Unveiling the Underground World of Anti-Cheats

This talk examines the anti-cheat ecosystem in online games and demonstrates techniques for analyzing and bypassing its protections. It covers external and internal cheats, Windows internals, kernel drivers, hooking, shared memory, and process-memory manipulation.

Syllabus

Introduction
AntiCheats
Numbers
Apex
Server
Driver
dll
External Process
Cheating on Glasses
Market Analysis
Money on the Table
The Numbers
Setting Goals
Hijacking
Scenario
Named Pipes
Screenshot
Fine Mapping
AntiWrite Implementation
Hooking Examples
DLLs
Cold Caves
Name Pipes
Kernel
Drivers
Call EC
Apex with EC
Memory Manipulation
Demo
Memory Scanner
Conclusions
GitHub repositories