Next Level Cheating and Leveling Up Mitigations
summary
Describes two concrete attacks: a kernel-based cheat that uses kernel MDL mapping to expose game pages to a protected user process (demo maps Notepad memory and reads/writes with native speed), and two BattleEye flaws — a malformed packet that triggers a 4GB heap copy crash (trivial DoS, potential heap overwrite) and a remote-console timing side channel that recovers a 24‑char password in about 17 minute timing crack (proof‑of‑concept Python demo); vendor patches one bug, the timing fix is pending.
AI-written summary · about
chapters (17)
- 0:00Intro
- 0:57The Money Aspect
- 2:03What is Cheating?
- 2:58A History of Cheating
- 4:08Common Cheating Vectors
- 8:43The Current State of Cheating in Games
- 12:09Current State of Anti-Cheat
- 17:10The Future of Cheating
- 21:24Dual mapping snippet
- 27:11Attacking Anti-Cheat Software
- 28:52BE Packet structure
- 29:36Sign extension
- 32:22Exploitability
- 34:30BattlEye console timing attack
- 35:33BattlEye timing attack demo
- 38:36The Future of Anti-Cheat
- 40:39Conclusion
related talks
48mNext Level Cheating and Leveling Up Mitigations
41mUnveiling the Underground World of Anti-Cheats
44mVideo Game Security
38mBypassing Anti-Cheats & Hacking Competitive Games
29mGame Console Security and Implications on General Computing
51mExploiting Hardware Glitches And Side Channels In Perfect Software
55mHow hacking works
44mDeep Analysis of Exploitable Linux Kernel Vulnerabilities 2017-2019