So, I wanted to share an interesting method for detecting CoreGui. As you all know very well, LocalScripts and server scripts within the place itself (excluding plugins) cannot access CoreGui, making it impossible to interact with it which is actually quite strange. Therefore, to detect cheaters, you simply need to look for unusual input that isn’t originating from PlayerGui. Since PlayerGui can easily be scanned for suspicious GUI elements, this makes for a flawless anti-cheat solution. What do you think?
4 Likes
1 Like
Well usually when I try doing something similar it always has false positives when using the other core gui’s such as the Music one or just other roblox menus.
ESC menu don’t detected, but party, Avatar changer - yes. But it can be fixed, so:)
I meant other buttons in the same tab as Avatar changer and music and the worst part is when I was trying to figure out how to white list specific things I end up doing it for specific positions and the music button which cant be disabled is able to be moved around the entire screen, do you have a solution?
I don’t have a PRACTICAL solution, but in theory I could suggest that the music opening button has a position, just like the others. You could add a flag so that if the music button is pressed, the DRAG interaction will be a white flag. If, while the music is active, any button is pressed near the position the player is moving with the mouse, it will have a cross, meaning the music menu is closed and the white flag can be removed. And yes, this is just theory; you can try implementing it in practice!
honestly not sure this is a good idea to post publicly like this. the second you share the exact detection logic on a public forum, exploiters just read the thread and now know exactly what to avoid, position their fake cursor differently, hook into PlayerGui checks, whatever. anti-cheat methods only really work while they’re not known, the moment the community (and by extension anyone writing exploits) can see the logic it stops being useful pretty fast
also like faminetax already showed, it’s already producing false positives with legit CoreGui stuff like Music/Party, which means real players getting flagged as cheaters, that alone is risky enough to ship without a lot more testing. i’d be careful relying on something like this as a main detection layer
You cant know if it’s opened or where it is to my knowledge since it’s a core gui and cant be accessed.