Fortifying Game Security: Unveiling Vulnerabilities in Valve Anti Cheat and a Novel User Mode Anti-Cheat Solution
DOI:
https://doi.org/10.58445/rars.657Keywords:
Computer Science, gaming, hackingAbstract
Video game hacking, or cheating, has emerged as a significant issue over the past decade. To tackle this problem, various video game companies have implemented anti-cheats, a method of malware analysis designed to identify and ban players using hacking software. While some companies have updated their anti-cheat software with kernel drivers to detect almost all forms of memory manipulation, others have stuck to their rudimentary anti-cheats operating in user mode. Valve, the company behind the popular game Counter-Strike: Global Offensive, is an example of the latter. The objective of this paper is to demonstrate how the game can be hacked and its memory exploited by creating a custom hack. Subsequently, I will conduct an in-depth analysis of VAC to pinpoint its vulnerabilities. I will then explain how I successfully circumvented its security measures and provide guidance on how to patch this bypass. The ultimate goal is to construct a comprehensive guide on enhancing VAC's robustness by proposing novel methods to strengthen the system.
References
Grinberg, Shiran. “API Hooking - Tales from a Hacker’s Hook Book.” Cynet, 7 Apr. 2023, www.cynet.com/attack-techniques-hands-on/api-hooking/#:~:text=This%20is%20called%20Hooking%E2%80%94the,is%20not%20always%20the%20case. Accessed 24 Oct. 2023.
Baker, John. “Understanding the Differences between Obfuscation and Encryption.” DESkey, des.co.uk/blog/difference-obfuscation-and-encryption#:~:text=Encryption%20provides%20confidentiality%20for%20sensitive,just%20more%20difficult%20to%20understand. Accessed 24 Oct. 2023.
Kotwani, Bharat. “VAC Detects a Popular CSGO Cheat, Various Users Banned in the Aftermath.” TalkEsport, 17 May 2021, www.talkesport.com/news/csgo/vac-detects-popular-csgo-cheat/. Accessed 24 Oct. 2023.
Kotwani, Bharat. “300k CSGO Hackers Banned in a Massive Vac Wave.” TalkEsport, 26 Sept. 2022, www.talkesport.com/news/csgo/csgos-free-to-play-status-has-attracted-cheats-but-valve-has-ignored-the-problem/#:~:text=According%20to%20CSGO%20numbers%2C%20the,is%20a%20really%20large%20figure.
“Counter-Strike 2 Live Player Count and Statistics (2023).” The Game Statistics Authority : ActivePlayer.Io, 28 Sept. 2023, activeplayer.io/counter-strike-global-offensive/#:~:text=There%20are%20about%201%2C063%2C668%20people,on%20all%20platform%20it%20supports.
Sercan, Sari. “What Are Rings in Operating Systems?” Baeldung on Computer Science, 11 June 2023, www.baeldung.com/cs/os-rings.
“Why Valorants Vanguard Anti-Cheat Has to Be Changed ASAP.” Reddit, www.reddit.com/r/pcgaming/comments/g2zu1c/why_valorants_vanguard_anticheat_has_to_be/.
“Root Level Anti-Cheat Is Getting out of Hand - Again.” Reddit, www.reddit.com/r/pcgaming/comments/y5jvzf/root_level_anticheat_is_getting_out_of_hand_again/.
“The View Matrix Finally Explained.” Game Development Stack Exchange, 1 Apr. 1966, gamedev.stackexchange.com/questions/178643/the-view-matrix-finally-explained#:~:text=%22The%20View%20matrix%20converts%20from,vertices%20in%20camera%2Fview%20space. Accessed 24 Oct. 2023.
Downloads
Posted
Categories
License
Copyright (c) 2023 Saqif Ayaan Sudheer

This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.
You are free to:
- Share — copy and redistribute the material in any medium or format for any purpose, even commercially.
- Adapt — remix, transform, and build upon the material for any purpose, even commercially.
- The licensor cannot revoke these freedoms as long as you follow the license terms.
Under the following terms:
- Attribution — You must give appropriate credit, provide a link to the license, and indicate if changes were made. You may do so in any reasonable manner, but not in any way that suggests the licensor endorses you or your use.
- No additional restrictions — You may not apply legal terms or technological measures that legally restrict others from doing anything the license