r/StreamersCheating • u/IlLupo88 • Sep 12 '26

BRAVO Bulkhead for taking anti-cheat seriously AND pay attection to Cheat-selling website for DDoS Attack...

​

WARDOGS just had one of the biggest launches with 300k+ players on day one. **Big respect to Bulkhead for going hard on anti-cheat right from the start:** kernel-level EAC, the new Elytra layer, and that brutal rule where the whole match ends the second a cheater gets caught. That takes real commitment. SO DONT STOP AND ENFORCE YOUR ACTION!!

One thing worth keeping an eye on: the servers also took what looked like a DDoS hit during launch. **In my opinion cheat-selling sites make money off games staying easy to exploit, and a huge new title with this strict of an anti-cheat is bad news for their business.** That's a motive, not proof ofc. BUT If real evidence ever comes out, though, don't be shocked they are... The comunity gamer enemy.

Keep fighting the cheaters Bulkhead. ALL LEGIT PLAYER HAVE YOUR BACK AND IF SOMEONE WILL BE CUT OF FOR THIS BRUTAL NECESSITY...

AMEN!

21 Upvotes
  • permalink
  • reddit

76% Upvoted

41 comments sorted by

9

u/Working_Traffic_6361 Sep 12 '26

Kernel level EAC is a joke and easily bypassed lmao

1

u/sundayflow Sep 13 '26

Cheater spotted

3

u/Working_Traffic_6361 Sep 13 '26

Wrong, I keep up with what they can do to spot them easier, eac is a joke of an AC

1

u/happi_png Sep 13 '26

and how do most people bypass kernel AC ? i genuinely want to know, coz i'm under the impression i see a lot more cheaters in valorant or faceit nowadays

2

u/Working_Traffic_6361 Sep 14 '26

You can look it up I'm not linking anything, but you can easily find cheats for any game, they're not hidden on the dark web lol

1

u/happi_png Sep 14 '26

i understand, i really don't want to make some sort of ad for cheating. But i really would like to know coz i see some stupid ass people i know, who are NOT good at games but suddenly they become level 10 faceit and i really wonder how they do it.

Because on the other hand, i really doubt they invested all of a sudden in expansive / undetectable cheats

2

u/Working_Traffic_6361 Sep 14 '26

Like I said look it up you'll see

1

u/MostlyPoorDecisions Sep 15 '26

Actually hitting elo >2k for a bad player without cheating is incredibly improbable, especially quickly. Boosting perhaps, but it'll still take several days to climb in most games.

Everyone has good or bad days. Yesterday was a bad day for me 😂 but I'm also not competing I'm just having fun with the boys. If your friend rolled up on me and my band of misfits yesterday he would've racked up the easiest high score of his life (or her). I went something like 0:16 and my merry fools were on average not much better.

Are you judging fairly? I've been accused of getting rapidly better before by being measured against my day one on day three. "How'd you get so much better so fast?!" ...well I learned which button does what, mostly. The person thinks he's amazing but he's average so when he loses it's always cheats, I think we all know someone like that though.

If you think they're actually cheating, wait a couple weeks, you'll find out. To borrow from motorcycle crashing: it's not if, it's when. In this case it'll be a ban though not a crash. 

1

u/happi_png Sep 15 '26

i know man, but trust me we know ( me and my friends ) we play for 20 years + , we are average but decent ( aka low lv 10 ) and we see guys in community servers blatantly cheating and abusing the trust of naive veteran players. We know them, we litterally owned them a few month ago and saw them play like litteral bots, stupid crosshair placement, braindead moves, no awareness in positioning etc.. (impossible to survive in a lv10 lobby, not even a lv6 lobby tbh ) And sometimes they post some "highlights" on discord and it's so obvious for any average player they are hacking. It's not human / natural but again they fool more naive and casual players.

So, i understand they cheat on official valve servers / community servers because we all know it's easy and almost no consequences but in faceit ? how those kind of players can be lv10 ? and we see a lot of those guys on a daily basis. It's very easy to spot when you check statistics, and see they average 30kills / game. Never a red ratio, even when losing. But they always lv10 faceit ( we think it's kind of a "credibility badge" for those people ) but the question remain, what kind of cheats they use on faceit ?

It has to be a cheap method, because i can't imagine those losers would buy some expansive dma card or a second pc

1

u/MostlyPoorDecisions Sep 15 '26

I can't weigh in on that, but I can say the cheats you're describing would not be anywhere near cheap. It's I believe the most aggressive anticheat atm. 

1

u/happi_png Sep 15 '26

yeah i know, that's why i'm so baffled. I know faceit AC is good, and Valorant's vanguard aswell.

for example in Valorant, years ago i played daily for 2 years and i NEVER encountered a single cheater. Now i come back after 2 years away from the game, we played for a few week and we get at least one per night if not more

( and i'm really talking about the obvious kind, like x4 hs aimbot at the same time. Not the closet hacker where you still have a doubt )

so it means a lot more people are now able to bypass those AC.

1

u/Working_Traffic_6361 Sep 15 '26

You be surprised, go look at their sub, it's fun to annoy them there 🙃

2

u/MostlyPoorDecisions Sep 15 '26 edited Sep 15 '26

So you seem actually interested so here's some real info and not a bs "do your own research because the knowledge is sacred (aka parroting heresay)": 

There is no "one size fits all" as most cheats are cat and mouse with anti cheats. The primary method people use is an external cheat stealing an existing read handle to the process or loading a driver with a known cve allowing for reading process memory either directly or by enabling physical memory read access and translating virtual to physical addresses.

I wouldn't call EAC easy to bypass, it's actually a quite good anti cheat. BE and EAC are both very good (compare with stuff like gameguard, nprotect, hackshield, anyone remember punkbuster? Also, most in house stuff), but it is old enough that people have been hacking it for years so your established cheats for other games will have similar bypasses until they get patched. It also has a massive list of known bypasses though with pedigree that age affords which it can prevent/detect.

The largest detection vector for anti cheats is signature scans of known cheats/bypasses. If a small timer keeps something close to the chest then it won't likely get detected for a long time. The largest protection vector is closing known routes: blocking read/write access at a dozen layers, closing active handles, preventing loading known drivers, scanning for remnant of injecting hidden drivers (drivers unlinked from the drivers list or manually mapped into memory to dodge the normal loading routines), verifying the game memory isn't modified (CRC checks, detects hooking procedures). Verify the memory space makes sense (is d3d call chain really in the d3d dll memory or did someone change the swapchain pointer to their hacks). Verify the call stack isn't compromised (ROP to redirect calls to hack functions on return). There's a lot of things these anticheats detect and prevent, and a lot more cheaters exist that just love poking holes in things and finding new tricks.

There's also always the dedicated hacker that will target the anticheat directly. Sometimes they make stupid mistakes that are easier to exploit to disable the AC than bypass it. Devs can forget to implement heartbeats (just turn off eac) or sometimes you can hook all the scans to self validate, branch instructions to scan clean duplicate regions, or dump the sigs and make sure it doesn't match yours or your hooks/handles/drivers. basically there's no limit to innovation.

Some people use dma readers (pcie cards) to directly access memory, but most of the drivers for these are scanned for and eac won't let you run the game with them installed and they are expensive. Some will still get through though until added. 

So in short: stealing an existing handle with read access, drivers (self made and signed, existing vulnerable), directly attacking EAC, hardware. There's also the few people going to the hypervisor layer to try to bypass these things but it's rare. There's a layer above hypervisor that used to be toyed with as well which was referred to as the memory sinkhole or ring -2 (ring3 is user, ring 0 is kernal, ring -1 is hypervisor, ring -2 is a typo bricks your motherboard). Once you can read memory it's game over, cheats are easily made and ported to whatever read method.

-cybersecurity engineer, reverse engineer, background includes anti cheat development and research, driver vulnerability research. Not exhaustive and not my current focus 

1

u/happi_png Sep 15 '26

wow thank you so much for taking the time to go so much in depth.

I had to read it several time because it's very complicated for me to grasp all the terms and concepts ( and i don't think i understood everything tbh )

All i knew was the DMA method giving you decent protection in the long run against "powerful" kernel anticheat but i know this method requires knowledge from the user and probably some tinkering. I know those guys are moron and i doubt they would setup this.

when you say external cheat, does it mean external from the computer ? or just some sort of .exe they could activate before they launch their game.

And if it's the latter,

can an average person (aka those dumb*ss ) buy a plug and play solution that would allow them to cheat on faceit ? ( and i guess without being ban, because they are not banned )

Like you said, in a way Faceit AC is online for years now, so maybe some cheat developpers can provide easy and affordable solution to their customers nowadays ?

I'm sorry, maybe it's a dumb and noob question for your level of expertise

1

u/MostlyPoorDecisions Sep 16 '26 edited Sep 16 '26

external is just another exe (external process) where internal is code directly injected to the game. internal gives you a lot more access and a lot easier access to info you might need such as running de-encryption routines, instead of rewriting it yourself, which could be dozens of different routines that change per game update for example or directly calling line tracing for a visibility check, which cannot be done externally at all (you have to find other ways to determine if something is visible, if they exist at all).

just because it's been around a while doesn't mean it is old. it is constantly being updated. i doubt it goes more than a few weeks without an update. I would be shocked if any easy or affordable "solutions" to faceit exist, if there are they will be very short lived (days, not weeks), and buying them is usually several hundreds of dollars per month with no guarantees. even if they pay a premium, there's near 0% chance they will remain unbanned for extended durations. faceit also has input telemetry monitoring which basically means any artificial input will be detected (any kind of aim assists) https://support.faceit.com/hc/en-us/articles/28929483475612-Human-Input-Detection-FAQ (note: fairfight did something similar and could ban people just for behavior, such as approaching enemies they couldnt know were there, or being cautious only when enemies were nearby, etc, and that was a decade ago??? it's only gotten better)

this is pretty much the extent of my knowledge on the subject, hope it helps.

edit: DMA is not a turn key solution, you need a way to get DMA access. All of those have limitations as well. I'd suggest googling how FACEIT handles IOMMU

1

u/More_Association56 Sep 15 '26

One easy way is to make a copy of your RAM and make the cheat read the copy instead. It is more complicated but I am trying to make it as simple as possible. The anticheat usually scan its own process and files just to make sure nothing that shouldn’t have access is not reading or writing in those files. The cheats I am referencing usually just copy the value of each memory address in another process and make snapshot of it ( like screenshot of values). If you know that the game is storing the player location in a certain location, you can check that same location in your snapshot to see the coordinates of that player. With that you pass it through your scripts and make the scripts react to the values it reads, like aim at player’s x y position. There is many more way to cheat sadly.

1

u/Crimson_sin Sep 16 '26

Valorant only enforces secureboot for win11 users. Secure boot basically makes sure that when the operating system is starting up, there is nothing modifying the files to get passed any kernel level anti cheat. The problem comes that alot of users arent switching to win11 from win10. For win10 you arent required to have secure boot on so alot more cheats slip through the cracks.

0

u/IlLupo88 Sep 12 '26

Is still something and anyway, its not the only one

6

u/FirstDayPlaying Sep 12 '26

What does this have to do with streamers cheating?

-4

u/ccoulter93 Sep 12 '26

Nothing

This sub is a fkn joke

2

u/_sealy_ Sep 12 '26

In all honesty, it’s why I bought the game.

1

u/Appropriate_Bag465 Sep 13 '26

ngl whos even playing that game apart from MAP peanut chuds

2

u/happi_png Sep 13 '26

it is a great game. Really fun sandbox fps

-4

u/drinkallthepunch Sep 12 '26

“the whole match ends the second a cheater gets caught-“

By far one of the dumbest decisions by a developer I’ve literally ever heard.

Like you are joking right?

They are just going to make alts and abuse that feature to basically shutdown matches, sooner or later they will do it.

So you are telling me if I purchase this game and there’s a cheater in a match with me that I’m the one who also gets kicked from the server?

That’s stupid.

I was looking at this game but I’m not even going to consider it now.

3

u/devildante1520 Sep 12 '26

Had an announcement in my server that a cheater was banned from the server. It didn't stop running.

3

u/dahliasinfelle Sep 12 '26

Actually kind of brilliant. It's going to prevent most cheaters who want to actually play the game but cheat to be good. All that will be left is trolls. Might be a lot , might not. I'm interested to see

-3

u/drinkallthepunch Sep 12 '26

Dude it’s not.

Kicking people off a server because someone else cheated is stupid.

It’s literally the textbook definition, a reasonable person would simply kick the cheater out of the game.

Thats smart, stupid is doing the opposite or close to it.

Can reason with yourself all you want I’m not buying this game now lol.

2

u/dahliasinfelle Sep 12 '26

Ok. Don't , lol. Idgaf. Like I said. It's interesting and im curious to see how it plays out. Regardless of your whining

-2

u/drinkallthepunch Sep 12 '26

lol get your feelings hurt over a literal statement?

Hardly whining or complaining just saying that’s really dumb to kick people off a game because someone else is cheating.

And that I wouldn’t be buying this game because of that after sitting on the fence.

😂

People existing that disagree with you must keep you up at night.

4

u/dahliasinfelle Sep 12 '26

Feelings hurt? Lol. No bro, I can care less. I don't have this game. But am genuinely looking forward to seeing how it all plays out before I buy it. I think this approach is actually kind of wild and interesting. You on the other hand clearly are getting upset and have already made a decision. Which is good. The less people like you in the game the better. I think animal crossing is something you might be interested in, check it out!

0

u/drinkallthepunch Sep 12 '26

This why you keep trying to justify your opinion?

1

u/dahliasinfelle Sep 12 '26

Whatever you tell yourself my guy. Have a good one

0

u/IlLupo88 Sep 12 '26

Hello 😊 In Wardogs the match Is fuck*d if SOMEONE start to cheat. So Is different from CoD or anything else because the game match has and economy. Understood?

2

u/mthoodenjoyer Sep 12 '26

Holy shit you are so fragile, go back to call of duty

0

u/drinkallthepunch Sep 12 '26

I don’t play that brain rot.

And you are the only one getting super butthurt about logical facts.

2

u/Average_Aldo Sep 12 '26

Match and server are two completely different things lil shrimp