Q2advance

[Beans]

Ok. I donated the required 1$ and got the 1.0 q2advance. I have been using it and Ill tell you that a single line of code would not allow wallhack like bugs to happen. After reverse engineering the files there are several hidden client side cvars that enable/disable wallhacking, enable/disable an aim bot with a fov as low as 5, and several built in timers that one can customize to do just about any thing.

I downloaded the beta2 and it contained the readme and the client. The client will not run unless you dl a key.exe file to unlock the paid version. the unlock file writes 12 bytes whichs adds the reg code that allows the client to run.

Being a programmer I can tell you that a single line of code will not enable the wallhack you have to write a call to the gl rederer to allow the walls to become transparent. In my opinion this was diliberate.

A tcp/udp view reports that the q2advance client makes 2 udp connections to a server. this appears to happen when the hidden aim bot is enabled. It appears that the bot is programed to miss at random intervals to make it seem human like. There is a line that make the user press the fire button to fire but the aim bot does the aimming.

I will publish the findings and the screen shots in the near future.  However I will not post the code as to prevent future hacks..

As for right now I believe that this client is mearly a new method of cheating. although the eye candy is great, the aimbot/wallhack/timmers are cheats. I would not trust a player that connects using the q2advance. Although that person might be in the dark as to the full extent, but none the less be suspect.

[n/abus1ve]

Very interesting ...

[[BTF]EyEsTrAiN]

I have been using it and Ill tell you that a single line of code would not allow wallhack like bugs to happen.

This line of code he is refering to is found here:

http://www.q2players.org/phpBB/viewtopic.php?t=243

Last post by evilpope

[console]

After reverse engineering the files there are several hidden client side cvars that enable/disable wallhacking, enable/disable an aim bot with a fov as low as 5

For real?  You've actually verified from inside the game that these cvars exist, and actually function?  I'd very much like to know more about this.

Being a programmer I can tell you that a single line of code will not enable the wallhack you have to write a call to the gl rederer to allow the walls to become transparent. In my opinion this was diliberate.

Unless he meant he forgot one line of code needed to cover his tracks. 

A tcp/udp view reports that the q2advance client makes 2 udp connections to a server. this appears to happen when the hidden aim bot is enabled.

Could you explain what you mean here?  As UDP is a connectionless protocol, I'm not sure I understand.

I will publish the findings and the screen shots in the near future.  However I will not post the code as to prevent future hacks..

Post the code?  I though you were reverse engineering the binary, so I'm confused about which code you're referring to?

As for right now I believe that this client is mearly a new method of cheating. although the eye candy is great, the aimbot/wallhack/timmers are cheats. I would not trust a player that connects using the q2advance. Although that person might be in the dark as to the full extent, but none the less be suspect.  Further I have banned that client from the KIL Server.

I'm not going to assume anything until I either see these hacks myself, or hear confirmation from multiple independent sources... But if this is all true, it makes no sense to me that anyone (i.e. evilpope) could hope to release a no-cheat client with hacks, and expect nobody to find them.  This is why I'm having a tough time believing all this... (no offense intended!)


Regards,

[Art]

... As for right now I believe that this client is mearly a new method of cheating. although the eye candy is great, the aimbot/wallhack/timmers are cheats. I would not trust a player that connects using the q2advance. Although that person might be in the dark as to the full extent, but none the less be suspect.

[naymlis]

hahaha, crazy shit..

i found out about the shadow wallhack but i was told u cant see the person, just the items.. and im not gonna believe this aimbot shit until its proven.. remember this is just a beta, the wallhack shadow bug was already removed for beta3.

[seanikai]

Yet another so called anti-cheat client to suspect. I'd heard about the wallhack, but not the aimbot and timers. I'd like to hear others confirmation on this.

the on screen item timers were added in like version .03 or .04 and were voted on by the people at q2players.org, the issue of them being cheats has been argued over and over but I can tell you that the main reason ep included them was to even the playing field between people who use audio timers and people who don't, either because they don't like them or don't understand how they work. this wasn't included to be a cheat, just to make things somewhat even.

[beans]

UDP connections Q2 relays information to and from the clients by means of UDP packets. IE: player position, items wepaons and ect... The Original Q2 only a single connect was made to a port.  While running the q2advance client I preformed a udp/tcp view and the results were that the q2advance had established to connections both UDP. This either happens when a person is connected thru a proxie or when using a aimbot. The aimbot intercepts incomming packets and uses them to aim and then passes them to the client.  Using R1Q2, Nocheat this dual connection does not exsist, nor does it exsist in the stock Q2 version 3.20 or 3.21. Then why would it be needed in Q2advance?

The wall hack is very apparent and while using it I was able to see both players as well as items, and weapons. I did not find a way to disable it not sure if it can be. As far as Evilpope, a single line would not allow this to happen and nor would a single line of code prevent it either.

Cvars listed in the game when exec'ing a cvarlist make no mention to a bot, wallhack or other known cheat. However in the hexeditor there list a few that I do not see when doing a cvarlist. mainly timmers, and one refering to cl_aim 1/0, and cl_prediction 1/0. both of these lead me to think that there is somesort of aimbot. several pages down there is a fov listing for fov's at minimum 5. further down makes mentions to ramdom misses. Reading the orig q2 code and several other clients I have never seen any references to random misses. why is this in Q2advance?


I am still testing and stay tuned.

[evilpope]

first off, this guy is an idiot.

there are many ways to have a wallhack in 1 line of code, and if i had intended to have a wallhack it certainly would have been better than being able to see shit through the shadows.

[evilpope]

this guy knows nothing about aimbots either.  he is assuming all aimbots must be a proxy first off, which shows you how little he knows about programming, hacks, or anything else.  for some reason he feels the need to lie, why i dunno.  bad childhood maybe?  an uncle that got a little too friendly?  all we can do is guess.

[naymlis]

yeah from his second post i realized he was just assuming all this shit just from the cvars (commands).. cl_aim cl_prediction omg its a aimbot!! lol funny

[daelmun]

Just  a bunch of nonsense to me, when he doesn't even know how to get it to run I doubt he can be that smart a programmer Anyway, thanks for clearing it up ep, and keep working on the anticheat. It's the only anticheat left, and we should support it not fight against it.

* daelmun adds the line "set cl_aim 1" into his autoexec.cfg

[evilpope]

Cvars listed in the game when exec'ing a cvarlist make no mention to a bot, wallhack or other known cheat. However in the hexeditor there list a few that I do not see when doing a cvarlist. mainly timmers, and one refering to cl_aim 1/0, and cl_prediction 1/0. both of these lead me to think that there is somesort of aimbot. several pages down there is a fov listing for fov's at minimum 5. further down makes mentions to ramdom misses. Reading the orig q2 code and several other clients I have never seen any references to random misses. why is this in Q2advance?

Go ahead and hex edit it, you will find no mention of any cvars, let alone comments about random misses and such.

[console]

The line of code that I forgot was that I had switched the order that players/maps get drawn, not realizing that it would also fuck up lasers/shadows (it was an attempt to stop a wallhack, because if depth testing is disabled on entities when the map is draw after the entities, they dont show up).  It was a simple mistake that i forgot to switch back.

Hi evilpope,

Thank you for clarifying - much appreciated.


Regards,



P.S. ... do you have a nifty evil-pope-hat ? ? ? 

[evilpope]

no, and satan doesnt give me a cool pope-mobile either