GrimAnticheat / Grim

Fully async, multithreaded, predictive, open source, 3.01 reach, 1.005 timer, 0.01% speed, 99.99% antikb, "bypassable" 1.8-1.20 anticheat.
GNU General Public License v3.0
1.1k stars 329 forks source link

Users can bypass timer when tick rate is lowered. #1418

Open Symmettry opened 7 months ago

Symmettry commented 7 months ago

Describe the bypass and how to replicate it

Step 1. tick rate of 10 Step 2. timer of 2 Step 3. bypass timer checks; you'll go at normal rate and others will be at half rate, so you're double speed.

Also something noteworthy; if I try to set tick rates of individuals using packets they can also bypass this; so potentially any sort of API for plugins which could allow setting tick rate of a player would be nice for my server (it does tick rate things)

Grim version

2.3.60

Server version

git-Purpur-2155 (MC: 1.20.4)*

Plugins

ManInMyVan commented 7 months ago

They still flag if they go over vanilla speed right?

9x00 commented 7 months ago

This does not work on the newest ver of grim i had this bug before

Symmettry commented 7 months ago

Problem is if i send tick rate packets for client side timer only, grim will not know, and therefore they can use timer to bypass it.

Axionize commented 1 day ago

Does this bypass still currently exist?

ManInMyVan commented 1 day ago

Does this bypass still currently exist?

pretty sure it does, we don't track tick rate