Heuristic Bypass | AimBot

[OWERLORD01]

Issue description

AAC KillAura detection is pretty much unbypassable! But pretty much every aimbot is bypassing AAC for very long time! Heuristic is detecting aimbots in a 30 seconds on sensitivity 1 Its not detecting aimbots on sensitivity 2... (only some bad aimbots) But I cant set it to sensitivity 1 because it still have so many false positives :( Some AntiCheats like Reflex 10 and old Spartan build 115 (new builds are very bad) are able to detect aimbots, so i hop you'll fix it too!

I know its very hard to detect it, but still it gives hacker an unfair advantage! I hope you'll make heuristic check better! Thanks!

Core information

Server version: TacoSpigot 1.11.2

AAC version: 3.1.1

[Janmm14]

If you read on you'll see

Some good "smooth aim" or "triggerbot" cheats are undetectable (heuristics are trying its best)

Current version of Reflex is known to have false positives at many cases, see spigotmc resource discussion. Additionally I guess that some of those aimbots are not correctly handling Reflex' entity stuff.

If anyone wants to create a "smooth-aim" or aimbot for spartan, he will be able to, even for build 115.

Additionally AAC heuristics at sensitivity 1 are not tested in a wide range and could possibly also include false positives.

AAC's heuristic detections are a little delayed btw.

It would be additionally great to have some example clients or aimbot code for internal testing and reproducing, the issue you created is pretty wide-ranged.

Due to AAC being the most popular anticheat on spigotmc, its most popular to bypasses for AAC however.

[OWERLORD01]

If you read on you'll see Some good "smooth aim" or "triggerbot" cheats are undetectable (heuristics are trying its best) Current version of Reflex is known to have false positives at many cases, see spigotmc resource discussion. Additionally I guess that some of those aimbots are not correctly handling Reflex' entity stuff. If anyone wants to create a "smooth-aim" or aimbot for spartan, he will be able to, even for build 115. Additionally AAC heuristics at sensitivity 1 are not tested in a wide range and could possibly also include false positives. AAC's heuristic detections are a little delayed btw. It would be additionally great to have some example clients or aimbot code for internal testing and reproducing, the issue you created is pretty wide-ranged. Due to AAC being the most popular anticheat on spigotmc, its most popular to bypasses for AAC however.

This is just normal aimbot, its not specialy designed for AAC.... And im not talking about reflex 9.9.. Im talking about b10... on test.reflex.rip, and it dont have any fp-s

Triggerbot and autoclicker and some versions of smooth aim are undetectible, but its possible to detect aimbot, aac is not even detecting impact aimbot -_- withour jitterclick or anything else...

And aac heuristic are detecting hacks only when player die?

Tested with Impact - sometimes it can be detected on this client (aimbot without jitterclick) Wurst - not detected Intel - not detected

And some better clients: LiquidBounce - not detected AlphaCentauri - not detected Flux - detected

[Janmm14]

konsolas personally has alpha centauri and as far as I know its killaura is getting detected.

AAC heuristics do detect players without other players dying usually. AAC heutistics are also alittle delayed in general.

An update of some heuristics might be possibly needed, maybe some new heuristics need to be created, but that process takes time. So you can possibly go with reflex 10 if its gonns get released in 3 years (:P). (Still AAC's Killaura check (not heuristics) should be catching the wurst killaura.)

I don't know how sensitivity 1 & 2 behave after the 3.1 0 update in terms of false positives, still I would like to know the sensitivity you tested with.

[OWERLORD01]

konsolas personally has alpha centauri and as far as I know its killaura is getting detected.

Im not talking about alpha centauris killaura, im talking abount aimbot! Its not geting detected (only up to VL 15)

I don't know how sensitivity 1 & 2 behave after the 3.1.0 update in terms of false positives, still I would like to know the sensitivity you tested with.

Flux, Impact, Wurst, Intel and pretty much every client gets detected on Sensitivity 1... But Sensitivity 1 have so many false positives! I cant use it... When i turn it to sensitivity 2, only sometimes aimbot gets detected...

I personally use sensitivity 2... It dont have false positives

An update of some heuristics might be possibly needed, maybe some new heuristics need to be created, but that process takes time. So you can possibly go with reflex 10 if its gonns get released in 3 years (:P). (Still AAC's Killaura check (not heuristics) should be catching the wurst killaura.)

And i'll never use reflex, AAC is still my favourite AntiCheat :P And the biggest problem is that @konsolas doesn't have much time for AAC :( What is he doing whole day? Why is he updating AAC once a month?

[Eyremba]

AAC KillAura detection is pretty much unbypassable!

Um... dude? Ever watched videos from "Haze" on YouTube....? He has a few clients which bypass the Killaura checks of AAC completely. Also, he has a new fly bypass for AAC.

But pretty much every aimbot is bypassing AAC for very long time!

Real (Smooth-)Aimbots will EVER by undetectable, that's why you can't do anything against it. But who cares? SmoothAimbots only give you a light advantage. With SmoothAimbot, I can raise my K/D of 3 to a K/D of 7 to 8.... yes that's slightly higher, but it is nothing compared to a good Killaura.

And i'll never use reflex, AAC is still my favourite AntiCheat :P

Then wait until the full version of Reflex 10 will be released. :P The detection rates are even better than the detection rates of AAC, but with less false-positives! :P

[OWERLORD01]

AAC KillAura detection is pretty much unbypassable! Um... dude? Ever watched videos from "Haze" on YouTube....? He has a few clients which bypass the Killaura checks of AAC completely. Also, he has a new fly bypass for AAC.

But pretty much every aimbot is bypassing AAC for very long time! Real (Smooth-)Aimbots will EVER by undetectable, that's why you can't do anything against it. But who cares? SmoothAimbots only give you a light advantage. With SmoothAimbot, I can raise my K/D of 3 to a K/D of 7 to 8.... yes that's slightly higher, but it is nothing compared to a good Killaura.

And i'll never use reflex, AAC is still my favourite AntiCheat :P Then wait until the full version of Reflex 10 will be released. :P The detection rates are even better than the detection rates of AAC, but with less false-positives! :P

AAC is good for me :P Im not planing to buy it for 6$ Its not even blocking movement hacks

AAC fly/aura cant be bypassed if you know how to configure it GommeHD's configs are not detecting every aura/fly because they dont want to get any player false banned... So GommeHDs Aura detection is very slow..

Also, he has a new fly bypass for AAC.

Fly bypass can be fixed with lower treashold or with this simple aac addon https://www.spigotmc.org/resources/aac-antifly-advancedanticheat-addiation.38573/

He has a few clients which bypass the Killaura checks of AAC completely.

Aura bypass is patched https://www.spigotmc.org/resources/6442/update?update=153681

[Eyremba]

AAC is good for me :P Im not planing to buy it for 6$ Its not even blocking movement hacks

Movement hacks are detected in the final release of Reflex-v10

AAC fly/aura cant be bypassed if you know how to configure it

The cheats of Haze also work on the test server of konsolas, and I think konsolas knows how to configure it....

GommeHD's configs are not detecting every aura/fly because they dont want to get any player false banned... So GommeHDs Aura detection very slow..

They only set the ban thresholds low, but the violation levels and the blocking should work like normal, but it doesn't....

Fly bypass can be fixed with lower treashold or with this simple aac addon

Nope, his fly exploit is not fixed with this addition.

[OWERLORD01]

Movement hacks are detected in the final release of Reflex-v10

only Scaffold and Tower... Look... @MeGysssTaa said:

Anything notable? Actually, the entire update is going to be notable for everyone. Reflex 10.0 uses completely different ways to detect Killaura/Aimbot and AntiKnockback/SmallKnockback hacks, and it even got something new, which no any other plugins seem to have in a proper way - a Scaffold/Tower check.

The cheats of Haze also work on the test server of konsolas, and I think konsolas knows how to configure it....

He know, but on his test-server he's using default AAC config...

They only set the ban thresholds low, but the violation levels and the blocking should work like normal, but it doesn't....

If ban threshold is low, aac is not blocking hacks normaly, for example if fly treashold is 0.015 it will detect hacks good, but if fly treashold is 0.00999 (i personally use it) it'll detect every fly hack!

Nope, his fly exploit is not fixed with this addition.

Yes it is... How do you know that? GommeHD haven't got this addon :P Do you want to come to my test server to test it?

And please stop spamming this thread... You are not @geNAZt or @Janmm14 or @Photon-GitHub or even @konsolas so you cant help me.... If you don't like AAC, please don't use it

[Janmm14]

What is he doing whole day? Why is he updating AAC once a month?

School stuff, non-pc-stuff, mineplex-stuff, other stuff... Additionally he moved house recetly, so some things might need to be done in the new house. Also updates were a little more often recently.

Um... dude? Ever watched videos from "Haze" on YouTube....? He has a few clients which bypass the Killaura checks of AAC completely.

Haze clients are sometimes detected by heuristics.

Also, he has a new fly bypass for AAC.

AAC 3.1.1 has the 3.1.0 fly patched.

Fly bypass can be fixed with lower treashold or with this simple aac addon https://www.spigotmc.org/resources/aac-antifly-advancedanticheat-addiation.38573/

That just fixes the AAC 3.0.5 fly, which is also fixed in 3.1.0. The 3.0.5 fly can't be patched with config changes. And the 3.1.0 fly is very very likely not patched by that.

AAC fly/aura cant be bypassed if you know how to configure it GommeHD's configs are not detecting every aura/fly because they dont want to get any player false banned... So GommeHDs Aura detection very slow..

True for aura, wrong for fly. Fly is not automatically banning, but fly thresholds are on the recommended default value.

for example if fly treashold is 0.015 it will detect hacks good, but if fly treashold is 0.00999 (i personally use it) it'll detect every fly hack!

Shouldn't make any notable difference, just step cheats might be blocked a little better by that, but also not completely I guess.

Nope, his fly exploit is not fixed with this addition.

Yes it is... How do you know that? GommeHD haven't got this addon :P Do you want to come to my test server to test it?

Just talked above already about it. That addon is patching he 3.0.5 fly (patched in 3.1.0), but not the 3.1.0 fly (patched in 3.1.1).

[konsolas]

I'm just going to close this due to insufficient information.

AAC 3.1.4 will also be receiving a major heuristics change, so stay tuned for that.

[OWERLORD01]

OMG! Thanks for update <3 @Konsolas