uMod - New anticheat for Rust (UDefCore) - Off Topic

Posted 5 years ago

Last updated 5 years ago

Hi. We made an anticheat for Rust, we call it UDefCore.
For now we testing it on couple of servers and it is good for private hacks too.
Coded in C++, it`s work almost like EAC. It`s an executable file, that launch Rust, It works in background, so player can connect and play on the server only than launcher is active. It uses .cs file for integration between Rust game server and anti-cheat server.
It using HWID ban functions, but with some other logic, that use EAC. So logs shows us registering the new HWID from the same player, but he is still banned and can`t use the launcher anymore.
For now we testing some new cool thing, that help us to block any kind of injects. It has been tested with public an private injectors and hacks.
And what is even more incredible, during the tests, we found that this method can be used not only for Rust, but also other games in Steam too

I`l leave screenshots of the results here
This is not the influence of some kind of virus, antivirus, or something like that. This method is only supported on Windows 10

https://imgur.com/UlETC8s
https://imgur.com/JzhpQM6
https://imgur.com/cKjBLwj
https://imgur.com/XJ2094j

It will be extremely interesting for me to receive feedback.

Posted 5 years ago

Last updated 5 years ago

It will be extremely interesting for me to receive feedback.

What we see on screenshots? You blocked few programms by name, thats all? Where is explanation how it works?
How your "hack" detection works? What's the detection logic?

Are you sure PLAYERS will not receive EAC ban after using your kind of anti-chat? Facepunch and EAC can react negative and say that you are trying to use cheats that using mask of "anti-cheat".

Are you sure your ban works at all? All of stuff you can get from PC is mostly mac/hwids, that can be simply cleared with special tools.

And what kind of cheats your tool blocks? Only injectors? Because i am mostly sure its useless against things like UBERHATCHET that works on network packet replacement. Or kind of radars, whatever.

Merged post

Btw i checked screenshots once again. Cheat engine? Really? Process hacker? That tools was designed for simple modifying things or injecting. Are you sure it will work against normal software? That disguises as normal applications? And have normal functions to bypass injection-block?

Posted 5 years ago

Last updated 5 years ago

I think it's a good idea to talk everyone about the anti-cheat logic :)

I don`t think that it coud be EAC ro VAC for that, because it does not inject in the game process, just work in background, using some windows core security things. It does not using some kind of mask of "anti-cheat".
But this is a good question, i will test it for some weeks.

We can get more than that things, like mac/hwids, Windows 10 provides much more opportunities in this regard.
We also use tagging methods to recognize a banned pc. As far as we know, spoofers for EAC do not help to get unbanned

Undoubtedly there are such cheats, and cheats with the help of third-party hardware, patched video cards and other wild things. Protecting games from typical injection now is a big step, I think.

For the types of cheats described by you, in parallel, you can use other methods of verification on the client side. We have already used some of them and are already showing good results.

Merged post

https://imgur.com/XJ2094j
In this screenshot you can see how the private cheat for cs go for $5 for 15 days did not work. I contacted a developer, he was confused and said that never seen this ever before.
A similar situation with a private cheat for Rust for $2 a day. He did not inject the same.
So if someone can help me with getting more expensive hack i`l test it too.

Posted 5 years ago

Last updated 5 years ago

sens

https://imgur.com/XJ2094j
In this screenshot you can see how the private cheat for cs go for $5 for 15 days did not work. I contacted a developer, he was confused and said that never seen this ever before.
A similar situation with a private cheat for Rust for $2 a day. He did not inject the same.
So if someone can help me with getting more expensive hack i`l test it too.

1. Lets start that you dont have access to any normal rust cheats, admit it. Because 90% of normal cheats selling for VERY high price (like 150$/month) or there are limited private sales (that you dont have access to for sure)

2. The "cheats" your software is blocking is really basic. Because they are sold in public for 2-5$. Price explains why they dont work. And you are saying its "basic" protection that your anti-cheat will give, but there are ALREADY protection from injections and other stuff!

3. That developers doesnt care if cheat is not working for <1% of their auditory. If it will be more people - they will fix it or adapt cheat

Posted 5 years ago

Last updated 5 years ago

I see that the current protection allows cheats for $150\month. The question is, is this protection so good for 2021 and further?
The fact that I don't have the opportunity to test more expensive cheats does not mean that they will not work either :) It's just a matter of finance and time

Posted 5 years ago

It also could be that EAC detects it but does not do anything immediately. Preventing injections immediately or anything like that actually shows the weaknesses of your anti cheat and helps cheat developers, that is why ban waves are there. Instead consider "knowing" about the cheat but banning etc later.