Regeneration Hackers - Prevention?

Discussion in 'Plugin Development' started by Tice, Jun 23, 2014.

Thread Status:
Not open for further replies.
  1. Offline

    Tice

    Hello, Bukkit!
    I'm here today to ask you all about a certain matter that has caught my attention lately.

    This matter is regeneration hackers. I have heard that a few big server networks have figured out a way to prevent regeneration hacks. Maybe you all do not know, maybe you do, or maybe just just have an idea!

    Share your ideas, algorithms and code down below!
     
  2. Offline

    xTigerRebornx

    Tice NoCheatPlus does a good job of handling the Regeneration Hack, and from what I can tell, they simply have a check to see if they are regenerating faster then normal (with modifications due to regeneration effects and whatnot)
     
  3. Offline

    DevRosemberg

    Tice Take a look at the code of AntiCheat by Gravity.
     
  4. Offline

    Tice

    When did they add that?! I checked their page, and there was no information regarding regeneration on there.

    Sorry for the late reply, I had to go earlier.

    If that's the case, and NoCheatPlus has that... it hasn't been working all too well.

    EDIT by Moderator: merged posts, please use the edit button instead of double posting.
     
    Last edited by a moderator: Jun 9, 2016
  5. Offline

    xize

    not sure though but could be a check just be suitable enough?

    if you run a scheduler and run it per tick and iterate through all players and make a history snapshot of each player health you could probably find it really easy because when someones uses regen hacks the health healths instant rather than a regen from an golden apple regen which I believe regens per tick a halfheart, now since the normal golden apple regens are also used as status effects or potion effects you may can check if they have it or not, my 2 cents is that they don't have it.

    of course its probably not the best option, but on the other hand its a way to make it not to break at each update and to work with nms and packets:p
     
  6. Offline

    Zupsub

    Evidence?


    That'd be veeeeery laggy. I would expect the scheduler has to run max ever second (20 ticks) or even slowler.







    It's general a bad idea, to re-programm a plugin, that already exists and a group of great programmers are working on long time. Do you realy think you can do it better? (Since you're asking here, probably not.)
     
  7. Offline

    RawCode

    there is no regeneration hacks possible, health processed serverside.
     
    Zupsub likes this.
  8. Offline

    Tice

    No? Then how do the regeneration hackers do it?

    I do not have any proof, but think for yourself.

    NCP hasn't been updated for around a month, they haven't mentioned in any of the update notes that they have added it. And MCGamer have had NCP for a long time, although they have still had trouble with regeneration hackers. Recently, they invented their own system. A working system.

    Therefore, NCP's regeneration hack prevention has not been successful.

    :p
     
  9. Offline

    tibo442

  10. Offline

    RawCode

    show me client or mod or something that allows this.

    as for nocheat code - it was possible before 160th version, probably code left from that times.
     
  11. And now we start adding packet-level checking, currently based on ProtocolLib:
    https://github.com/NoCheatPlus/NoCh...heatplus/net/protocollib/FlyingFrequency.java

    The FastHeal check in NCP already does something similar by checking the duration between regeneration events. It does alert with the "new" regen hacks, though we are not sure if there may be some bug/flaw - packet level checking should kill it off.
     
  12. Offline

    Not2EXceL

    spamming update packets isn't a regen hack.
    RawCode is correct health is purely serverside.
     
  13. Offline

    JuicyDev

    Regeneration hacks are possible look up minecraft hacked clients and you'll find the majority of them offer it.

    I believe that it has been around ever since hunger was introduced (a side effect appears that the player's hunger decreasing drastically when regenerating health. It is probably the client spamming the server with packets telling the server the client is regenerating health due to full hunger. (Though I am not positive)

    If that is the case then you could listen to the health regeneration event and check if it is due to food (http://jd.bukkit.org/beta/apidocs/o...yRegainHealthEvent.RegainReason.html#SATIATED).

    Then every time a player regenerates health due to satisfied hunger, record it (purging records other than last one) alog with time. Then when the player next tries to regenerate health due to satisfied hunger check the time difference compared to standard regeneration rate and if it is faster just cancel it without recording it.
     
  14. Offline

    Necrodoom

    JuicyDev there are also a lot of clients that offer force OP, but so far all of them failed.
    I prefer to see a live sample of this, or a functionality demonstration, else you just try to block random things.

    Also, for what its worth, there was no flaming on this thread.
     
  15. Offline

    JuicyDev

    Though, it would probably just be easier to use NoCheatPlus to handle all concerns with hackers.

    Necrodoom
    I have tested a few hacked clients and they definitely work, eg. take some damage to get down to 2 hearts, lets say, make sure you have food sufficient for natural health regeneration. Activate regen hack, health regenerates rapidly to instantly depending on the client.


    It's likely a joke or a tactic to get people to download it.

    EDIT by Moderator: merged posts, please use the edit button instead of double posting.
     
    Last edited by a moderator: Jun 9, 2016
  16. Offline

    Necrodoom

    JuicyDev time to monitor packets/event then.
     
  17. Offline

    RawCode

    JuicyDev
    show me youtube video demonstration authored by you.

    at this moment you obviously trolling and recieved report for flamebaiting me.
     
  18. Offline

    fireblast709

    Magically changing server side values through the client using a nonexistent protocol, nice
     
    Traks likes this.
  19. Offline

    JuicyDev

    I do know if listening to the EntityRegainHealthEvent will show the health regen from hackers however it is almost certain that ProtocolLib and packets would work.

    I'm presently at work, however I could easily show you a video when I get home, however that will be around 5-6 hours.

    Just download a hacked client that lists regen as one of the hacks and test for yourself. Make sure that your hunger is full though, it drains very quickly with the regen hacks on.

    EDIT by Moderator: merged posts, please use the edit button instead of double posting.
     
    Last edited by a moderator: Jun 9, 2016
  20. Offline

    RawCode

    as soon as video\client download available i will post debug build of cbukkit with every "set health" invocation logged and monitored.

    if this hack actually possible this will allow to detect exact source of issue and fix it by posting commit to repo.
     
  21. Offline

    JuicyDev

    Sure, I will look for some videos where you can see this in action for now.

    Look at some hacked clients and download one that says it offers regen hacks. Then just start up you server and spawn some mobs and let them attack you (keep food with you though).

    RawCode
    fireblast709

    Just tahging you

    EDIT by Moderator: merged posts, please use the edit button instead of double posting.
     
    Last edited by a moderator: Jun 9, 2016
  22. Offline

    RawCode

    [red big letters code] video demonstration authored by you [/red big letters off]
    JuicyDev

    here facepalm jpeg goes
     
  23. Offline

    Necrodoom

    JuicyDev remove these links. Its entirely possible these links contain malious files and back doors, and you shouldn't risk unsuspecting players because of it. If you want to test hacked clients, keep it to your self, and check the client for the exploit code.
     
  24. Offline

    JuicyDev

    Necrodoom
    Sure you have a point. Though I have tested multiple clients from that website before without issues.
     
  25. RawCode I can confirm that I have tested the hack client WeepCraft before and that does include the regen hack that JuicyDev is talking about. Quickly drains your food and increases your health. I will record this and upload it to youtube for you to see


    RawCode There is the evidence you needed. Now are you able to help? I could use something like this in a project I am working on aswell.

    EDIT by Moderator: merged posts, please use the edit button instead of double posting.
     
    Last edited by a moderator: Jun 9, 2016
  26. Offline

    JuicyDev

    Video is private, anyone else getting that?
     
  27. Offline

    ZodiacTheories

  28. Offline

    RawCode

    video is private.

    code required to perform deep inspection already "implemented" and everything i need is to see video about this in order to focus on proper feature
     
  29. Offline

    ZodiacTheories

Thread Status:
Not open for further replies.

Share This Page