[fisica638]

Hello, Today I Release the Source of my Anticheat Made in VB.NET.

It has many features, It uses All the add-ons of my Destroyer Protection and it also has Minimal Parts of the Scan Engine of my Anti-Malware Portable Strely Cleaner.

---

Falcon Anticheat

Introduction
A Complete Anticheat Written in .Net

Features

• Anti-debugging attacks
  


• Anti-Dumping
  


• Anti-Virtualization / Full-System Emulation
  


• Anti-Analysis
  


• Additional features
  


• Detection of Malicious Programs
  


• Real-time Process Scanner
            +[MD5 scanner | PE Scanner | Assembly Scanner for Programs Made in .NET (Detect all kinds of hacks done in .NET)]
  


• Host Scan (Verify that your domain or connections are not blocked on the Windows host)
  


• Real-time Module Scan.
  

Notes
The Unmanaged Exports Library is used in the FalconWrapper.vb class for use in C++ and Delphi.

Download

Falcon Anticheat

Preview and Testing
Download BasicPacMan Game with Falcon Anticheat : Preview Game/Anticheat.rar

---

Thanks for reading, and Comment !! ✌

[Angela White]

you forgot to include the source code homie you only included the executables which i'm not opening. I'm interested to see if you created a worthwhile anticheat in VB.

[fisica638]

Sorry I was editing the post and accommodating the design, there it is.

It should be noted that Anticheat is in API and is responsible for detecting malicious programs.
The game must put the warnings and run it in Ring3 / Drivers.

*Forgive the bad English. The google translator does not give much.

[Dredd]

Sounds promising fella, I'll take a peak when I get chance. Does it pick up on process hooking?

[fisica638]

Does it pick up on process hooking?

It is not finished, but when it is ready I update. ✌

[SaketSaket]

looks interesting... will have a look... good work OP...

[Sinistros]

Hello, Today I Release the Source of my Anticheat Made in VB.NET.

It has many features, It uses All the add-ons of my Destroyer Protection and it also has Minimal Parts of the Scan Engine of my Anti-Malware Portable Strely Cleaner.

---

Falcon Anticheat

Introduction
A Complete Anticheat Written in .Net

Features

• Anti-debugging attacks
  


• Anti-Dumping
  


• Anti-Virtualization / Full-System Emulation
  


• Anti-Analysis
  


• Additional features
  


• Detection of Malicious Programs
  


• Real-time Process Scanner
            +[MD5 scanner | PE Scanner | Assembly Scanner for Programs Made in .NET (Detect all kinds of hacks done in .NET)]
  


• Host Scan (Verify that your domain or connections are not blocked on the Windows host)
  


• Real-time Module Scan.
  

Notes
The Unmanaged Exports Library is used in the FalconWrapper.vb class for use in C++ and Delphi.

Download

Falcon Anticheat

Preview and Testing
Download BasicPacMan Game with Falcon Anticheat : Preview Game/Anticheat.rar

---

Thanks for reading, and Comment !! ✌

Hello, you should add some anti-disassembly, else all others antis are useless.

[fisica638]

Hello, you should add some anti-disassembly, else all others antis are useless.

There is a part of the code that is in charge of monitoring that the other functions are working (Timing / Brackpoints).

Taking into account that the anticheat works like any API, that means that in order to deactivate it, you should (NOP) the call from the game.
And come on, there is no game so bad that I am not obfuscated.

The same thing happens with the anticheat (DLL), I have to suppose that it will be obfuscated and the game would have the least security to hide its code.


But hey, I'll see what I do and update. Thanks for comment.

---

Don't Expect Something Like EASY Anticheat or Xigncode.

---

New update  :

   

• Added a new Discovery Engine. [Detect All Hack / Cheat / Trainer, External.]
           - Basically Works with "EnumChildWindows" Search the Programs for Malicious Words (Aimbot, Triggerbot, ESP ...)
           - This engine also has an Exclusion list as well.
           - With this, all External Cheat is Patched.
  

Para Explicar mejor como funciona:

When the User passes the mouse over a Program with a Control that contains a Prohibited word (Aimbot, ESP, Silent, Triggerbot) it will be detected.

For example this CS: GO External Cheat, When the user passes the mause on the "Aimbot or ESP ...." (Bad Keywords) tap, the anticheat will detect.

---

You can Enlarge the list of Programs in the class "ExDictionary.vb" :



And minor bugs were fixed.... All features are in sample .rar file, you can try it.

[maldev0]

Check for runtime integrity or get your AC threads suspended from usermode, lol
I suggest you to RE some "popular" ACs and learn from it, even tho some of them are totally braindead.

[fisica638]

Check for runtime integrity or get your AC threads suspended from usermode, lol
I suggest you to RE some "popular" ACs and learn from it, even tho some of them are totally braindead.

Man, this is not a commercial anticheat. Rather it works like any api, Client-side. It does not use any type of Driver. etc..
Don't expect something professional.

---

Next Update: Dll Injection detection by: LdrRegisterDllNotification

---

A small Proposed Goal:

You can always try to try the mini game I uploaded : Preview Game/Anticheat.rar

Objective : Edit Game Score, Tools: Free.



I hope someone will be encouraged and share their experience and the steps that they followed . ✌

[ucsandaasu]

haha it is detecting a false positive on our office PCs where VOIP systems are installed.
Good job anyways , a bit toooo strict but its changable

[tux1]

This looks interesting, I'll have to check this out.