Aimbot Plugin

0 views
Skip to first unread message

Colby DuLin

unread,
Aug 4, 2024, 5:28:34 PM8/4/24
to agputtiemul
Aroundfour years ago in a large Skype group chat, I stumbled upon an administrator of a reasonably popular Minecraft server network. This encounter happened before Minecraft server networks became trendy, so this one stood out from the rest. They approached me due to my previous work on Minecraft anti-cheat and wanted to run something by me.

The network in question was about to launch a new rank-based PvP server, and they were concerned about the possibility of cheaters ruining the experience. At the time NoCheat was the most popular anti-cheat system available, with most larger servers using it. However, NoCheat didn't have in-depth detection of aimbot cheats. They were looking to hire someone to write an anti-cheat plugin that mainly focused on detecting aimbots.


The requirements were relatively simple. Don't revert or prevent the actions done by cheaters; log them. They had diligent staff that responded nearly instantly to reports but needed a plugin that could find and report the harder to detect aimbots.


In the community, hack clients became more popular, and private groups formed with exclusive clients that they only gave to those they trusted. This landscape differs from today where money is the only entry point to accessing the clients. These clients used much more advanced forms of aimbots compared to the others at the time and bypassed NoCheat entirely. The aimbots were still very basic compared to today's standards, however.


The first step to creating this aimbot detection system was to access what I was trying to prevent. To do this, I worked to gain the trust of the 'elitist' members by posting questions and tutorials on the forums that they frequented. I posted some tutorials on making some very basic non-harmful cheats, such as a 'Full Bright', a cheat that allows the player to see in dark caves.


My solution to patch these aimbots was relatively simple. It calculated the movement's trajectory, checked if it was the same throughout five network ticks, and then checked for an intersection between the snapping point of any potential targets and the trajectory line. This technique is what I presume most current anti-cheat solutions for the game do.


It was here that I decided to write an aimbot for the game. Not to use, but to try and bypass my anti-aimbot solution. The first change that I made was to include jitter on the movement of the camera. The jitter bypassed my solution, as it no longer had a constant trajectory.


Here I rethought my original solution. Instead of generating the trajectory for the first five network ticks, I tracked general movements and determined the positions that were probably the beginning and end of each camera movement. I estimated these positions based on a mixture of movement speed, and sharpness of angle change. I determined if it was an aimbot or not by smoothing the line and detected if it directly targeted a player. This solution still only worked in a motion that went straight to the target but caught small jitter quantities.


To bypass my new protections, I made a simple modification; replacing the jitter with a reasonably flat sine curve. I came up with this solution after mapping my mouse movements when moving to targets that I had set up to appear in-game randomly. This test gave me insight into what a legitimate mouse movement looked like. When smoothed, most of my mouse movements were very flat sine curves. It was also frequent to see small amounts of overshooting when pointing at the target.


At this point, I was starting to notice a performance impact on the server. I knew I couldn't make the detection much more complicated in this regard. I made it check the smoothness of any line, basically triggering if the angles were changing predictably. I then optimized all I had done as much as possible and then went to add another type of detection.


My new detection occurred as soon as the movement started. It checked for player movement and logged the exact tick that a player became able to attack another player. It then crosschecked this with the start of movements, and if they correlated, logged it. Using this information, it tightened the other detection system's checks when it correlated with the new detection. The higher the stored violations, the stricter it was. This system did end up with false positives; however, a legitimate player should never have reached that violation level.


These changes solved both the overshooting issue and the sine wave bypass, without causing too many false positives. As moderators were manually verifying all reports, the number of false positives was deemed acceptable. I talk more about sufficient punishment thresholds in another article where I analyze forms of anti-cheat.


It's not possible to completely block aimbotters without punishing legitimate players severely. In my testing, this didn't pick up legitimate players enough to impact them, and it did pick up every aimbot I could find. In my mind, this was a successful project. If the system were automatic instead of requiring moderator action, I would likely have worked harder to prevent false positives. Given the requirements of the project, this system was what they wanted.


Before writing this post, I attempted to find the network that I made this for, to see if they were still using it. However, it appears the network has sadly shut down sometime since then. Due to that, I strongly doubt this aimbot detection software is in use today, making it safe to talk about publicly.


Hi, I'm Maddy Miller, a Senior Software Engineer at Clipchamp at Microsoft. In my spare time I love writing articles, and I also develop the Minecraft mods WorldEdit, WorldGuard, and CraftBook. My opinions are my own and do not represent those of my employer in any capacity.


As one of the most advanced language models out there, ChatGPT can be a valuable tool for boosting productivity in a variety of settings, from customer support to personal organization.

This AI-powered chatbot is taking the productivity world by storm, and with a little help from some handy plugins, you can harness its full potential to streamline your workflow and get things done.


Are you tired of constantly thinking of witty and engaging tweets for your social media accounts?

Well, TweetGPT is here to help! This amazing Chrome extension uses the power of ChatGPT to generate unique and personalized tweets, so you don't have to.


With YouTube Summary with Chat, you can save time and learn quicker by getting a summary of the video's key points and takeaways. Plus, you can quickly view and access the summary by clicking on the summary buttons on the video thumbnail while browsing YouTube videos.


No more wasting time trying to remember important details or re-watching long videos. With YouTube Summary with Chat, you can streamline your learning process and become more efficient in your studies or work.


Looking for a versatile and powerful assistant to help enhance your online experience?

This Chrome extension allows users to boost their productivity and efficiency across various websites, including search engines, LinkedIn, Twitter, and more.


With Merlin ChatGPT Assistant, you can generate quick and personalized replies, summarize content, and even shorten the text to save time and streamline your online activities. Plus, the developer boasts that it can be utilized with all Google searches.


Are you tired of having to repeat the same ChatGPT prompts over and over again?

With ShareGPT, you can easily share your ChatGPT prompts with others by clicking on the "share" and "bookmark" buttons found under your prompts.

This makes it easy to distribute your prompts to colleagues, friends, or anyone else who could benefit from them.


Do you ever feel like your ChatGPT conversations are missing something? Meet WebChatGPT, the Chrome extension that can help you enhance your ChatGPT conversations by adding relevant web results to your prompts.


With ChatGPT Writer, you can save time and effort by letting ChatGPT do the heavy lifting when it comes to writing emails. And best of all, the extension is incredibly easy to use - simply install it, log into OpenAI, and you're ready to start composing emails with ChatGPT Writer.


Superpower ChatGPT is the ultimate extension for anyone who wants to enhance their ChatGPT experience. With a wide range of features, it lets you customize your conversations, search through your chat history, and even export your chats into multiple formats. You can change the language and tone of the response, sync all your chats locally, and even pin important messages for quick access.


Unlock the power of ChatGPT with ChatOnAI! This Chrome extension allows you to display ChatGPT responses alongside search engine results from popular search engines like Google, Bing, Ecosia, Baidu, DuckDuckGo, and more.

With ChatOnAI, you can get the information you need quickly and easily, without having to switch back and forth between tabs or windows.


ChatGPT Prompt Genius extension gives you access to a wide range of prompts and capabilities that will allow you to take your ChatGPT conversations to the next level. Whether you're looking to generate simple articles or complex code, this tool has everything you need to get the job done.

Plus, with access to a special subreddit maintained by the developers, you'll never run out of new prompts to explore.

So why wait? Start using ChatGPT Prompt Genius today and take your ChatGPT experience to new heights!


Looking for an easier way to craft professional and personalized emails?

With top-quality responses that outperform other tools in the market, ChatGPT Prompt Genius is your go-to solution for seamless email writing. It's privacy-friendly and supports all languages.


Introducing WritingMateAI-1, the ultimate writing companion for all your creative and professional needs! With the power of ChatGPT, you can effortlessly draft or reply to emails, generate captivating blog posts, craft compelling essays, and even create marketing copy or press releases for your LinkedIn profile.

3a8082e126
Reply all
Reply to author
Forward
0 new messages