Universal ANTI-KZH system

[Sickz]

Anti-KZH (Anti-Cheat System)




Dear visitors of Ambrosia community, I saw a lot of players with really ,,interesting'' style of playing. For example: groundstrafe (ducking technique) on soccerjam maps. We never had something like protection besides kreedz-hacks (kzh). So I thinked about improving our servers.


Universal Anti-KZH
How it works:

Most of kreedz hacks works like this:
How do they look like?  Hacks contains configuration files (.cfg) & Dynamic Link Libraries files (.dll)
(.dll)   Main base of hack
(.cfg)  Improvement of base




How do they work?  Injection part:  1.) Injection with injector,
                                                                                                2.) Injection with bug of Counter-Strike (replacement of .dll file that injects automatically into game)

So I decided that we should start finding anti-kreedz hacking system that can punish players like this:
After injection of .cfg or .dll file into game, it injects command to engine of the game. If this command ill pop up in the engine, guest ill be kicked.
- it works fine.





Here is a plugin file (.amxx)
http://forums.alliedmods.net/showthread.php?t=134424&highlight=kzh

- but there is a problem, it's only for kzh named as kzh.
- I was searching for improvement of this and I found one, Guy said: ,,You can edit the .sma file and add more names of hacks so it ill improve detection circle.''





Improvement .sma file download:
I can upload .sma file and send it to high staff, if this application ill be accepted.
(link is not shown because some individuals can abuse it)

[Critical]

isnt
 it for hns and kreedz server only? by the way the kzh is good to duck
gstrafe and scj aswell for longjumps and countjumps, i wish you goodluck
in doing this and i give you a support+ for this. Let the party begin!

[Frank]

Won't work.
I use no cfg for this,and only people who i saw who can do this is anumidis onyz and me. I don't see the need in this,but,carry on,it will do no harm.

['PL']

Ahm, I will edit my message after I learn how the plugin works.
However, if we already got amx super on mm, you can just manually test them. The method is fullproof if it's preformed unexpected since the time of reaction is generally low and minimal for a cheater. If you are having a hns server, this would benefit more then in mm. Manual detection beats all automated plugins, especially those who aren't configured to do 5 deductive analysis in the same time.

[Duke Devlin]

but I for example got:

deathrun.cfg
sj.cfg
jailbreak.cfg
pub.cfg
war.cfg

will that also get me kicked/banned?

[P o p a y]

I think we will have more misunderstandings and chaos when other configuration load in.

Some expert opinions, please ?

[Rawrplus]

but I for example got:

deathrun.cfg
sj.cfg
jailbreak.cfg
pub.cfg
war.cfg

will that also get me kicked/banned?

I checked the .sma of the plugin for anti-kzh. It seems to go down under these commands:

Code: [Select]

{
"kzh_exec",
"zhy_exec",
"xhz_speed",
"kid_speed"
}
which lead to some more that are registered in the code.


So I don't think it should interfere with the actual configs, unless you have them named after a hack, which is pretty uncommon.

All the plugin does is, it checks if your cs is configured with kzh configs.

Code: [Select]

public set_send_tasks(id)
{
// Clear variables
for (new i = 0; i < KZH_NUM; i++) g_kzh_checked[id][i] = false
g_responsed_num[id] = 0

// UDP - unreliable protocol. I did this to prevent casual punish
set_task(2.0, "send_kzh_exec", id)
set_task(3.0, "send_kzh_exec", id)
set_task(4.0, "send_kzh_exec", id)

set_task(7.0, "check_and_punish", id)
}
so unless you cheat, you'll be fine by using any config. I'm not going to go over the entire detection proccess as than I'd have to paste here a lot more than what I just did but you get the point.

I'm not sure if this applies also to the unlinked plugin suggestion though.

[Critical]

So i won't think that this is gonna work?

[SAViZi]

@thought*
And yes, good idea, hope one day you can try it!

[P o p a y]

Rawrplus are we able to put in this plug-in or it is not working ?

[Raven E II R]

Rejected.