[ADMIN/SEC] mxAntiPVPCheat 1.11 - An approach against newest PVP Cheats [1000]

Discussion in 'Inactive/Unsupported Plugins' started by mxE333xm, Jul 23, 2011.

  1. Offline

    mxE333xm

    mxAntiPVPCheat
    Tested with bukkit build 1000​
    Important announce 3: If you experience Number-Consolespam from this Plugin please redownload it (v1.1)

    Last month this PVP-Cheatmod appeared. And it spreads fast! People using this mod have basically

    • Autoheal
    • Autoaim
    • A feature called Forcefield that auto-attacks all people in a sphere around the player without him doing something and even without him s eeing them.
    That makes them invincible and other players get bored. On this way the complete PVP-Activity on a server can get ruined.


    Also this can crash the economy on a Creative-Server. How? This allows you to farm Wool from sheeps automatically with the forcefield-Feature.

    This plugin tries to fight these Cheaters by indicating the Server administrators which player probably use this mod. How sure it is actually depends on the method used to determine whether they were cheating.

    Detecting Autoheal [Implemented]
    The autoheal-Feature of the Cheatmod allows players to use Food in their inventory to heal themselves without clicking it and without wasting possible harts. As soon as the health of the player has a value that can be perfectly healed (e.g. 15 + bread = 20) that food item is used. It's obvious that a player with a stack bread in his inventory pratically can't die.
    To fight this, it's logged how good the player heals himself in a timeframe of 30 seconds. So if he heals himself 2 times in < 30seconds without wasting half a heart (which is very hard to achive in a fight) you'll get this warning:
    [​IMG]
    If he healed a fifth time or a seventh the message is going to look like: "It's extremely probable that he uses PVP-Cheats". If the message contains got 11 perfect Heals you can be sure that he uses the cheatmod because that is just absolutely impossible to achive in a fight.

    Notice: Wasting hearts means healing with an item that regenerates theoretically more hearts than needed. So healing from 2 to 20 isn't considered to be a cheat by this plugin ;)

    Notice 2: Another characteristica of the cheatmod is that Food items get on fix places in the inventory when turning autoheal on. That will soon be used as alternative detection-method.

    Detecting Forcefield [Implemented]
    To detect forcefield this plugin counts how much times the player attacks other entities in a given timeframe. The forcefield-cheat attacks every entity in a radius of 6 around the player every Frame. That isn't possible without this cheat. So a message will look like this:
    [​IMG]
    If you get more then 1 message like this you can be pretty sure that he uses the cheat.

    Notice: Another characteristic of the Forcefield is the distance between attacked player and attacker when the attack takes place. That will soon be used as an alternative detection-method.

    Detecting Autoaim [Coming Soon!]
    Coming soon ;)

    Commands
    There are no commands at the moment. These messages appear automatically and are logged in a mxAntiPVPCheat.log - File in the directory of your Servers executables.

    Configuration
    A config.yml is generated with the default Values on the first start of this plugin.
    Code:
    # Section about the forcefield
    forcefield:
        # Autoaction enabled?
        autoaction_enable: false
        # Number of forcefield-violations (The red messages you get) to trigger this action
        autoaction_req_violations: 10
        # Command that has to be executed (without /).
        # e.g. globalban &1 Cheating or localban &1 &2  with glizer
        # &1 will be replaced through the player's name
        # &2 by a Reason-String. In this Case mxAntiPVPCheat - Forcefield - X Violations.
        autoaction_command:
    # Autoheal section, see above for info about the parameters if there is no comment
    autoheal:
        autoaction_enable: false
        # Number of perfect heals in a row in 30 seconds required to toggle this action
        autoaction_req_violations: 10
        autoaction_command: 
    Permissions
    Permission NodeFunction(Without Permissions) OP Only?
    mxAntiPVPCheat.AdminUsers with this Permission see the Cheat-Warning-MessagesYes
    mxAntiPVPCheat.bypassUsers with this Permission can cheat without being indicated.TD]Yes


    Coming Features:
    • Autoaim Detection
    • Supporting more Permission Systems
    • Arrowcheat detection
    Download
    Note: Due to some changes in the autoheal detection the values making you sure that autoheal is used have changed. Please re-read the chapter about this above or look at the adjectives in the messages ;)
    Note II: The Lag-Detection-Code is taken from the NoCheat code.
    Note III: Permissions 3.x or compatible are needed.
    Click me!

    Other Stuff:
    [​IMG] if you want to support my development activites :)

    Special thanks goes to: MiRROW :=)

    Changelog:
    v1.11 - fixed Consolespam

    v1.10 - fixed a bug in the lag-detection
    - fixed a logging bug
    - added a timestamp to the logfile entries
    - added autoaction features and a configuration file
    v1.02 - Arrows are now ignored as they aren't part of the Cheat and toggled detection.
    Older Entries: (open)

    v1.01 - Lags should not longer affect the Cheater-Detection
    v1.0 - Logging of anti-cheat-messages into a Logfile.
    v0.3 - Forcefield detection
    - Improved Autoheal-detection

    v0.1 - Initial Release
     
    zok, Codex Arcanum, Kain888 and 4 others like this.
  2. Offline

    TheMiA

    ATTENTION EVERYONE!

    I am extremely sorry for the long delay, I've had many things to sort out in my life, and it's over now. I am back and ready to begin working on this and my other plugins. If you have ANY suggestions/complaints feel free to PM me on here, or e-mail me at [email protected]

    I will work on getting the code set up and ready with a 1.8.1 server and when Minecraft is released and the new CB build comes out I will again update it then. I WILL release a new build for 1.8.1 servers for CB1337 and later. It will be on BukkitDev. I'll post the link to it here as soon as I can.

    Please contact me with any complaints or suggestions!
     
    AS1LV3RN1NJA and MiRROW like this.
  3. Offline

    cooljacob204

    thank god i love this plugin but its lagging my server i think.
     
  4. Offline

    TheMiA

    I'm rewriting it from the ground up for the new release, which will include Line of Sight detection, Reach detection, and Speed detection. :D
     
    AS1LV3RN1NJA likes this.
  5. Offline

    worstboy32

    GREAT! Cant wait till there is a new version!
     
  6. Offline

    Hydrosis

    Will it accidently ban people who hurt others with bleed, daze, ect. using mcmmo?
     
  7. Offline

    Shurfire

    it would make a config file help?
     
  8. Offline

    cooljacob204

    it just notifies you if there hacking and stores it in a log. but in my experience it has not notified me when ppl use stuff like that in mcmmo.
     
  9. Offline

    Hydrosis

    ok great! because i want to use the autoban feature it has.
     
  10. Offline

    TheMiA

    No that wouldn't happen.


    Yes this will make a return in the new version.

    Yeah that feature will still be there in the newest version.
     
    AS1LV3RN1NJA likes this.
  11. Offline

    Hydrosis

    I'm not trying to rush you or anything, but I'm just wondering if it's possible to give an eta on around what day the plugin should be updated? If you can't give an eta, that's ok, too. :)
     
  12. Offline

    Hydrosis

    Also, I'm not a plugin dev or anything, but is there a way to add a feature that will mess with the "Radar" function in grief craft?
     
  13. Offline

    ichingpow

    Not without other client side effects. Trust me, I know. I'm making my own grief client.
     
  14. Offline

    Hydrosis

    Darn :/
    The only way I think that this could be caught is with a honey pot. Place an NPC in the server and put him somewhere where he is unlikely to be found. If he gets attacked, then run x command. Is that possible? If so, I'll just make a request in the right section :)
     
  15. Offline

    ichingpow

    That's pretty stupid. You'd get so many false positives.
     
  16. Offline

    Hydrosis

    If I put some guy randomly underground in a 3x3 block area or so, dress him in diamond and put a few chests around him to make him look like he's looking in his chest, then I can be 95% sure that's not a false positive. Especially if the person is near spawn, then that will catch xrayers AND people who use radar.
     
  17. Offline

    ichingpow

    Everyone can see people's name tags, unless he's sneaking.
     
  18. Offline

    Hydrosis

    There are lots of plugins to hide the name tag from everyone else.
     
  19. Offline

    ichingpow

    Give me an example.
     
  20. Offline

    Hydrosis

  21. Offline

    ichingpow

  22. Offline

    Hydrosis

    "ROFL. That's what I said"
    You just proved my point. If you can see them behind a wall ur using hacks...So if they are sneaking, someone without hacks won't be able to see them behind that wall. If someone is using hacks, then they would be able to see the NPC. If that person is wearing valuable items and is surrounded by chests, then they person hacking will most likely dig underground (where I plan to put the NPC) and try to kill the person.
     
  23. Offline

    cind3r69

    Thanks TheMiA, glad to see your not M.I.A. ;) this plugin had a lot of promise, although It did not run very stable for me back on 1.7, it was the only thing that properly tackled these issues ( I see your planning a rewrite, so don't worry about it). At the moment I'm running dev bukkit 1.0.0 with many plugins and the latest hacking clients are able to successfully use forcefield and autoaim without being detected by nocheat. another solution to these problems is always welcomed, if you need any help testing this send me a private message and i will tell you my email and Server info. I run a powerful 100 slot survival / pvp server and I'ma network engineer with over 15 years of linux experience.

    Tip for you server admins running 1.0.0 , find a plugin called EnderPearlDisable and install it, theres a known dupe that it will fix until an official one comes out.
     
  24. Offline

    Hydrosis

    Just wondering, will this be released/made once a RB comes out or is it currently being worked on?
     
  25. Offline

    shanko

    So does this work with the dev build? is it inactive?
     
  26. Offline

    Hydrosis

    It didn't work with 1.8 versions. I'm guessing it won't work with 1.0 versions either.
     
  27. Offline

    cind3r69

    Hey Guys. I'm in the same boat. A plugin like this is needed as theres alot of pvp hacking clients out right now. someones going to release a plugin to help with this. Perhaps nocheat may expand their offering. This plugin did work previously in 1.7 and the author says hes going to rewrite it. I will keep checking this thread and I suggest you do the same, its probably the best hope we have to countering the hacked clients.
     
  28. Offline

    ichingpow

    No. NoCheat has almost all the functionality of this plugin. All it needs is the autoheal detector, but trust me, that can be bypassed so easily.
     
  29. Offline

    TheMiA

    I love how you're selling NoCheat...XD. It's okay though.

    The new plugin is called AntiSpartan and will protect about the same way NoCheat does, but will be geared directly towards blocking or notifying staff about PVP hacks/hackers.

    I am currently still developing the plugin, because I'm busy with some Single Player Mods and getting back into college for the Spring semester.
     
  30. Offline

    ichingpow

    I'm not selling it. It's a free plugin. I write cheat clients, trust me, I know that mxAntiPVPCheats can be bypassed.
     
  31. Offline

    TheMiA

    Uhm what in the hell are you talking about? "Selling" can be used to describe how someone pitches a product, in this case NoCheat.

    Hacks will NEVER be able to be fully prevented against, the most we can do is put in some preventative measures against them, and I never claimed that it was unable to be bypassed? So as of right no your last post is completely irrelevant...
     

Share This Page