8 lwf l...@rocketblast.com:

 http://etf2l.org/forum/general/topic-21038/page-24/?recent=406717#post
 -406387

   This is absolutely brilliant, great job! Now just imagine 
   having something like Greenlight to go through those...

   I'm not even going to bother asking you to open source it 
   but
  please,
   at least consider releasing a stable version with that 
   doesn't
  open
   connection (no auto-update or reports to you or anywhere 
   else, no
   offense) and has no undocumented features (now or later). 
   I'd
  really
   like to use this, we should have had this long ago.

   On Wed, Apr 11, 2012 at 7:23 PM, AnAkIn . 
   anakin...@gmail.com
   wrote:

   Hi,

   As Valve is too lazy to do anything about hacks, I started
 working
   back in January on a plugin that can detect:
   - POTENTIAL triggerbotters
   - Prediction hacks (crit hacks/no spread hacks)
   - An anti-speedhack bypass exploit

   Triggerbots:
   To make it clear as some people I gave it to didnt 
   understand,
  the
   detection is kind of heuristic (I wont explain in 
   detail, if
 I
  do
   then the cheat coders

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin


So how does this work?

It takes a snapshot every X minutes and then you have to go through them?

It takes a snapshot when someone is cheating?

It slows down the cheaters computer by making them take 
10 snapshots a sec?



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

It takes a screenshot randomly, only anakin knows when (he said every
10 or so minutes)
He's using some really fucked up kind of exploit - not even the
following config will prevent it from taking screenshots:

http://pastebin.com/raw.php?i=Xr39hrys

2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:
 So how does this work?

 It takes a snapshot every X minutes and then you have to go through them?

 It takes a snapshot when someone is cheating?

 It slows down the cheaters computer by making them take
 10 snapshots a sec?



 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

I think you can prevent this plugin from working if you disallow your
user account to write to the tf2 folder though

2012/9/10 Drogen Viech drogenvi...@googlemail.com:
 It takes a screenshot randomly, only anakin knows when (he said every
 10 or so minutes)
 He's using some really fucked up kind of exploit - not even the
 following config will prevent it from taking screenshots:

 http://pastebin.com/raw.php?i=Xr39hrys

 2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:
 So how does this work?

 It takes a snapshot every X minutes and then you have to go through them?

 It takes a snapshot when someone is cheating?

 It slows down the cheaters computer by making them take
 10 snapshots a sec?



 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin


No, I mean how would you use this to detect if someone is cheating?

On 9/10/2012 9:23 AM, Drogen Viech wrote:

It takes a screenshot randomly, only anakin knows when (he said every
10 or so minutes)
He's using some really fucked up kind of exploit - not even the
following config will prevent it from taking screenshots:

http://pastebin.com/raw.php?i=Xr39hrys

2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

So how does this work?

It takes a snapshot every X minutes and then you have to go through them?

It takes a snapshot when someone is cheating?

It slows down the cheaters computer by making them take
10 snapshots a sec?



___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

I assume you have to go through all of them on your server, the no
spread and trigger bot detection is fully automatic, other heuristic
detections are printed to your console

2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:
 No, I mean how would you use this to detect if someone is cheating?


 On 9/10/2012 9:23 AM, Drogen Viech wrote:

 It takes a screenshot randomly, only anakin knows when (he said every
 10 or so minutes)
 He's using some really fucked up kind of exploit - not even the
 following config will prevent it from taking screenshots:

 http://pastebin.com/raw.php?i=Xr39hrys

 2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

 So how does this work?

 It takes a snapshot every X minutes and then you have to go through them?

 It takes a snapshot when someone is cheating?

 It slows down the cheaters computer by making them take
 10 snapshots a sec?



 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

I totally forgot about cl_allowupload, derp.

2012/9/10 Drogen Viech drogenvi...@googlemail.com:
 I assume you have to go through all of them on your server, the no
 spread and trigger bot detection is fully automatic, other heuristic
 detections are printed to your console

 2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:
 No, I mean how would you use this to detect if someone is cheating?


 On 9/10/2012 9:23 AM, Drogen Viech wrote:

 It takes a screenshot randomly, only anakin knows when (he said every
 10 or so minutes)
 He's using some really fucked up kind of exploit - not even the
 following config will prevent it from taking screenshots:

 http://pastebin.com/raw.php?i=Xr39hrys

 2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

 So how does this work?

 It takes a snapshot every X minutes and then you have to go through them?

 It takes a snapshot when someone is cheating?

 It slows down the cheaters computer by making them take
 10 snapshots a sec?



 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin


Asher? Can you give us an example, or some info on the subject.

On 9/10/2012 9:31 AM, Drogen Viech wrote:

I assume you have to go through all of them on your server, the no
spread and trigger bot detection is fully automatic, other heuristic
detections are printed to your console

2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

No, I mean how would you use this to detect if someone is cheating?


On 9/10/2012 9:23 AM, Drogen Viech wrote:

It takes a screenshot randomly, only anakin knows when (he said every
10 or so minutes)
He's using some really fucked up kind of exploit - not even the
following config will prevent it from taking screenshots:

http://pastebin.com/raw.php?i=Xr39hrys

2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

So how does this work?

It takes a snapshot every X minutes and then you have to go through them?

It takes a snapshot when someone is cheating?

It slows down the cheaters computer by making them take
10 snapshots a sec?



___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

You need to check the screenshots yourself that it picks. Makes one once 
in an hour.


PS: cl_allowupload 0 doesn't block uploading the shot. This plugin is 
simply awesome tool for every server owner that wants to catch 
wallhackers and such.


-ics

10.9.2012 19:46, Cameron Munroe kirjoitti:

Asher? Can you give us an example, or some info on the subject.

On 9/10/2012 9:31 AM, Drogen Viech wrote:

I assume you have to go through all of them on your server, the no
spread and trigger bot detection is fully automatic, other heuristic
detections are printed to your console

2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

No, I mean how would you use this to detect if someone is cheating?


On 9/10/2012 9:23 AM, Drogen Viech wrote:

It takes a screenshot randomly, only anakin knows when (he said every
10 or so minutes)
He's using some really fucked up kind of exploit - not even the
following config will prevent it from taking screenshots:

http://pastebin.com/raw.php?i=Xr39hrys

2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

So how does this work?

It takes a snapshot every X minutes and then you have to go 
through them?


It takes a snapshot when someone is cheating?

It slows down the cheaters computer by making them take
10 snapshots a sec?



___
To unsubscribe, edit your list preferences, or view the list 
archives,

please visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list 
archives, please visit:

https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



___
To unsubscribe, edit your list preferences, or view the list archives, 
please visit:

https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

So really it just takes a screen shot of whats on their screen and then 
uploads it to the game server / FTP? and then at a later time you look 
through them and see if someone had a wall hack on. Is there anything 
else that it can detect as really a screen shot isn't useful in most 
other hacks.


On 9/10/2012 9:49 AM, ics wrote:
You need to check the screenshots yourself that it picks. Makes one 
once in an hour.


PS: cl_allowupload 0 doesn't block uploading the shot. This plugin is 
simply awesome tool for every server owner that wants to catch 
wallhackers and such.


-ics

10.9.2012 19:46, Cameron Munroe kirjoitti:

Asher? Can you give us an example, or some info on the subject.

On 9/10/2012 9:31 AM, Drogen Viech wrote:

I assume you have to go through all of them on your server, the no
spread and trigger bot detection is fully automatic, other heuristic
detections are printed to your console

2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

No, I mean how would you use this to detect if someone is cheating?


On 9/10/2012 9:23 AM, Drogen Viech wrote:

It takes a screenshot randomly, only anakin knows when (he said every
10 or so minutes)
He's using some really fucked up kind of exploit - not even the
following config will prevent it from taking screenshots:

http://pastebin.com/raw.php?i=Xr39hrys

2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

So how does this work?

It takes a snapshot every X minutes and then you have to go 
through them?


It takes a snapshot when someone is cheating?

It slows down the cheaters computer by making them take
10 snapshots a sec?



___
To unsubscribe, edit your list preferences, or view the list 
archives,

please visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list 
archives,

please visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list 
archives, please visit:

https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



___
To unsubscribe, edit your list preferences, or view the list 
archives, please visit:

https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



___
To unsubscribe, edit your list preferences, or view the list archives, 
please visit:

https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

If that is the case valve should get their shit together with their
uploading/downloading policies, it's getting ridiculous

2012/9/10 ics i...@ics-base.net:
 You need to check the screenshots yourself that it picks. Makes one once in
 an hour.

 PS: cl_allowupload 0 doesn't block uploading the shot. This plugin is simply
 awesome tool for every server owner that wants to catch wallhackers and
 such.

 -ics

 10.9.2012 19:46, Cameron Munroe kirjoitti:

 Asher? Can you give us an example, or some info on the subject.

 On 9/10/2012 9:31 AM, Drogen Viech wrote:

 I assume you have to go through all of them on your server, the no
 spread and trigger bot detection is fully automatic, other heuristic
 detections are printed to your console

 2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

 No, I mean how would you use this to detect if someone is cheating?


 On 9/10/2012 9:23 AM, Drogen Viech wrote:

 It takes a screenshot randomly, only anakin knows when (he said every
 10 or so minutes)
 He's using some really fucked up kind of exploit - not even the
 following config will prevent it from taking screenshots:

 http://pastebin.com/raw.php?i=Xr39hrys

 2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

 So how does this work?

 It takes a snapshot every X minutes and then you have to go through
 them?

 It takes a snapshot when someone is cheating?

 It slows down the cheaters computer by making them take
 10 snapshots a sec?



 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin


http://tftrue.redline-utilities.net/anakinac.html

-ics

10.9.2012 19:52, Cameron Munroe kirjoitti:
So really it just takes a screen shot of whats on their screen and 
then uploads it to the game server / FTP? and then at a later time you 
look through them and see if someone had a wall hack on. Is there 
anything else that it can detect as really a screen shot isn't useful 
in most other hacks.


On 9/10/2012 9:49 AM, ics wrote:
You need to check the screenshots yourself that it picks. Makes one 
once in an hour.


PS: cl_allowupload 0 doesn't block uploading the shot. This plugin is 
simply awesome tool for every server owner that wants to catch 
wallhackers and such.


-ics

10.9.2012 19:46, Cameron Munroe kirjoitti:

Asher? Can you give us an example, or some info on the subject.

On 9/10/2012 9:31 AM, Drogen Viech wrote:

I assume you have to go through all of them on your server, the no
spread and trigger bot detection is fully automatic, other heuristic
detections are printed to your console

2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

No, I mean how would you use this to detect if someone is cheating?


On 9/10/2012 9:23 AM, Drogen Viech wrote:
It takes a screenshot randomly, only anakin knows when (he said 
every

10 or so minutes)
He's using some really fucked up kind of exploit - not even the
following config will prevent it from taking screenshots:

http://pastebin.com/raw.php?i=Xr39hrys

2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

So how does this work?

It takes a snapshot every X minutes and then you have to go 
through them?


It takes a snapshot when someone is cheating?

It slows down the cheaters computer by making them take
10 snapshots a sec?



___
To unsubscribe, edit your list preferences, or view the list 
archives,

please visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list 
archives,

please visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



___
To unsubscribe, edit your list preferences, or view the list 
archives,

please visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list 
archives, please visit:

https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



___
To unsubscribe, edit your list preferences, or view the list 
archives, please visit:

https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



___
To unsubscribe, edit your list preferences, or view the list 
archives, please visit:

https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



___
To unsubscribe, edit your list preferences, or view the list archives, 
please visit:

https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-09-10 Thread Chris Oryschak

When you review a screenshot looking like this... it speaks for itself:

http://i.imgur.com/B9UjE.jpg



On Mon, Sep 10, 2012 at 12:29 PM, Cameron Munroe
cmun...@cameronmunroe.comwrote:

 No, I mean how would you use this to detect if someone is cheating?


 On 9/10/2012 9:23 AM, Drogen Viech wrote:

 It takes a screenshot randomly, only anakin knows when (he said every
 10 or so minutes)
 He's using some really fucked up kind of exploit - not even the
 following config will prevent it from taking screenshots:

 http://pastebin.com/raw.php?i=**Xr39hryshttp://pastebin.com/raw.php?i=Xr39hrys

 2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

 So how does this work?

 It takes a snapshot every X minutes and then you have to go through them?

 It takes a snapshot when someone is cheating?

 It slows down the cheaters computer by making them take
 10** snapshots a sec?



 __**_
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

 __**_
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



 __**_
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-09-10 Thread Ryan Stecker

There's clearly a lack of understanding in this thread.

The plugin simply executes 'jpeg' or 'screenshot' on the client (which is
the exploit everyone is talking about), and uses the client's INetChannel
(an interface in the source engine) to have the server request the file
from the client.

It can't take a screenshot of your desktop, or steam chats, or anything
else other than the game's screen. The jpeg command has only ever taken
screenshots of your game.

Really there's two sides of the coin on the issue of making clients execute
commands.

On one side, malicious server operators could do bad things, and on the
other, it made it possible for an anticheat to get client screenshots.

I would have loved it if this plugin could have survived longer, but it
seems like the command execution method is being fixed. I'd kill to get a
proper anticheat in source, and not the flawed disaster that is VAC.

On Mon, Sep 10, 2012 at 11:58 AM, ics i...@ics-base.net wrote:

 http://tftrue.redline-**utilities.net/anakinac.htmlhttp://tftrue.redline-utilities.net/anakinac.html

 -ics

 10.9.2012 19:52, Cameron Munroe kirjoitti:

  So really it just takes a screen shot of whats on their screen and then
 uploads it to the game server / FTP? and then at a later time you look
 through them and see if someone had a wall hack on. Is there anything else
 that it can detect as really a screen shot isn't useful in most other hacks.

 On 9/10/2012 9:49 AM, ics wrote:

 You need to check the screenshots yourself that it picks. Makes one once
 in an hour.

 PS: cl_allowupload 0 doesn't block uploading the shot. This plugin is
 simply awesome tool for every server owner that wants to catch wallhackers
 and such.

 -ics

 10.9.2012 19:46, Cameron Munroe kirjoitti:

 Asher? Can you give us an example, or some info on the subject.

 On 9/10/2012 9:31 AM, Drogen Viech wrote:

 I assume you have to go through all of them on your server, the no
 spread and trigger bot detection is fully automatic, other heuristic
 detections are printed to your console

 2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

 No, I mean how would you use this to detect if someone is cheating?


 On 9/10/2012 9:23 AM, Drogen Viech wrote:

 It takes a screenshot randomly, only anakin knows when (he said every
 10 or so minutes)
 He's using some really fucked up kind of exploit - not even the
 following config will prevent it from taking screenshots:

 http://pastebin.com/raw.php?i=**Xr39hryshttp://pastebin.com/raw.php?i=Xr39hrys

 2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

 So how does this work?

 It takes a snapshot every X minutes and then you have to go through
 them?

 It takes a snapshot when someone is cheating?

 It slows down the cheaters computer by making them take
 10** snapshots a sec?



 __**_
 To unsubscribe, edit your list preferences, or view the list
 archives,
 please visit:
 https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**
 hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

 __**_
 To unsubscribe, edit your list preferences, or view the list
 archives,
 please visit:
 https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**
 hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



 __**_
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**
 hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

 __**_
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



 __**_
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



 __**_
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



 __**_
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



 __**_
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-09-10 Thread EHG

Would be nice if valve added a legitimate way for server admins to grab 
screenshots if they are going to patch this exploit. Considering the 
screenshots only take an in-game image the only people to have reasons 
against it are hackers themselves.


--EHG

On 9/10/2012 1:04 PM, Ryan Stecker wrote:

There's clearly a lack of understanding in this thread.

The plugin simply executes 'jpeg' or 'screenshot' on the client (which is
the exploit everyone is talking about), and uses the client's INetChannel
(an interface in the source engine) to have the server request the file
from the client.

It can't take a screenshot of your desktop, or steam chats, or anything
else other than the game's screen. The jpeg command has only ever taken
screenshots of your game.

Really there's two sides of the coin on the issue of making clients execute
commands.

On one side, malicious server operators could do bad things, and on the
other, it made it possible for an anticheat to get client screenshots.

I would have loved it if this plugin could have survived longer, but it
seems like the command execution method is being fixed. I'd kill to get a
proper anticheat in source, and not the flawed disaster that is VAC.

On Mon, Sep 10, 2012 at 11:58 AM, ics i...@ics-base.net wrote:


http://tftrue.redline-**utilities.net/anakinac.htmlhttp://tftrue.redline-utilities.net/anakinac.html

-ics

10.9.2012 19:52, Cameron Munroe kirjoitti:

  So really it just takes a screen shot of whats on their screen and then

uploads it to the game server / FTP? and then at a later time you look
through them and see if someone had a wall hack on. Is there anything else
that it can detect as really a screen shot isn't useful in most other hacks.

On 9/10/2012 9:49 AM, ics wrote:


You need to check the screenshots yourself that it picks. Makes one once
in an hour.

PS: cl_allowupload 0 doesn't block uploading the shot. This plugin is
simply awesome tool for every server owner that wants to catch wallhackers
and such.

-ics

10.9.2012 19:46, Cameron Munroe kirjoitti:


Asher? Can you give us an example, or some info on the subject.

On 9/10/2012 9:31 AM, Drogen Viech wrote:


I assume you have to go through all of them on your server, the no
spread and trigger bot detection is fully automatic, other heuristic
detections are printed to your console

2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:


No, I mean how would you use this to detect if someone is cheating?


On 9/10/2012 9:23 AM, Drogen Viech wrote:


It takes a screenshot randomly, only anakin knows when (he said every
10 or so minutes)
He's using some really fucked up kind of exploit - not even the
following config will prevent it from taking screenshots:

http://pastebin.com/raw.php?i=**Xr39hryshttp://pastebin.com/raw.php?i=Xr39hrys

2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:


So how does this work?

It takes a snapshot every X minutes and then you have to go through
them?

It takes a snapshot when someone is cheating?

It slows down the cheaters computer by making them take
10** snapshots a sec?



__**_
To unsubscribe, edit your list preferences, or view the list
archives,
please visit:
https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**
hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux


__**_
To unsubscribe, edit your list preferences, or view the list
archives,
please visit:
https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**
hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



__**_
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**
hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux


__**_
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



__**_
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



__**_
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



__**_
To unsubscribe, edit your list preferences, or view the list archives,
please visit:

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-09-10 Thread Ejziponken -

lol need this for CS 1.6 and CSGO.. :P

 Date: Mon, 10 Sep 2012 13:19:42 -0400
 From: epichat...@litewin.net
 To: hlds_linux@list.valvesoftware.com
 Subject: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) 
 detection plugin

 Would be nice if valve added a legitimate way for server admins to grab 
 screenshots if they are going to patch this exploit. Considering the 
 screenshots only take an in-game image the only people to have reasons 
 against it are hackers themselves.

 --EHG

 On 9/10/2012 1:04 PM, Ryan Stecker wrote:
  There's clearly a lack of understanding in this thread.

  The plugin simply executes 'jpeg' or 'screenshot' on the client (which is
  the exploit everyone is talking about), and uses the client's INetChannel
  (an interface in the source engine) to have the server request the file
  from the client.

  It can't take a screenshot of your desktop, or steam chats, or anything
  else other than the game's screen. The jpeg command has only ever taken
  screenshots of your game.

  Really there's two sides of the coin on the issue of making clients execute
  commands.

  On one side, malicious server operators could do bad things, and on the
  other, it made it possible for an anticheat to get client screenshots.

  I would have loved it if this plugin could have survived longer, but it
  seems like the command execution method is being fixed. I'd kill to get a
  proper anticheat in source, and not the flawed disaster that is VAC.

  On Mon, Sep 10, 2012 at 11:58 AM, ics i...@ics-base.net wrote:

  http://tftrue.redline-**utilities.net/anakinac.htmlhttp://tftrue.redline-utilities.net/anakinac.html

  -ics

  10.9.2012 19:52, Cameron Munroe kirjoitti:

So really it just takes a screen shot of whats on their screen and then
  uploads it to the game server / FTP? and then at a later time you look
  through them and see if someone had a wall hack on. Is there anything else
  that it can detect as really a screen shot isn't useful in most other 
  hacks.

  On 9/10/2012 9:49 AM, ics wrote:

  You need to check the screenshots yourself that it picks. Makes one once
  in an hour.

  PS: cl_allowupload 0 doesn't block uploading the shot. This plugin is
  simply awesome tool for every server owner that wants to catch 
  wallhackers
  and such.

  -ics

  10.9.2012 19:46, Cameron Munroe kirjoitti:

  Asher? Can you give us an example, or some info on the subject.

  On 9/10/2012 9:31 AM, Drogen Viech wrote:

  I assume you have to go through all of them on your server, the no
  spread and trigger bot detection is fully automatic, other heuristic
  detections are printed to your console

  2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

  No, I mean how would you use this to detect if someone is cheating?

  On 9/10/2012 9:23 AM, Drogen Viech wrote:

  It takes a screenshot randomly, only anakin knows when (he said every
  10 or so minutes)
  He's using some really fucked up kind of exploit - not even the
  following config will prevent it from taking screenshots:

  http://pastebin.com/raw.php?i=**Xr39hryshttp://pastebin.com/raw.php?i=Xr39hrys

  2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

  So how does this work?

  It takes a snapshot every X minutes and then you have to go through
  them?

  It takes a snapshot when someone is cheating?

  It slows down the cheaters computer by making them take
  10** snapshots a sec?

  __**_
  To unsubscribe, edit your list preferences, or view the list
  archives,
  please visit:
  https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**
  hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

  __**_
  To unsubscribe, edit your list preferences, or view the list
  archives,
  please visit:
  https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**
  hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

  __**_
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**
  hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

  __**_
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

  __**_
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

  __**_
  To unsubscribe

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-09-10 Thread Thomas K

In what folder the screenshots are uploaded to the server?

-Ursprüngliche Nachricht- 
From: Ejziponken -

Sent: Monday, September 10, 2012 7:35 PM
To: hlds_linux@list.valvesoftware.com
Subject: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) 
detection plugin

lol need this for CS 1.6 and CSGO.. :P

Date: Mon, 10 Sep 2012 13:19:42 -0400
From: epichat...@litewin.net
To: hlds_linux@list.valvesoftware.com
Subject: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) 
detection plugin

Would be nice if valve added a legitimate way for server admins to grab
screenshots if they are going to patch this exploit. Considering the
screenshots only take an in-game image the only people to have reasons
against it are hackers themselves.

--EHG

On 9/10/2012 1:04 PM, Ryan Stecker wrote:
 There's clearly a lack of understanding in this thread.

 The plugin simply executes 'jpeg' or 'screenshot' on the client (which 
 is
 the exploit everyone is talking about), and uses the client's 
 INetChannel

 (an interface in the source engine) to have the server request the file
 from the client.

 It can't take a screenshot of your desktop, or steam chats, or anything
 else other than the game's screen. The jpeg command has only ever taken
 screenshots of your game.

 Really there's two sides of the coin on the issue of making clients 
 execute

 commands.

 On one side, malicious server operators could do bad things, and on the
 other, it made it possible for an anticheat to get client screenshots.

 I would have loved it if this plugin could have survived longer, but it
 seems like the command execution method is being fixed. I'd kill to get 
 a

 proper anticheat in source, and not the flawed disaster that is VAC.

 On Mon, Sep 10, 2012 at 11:58 AM, ics i...@ics-base.net wrote:

http://tftrue.redline-**utilities.net/anakinac.htmlhttp://tftrue.redline-utilities.net/anakinac.html

 -ics

 10.9.2012 19:52, Cameron Munroe kirjoitti:

   So really it just takes a screen shot of whats on their screen and 
 then

 uploads it to the game server / FTP? and then at a later time you look
 through them and see if someone had a wall hack on. Is there anything 
 else
 that it can detect as really a screen shot isn't useful in most other 
 hacks.

 On 9/10/2012 9:49 AM, ics wrote:

 You need to check the screenshots yourself that it picks. Makes one 
 once

 in an hour.

 PS: cl_allowupload 0 doesn't block uploading the shot. This plugin is
 simply awesome tool for every server owner that wants to catch 
 wallhackers

 and such.

 -ics

 10.9.2012 19:46, Cameron Munroe kirjoitti:

 Asher? Can you give us an example, or some info on the subject.

 On 9/10/2012 9:31 AM, Drogen Viech wrote:

 I assume you have to go through all of them on your server, the no
 spread and trigger bot detection is fully automatic, other 
 heuristic

 detections are printed to your console

 2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

 No, I mean how would you use this to detect if someone is 
 cheating?

 On 9/10/2012 9:23 AM, Drogen Viech wrote:

 It takes a screenshot randomly, only anakin knows when (he said 
 every

 10 or so minutes)
 He's using some really fucked up kind of exploit - not even the
 following config will prevent it from taking screenshots:

http://pastebin.com/raw.php?i=**Xr39hryshttp://pastebin.com/raw.php?i=Xr39hrys

 2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

 So how does this work?

 It takes a snapshot every X minutes and then you have to go 
 through

 them?

 It takes a snapshot when someone is cheating?

 It slows down the cheaters computer by making them take
 10** snapshots a sec?

 __**_
 To unsubscribe, edit your list preferences, or view the list
 archives,
 please visit:
 https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**

hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

 __**_
 To unsubscribe, edit your list preferences, or view the list
 archives,
 please visit:
 https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**

hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

 __**_
 To unsubscribe, edit your list preferences, or view the list 
 archives,

 please visit:
 https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**

hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

 __**_
 To unsubscribe, edit your list preferences, or view the list 
 archives,

 please visit:

https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

 __**_
 To unsubscribe, edit your list preferences, or view the list 
 archives,

 please visit

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-09-10 Thread Herover

2012/9/10 Ryan Stecker voidedwea...@gmail.com:
 There's clearly a lack of understanding in this thread.

 The plugin simply executes 'jpeg' or 'screenshot' on the client (which is
 the exploit everyone is talking about), and uses the client's INetChannel
 (an interface in the source engine) to have the server request the file
 from the client.

Additionally, it have a autoupdating feature which the author did not
advertise before someone reverse engeneerd it, which doesn't make
anything bether since the operator can't disable it.

You are right, and its but it's really anoying that a better
alternative to VAC have to be malicius in this way -- and personally I
won't use it because I don't like someone to have an option to push
code into my server and I don't like someone to take screencaps of my
players (or me) and distributing them like this.

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

Screenshots are saved to tf/resource and also the player will have the 
shots taken from his/her screen on the same location on his/her pc.


-ics

10.9.2012 21:09, Thomas K kirjoitti:

In what folder the screenshots are uploaded to the server?

-Ursprüngliche Nachricht- From: Ejziponken -
Sent: Monday, September 10, 2012 7:35 PM
To: hlds_linux@list.valvesoftware.com
Subject: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No 
spread) detection plugin



lol need this for CS 1.6 and CSGO.. :P


Date: Mon, 10 Sep 2012 13:19:42 -0400
From: epichat...@litewin.net
To: hlds_linux@list.valvesoftware.com
Subject: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No 
spread) detection plugin


Would be nice if valve added a legitimate way for server admins to grab
screenshots if they are going to patch this exploit. Considering the
screenshots only take an in-game image the only people to have reasons
against it are hackers themselves.

--EHG

On 9/10/2012 1:04 PM, Ryan Stecker wrote:
 There's clearly a lack of understanding in this thread.

 The plugin simply executes 'jpeg' or 'screenshot' on the client 
(which  is
 the exploit everyone is talking about), and uses the client's  
INetChannel
 (an interface in the source engine) to have the server request the 
file

 from the client.

 It can't take a screenshot of your desktop, or steam chats, or 
anything
 else other than the game's screen. The jpeg command has only ever 
taken

 screenshots of your game.

 Really there's two sides of the coin on the issue of making clients 
 execute

 commands.

 On one side, malicious server operators could do bad things, and on 
the

 other, it made it possible for an anticheat to get client screenshots.

 I would have loved it if this plugin could have survived longer, 
but it
 seems like the command execution method is being fixed. I'd kill to 
get  a

 proper anticheat in source, and not the flawed disaster that is VAC.

 On Mon, Sep 10, 2012 at 11:58 AM, ics i...@ics-base.net wrote:

 
http://tftrue.redline-**utilities.net/anakinac.htmlhttp://tftrue.redline-utilities.net/anakinac.html


 -ics

 10.9.2012 19:52, Cameron Munroe kirjoitti:

   So really it just takes a screen shot of whats on their screen 
and  then
 uploads it to the game server / FTP? and then at a later time you 
look
 through them and see if someone had a wall hack on. Is there 
anything  else
 that it can detect as really a screen shot isn't useful in most 
other  hacks.


 On 9/10/2012 9:49 AM, ics wrote:

 You need to check the screenshots yourself that it picks. Makes 
one  once

 in an hour.

 PS: cl_allowupload 0 doesn't block uploading the shot. This 
plugin is
 simply awesome tool for every server owner that wants to catch 
 wallhackers

 and such.

 -ics

 10.9.2012 19:46, Cameron Munroe kirjoitti:

 Asher? Can you give us an example, or some info on the subject.

 On 9/10/2012 9:31 AM, Drogen Viech wrote:

 I assume you have to go through all of them on your server, 
the no
 spread and trigger bot detection is fully automatic, other 
 heuristic

 detections are printed to your console

 2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

 No, I mean how would you use this to detect if someone is 
 cheating?



 On 9/10/2012 9:23 AM, Drogen Viech wrote:

 It takes a screenshot randomly, only anakin knows when (he 
said  every

 10 or so minutes)
 He's using some really fucked up kind of exploit - not even the
 following config will prevent it from taking screenshots:

 
http://pastebin.com/raw.php?i=**Xr39hryshttp://pastebin.com/raw.php?i=Xr39hrys


 2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

 So how does this work?

 It takes a snapshot every X minutes and then you have to go 
 through

 them?

 It takes a snapshot when someone is cheating?

 It slows down the cheaters computer by making them take
 10** snapshots a sec?



 __**_
 To unsubscribe, edit your list preferences, or view the list
 archives,
 please visit:
 https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**
 
hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux


 __**_
 To unsubscribe, edit your list preferences, or view the list
 archives,
 please visit:
 https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**
 
hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



 __**_
 To unsubscribe, edit your list preferences, or view the list 
 archives,

 please visit:
 https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**
 
hlds_linuxhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux


 __**_
 To unsubscribe, edit your list preferences, or view the list 
 archives,

 please visit:
 
https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**hlds_linuxhttps

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-09-10 Thread Bruno Garcia

This is obviously not using the screenshot command, rather the screenshot
client function call.
As well as the INetChannel SendFile function to upload the file.

I wouldn't expect VALVe to update this function, this also used to upload
spray tags to the server, and it has a very secure extension block that
won't let you upload almost anything (Except for screenshots in this case)

@Anakin: If I were you, I would find a way to get the stack of loaded DLLs
to Hl2.exe and print them on a txt on the client, and then upload that to a
server, that way you could have a handful of cheat's DLLs and block em by
default if they are detected on the client. Anything if possible, of course.

Take care.

On Mon, Sep 10, 2012 at 3:29 PM, ics i...@ics-base.net wrote:

Screenshots are saved to tf/resource and also the player will have the
shots taken from his/her screen on the same location on his/her pc.

-ics

10.9.2012 21:09, Thomas K kirjoitti:

In what folder the screenshots are uploaded to the server?

-Ursprüngliche Nachricht- From: Ejziponken -
Sent: Monday, September 10, 2012 7:35 PM
To: hlds_linux@list.valvesoftware.**comhlds_linux@list.valvesoftware.com
Subject: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread)
detection plugin

lol need this for CS 1.6 and CSGO.. :P

Date: Mon, 10 Sep 2012 13:19:42 -0400
From: epichat...@litewin.net
To: hlds_linux@list.valvesoftware.**comhlds_linux@list.valvesoftware.com
Subject: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No
spread) detection plugin

Would be nice if valve added a legitimate way for server admins to grab
screenshots if they are going to patch this exploit. Considering the
screenshots only take an in-game image the only people to have reasons
against it are hackers themselves.

--EHG

On 9/10/2012 1:04 PM, Ryan Stecker wrote:
There's clearly a lack of understanding in this thread.

The plugin simply executes 'jpeg' or 'screenshot' on the client (which
is
the exploit everyone is talking about), and uses the client's
INetChannel
(an interface in the source engine) to have the server request the file
from the client.

It can't take a screenshot of your desktop, or steam chats, or anything
else other than the game's screen. The jpeg command has only ever taken
screenshots of your game.

Really there's two sides of the coin on the issue of making clients
execute
commands.

On one side, malicious server operators could do bad things, and on the
other, it made it possible for an anticheat to get client screenshots.

I would have loved it if this plugin could have survived longer, but it
seems like the command execution method is being fixed. I'd kill to
get a
proper anticheat in source, and not the flawed disaster that is VAC.

On Mon, Sep 10, 2012 at 11:58 AM, ics i...@ics-base.net wrote:

http://tftrue.redline-**utilit**ies.net/anakinac.htmlhttp://utilities.net/anakinac.html
http://**tftrue.redline-utilities.net/**anakinac.htmlhttp://tftrue.redline-utilities.net/anakinac.html

-ics

10.9.2012 19:52, Cameron Munroe kirjoitti:

So really it just takes a screen shot of whats on their screen and
then
uploads it to the game server / FTP? and then at a later time you
look
through them and see if someone had a wall hack on. Is there
anything else
that it can detect as really a screen shot isn't useful in most
other hacks.

On 9/10/2012 9:49 AM, ics wrote:

You need to check the screenshots yourself that it picks. Makes one
once
in an hour.

PS: cl_allowupload 0 doesn't block uploading the shot. This plugin
is
simply awesome tool for every server owner that wants to catch
wallhackers
and such.

-ics

10.9.2012 19:46, Cameron Munroe kirjoitti:

Asher? Can you give us an example, or some info on the subject.

On 9/10/2012 9:31 AM, Drogen Viech wrote:

I assume you have to go through all of them on your server, the no
spread and trigger bot detection is fully automatic, other
heuristic
detections are printed to your console

2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

No, I mean how would you use this to detect if someone is
cheating?

On 9/10/2012 9:23 AM, Drogen Viech wrote:

It takes a screenshot randomly, only anakin knows when (he said
every
10 or so minutes)
He's using some really fucked up kind of exploit - not even the
following config will prevent it from taking screenshots:

http://pastebin.com/raw.php?i=Xr39hryshttp://pastebin.com/raw.php?i=**Xr39hrys
http://pastebin.**com/raw.php?i=Xr39hryshttp://pastebin.com/raw.php?i=Xr39hrys

2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

So how does this work?

It takes a snapshot every X minutes and then you have to go
through
them?

It takes a snapshot when someone is cheating?

It slows down the cheaters computer by making them take
10 snapshots

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-09-10 Thread Asher Baker

It's a server plugin, not a client plugin.
It's using ClientCommand + an exploit to execute jpeg, then
INetChannel::RequestFile to upload it.

On Mon, Sep 10, 2012 at 8:08 PM, Bruno Garcia garcia.bru...@gmail.com wrote:
This is obviously not using the screenshot command, rather the screenshot
client function call.
As well as the INetChannel SendFile function to upload the file.

Take care.

On Mon, Sep 10, 2012 at 3:29 PM, ics i...@ics-base.net wrote:

Screenshots are saved to tf/resource and also the player will have the
shots taken from his/her screen on the same location on his/her pc.

-ics

10.9.2012 21:09, Thomas K kirjoitti:

In what folder the screenshots are uploaded to the server?

lol need this for CS 1.6 and CSGO.. :P

--EHG

On 9/10/2012 1:04 PM, Ryan Stecker wrote:
There's clearly a lack of understanding in this thread.

It can't take a screenshot of your desktop, or steam chats, or anything
else other than the game's screen. The jpeg command has only ever taken
screenshots of your game.

Really there's two sides of the coin on the issue of making clients
execute
commands.

On one side, malicious server operators could do bad things, and on the
other, it made it possible for an anticheat to get client screenshots.

On Mon, Sep 10, 2012 at 11:58 AM, ics i...@ics-base.net wrote:

http://tftrue.redline-**utilit**ies.net/anakinac.htmlhttp://utilities.net/anakinac.html
http://**tftrue.redline-utilities.net/**anakinac.htmlhttp://tftrue.redline-utilities.net/anakinac.html

-ics

10.9.2012 19:52, Cameron Munroe kirjoitti:

On 9/10/2012 9:49 AM, ics wrote:

You need to check the screenshots yourself that it picks. Makes one
once
in an hour.

PS: cl_allowupload 0 doesn't block uploading the shot. This plugin
is
simply awesome tool for every server owner that wants to catch
wallhackers
and such.

-ics

10.9.2012 19:46, Cameron Munroe kirjoitti:

Asher? Can you give us an example, or some info on the subject.

On 9/10/2012 9:31 AM, Drogen Viech wrote:

I assume you have to go through all of them on your server, the no
spread and trigger bot detection is fully automatic, other
heuristic
detections are printed to your console

2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

No, I mean how would you use this to detect if someone is
cheating?

On 9/10/2012 9:23 AM, Drogen Viech wrote:

http://pastebin.com/raw.php?i=Xr39hryshttp://pastebin.com/raw.php?i=**Xr39hrys
http://pastebin.**com/raw.php?i=Xr39hryshttp://pastebin.com/raw.php?i=Xr39hrys

2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

So how does this work?

It takes

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

Then why won't alias jpeg prevent it from taking screenshots huh?

2012/9/10 Asher Baker asher...@gmail.com:
It's a server plugin, not a client plugin.
It's using ClientCommand + an exploit to execute jpeg, then
INetChannel::RequestFile to upload it.

Take care.

On Mon, Sep 10, 2012 at 3:29 PM, ics i...@ics-base.net wrote:

Screenshots are saved to tf/resource and also the player will have the
shots taken from his/her screen on the same location on his/her pc.

-ics

10.9.2012 21:09, Thomas K kirjoitti:

In what folder the screenshots are uploaded to the server?

lol need this for CS 1.6 and CSGO.. :P

--EHG

On 9/10/2012 1:04 PM, Ryan Stecker wrote:
There's clearly a lack of understanding in this thread.

It can't take a screenshot of your desktop, or steam chats, or anything
else other than the game's screen. The jpeg command has only ever taken
screenshots of your game.

Really there's two sides of the coin on the issue of making clients
execute
commands.

On one side, malicious server operators could do bad things, and on the
other, it made it possible for an anticheat to get client screenshots.

On Mon, Sep 10, 2012 at 11:58 AM, ics i...@ics-base.net wrote:

http://tftrue.redline-**utilit**ies.net/anakinac.htmlhttp://utilities.net/anakinac.html
http://**tftrue.redline-utilities.net/**anakinac.htmlhttp://tftrue.redline-utilities.net/anakinac.html

-ics

10.9.2012 19:52, Cameron Munroe kirjoitti:

On 9/10/2012 9:49 AM, ics wrote:

You need to check the screenshots yourself that it picks. Makes one
once
in an hour.

PS: cl_allowupload 0 doesn't block uploading the shot. This plugin
is
simply awesome tool for every server owner that wants to catch
wallhackers
and such.

-ics

10.9.2012 19:46, Cameron Munroe kirjoitti:

Asher? Can you give us an example, or some info on the subject.

On 9/10/2012 9:31 AM, Drogen Viech wrote:

I assume you have to go through all of them on your server, the no
spread and trigger bot detection is fully automatic, other
heuristic
detections are printed to your console

2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:

No, I mean how would you use this to detect if someone is
cheating?

On 9/10/2012 9:23 AM, Drogen Viech wrote:

http://pastebin.com/raw.php?i=Xr39hryshttp://pastebin.com/raw.php?i=**Xr39hrys
http://pastebin.**com/raw.php?i=Xr39hryshttp://pastebin.com

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-09-10 Thread Ryan Stecker

The 'jpeg' command is an assumption. There are a few commands that take
screenshots that could be used. Which command being used is irrelevant
though, as the method *is* executing a command on the client.

On Mon, Sep 10, 2012 at 3:37 PM, Drogen Viech drogenvi...@googlemail.comwrote:

 Then why won't alias jpeg prevent it from taking screenshots huh?

 2012/9/10 Asher Baker asher...@gmail.com:
  It's a server plugin, not a client plugin.
  It's using ClientCommand + an exploit to execute jpeg, then
  INetChannel::RequestFile to upload it.
 
  On Mon, Sep 10, 2012 at 8:08 PM, Bruno Garcia garcia.bru...@gmail.com
 wrote:
  This is obviously not using the screenshot command, rather the
 screenshot
  client function call.
  As well as the INetChannel SendFile function to upload the file.
 
  I wouldn't expect VALVe to update this function, this also used to
 upload
  spray tags to the server, and it has a very secure extension block that
  won't let you upload almost anything (Except for screenshots in this
 case)
 
  @Anakin: If I were you, I would find a way to get the stack of loaded
 DLLs
  to Hl2.exe and print them on a txt on the client, and then upload that
 to a
  server, that way you could have a handful of cheat's DLLs and block em
 by
  default if they are detected on the client. Anything if possible, of
 course.
 
  Take care.
 
  On Mon, Sep 10, 2012 at 3:29 PM, ics i...@ics-base.net wrote:
 
  Screenshots are saved to tf/resource and also the player will have the
  shots taken from his/her screen on the same location on his/her pc.
 
  -ics
 
  10.9.2012 21:09, Thomas K kirjoitti:
 
   In what folder the screenshots are uploaded to the server?
 
  -Ursprüngliche Nachricht- From: Ejziponken -
  Sent: Monday, September 10, 2012 7:35 PM
  To: hlds_linux@list.valvesoftware.**com
 hlds_linux@list.valvesoftware.com
  Subject: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No
 spread)
  detection plugin
 
 
  lol need this for CS 1.6 and CSGO.. :P
 
   Date: Mon, 10 Sep 2012 13:19:42 -0400
  From: epichat...@litewin.net
  To: hlds_linux@list.valvesoftware.**com
 hlds_linux@list.valvesoftware.com
  Subject: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No
  spread) detection plugin
 
  Would be nice if valve added a legitimate way for server admins to
 grab
  screenshots if they are going to patch this exploit. Considering the
  screenshots only take an in-game image the only people to have
 reasons
  against it are hackers themselves.
 
  --EHG
 
  On 9/10/2012 1:04 PM, Ryan Stecker wrote:
   There's clearly a lack of understanding in this thread.
  
   The plugin simply executes 'jpeg' or 'screenshot' on the client
 (which
   is
   the exploit everyone is talking about), and uses the client's 
  INetChannel
   (an interface in the source engine) to have the server request the
 file
   from the client.
  
   It can't take a screenshot of your desktop, or steam chats, or
 anything
   else other than the game's screen. The jpeg command has only ever
 taken
   screenshots of your game.
  
   Really there's two sides of the coin on the issue of making
 clients 
  execute
   commands.
  
   On one side, malicious server operators could do bad things, and
 on the
   other, it made it possible for an anticheat to get client
 screenshots.
  
   I would have loved it if this plugin could have survived longer,
 but it
   seems like the command execution method is being fixed. I'd kill to
  get  a
   proper anticheat in source, and not the flawed disaster that is
 VAC.
  
   On Mon, Sep 10, 2012 at 11:58 AM, ics i...@ics-base.net wrote:
  
   http://tftrue.redline-**utilit**ies.net/anakinac.html
 http://utilities.net/anakinac.html
  http://**tftrue.redline-utilities.net/**anakinac.html
 http://tftrue.redline-utilities.net/anakinac.html
  
  
   -ics
  
   10.9.2012 19:52, Cameron Munroe kirjoitti:
  
 So really it just takes a screen shot of whats on their screen
 and
   then
   uploads it to the game server / FTP? and then at a later time you
  look
   through them and see if someone had a wall hack on. Is there
  anything  else
   that it can detect as really a screen shot isn't useful in most
  other  hacks.
  
   On 9/10/2012 9:49 AM, ics wrote:
  
   You need to check the screenshots yourself that it picks. Makes
 one
   once
   in an hour.
  
   PS: cl_allowupload 0 doesn't block uploading the shot. This
 plugin
  is
   simply awesome tool for every server owner that wants to catch
 
  wallhackers
   and such.
  
   -ics
  
   10.9.2012 19:46, Cameron Munroe kirjoitti:
  
   Asher? Can you give us an example, or some info on the subject.
  
   On 9/10/2012 9:31 AM, Drogen Viech wrote:
  
   I assume you have to go through all of them on your server,
 the no
   spread and trigger bot detection is fully automatic, other
 
  heuristic
   detections are printed to your console
  
   2012/9/10 Cameron Munroe cmun...@cameronmunroe.com:
  
   No, I mean how would you use this to detect

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-09-08 Thread lwf

http://etf2l.org/forum/general/topic-21038/page-24/?recent=406717#post-406387

This is absolutely brilliant, great job! Now just imagine having
something like Greenlight to go through those...

I'm not even going to bother asking you to open source it but please,
at least consider releasing a stable version with that doesn't open
connection (no auto-update or reports to you or anywhere else, no
offense) and has no undocumented features (now or later). I'd really
like to use this, we should have had this long ago.

On Wed, Apr 11, 2012 at 7:23 PM, AnAkIn . anakin...@gmail.com wrote:
 Hi,

 As Valve is too lazy to do anything about hacks, I started working
 back in January on a plugin that can detect:
 - POTENTIAL triggerbotters
 - Prediction hacks (crit hacks/no spread hacks)
 - An anti-speedhack bypass exploit

 Triggerbots:
 To make it clear as some people I gave it to didn’t understand, the
 detection is kind of “heuristic” (I won’t explain in detail, if I do
 then the cheat coders will bypass it in no time), so it’s not because
 someone got detected that he is surely cheating. It’s just a tool to
 help you find people that can potentially cheat and you can just check
 the STV demos then to confirm that they cheat or not.

 The most detections for a single person in the less timespan you will
 find in the log, the more likely he is using a triggerbot.

 Prediction hacks:
 I guess this is what will interest most people on this list, it
 detects the crit hacks that does 100% crits all the time which is an
 engine exploit which has been added into many hacks lately. It's also
 used for various no spread/low spread hacks.

 The detections get printed to a log called TriggerBotDetections.log in
 tf/ (and are also sent to me) on EVERY MAP change or when all players
 have disconnected from the server. It’s important to note this
 otherwise you could loose all the detections (especially if your
 server automatically restarts every night). There is a simple reason
 for this: writing in a file while you play can cause lags, especially
 if someone is getting detected a lot.

 Download: http://tftrue.redline-utilities.net/TriggerBotDetector.zip

 --
 Best regards,
 AnAkIn

 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-04-12 Thread AnAkIn .

What kind of issues? There might be 1-2 small bugs that will be fixed
in the next update AFAIK, but the main detections work fine.

Le 12 avril 2012 04:22, daniel jokiaho daniel.joki...@gmail.com a écrit :
 Any issues with dblocker?
 On 11 Apr 2012 19:49, AnAkIn . anakin...@gmail.com wrote:

 No, I don't think it will, I have not tested though.

 Le 11 avril 2012 19:46, Andrew DeMerse ademe...@gmail.com a écrit :
  I'll check it out, and let you know if I see anything weird.
 
  I assume this shouldn't conflict with SMAC?
 
  On Wed, Apr 11, 2012 at 1:37 PM, AnAkIn . anakin...@gmail.com wrote:
 
  No, I just posted that on a competitive forum so far.
 
  Le 11 avril 2012 19:36, Oskar Levin os...@dataviruset.com a écrit :
   Ah, I see! Seems like a good plugin though :)
  
   Best regards
   Oskar Levin
   os...@dataviruset.com
  
   -Ursprungligt meddelande-
   Från: hlds_linux-boun...@list.valvesoftware.com
   [mailto:hlds_linux-boun...@list.valvesoftware.com] För AnAkIn .
   Skickat: den 11 april 2012 19:34
   Till: Half-Life dedicated Linux server mailing list
   Ämne: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread)
   detection plugin
  
   It doesn't send a mail, it's sent through HTTP.
  
   Le 11 avril 2012 19:31, Oskar Levin os...@dataviruset.com a écrit :
   It would be nice if one could decide if it should be sent to somebody
   else or at all ;) By the way, how does it send mail? Connecting
   through port 25 seems a bit lazy as ISPs block that nowadays...
  
   Best regards
   Oskar Levin
   os...@dataviruset.com
  
   -Ursprungligt meddelande-
   Från: hlds_linux-boun...@list.valvesoftware.com
   [mailto:hlds_linux-boun...@list.valvesoftware.com] För AnAkIn .
   Skickat: den 11 april 2012 19:30
   Till: Half-Life dedicated Linux server mailing list
   Ämne: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No
 spread)
   detection plugin
  
   Yes, it was originally made for league purposes. I could add a cvar
 to
   disable that though.
  
   Le 11 avril 2012 19:28, Oskar Levin os...@dataviruset.com a écrit
 :
   Wait what? Is the log file sent to you automatically?
  
   Best regards
   Oskar Levin
   os...@dataviruset.com
  
   -Ursprungligt meddelande-
   Från: hlds_linux-boun...@list.valvesoftware.com
   [mailto:hlds_linux-boun...@list.valvesoftware.com] För AnAkIn .
   Skickat: den 11 april 2012 19:23
   Till: Half-Life dedicated Win32 server mailing list; Half-Life
   dedicated Linux server mailing list
   Ämne: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread)
   detection plugin
  
   Hi,
  
   As Valve is too lazy to do anything about hacks, I started working
   back in January on a plugin that can detect:
   - POTENTIAL triggerbotters
   - Prediction hacks (crit hacks/no spread hacks)
   - An anti-speedhack bypass exploit
  
   Triggerbots:
   To make it clear as some people I gave it to didn’t understand, the
   detection is kind of “heuristic” (I won’t explain in detail, if I do
   then the cheat coders will bypass it in no time), so it’s not
 because
   someone got detected that he is surely cheating. It’s just a tool to
   help you find people that can potentially cheat and you can just
   check the STV demos then to confirm that they cheat or not.
  
   The most detections for a single person in the less timespan you
 will
   find in the log, the more likely he is using a triggerbot.
  
   Prediction hacks:
   I guess this is what will interest most people on this list, it
   detects the crit hacks that does 100% crits all the time which is an
   engine exploit which has been added into many hacks lately. It's
 also
   used for various no spread/low spread hacks.
  
   The detections get printed to a log called TriggerBotDetections.log
   in tf/ (and are also sent to me) on EVERY MAP change or when all
   players have disconnected from the server. It’s important to note
   this otherwise you could loose all the detections (especially if
 your
   server automatically restarts every night). There is a simple reason
   for this: writing in a file while you play can cause lags,
 especially
   if someone is getting detected a lot.
  
   Download:
 http://tftrue.redline-utilities.net/TriggerBotDetector.zip
  
   --
   Best regards,
   AnAkIn
  
   ___
   To unsubscribe, edit your list preferences, or view the list
   archives, please visit:
   https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux
  
  
   ___
   To unsubscribe, edit your list preferences, or view the list
   archives,
   please visit:
   https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux
  
  
  
   --
   Best regards,
   AnAkIn
  
   ___
   To unsubscribe, edit your list preferences, or view the list
 archives,
   please visit:
   https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-04-12 Thread Thomas K

Can you make compatible with sourcebans from sourcemod?!

Am 12.04.2012 um 10:13 schrieb AnAkIn . anakin...@gmail.com:

 What kind of issues? There might be 1-2 small bugs that will be fixed
 in the next update AFAIK, but the main detections work fine.
 
 Le 12 avril 2012 04:22, daniel jokiaho daniel.joki...@gmail.com a écrit :
 Any issues with dblocker?
 On 11 Apr 2012 19:49, AnAkIn . anakin...@gmail.com wrote:
 
 No, I don't think it will, I have not tested though.
 
 Le 11 avril 2012 19:46, Andrew DeMerse ademe...@gmail.com a écrit :
 I'll check it out, and let you know if I see anything weird.
 
 I assume this shouldn't conflict with SMAC?
 
 On Wed, Apr 11, 2012 at 1:37 PM, AnAkIn . anakin...@gmail.com wrote:
 
 No, I just posted that on a competitive forum so far.
 
 Le 11 avril 2012 19:36, Oskar Levin os...@dataviruset.com a écrit :
 Ah, I see! Seems like a good plugin though :)
 
 Best regards
 Oskar Levin
 os...@dataviruset.com
 
 -Ursprungligt meddelande-
 Från: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] För AnAkIn .
 Skickat: den 11 april 2012 19:34
 Till: Half-Life dedicated Linux server mailing list
 Ämne: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread)
 detection plugin
 
 It doesn't send a mail, it's sent through HTTP.
 
 Le 11 avril 2012 19:31, Oskar Levin os...@dataviruset.com a écrit :
 It would be nice if one could decide if it should be sent to somebody
 else or at all ;) By the way, how does it send mail? Connecting
 through port 25 seems a bit lazy as ISPs block that nowadays...
 
 Best regards
 Oskar Levin
 os...@dataviruset.com
 
 -Ursprungligt meddelande-
 Från: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] För AnAkIn .
 Skickat: den 11 april 2012 19:30
 Till: Half-Life dedicated Linux server mailing list
 Ämne: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No
 spread)
 detection plugin
 
 Yes, it was originally made for league purposes. I could add a cvar
 to
 disable that though.
 
 Le 11 avril 2012 19:28, Oskar Levin os...@dataviruset.com a écrit
 :
 Wait what? Is the log file sent to you automatically?
 
 Best regards
 Oskar Levin
 os...@dataviruset.com
 
 -Ursprungligt meddelande-
 Från: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] För AnAkIn .
 Skickat: den 11 april 2012 19:23
 Till: Half-Life dedicated Win32 server mailing list; Half-Life
 dedicated Linux server mailing list
 Ämne: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread)
 detection plugin
 
 Hi,
 
 As Valve is too lazy to do anything about hacks, I started working
 back in January on a plugin that can detect:
 - POTENTIAL triggerbotters
 - Prediction hacks (crit hacks/no spread hacks)
 - An anti-speedhack bypass exploit
 
 Triggerbots:
 To make it clear as some people I gave it to didn’t understand, the
 detection is kind of “heuristic” (I won’t explain in detail, if I do
 then the cheat coders will bypass it in no time), so it’s not
 because
 someone got detected that he is surely cheating. It’s just a tool to
 help you find people that can potentially cheat and you can just
 check the STV demos then to confirm that they cheat or not.
 
 The most detections for a single person in the less timespan you
 will
 find in the log, the more likely he is using a triggerbot.
 
 Prediction hacks:
 I guess this is what will interest most people on this list, it
 detects the crit hacks that does 100% crits all the time which is an
 engine exploit which has been added into many hacks lately. It's
 also
 used for various no spread/low spread hacks.
 
 The detections get printed to a log called TriggerBotDetections.log
 in tf/ (and are also sent to me) on EVERY MAP change or when all
 players have disconnected from the server. It’s important to note
 this otherwise you could loose all the detections (especially if
 your
 server automatically restarts every night). There is a simple reason
 for this: writing in a file while you play can cause lags,
 especially
 if someone is getting detected a lot.
 
 Download:
 http://tftrue.redline-utilities.net/TriggerBotDetector.zip
 
 --
 Best regards,
 AnAkIn
 
 ___
 To unsubscribe, edit your list preferences, or view the list
 archives, please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux
 
 
 ___
 To unsubscribe, edit your list preferences, or view the list
 archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux
 
 
 
 --
 Best regards,
 AnAkIn
 
 ___
 To unsubscribe, edit your list preferences, or view the list
 archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux
 
 
 ___
 To unsubscribe, edit your list

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-04-12 Thread AnAkIn .

Only the prediction hack detections and anti speedhack exploit could
be banned for. What do you mean with sourcebans compatibility? Is it
just sending a sm_ban command into the server console?

Le 12 avril 2012 10:31, Thomas K tkr...@arcor.de a écrit :
 Can you make compatible with sourcebans from sourcemod?!

 Am 12.04.2012 um 10:13 schrieb AnAkIn . anakin...@gmail.com:

 What kind of issues? There might be 1-2 small bugs that will be fixed
 in the next update AFAIK, but the main detections work fine.

 Le 12 avril 2012 04:22, daniel jokiaho daniel.joki...@gmail.com a écrit :
 Any issues with dblocker?
 On 11 Apr 2012 19:49, AnAkIn . anakin...@gmail.com wrote:

 No, I don't think it will, I have not tested though.

 Le 11 avril 2012 19:46, Andrew DeMerse ademe...@gmail.com a écrit :
 I'll check it out, and let you know if I see anything weird.

 I assume this shouldn't conflict with SMAC?

 On Wed, Apr 11, 2012 at 1:37 PM, AnAkIn . anakin...@gmail.com wrote:

 No, I just posted that on a competitive forum so far.

 Le 11 avril 2012 19:36, Oskar Levin os...@dataviruset.com a écrit :
 Ah, I see! Seems like a good plugin though :)

 Best regards
 Oskar Levin
 os...@dataviruset.com

 -Ursprungligt meddelande-
 Från: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] För AnAkIn .
 Skickat: den 11 april 2012 19:34
 Till: Half-Life dedicated Linux server mailing list
 Ämne: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread)
 detection plugin

 It doesn't send a mail, it's sent through HTTP.

 Le 11 avril 2012 19:31, Oskar Levin os...@dataviruset.com a écrit :
 It would be nice if one could decide if it should be sent to somebody
 else or at all ;) By the way, how does it send mail? Connecting
 through port 25 seems a bit lazy as ISPs block that nowadays...

 Best regards
 Oskar Levin
 os...@dataviruset.com

 -Ursprungligt meddelande-
 Från: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] För AnAkIn .
 Skickat: den 11 april 2012 19:30
 Till: Half-Life dedicated Linux server mailing list
 Ämne: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No
 spread)
 detection plugin

 Yes, it was originally made for league purposes. I could add a cvar
 to
 disable that though.

 Le 11 avril 2012 19:28, Oskar Levin os...@dataviruset.com a écrit
 :
 Wait what? Is the log file sent to you automatically?

 Best regards
 Oskar Levin
 os...@dataviruset.com

 -Ursprungligt meddelande-
 Från: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] För AnAkIn .
 Skickat: den 11 april 2012 19:23
 Till: Half-Life dedicated Win32 server mailing list; Half-Life
 dedicated Linux server mailing list
 Ämne: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread)
 detection plugin

 Hi,

 As Valve is too lazy to do anything about hacks, I started working
 back in January on a plugin that can detect:
 - POTENTIAL triggerbotters
 - Prediction hacks (crit hacks/no spread hacks)
 - An anti-speedhack bypass exploit

 Triggerbots:
 To make it clear as some people I gave it to didn’t understand, the
 detection is kind of “heuristic” (I won’t explain in detail, if I do
 then the cheat coders will bypass it in no time), so it’s not
 because
 someone got detected that he is surely cheating. It’s just a tool to
 help you find people that can potentially cheat and you can just
 check the STV demos then to confirm that they cheat or not.

 The most detections for a single person in the less timespan you
 will
 find in the log, the more likely he is using a triggerbot.

 Prediction hacks:
 I guess this is what will interest most people on this list, it
 detects the crit hacks that does 100% crits all the time which is an
 engine exploit which has been added into many hacks lately. It's
 also
 used for various no spread/low spread hacks.

 The detections get printed to a log called TriggerBotDetections.log
 in tf/ (and are also sent to me) on EVERY MAP change or when all
 players have disconnected from the server. It’s important to note
 this otherwise you could loose all the detections (especially if
 your
 server automatically restarts every night). There is a simple reason
 for this: writing in a file while you play can cause lags,
 especially
 if someone is getting detected a lot.

 Download:
 http://tftrue.redline-utilities.net/TriggerBotDetector.zip

 --
 Best regards,
 AnAkIn

 ___
 To unsubscribe, edit your list preferences, or view the list
 archives, please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list
 archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



 --
 Best regards,
 AnAkIn

 ___
 To unsubscribe

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-04-12 Thread ics

It should be just that as sourcebans is plugin under sourcemod.

-ics

- Alkuperäinen viesti -
 Only the prediction hack detections and anti speedhack exploit could
 be banned for. What do you mean with sourcebans compatibility? Is it
 just sending a sm_ban command into the server console?
 
 Le 12 avril 2012 10:31, Thomas K tkr...@arcor.de a écrit :
  Can you make compatible with sourcebans from sourcemod?!
  
  Am 12.04.2012 um 10:13 schrieb AnAkIn . anakin...@gmail.com:
  
   What kind of issues? There might be 1-2 small bugs that will be fixed
   in the next update AFAIK, but the main detections work fine.
   
   Le 12 avril 2012 04:22, daniel jokiaho daniel.joki...@gmail.com a
   écrit :
Any issues with dblocker?
On 11 Apr 2012 19:49, AnAkIn . anakin...@gmail.com wrote:

 No, I don't think it will, I have not tested though.
 
 Le 11 avril 2012 19:46, Andrew DeMerse ademe...@gmail.com a
 écrit :
  I'll check it out, and let you know if I see anything weird.
  
  I assume this shouldn't conflict with SMAC?
  
  On Wed, Apr 11, 2012 at 1:37 PM, AnAkIn .
  anakin...@gmail.com wrote:
  
   No, I just posted that on a competitive forum so far.
   
   Le 11 avril 2012 19:36, Oskar Levin os...@dataviruset.com
   a écrit :
Ah, I see! Seems like a good plugin though :)

Best regards
Oskar Levin
os...@dataviruset.com

-Ursprungligt meddelande-
Från: hlds_linux-boun...@list.valvesoftware.com
[mailto:hlds_linux-boun...@list.valvesoftware.com] För
AnAkIn . Skickat: den 11 april 2012 19:34
Till: Half-Life dedicated Linux server mailing list
Ämne: Re: [hlds_linux] TriggerBot/Prediction hack(Crit
hack/No spread) detection plugin

It doesn't send a mail, it's sent through HTTP.

Le 11 avril 2012 19:31, Oskar Levin
os...@dataviruset.com a écrit :
 It would be nice if one could decide if it should be
 sent to somebody else or at all ;) By the way, how does
 it send mail? Connecting through port 25 seems a bit
 lazy as ISPs block that nowadays...
 
 Best regards
 Oskar Levin
 os...@dataviruset.com
 
 -Ursprungligt meddelande-
 Från: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] För
 AnAkIn . Skickat: den 11 april 2012 19:30
 Till: Half-Life dedicated Linux server mailing list
 Ämne: Re: [hlds_linux] TriggerBot/Prediction hack(Crit
 hack/No
 spread)
 detection plugin
 
 Yes, it was originally made for league purposes. I could
 add a cvar
 to
 disable that though.
 
 Le 11 avril 2012 19:28, Oskar Levin
 os...@dataviruset.com a écrit
 :
  Wait what? Is the log file sent to you automatically?
  
  Best regards
  Oskar Levin
  os...@dataviruset.com
  
  -Ursprungligt meddelande-
  Från: hlds_linux-boun...@list.valvesoftware.com
  [mailto:hlds_linux-boun...@list.valvesoftware.com] För
  AnAkIn . Skickat: den 11 april 2012 19:23
  Till: Half-Life dedicated Win32 server mailing list;
  Half-Life dedicated Linux server mailing list
  Ämne: [hlds_linux] TriggerBot/Prediction hack(Crit
  hack/No spread) detection plugin
  
  Hi,
  
  As Valve is too lazy to do anything about hacks, I
  started working back in January on a plugin that can
  detect: - POTENTIAL triggerbotters
  - Prediction hacks (crit hacks/no spread hacks)
  - An anti-speedhack bypass exploit
  
  Triggerbots:
  To make it clear as some people I gave it to didn’t
  understand, the detection is kind of “heuristic” (I
  won’t explain in detail, if I do then the cheat coders
  will bypass it in no time), so it’s not
 because
  someone got detected that he is surely cheating. It’s
  just a tool to help you find people that can
  potentially cheat and you can just check the STV demos
  then to confirm that they cheat or not.
  
  The most detections for a single person in the less
  timespan you
 will
  find in the log, the more likely he is using a
  triggerbot.
  
  Prediction hacks:
  I guess this is what will interest most people on this
  list, it detects the crit hacks that does 100% crits
  all the time which is an engine exploit which has been
  added into many hacks lately. It's
 also
  used for various no spread/low spread hacks.
  
  The detections get printed to a log called

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-04-12 Thread daniel jokiaho

But does the plugin ban or log?
On 12 Apr 2012 11:57, ics i...@ics-base.net wrote:

 It should be just that as sourcebans is plugin under sourcemod.

 -ics

 - Alkuperäinen viesti -
  Only the prediction hack detections and anti speedhack exploit could
  be banned for. What do you mean with sourcebans compatibility? Is it
  just sending a sm_ban command into the server console?
 
  Le 12 avril 2012 10:31, Thomas K tkr...@arcor.de a écrit :
   Can you make compatible with sourcebans from sourcemod?!
  
   Am 12.04.2012 um 10:13 schrieb AnAkIn . anakin...@gmail.com:
  
What kind of issues? There might be 1-2 small bugs that will be fixed
in the next update AFAIK, but the main detections work fine.
   
Le 12 avril 2012 04:22, daniel jokiaho daniel.joki...@gmail.com a
écrit :
 Any issues with dblocker?
 On 11 Apr 2012 19:49, AnAkIn . anakin...@gmail.com wrote:

  No, I don't think it will, I have not tested though.
 
  Le 11 avril 2012 19:46, Andrew DeMerse ademe...@gmail.com a
  écrit :
   I'll check it out, and let you know if I see anything weird.
  
   I assume this shouldn't conflict with SMAC?
  
   On Wed, Apr 11, 2012 at 1:37 PM, AnAkIn .
   anakin...@gmail.com wrote:
  
No, I just posted that on a competitive forum so far.
   
Le 11 avril 2012 19:36, Oskar Levin os...@dataviruset.com
a écrit :
 Ah, I see! Seems like a good plugin though :)

 Best regards
 Oskar Levin
 os...@dataviruset.com

 -Ursprungligt meddelande-
 Från: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] För
 AnAkIn . Skickat: den 11 april 2012 19:34
 Till: Half-Life dedicated Linux server mailing list
 Ämne: Re: [hlds_linux] TriggerBot/Prediction hack(Crit
 hack/No spread) detection plugin

 It doesn't send a mail, it's sent through HTTP.

 Le 11 avril 2012 19:31, Oskar Levin
 os...@dataviruset.com a écrit :
  It would be nice if one could decide if it should be
  sent to somebody else or at all ;) By the way, how does
  it send mail? Connecting through port 25 seems a bit
  lazy as ISPs block that nowadays...
 
  Best regards
  Oskar Levin
  os...@dataviruset.com
 
  -Ursprungligt meddelande-
  Från: hlds_linux-boun...@list.valvesoftware.com
  [mailto:hlds_linux-boun...@list.valvesoftware.com] För
  AnAkIn . Skickat: den 11 april 2012 19:30
  Till: Half-Life dedicated Linux server mailing list
  Ämne: Re: [hlds_linux] TriggerBot/Prediction hack(Crit
  hack/No
  spread)
  detection plugin
 
  Yes, it was originally made for league purposes. I could
  add a cvar
  to
  disable that though.
 
  Le 11 avril 2012 19:28, Oskar Levin
  os...@dataviruset.com a écrit
  :
   Wait what? Is the log file sent to you automatically?
  
   Best regards
   Oskar Levin
   os...@dataviruset.com
  
   -Ursprungligt meddelande-
   Från: hlds_linux-boun...@list.valvesoftware.com
   [mailto:hlds_linux-boun...@list.valvesoftware.com] För
   AnAkIn . Skickat: den 11 april 2012 19:23
   Till: Half-Life dedicated Win32 server mailing list;
   Half-Life dedicated Linux server mailing list
   Ämne: [hlds_linux] TriggerBot/Prediction hack(Crit
   hack/No spread) detection plugin
  
   Hi,
  
   As Valve is too lazy to do anything about hacks, I
   started working back in January on a plugin that can
   detect: - POTENTIAL triggerbotters
   - Prediction hacks (crit hacks/no spread hacks)
   - An anti-speedhack bypass exploit
  
   Triggerbots:
   To make it clear as some people I gave it to didn’t
   understand, the detection is kind of “heuristic” (I
   won’t explain in detail, if I do then the cheat coders
   will bypass it in no time), so it’s not
  because
   someone got detected that he is surely cheating. It’s
   just a tool to help you find people that can
   potentially cheat and you can just check the STV demos
   then to confirm that they cheat or not.
  
   The most detections for a single person in the less
   timespan you
  will
   find in the log, the more likely he is using a
   triggerbot.
  
   Prediction hacks:
   I guess this is what will interest most people on this
   list, it detects the crit hacks that does 100% crits
   all the time which is an engine exploit which has been

[hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

Hi,

As Valve is too lazy to do anything about hacks, I started working
back in January on a plugin that can detect:
- POTENTIAL triggerbotters
- Prediction hacks (crit hacks/no spread hacks)
- An anti-speedhack bypass exploit

Triggerbots:
To make it clear as some people I gave it to didn’t understand, the
detection is kind of “heuristic” (I won’t explain in detail, if I do
then the cheat coders will bypass it in no time), so it’s not because
someone got detected that he is surely cheating. It’s just a tool to
help you find people that can potentially cheat and you can just check
the STV demos then to confirm that they cheat or not.

The most detections for a single person in the less timespan you will
find in the log, the more likely he is using a triggerbot.

Prediction hacks:
I guess this is what will interest most people on this list, it
detects the crit hacks that does 100% crits all the time which is an
engine exploit which has been added into many hacks lately. It's also
used for various no spread/low spread hacks.

The detections get printed to a log called TriggerBotDetections.log in
tf/ (and are also sent to me) on EVERY MAP change or when all players
have disconnected from the server. It’s important to note this
otherwise you could loose all the detections (especially if your
server automatically restarts every night). There is a simple reason
for this: writing in a file while you play can cause lags, especially
if someone is getting detected a lot.

Download: http://tftrue.redline-utilities.net/TriggerBotDetector.zip

-- 
Best regards,
AnAkIn

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-04-11 Thread Oskar Levin

Wait what? Is the log file sent to you automatically?

Best regards
Oskar Levin
os...@dataviruset.com

-Ursprungligt meddelande-
Från: hlds_linux-boun...@list.valvesoftware.com
[mailto:hlds_linux-boun...@list.valvesoftware.com] För AnAkIn .
Skickat: den 11 april 2012 19:23
Till: Half-Life dedicated Win32 server mailing list; Half-Life dedicated
Linux server mailing list
Ämne: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection
plugin

Hi,

As Valve is too lazy to do anything about hacks, I started working back in
January on a plugin that can detect:
- POTENTIAL triggerbotters
- Prediction hacks (crit hacks/no spread hacks)
- An anti-speedhack bypass exploit

Triggerbots:
To make it clear as some people I gave it to didnt understand, the
detection is kind of heuristic (I wont explain in detail, if I do then
the cheat coders will bypass it in no time), so its not because someone got
detected that he is surely cheating. Its just a tool to help you find
people that can potentially cheat and you can just check the STV demos then
to confirm that they cheat or not.

The most detections for a single person in the less timespan you will find
in the log, the more likely he is using a triggerbot.

Prediction hacks:
I guess this is what will interest most people on this list, it detects the
crit hacks that does 100% crits all the time which is an engine exploit
which has been added into many hacks lately. It's also used for various no
spread/low spread hacks.

The detections get printed to a log called TriggerBotDetections.log in tf/
(and are also sent to me) on EVERY MAP change or when all players have
disconnected from the server. Its important to note this otherwise you
could loose all the detections (especially if your server automatically
restarts every night). There is a simple reason for this: writing in a file
while you play can cause lags, especially if someone is getting detected a
lot.

Download: http://tftrue.redline-utilities.net/TriggerBotDetector.zip

--
Best regards,
AnAkIn

___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

Yes, it was originally made for league purposes. I could add a cvar to
disable that though.

Le 11 avril 2012 19:28, Oskar Levin os...@dataviruset.com a écrit :
 Wait what? Is the log file sent to you automatically?

 Best regards
 Oskar Levin
 os...@dataviruset.com

 -Ursprungligt meddelande-
 Från: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] För AnAkIn .
 Skickat: den 11 april 2012 19:23
 Till: Half-Life dedicated Win32 server mailing list; Half-Life dedicated
 Linux server mailing list
 Ämne: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection
 plugin

 Hi,

 As Valve is too lazy to do anything about hacks, I started working back in
 January on a plugin that can detect:
 - POTENTIAL triggerbotters
 - Prediction hacks (crit hacks/no spread hacks)
 - An anti-speedhack bypass exploit

 Triggerbots:
 To make it clear as some people I gave it to didn’t understand, the
 detection is kind of “heuristic” (I won’t explain in detail, if I do then
 the cheat coders will bypass it in no time), so it’s not because someone got
 detected that he is surely cheating. It’s just a tool to help you find
 people that can potentially cheat and you can just check the STV demos then
 to confirm that they cheat or not.

 The most detections for a single person in the less timespan you will find
 in the log, the more likely he is using a triggerbot.

 Prediction hacks:
 I guess this is what will interest most people on this list, it detects the
 crit hacks that does 100% crits all the time which is an engine exploit
 which has been added into many hacks lately. It's also used for various no
 spread/low spread hacks.

 The detections get printed to a log called TriggerBotDetections.log in tf/
 (and are also sent to me) on EVERY MAP change or when all players have
 disconnected from the server. It’s important to note this otherwise you
 could loose all the detections (especially if your server automatically
 restarts every night). There is a simple reason for this: writing in a file
 while you play can cause lags, especially if someone is getting detected a
 lot.

 Download: http://tftrue.redline-utilities.net/TriggerBotDetector.zip

 --
 Best regards,
 AnAkIn

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



-- 
Best regards,
AnAkIn

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-04-11 Thread Oskar Levin

It would be nice if one could decide if it should be sent to somebody else
or at all ;)
By the way, how does it send mail? Connecting through port 25 seems a bit
lazy as ISPs block that nowadays...

Best regards
Oskar Levin
os...@dataviruset.com

-Ursprungligt meddelande-
Från: hlds_linux-boun...@list.valvesoftware.com
[mailto:hlds_linux-boun...@list.valvesoftware.com] För AnAkIn .
Skickat: den 11 april 2012 19:30
Till: Half-Life dedicated Linux server mailing list
Ämne: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread)
detection plugin

Yes, it was originally made for league purposes. I could add a cvar to
disable that though.

Le 11 avril 2012 19:28, Oskar Levin os...@dataviruset.com a écrit :
 Wait what? Is the log file sent to you automatically?

 Best regards
 Oskar Levin
 os...@dataviruset.com

 -Ursprungligt meddelande-
 Från: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] För AnAkIn .
 Skickat: den 11 april 2012 19:23
 Till: Half-Life dedicated Win32 server mailing list; Half-Life 
 dedicated Linux server mailing list
 Ämne: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) 
 detection plugin

 Hi,

 As Valve is too lazy to do anything about hacks, I started working 
 back in January on a plugin that can detect:
 - POTENTIAL triggerbotters
 - Prediction hacks (crit hacks/no spread hacks)
 - An anti-speedhack bypass exploit

 Triggerbots:
 To make it clear as some people I gave it to didnt understand, the 
 detection is kind of heuristic (I wont explain in detail, if I do 
 then the cheat coders will bypass it in no time), so its not because 
 someone got detected that he is surely cheating. Its just a tool to 
 help you find people that can potentially cheat and you can just check 
 the STV demos then to confirm that they cheat or not.

 The most detections for a single person in the less timespan you will 
 find in the log, the more likely he is using a triggerbot.

 Prediction hacks:
 I guess this is what will interest most people on this list, it 
 detects the crit hacks that does 100% crits all the time which is an 
 engine exploit which has been added into many hacks lately. It's also 
 used for various no spread/low spread hacks.

 The detections get printed to a log called TriggerBotDetections.log in 
 tf/ (and are also sent to me) on EVERY MAP change or when all players 
 have disconnected from the server. Its important to note this 
 otherwise you could loose all the detections (especially if your 
 server automatically restarts every night). There is a simple reason 
 for this: writing in a file while you play can cause lags, especially 
 if someone is getting detected a lot.

 Download: http://tftrue.redline-utilities.net/TriggerBotDetector.zip

 --
 Best regards,
 AnAkIn

 ___
 To unsubscribe, edit your list preferences, or view the list archives, 
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives,
please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



--
Best regards,
AnAkIn

___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

It doesn't send a mail, it's sent through HTTP.

Le 11 avril 2012 19:31, Oskar Levin os...@dataviruset.com a écrit :
 It would be nice if one could decide if it should be sent to somebody else
 or at all ;)
 By the way, how does it send mail? Connecting through port 25 seems a bit
 lazy as ISPs block that nowadays...

 Best regards
 Oskar Levin
 os...@dataviruset.com

 -Ursprungligt meddelande-
 Från: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] För AnAkIn .
 Skickat: den 11 april 2012 19:30
 Till: Half-Life dedicated Linux server mailing list
 Ämne: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread)
 detection plugin

 Yes, it was originally made for league purposes. I could add a cvar to
 disable that though.

 Le 11 avril 2012 19:28, Oskar Levin os...@dataviruset.com a écrit :
 Wait what? Is the log file sent to you automatically?

 Best regards
 Oskar Levin
 os...@dataviruset.com

 -Ursprungligt meddelande-
 Från: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] För AnAkIn .
 Skickat: den 11 april 2012 19:23
 Till: Half-Life dedicated Win32 server mailing list; Half-Life
 dedicated Linux server mailing list
 Ämne: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread)
 detection plugin

 Hi,

 As Valve is too lazy to do anything about hacks, I started working
 back in January on a plugin that can detect:
 - POTENTIAL triggerbotters
 - Prediction hacks (crit hacks/no spread hacks)
 - An anti-speedhack bypass exploit

 Triggerbots:
 To make it clear as some people I gave it to didn’t understand, the
 detection is kind of “heuristic” (I won’t explain in detail, if I do
 then the cheat coders will bypass it in no time), so it’s not because
 someone got detected that he is surely cheating. It’s just a tool to
 help you find people that can potentially cheat and you can just check
 the STV demos then to confirm that they cheat or not.

 The most detections for a single person in the less timespan you will
 find in the log, the more likely he is using a triggerbot.

 Prediction hacks:
 I guess this is what will interest most people on this list, it
 detects the crit hacks that does 100% crits all the time which is an
 engine exploit which has been added into many hacks lately. It's also
 used for various no spread/low spread hacks.

 The detections get printed to a log called TriggerBotDetections.log in
 tf/ (and are also sent to me) on EVERY MAP change or when all players
 have disconnected from the server. It’s important to note this
 otherwise you could loose all the detections (especially if your
 server automatically restarts every night). There is a simple reason
 for this: writing in a file while you play can cause lags, especially
 if someone is getting detected a lot.

 Download: http://tftrue.redline-utilities.net/TriggerBotDetector.zip

 --
 Best regards,
 AnAkIn

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



 --
 Best regards,
 AnAkIn

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



-- 
Best regards,
AnAkIn

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-04-11 Thread Oskar Levin

Ah, I see! Seems like a good plugin though :)

Best regards
Oskar Levin
os...@dataviruset.com

-Ursprungligt meddelande-
Från: hlds_linux-boun...@list.valvesoftware.com
[mailto:hlds_linux-boun...@list.valvesoftware.com] För AnAkIn .
Skickat: den 11 april 2012 19:34
Till: Half-Life dedicated Linux server mailing list
Ämne: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread)
detection plugin

It doesn't send a mail, it's sent through HTTP.

Le 11 avril 2012 19:31, Oskar Levin os...@dataviruset.com a écrit :
 It would be nice if one could decide if it should be sent to somebody 
 else or at all ;) By the way, how does it send mail? Connecting 
 through port 25 seems a bit lazy as ISPs block that nowadays...

 Best regards
 Oskar Levin
 os...@dataviruset.com

 -Ursprungligt meddelande-
 Från: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] För AnAkIn .
 Skickat: den 11 april 2012 19:30
 Till: Half-Life dedicated Linux server mailing list
 Ämne: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) 
 detection plugin

 Yes, it was originally made for league purposes. I could add a cvar to 
 disable that though.

 Le 11 avril 2012 19:28, Oskar Levin os...@dataviruset.com a écrit :
 Wait what? Is the log file sent to you automatically?

 Best regards
 Oskar Levin
 os...@dataviruset.com

 -Ursprungligt meddelande-
 Från: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] För AnAkIn .
 Skickat: den 11 april 2012 19:23
 Till: Half-Life dedicated Win32 server mailing list; Half-Life 
 dedicated Linux server mailing list
 Ämne: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) 
 detection plugin

 Hi,

 As Valve is too lazy to do anything about hacks, I started working 
 back in January on a plugin that can detect:
 - POTENTIAL triggerbotters
 - Prediction hacks (crit hacks/no spread hacks)
 - An anti-speedhack bypass exploit

 Triggerbots:
 To make it clear as some people I gave it to didnt understand, the 
 detection is kind of heuristic (I wont explain in detail, if I do 
 then the cheat coders will bypass it in no time), so its not because 
 someone got detected that he is surely cheating. Its just a tool to 
 help you find people that can potentially cheat and you can just 
 check the STV demos then to confirm that they cheat or not.

 The most detections for a single person in the less timespan you will 
 find in the log, the more likely he is using a triggerbot.

 Prediction hacks:
 I guess this is what will interest most people on this list, it 
 detects the crit hacks that does 100% crits all the time which is an 
 engine exploit which has been added into many hacks lately. It's also 
 used for various no spread/low spread hacks.

 The detections get printed to a log called TriggerBotDetections.log 
 in tf/ (and are also sent to me) on EVERY MAP change or when all 
 players have disconnected from the server. Its important to note 
 this otherwise you could loose all the detections (especially if your 
 server automatically restarts every night). There is a simple reason 
 for this: writing in a file while you play can cause lags, especially 
 if someone is getting detected a lot.

 Download: http://tftrue.redline-utilities.net/TriggerBotDetector.zip

 --
 Best regards,
 AnAkIn

 ___
 To unsubscribe, edit your list preferences, or view the list 
 archives, please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list 
 archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



 --
 Best regards,
 AnAkIn

 ___
 To unsubscribe, edit your list preferences, or view the list archives, 
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives,
please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



--
Best regards,
AnAkIn

___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

No, I just posted that on a competitive forum so far.

Le 11 avril 2012 19:36, Oskar Levin os...@dataviruset.com a écrit :
 Ah, I see! Seems like a good plugin though :)

 Best regards
 Oskar Levin
 os...@dataviruset.com

 -Ursprungligt meddelande-
 Från: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] För AnAkIn .
 Skickat: den 11 april 2012 19:34
 Till: Half-Life dedicated Linux server mailing list
 Ämne: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread)
 detection plugin

 It doesn't send a mail, it's sent through HTTP.

 Le 11 avril 2012 19:31, Oskar Levin os...@dataviruset.com a écrit :
 It would be nice if one could decide if it should be sent to somebody
 else or at all ;) By the way, how does it send mail? Connecting
 through port 25 seems a bit lazy as ISPs block that nowadays...

 Best regards
 Oskar Levin
 os...@dataviruset.com

 -Ursprungligt meddelande-
 Från: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] För AnAkIn .
 Skickat: den 11 april 2012 19:30
 Till: Half-Life dedicated Linux server mailing list
 Ämne: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread)
 detection plugin

 Yes, it was originally made for league purposes. I could add a cvar to
 disable that though.

 Le 11 avril 2012 19:28, Oskar Levin os...@dataviruset.com a écrit :
 Wait what? Is the log file sent to you automatically?

 Best regards
 Oskar Levin
 os...@dataviruset.com

 -Ursprungligt meddelande-
 Från: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] För AnAkIn .
 Skickat: den 11 april 2012 19:23
 Till: Half-Life dedicated Win32 server mailing list; Half-Life
 dedicated Linux server mailing list
 Ämne: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread)
 detection plugin

 Hi,

 As Valve is too lazy to do anything about hacks, I started working
 back in January on a plugin that can detect:
 - POTENTIAL triggerbotters
 - Prediction hacks (crit hacks/no spread hacks)
 - An anti-speedhack bypass exploit

 Triggerbots:
 To make it clear as some people I gave it to didn’t understand, the
 detection is kind of “heuristic” (I won’t explain in detail, if I do
 then the cheat coders will bypass it in no time), so it’s not because
 someone got detected that he is surely cheating. It’s just a tool to
 help you find people that can potentially cheat and you can just
 check the STV demos then to confirm that they cheat or not.

 The most detections for a single person in the less timespan you will
 find in the log, the more likely he is using a triggerbot.

 Prediction hacks:
 I guess this is what will interest most people on this list, it
 detects the crit hacks that does 100% crits all the time which is an
 engine exploit which has been added into many hacks lately. It's also
 used for various no spread/low spread hacks.

 The detections get printed to a log called TriggerBotDetections.log
 in tf/ (and are also sent to me) on EVERY MAP change or when all
 players have disconnected from the server. It’s important to note
 this otherwise you could loose all the detections (especially if your
 server automatically restarts every night). There is a simple reason
 for this: writing in a file while you play can cause lags, especially
 if someone is getting detected a lot.

 Download: http://tftrue.redline-utilities.net/TriggerBotDetector.zip

 --
 Best regards,
 AnAkIn

 ___
 To unsubscribe, edit your list preferences, or view the list
 archives, please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list
 archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



 --
 Best regards,
 AnAkIn

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



 --
 Best regards,
 AnAkIn

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux



-- 
Best regards,
AnAkIn

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin

2012-04-11 Thread Andrew DeMerse

I'll check it out, and let you know if I see anything weird.

I assume this shouldn't conflict with SMAC?

On Wed, Apr 11, 2012 at 1:37 PM, AnAkIn . anakin...@gmail.com wrote:

 No, I just posted that on a competitive forum so far.

 Le 11 avril 2012 19:36, Oskar Levin os...@dataviruset.com a écrit :
  Ah, I see! Seems like a good plugin though :)
 
  Best regards
  Oskar Levin
  os...@dataviruset.com
 
  -Ursprungligt meddelande-
  Från: hlds_linux-boun...@list.valvesoftware.com
  [mailto:hlds_linux-boun...@list.valvesoftware.com] För AnAkIn .
  Skickat: den 11 april 2012 19:34
  Till: Half-Life dedicated Linux server mailing list
  Ämne: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread)
  detection plugin
 
  It doesn't send a mail, it's sent through HTTP.
 
  Le 11 avril 2012 19:31, Oskar Levin os...@dataviruset.com a écrit :
  It would be nice if one could decide if it should be sent to somebody
  else or at all ;) By the way, how does it send mail? Connecting
  through port 25 seems a bit lazy as ISPs block that nowadays...
 
  Best regards
  Oskar Levin
  os...@dataviruset.com
 
  -Ursprungligt meddelande-
  Från: hlds_linux-boun...@list.valvesoftware.com
  [mailto:hlds_linux-boun...@list.valvesoftware.com] För AnAkIn .
  Skickat: den 11 april 2012 19:30
  Till: Half-Life dedicated Linux server mailing list
  Ämne: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread)
  detection plugin
 
  Yes, it was originally made for league purposes. I could add a cvar to
  disable that though.
 
  Le 11 avril 2012 19:28, Oskar Levin os...@dataviruset.com a écrit :
  Wait what? Is the log file sent to you automatically?
 
  Best regards
  Oskar Levin
  os...@dataviruset.com
 
  -Ursprungligt meddelande-
  Från: hlds_linux-boun...@list.valvesoftware.com
  [mailto:hlds_linux-boun...@list.valvesoftware.com] För AnAkIn .
  Skickat: den 11 april 2012 19:23
  Till: Half-Life dedicated Win32 server mailing list; Half-Life
  dedicated Linux server mailing list
  Ämne: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread)
  detection plugin
 
  Hi,
 
  As Valve is too lazy to do anything about hacks, I started working
  back in January on a plugin that can detect:
  - POTENTIAL triggerbotters
  - Prediction hacks (crit hacks/no spread hacks)
  - An anti-speedhack bypass exploit
 
  Triggerbots:
  To make it clear as some people I gave it to didn’t understand, the
  detection is kind of “heuristic” (I won’t explain in detail, if I do
  then the cheat coders will bypass it in no time), so it’s not because
  someone got detected that he is surely cheating. It’s just a tool to
  help you find people that can potentially cheat and you can just
  check the STV demos then to confirm that they cheat or not.
 
  The most detections for a single person in the less timespan you will
  find in the log, the more likely he is using a triggerbot.
 
  Prediction hacks:
  I guess this is what will interest most people on this list, it
  detects the crit hacks that does 100% crits all the time which is an
  engine exploit which has been added into many hacks lately. It's also
  used for various no spread/low spread hacks.
 
  The detections get printed to a log called TriggerBotDetections.log
  in tf/ (and are also sent to me) on EVERY MAP change or when all
  players have disconnected from the server. It’s important to note
  this otherwise you could loose all the detections (especially if your
  server automatically restarts every night). There is a simple reason
  for this: writing in a file while you play can cause lags, especially
  if someone is getting detected a lot.
 
  Download: http://tftrue.redline-utilities.net/TriggerBotDetector.zip
 
  --
  Best regards,
  AnAkIn
 
  ___
  To unsubscribe, edit your list preferences, or view the list
  archives, please visit:
  https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux
 
 
  ___
  To unsubscribe, edit your list preferences, or view the list
  archives,
  please visit:
  https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux
 
 
 
  --
  Best regards,
  AnAkIn
 
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux
 
 
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux
 
 
 
  --
  Best regards,
  AnAkIn
 
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux
 
 
  ___
  To unsubscribe, edit your list preferences

Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) detection plugin