To try everything Brilliant has to offer-free-for a full 30 days, visit brilliant.org/cazz/. The first 200 of you will get 20% off Brilliant’s annual premium subscription.

I think it could've been worth mentioning the security and privacy concerns of giving ring 0 security clearance to both cheats and anti-cheats and why some people are against it

This channel is very underrated, this video is edited really nicely!

how do I bypass the divorce papers?

I really don't like cheating in multiplayer game but the video was very well done and informative it was a pleasant watch :) +1 sub

Wow. This arms race is really interesting and impressive. I had never heard of using DMA to cheat at games before. I suppose the next step and the comparably powerful sledgehammer anti-cheat techniques would be statistical detection methods running on the server, e.g. looking for mouse movement data indicative of an aimbot, and stronger isolation of game state data to the server, e.g. in the strongest case the client could send raw inputs and only receive raw video and audio data so that there isn't even game state data for hacks to look at unless they start using AI methods. But DMA-based cheats for fast-paced real-time games that are sufficiently subtle, like ESP hacks on a second computer, seem almost impossible to stop (detecting the DMA device? code and data obfuscation?) unless you implement your own "hardware anti-cheat", e.g. restricting the player's hardware, as with a console, or surveillance of the player, as at a tournament. In our coming cyberpunk dystopian future, where Valve is monitoring every gamer with in-home cameras 24/7, we'll then have to start using cyborg brain implants and gene-editing to cheat and then it'll become a philosophical issue about what even is "cheating".

Compiler optimization is something you can usually turn off or restrict.

As a Software Developer, it's nice to learn some "Ethical" hacking 😊

Next generation cheats: Machine learning models that automatically aim and fire using the game’s video output

btw if you dont have pci, direct memory access is supported through the LPC and ESPI standards and which can be accessedf with TPM and DEBUG headers found on the majority of motherboards

Also for hardware cheats you can usually run it all on a pi within the computer plugged into pcie, then you can emulate anything from anywhere like a kvm if it's network attached (Just need to spoof as another device to get around hardware id detection)

Never subscribed so fast in my life. Excellent visuals, presentation and quality! Keep it up mate!

You can use an old version of a compiler or use the -g/-O0/-Wno-unused-function/__attribute__((used)) flag on the compiler to not eliminate unused functions to change the signature.

Very good video! Concise and easy to understand.

I think vaguard has fixed this, but previously, I experimented with running a passthrough VM on linux with windows + hyperv enabled (which made valorant start), where i then could attach a pci device from the vm manager which I then could use for DMA on linux. This effectively makes a hardware cheat without any extra hardware :)

Very informative, as always

It's a huge shame there's such intense motivation to keep the best cheats and anti-cheats closed source. These techniques would be really interesting to study.

Thank you so much. You explain things so well!

i'm really want to see a video about DMA, it looks cool !

that DMA example reminds of Radar hack for PubG, even that got detected and thousands got banned, but it lasted a few years I think.

Wow I’m learning about operating systems right now, and didn’t really think of cheating as an application of it. It’s so cool seeing how brilliantly hackers can bypass the designs around OSes and video game anti cheats!

I wonder if a kernel driver could be used to bypass something like the respondus lockdown browser

Nicely put

Very informative!

Thanks for the tutorial.

you can disable compiler optimization so that it will keep the junk

Now I actually understand. Thanks!

I am against cheats in competition games, however this topic is pretty interesting to learn about! Thanks!

My cheat runs in System Management Mode (also called Ring -2) with a simple protocol for peeking/poking memory, using a slightly modified BIOS, so to say a BIOS rootkit with a C2. I only patched the original SMM routine to check a memory region for commands and added said region to the ACPI description, to ensure safe access. That way I can have full read/write access on the complete physical memory address range. (This is a joke, but it should work. However your PC could catch fire, if stuff misbehaves in SMM)

Does this mean that an anti-cheat can't detected altered memory from the software/hardware if the initial methods got by passed? In theory the AC doesn't check for memory changed values or any kind of sutff, only trys to prevent what gives you acess to change them?

Well this video was 100x better than I was expecting from my recommendations!

bro, ur channel is a gem!

the way you simplify everything is very impressive. I was into making cheats years ago and your series has totally refreshed my memory after not doing it for years. keep it up!

If you could elaborate more on DMA, and recommend good hardware for beginners

I believe there are ways to work around compiler optimizations, even if you can change the signature a little bit you will be able to trick the anti-cheat. At least for a portion of time, then you will be banned eventually.

grats on the 100k btw

i love how you explained just the right amount about dma without saying too much lol

Very nice video ! And where can we get this DMA device ?

Another interesting way to get cheats running is by running Windows as a virtual machine using something like Linux. The Linux instance can then modify memory without the Windows VM knowing.

great video as always! really like your content :D

Great video 👍

Hey I love the video and I have a question though on if this could work to bypass anti while playing on max Os? And if so how would I go about that.

Is there a way that a anti-cheat could detect you running the cheats on a different system and streaming the inputs to your other device like a wireless keyboard does?

Cpngrats on 100k cazz

if you specify for your compiler to not optimize code, junk code should still work though?

one question about DMA do u really need a second pc to makeit work? or u can make one witha programable board? something like an arduino board for example

The last method is really dangerous iam loving it

how can you make a panel where you can generate keys for others to put in a panel?

0:32, I got a youtube ad about this, skip, then you advertising it. They sure spent a lot of money on advertising...

congrats on 100k :)

So as Vanguard it has kernel anticheat. Powerfull as said in video.

My héroes of newerth has been linked to my computer and every tine i try to play with a new account it says there is already an accounted linked and cannot play with a new one. Is there a way to bypass this?

"that a software anticheat cannot detect" - in 2023 there were 6 dma ban waves on faceit and 3 on vanguard tho haha

I actually pretty curious about a great AC like vanguard from Valorant. Is vanguard really can't detect DMA (at least for now)?

4:12 My phone vibrated with haptic feedback here when the Notes program popped up on screen. How exactly did that happen??? I’ve never seen this happen in a video before. Edit. It happens every new chapter. Is this a bug? Or intended?

"Hardware cheats" are absolutely genius

He slight question, wouldn't you be able to inject the anticheat with a dll, so that it doesn't find your program

7:33 most DMA attack hardware actually uses PCIe :D

I honestly have never head of actual hardware based cheats when it comes to a PC and I'm extremely curious to know more about that subject if you or anyone else could point me in the right direction.

Here i was, thinking "how do anti-cheat allows you to bypass work" Me the entire video: "OK, but how do i work less on cheats by using this" Now i can't stop laughing.

DMA with Virtual Machines too!

We just went over something like this in a digital forensics course, covering the difference between kernal/user rootkits. Root level _anything_ is honestly terrifying, and the fact I have more than one on my PC is... Ugh. Why do we live in the world we live in...

There is currently a cheat going around where people have camera set up to their screen and has an AI recognized and shoot people for them by controlling there mouse

Boot-kits are also a great idea. Boot-kits load before the operating system itself, so you can bypass the anti-cheat, because the cheat is loaded before the anti-cheat itself.

Since the downfall of RaptorDMA, what is another good firmware option?

A simpler version of hardware cheat is virtual machine cheats. The game runs in a virtual machine guest and the host OS would be able to read/write to any memory of the guest OS, without the guest ever knowing. This does not require two computers and special hardwares like hardware hack does, but some game does detect if it's running within a virtual machine so the challenge becomes how to hide that.

Very interesting! I always thought of anti-cheat to be sort of like an arms race, there's really no way for an AC to work 100% of the time as long users have physical access to their machine. Maybe we'll see things like cloud gaming take over highly competitive games for this reason, assuming cloud game becomes viable to play with low latency, etc.

3:49 Someone forgot to remove the Airbrush on the highlighted parts ay?

Very interesting!

So how to secure a game from hooking common winapi functions from usermode and kernel mode ??

Could you just make an external cheat that detects when an enemy head is on screen and moves your mouse on to it? That way the cheat is not in the game it’s self?

Nice of youtube giving this for a recommendation, its nice to know how some hacks work, like those GTA mod hacks

makes me wonder ..could one use a VM to emulate a second pc to communicate to a DMA device (or DMA driver) and bypass kernel AC on the same system?

If you want to stop cheaters, run checks on the data that the server receives instead of messing around with the kernel that the client is running on. When a kernel anticheat is bypassed, it's fully bypassed, meaning anything goes. If you've got a server-side anticheat that checks packets, you may not be able to fully disable or bypass it as easily as you can with a kernel anticheat. An anticheat on the kernel gives the cheater a lot of control, making the discovery of bypasses quicker, and you don't even have to get any accounts banned. If you have a server anticheat, you may need access to many accounts. This is a very quick way to stop blatant cheaters in a bought game.

Can you please make a video of basic making of ring 0 kernel driver for bypassing anti cheats

what font do you use?

Hey i am going to pick a university major and i cant decide between CE / CS what did you study personaly and well not directly but in which can i learn more of this subject (ethucal hacking mostly games)

DBVM is great you can just cloak the page of memory that you want to make your modifications in and executing while the game still reads the original code 😅

the DMA is scary dangerous , how many bad things can be done with it i only imagine

Question, does cheat developer target the anti-cheat itself, like patching the anti-cheat so it no longer work, or make it think that everything is working as intended. Wouldn't it be easier to cheat now that there's basically no anti-cheat.

Sir if you could answer me this question YOU WOULD HELP ME ALOT. I know 0 about programming so.. Please help me. There is a game (heroes of newerth 2024) that somehow links the first account i used in my computer TO my computer. It wont let me open other accounts. How can the do that? Is there a way to bypass that so that i can play with other accounts? When i try i get a message saying your computer is already linked to xxxx account so you cant play with another account.

such a good video : )

Clicked on this and didnt expect to hear a saffa, lekker vid bru

Is it possible by any chance that you show how to reverse engineering a save for console like ps4 or Xbox Thank you.

The moment you explained DMA cheats my brain played the Giga Chad Music. XD

you can get verified now (congrats on 100k). GO FOR IT!

Interesting to see how cheats work I would never ever use cheats in multiplayer anyways though ^^

4:41 in practice it also works. When adding junk code people always turn optimization off, the only time I've seen someone get banned with a pasted cheat with junk code is when a feature got detected or the cheat was too retarded to set valid viewangles There are even programs that add junk code to everything with 1 click - I also think there are ways to detect DMA tho? - What about intercepting network packets for an ESP? I wonder how difficult or possible that is

Another video about DMA would be really interesting.

I like these video bot because I want to make game hacks but because I actually learn a lot about how things work maybe someday you could explain some more general stuff

how do you know if an anticheat is user mode or kernel?

amazing vid

I’m almost certain that some top streamers use the DMA approach

i wanna see some info on reverse ingeneering

how hard would it be to generate a faceit cheat? Is it very difficult? Just wondering.. thanks 👍🏼

Some great info! Any chance you could make a video where you show a basic setup for creating cheats? Like, showing how to setup the environment to create our own Kernel scripts, manipulate memory, etc.

You can tell most compilers to do not optamilize?

what is the best way to get around a HW ban?

yo cazz, im wondering if you can showcase how to make a shooting aimbot for a basketball game, kinda like aimbot but its gonna need an arc and the target position and your character position, maybe for a game like hoopz in roblox or some other basketball game. thanks man

The most effective anti-cheat is loving parents