Home › Forum › MultiPlayer Game Hacks & Cheats › Steam Games Hacks & Cheats › Counter-Strike 2 Hacks › PowerShell Multi-Hack (Auto-Updating)
PowerShell Multi-Hack (Auto-Updating)
Originally Posted by s123456789
Doubt you'll get a clear answer on such a broad question.
Especially because VAC does not leak their way of detection.
So the people that actually do know how it exactly works will most likely not explain a lot of details regarding this matter.
Especially because VAC does not leak their way of detection.
So the people that actually do know how it exactly works will most likely not explain a lot of details regarding this matter.
VAC Wiki
Ring 3 detections:
"It uses heuristics to detect possible cheats" - Means checking for open RPM/WPM handles
"compared to a database of banned applications" - They have a nice pack of sigs that they scan your program's code for
Why can't they detect it?
Most of the cheats here are native C++ or JIT compiled C#
Which means that they can just download it, get a few bytes from the code and scan the "suspicious" process's .text segment for it (in the PolyHack's case this part differs drastically rendering this method ineffective)
In case of non-compiled interpreted languages, the .text segment only consists of legit code and the actual script is accessed from the .data segment
Again.. :/
.
