

Counter-Strike like chess uses the Glicko-2 rating system ( ). Now, most players of the game are not skilled enough to join these professional teams or obtain the “Global Elite” rank. But guess what? It’s totally and hilariously fucking broken.

So popular that yearly completions are held and prize money in the millions is awarded to the victors.

#įor those of you who don’t know what Counter-Strike is, it’s a very popular online FPS (first-person shooter) by Valve software. Nonetheless, in the case of VAC, it never is acceptable because it’s too easy and you’ll learn why by reading more :P What is Counter-Strike, Glicko-2 rating and why people cheat. Now, if the person using said cheats wrote them then the term “hacker” is acceptable. Stop calling people who download or buy cheats “hackers”. (Address space layout randomization) One last thing before we get started. They need to evolve by either monitoring kernel system calls, hooking ReadProcessMemory/ WriteProcessMemory or preventing processes from attaching to their games or ASLR. They could flood the community with so many different signatures that Valve could never keep up with detection. TL DR The Counter-Strike anti-cheat engine is signature based (among common other things) and people selling cheats know this. I simply don’t care and it’s out of scope for this post. I have not and will not reverse Warden, VAC or care about other anti-cheat technics being used in them. My reason for posting is why easy, old and simple memory modification cheats using known memory modifications DLLs are not being detected after months of use. Also, Assualt Cube is used as a demonstration with VAMemory which was the memory c# class used while doing CS:GO research. A lot of people are having panic attacks about other technical features that this does not cover. This blog post is about VAC signature detection.
