Preventing ESP, Discussing Workarounds

Okay, so I’m currently working on a hide & seek based game, but as we all know, ESP is a pretty detrimental exploit to a hide and seek based game. I’ve had ideas as to how to implement a client side anti cheat but I want to know how plausible its implementation is.

So I was having a conversation with a friend discussing how I could prevent it, talking about ways to prevent esp exploits. One thought was obfuscating the local script that most of the client functionality runs in, and adding the anticheat to that script, so it couldnt be worked around by deleting just the anticheat or reformatting the primary client script just without the AC. As for preventing CoreGui based ESP, I’m not sure, I’ve heard of a few potential workarounds but I’m not sure if they’re possible anymore.

I’m only really making this post to hear of workarounds to it to decide whether something like this is even worth my time, or if I would just be better off trying other methods such as a votekick or hiring a moderator team. I doubt this system would work in practice, but on the off chance it has potential to do so I want to hear opinions/improvements/issues.

Thanks!

2 Likes

You can never access coregui no matter how hard you try. there was once an exploit regarding pcall() but it was quickly patched and as of localscript obfuscating, that wouldn’t work too well since exploiters can just disable it or edit it. (not mention they can also decompile it)

There isn’t much you can do to prevent ESPs as they are ALWAYS parented to coregui and you know, roblox with their security does not allow the function ChildAdded to be used(on CoreGui) server-sided or just by developers. so your last resort is either hire moderator team or a votekick system.

1 Like

If the client has it in memory (eg in workspace) then there’s no way to stop an ESP from existing.

2 Likes

Clients may also use native drawing API’s to make it invisible to your localscripts.

Regarding OP, security through obscurity is not security. You’ll most likely not be able to prevent ESP on the client.

Exploiters can delete your anticheat localscripts and disable/disconnect connections that listen for their deletion.

In the end, the client has all the control. You can’t prevent too much if they can disable it themself.

1 Like

Thanks for the replies, I’ll try to focus on other methods of protecting the game.