Cheat detection methods collection
This post will have some of the detection methods I’ve found that I’ve decided to post publicly, if detection isn’t mine, the author will be credited. I will be updating this post whenever I add a new detection.
Extra
Define AntiCheat functions properly
If your anticheat has any functions, make sure you define them using local func = function() instead of function func(). Defining a function the first way will not reveal the function name to the exploiter, keep in mind they can still decompile and detect functions by checking constants and arguments.
How to combat hooked RemoteEvent/RemoteFunction
Method 1: Teleport Cheaters to certain coordinates incase your remote that handles bans is hooked. Make sure you use different threads for that.
Examples:
Client Code
local player = game:GetService('Players').LocalPlayer or game:GetService('Players').PlayerAdded:Wait() -- Incase you use ReplicatedFirst
local Detected = function()
if player and player.Character and player.Character:FindFirstChild('HumanoidRootPart') then
-- Fire the ban remote in a different thread
local hrp = player.Character.HumanoidRootPart
local clock = 0
while clock < 5 do
hrp.CFrame = CFrame.new(101337, 1337, 1337)
hrp.Anchored = false
clock += task.wait()
end
hrp.Ancohred = true
print('Crash the client')
-- Crash the client
else
print('No character, crash the client')
-- Crash
end
end
-- Test
task.wait(10)
Detected()
Server Code
local Players = game:GetService('Players')
local BanPos = Vector3.new(101337, 1337, 1337)
while task.wait(.5) do
for _, player in Players:GetPlayers() do
if player.Character and player.Character:FindFirstChild('HumanoidRootPart') then
if (BanPos - player.Character.HumanoidRootPart.CFrame.Position).Magnitude < 25 then
print('Ban', player.Name)
end
end
end
end
Detection List
AntiAFK/Signal_Disconnect Detection (0% False Positives)
The following code can be used to protect any kind of signals, for example OnClientEvent. Be careful if you disconnect any of your signals though.
AntiCheat Code:
local player = game:GetService('Players').LocalPlayer or game:GetService('Players').PlayerAdded:Wait()
local Connection = player.Idled:Connect(function(idleTime)
local randomVariable = idleTime
end)
while task.wait(.5) do
if not Connection.Connected then
print('AntiAFK script detected, ban')
end
end
Script Example:
-- Ultra simple anti afk kick script
for _, connection in getconnections(game.Players.LocalPlayer.Idled) do
connection:Disconnect()
end
Video Example:
__tostring trap
If you store some kind of data in ModuleScripts, you can modify __tostring method in order to detect exploiter printing out the table, keep in mind that it’s still possible to loop through it or index it without any problems. This detection is pretty rare, however it won’t have any false positives unless you print out your tables.
Module Code:
return setmetatable({
Damage = 25,
Cooldown = 0.15,
ReloadTime = 2,
OtherStat = true
}, {
__tostring = function()
print('Table was printed, ban')
local val1 = 'table'
local val2 = ': '
local val3 = '0x'
local val4 = '82fcfd59c8a044d1'
return val1 .. val2 .. val3 .. val4
end,
})
Script Example:
local AkStats = require(game.ReplicatedStorage['AntiCheat Scratches'].Ak47)
print(AkStats)
Other resources used
RbxStu V3 - Studio pentesting tool
Synapse X Docs - Documentation of common exploit functions