Anti-Cheat Bypass: Kernel Hacks, Cheats, HWID Spoof and Anti-Cheats Bypass Techniques

Anti-cheats today are becoming more smart, and developers do not spare resources for protection. But what to do if you want to slightly «tweak» your KD or just understand how these systems work from inside? This section of our forum is exactly for those who search answers to these questions.

What is anti-cheat in games and what it does?

Anti cheats — this is most often special programs, which game developers build into their products for fighting with dishonest players. They watch everything: your files, processes in system and even how you move in game.

Sometimes anti-cheats ban even honest players. This is exactly why it's so important to know, how these systems work and what weak places they have.

On market now there are several main anti-hacks:

• Easy Anti Cheat (EAC) — widespread anti cheat from Epic Games, which stands in many popular projects.
• BattlEye (BE) — known for its ability to track any changes in memory.
• Valve Anti-Cheat (VAC) — an oldtimer, but underestimating it is not worth it, especially after updates for CS2.
• Riot Vanguard — one of most controversial anti-cheats, scans on kernel level of system, launching together with Windows!
• Ricochet Anticheat — new development by Activision for Call of Duty, uses machine learning for searching cheaters.
• Byfron/Hyperion — stands in Roblox, bans executors and scripts.
• EA Anticheat — recently developed for EA Games, works in all parts of Battlefield.
• Faceit AntiCheat — Faceit anticheat, probably, most harsh from all existing ones.

There are also others: PunkBuster, FairFight, XIGNCODE3, GameGuard, Active Anti Cheat, Phanuel. Among them difficultly to choose best anti hack, because each has own tricks and own vulnerabilities.

In which games anti-cheats especially difficultly to bypass?

Games with BattlEye:

• Escape from Tarkov — here anti-hack scans all everything, blocking even for smallest compromise suspicions. Many complain that they received ban simply for side programs.
• Rainbow Six Siege — here BE goes in bundle with own system FairFight, which analyzes your behavior in game process.
• PUBG — one of firsts, who started serious fight with cheaters. Regular waves of bans mow down thousands of accounts.
• DayZ — old game, but anti cheat there constantly updates and watches for any changes of files.

Games with Easy Anti-Cheat (EAC Anticheat):

• Apex Legends — EAC here very aggressive, plus there are server checks.
• Fortnite — Fortnite's anti-cheat one of examples how EAC can go in bundle with server protection.
• Rust — Rust's anti-cheat updates more often than game itself.
• Dead by Daylight — on first look simple game, but with very picky detect.

Games with Valve Anti-Cheat (VAC):

• Counter-Strike 2 — CS2 VAC strongly updated when moving to new engine. Now it can analyze patterns of behavior.
• Dota 2 — Dota's anti-cheat more watches for scripts and macros execution.
• Team Fortress 2 — old lady from Valve with updated protection, which now better catches bots.

Games with Riot Vanguard Anti Hack:

• Valorant — most tough case. Valorant Vanguard anti-cheat launches together with Windows and has access to whole folders and files. This causes many disputes about privacy. By speed of ban comparable with Faceit anti-cheat.
• League of Legends — here Vanguard have more soft functionality, but still very effective.

Games with Ricochet:

• Call of Duty: Warzone — here anti-hack can analyze your behavior, comparing it with millions of other players.
• Call of Duty: Modern Warfare — protection constantly updates and closes bugs.

How to make anti-cheat bypass exploit?

There are several main ways of playing without anticheats, which are discussed on forum:

Hardware hook methods

Most advanced approach — using external equipment. DMA-devices (Direct Memory Access) can read memory of computer directly, bypassing operating system on kernel-level. But such things costs not cheap, and setting them up needs some skill. Fortunately, we have users, whose work is connected with DMA cards.

Spoofing (substitution) of OS identifiers

When you get banned, often they block not only account, but also hardware by HWID (Hardware ID). To bypass this, they use HWID spoofers — programs, which change digital fingerprints of your computer.

Private cheat codes

Free cheats ban almost immediately — their signatures are known to anti-hacks. But private builds, made for narrow circle of people or completely your own cheat, can be used years undetected.

Modification of anti-cheat systems themselves

Most complex, but most effective way — this is reverse-engineering of anti-cheat itself. You find, how they check system and disable these checks. But here you need serious skills in programming.

What you will find in our forum section?

This section is a living community, where people share experience, help each other and discuss latest trends in world of game security.

Here what we have:

• Actual information about state of anti-hacks. Learn first, when BattlEye or EAC received update and which bypass methods stopped working.
• Practical guides. From basic things like «how to bypass the anti-cheat» to advanced techniques about how to write code for each concrete game.
• Warnings about banwaves. Our users track, when mass bans begin, so you could timely take measures.
• Discussion of new cheats and protection methods. Developers constantly invent something new, and our users free share their injectors and developments.

Most important — we gathered people, who really interested in bypass techniques. Here are no judgment, because everyone himself decides, how to play online games. But there is support and exchange of knowledge about how to disable or remove anti-cheats in games.

Conclusion

Even if you never going to use cheats, understanding of how anti-hacks work, will help you better protect your account. In the end, in world of computer games, like everywhere, knowledge — is power. Come to forum, ask questions, share experience — our community always open for new participants!