How to intercept a function call or "destroy" a function

[Heeeere's johnny! 51]

Hello everyone,

as there are some hacker / script-kiddie scripts out there annoying players and admins of our Altis Life Server among others, I'm curious if it is possible to intercept a function call/spawn.

One of the players on my server gave me a commonly used script (hack), which I had experienced many times already and which I'm not going to post here. It's nothing more than a very big SQF file which according to the readme file should be injected by a simple "execVM" command.

As I was analizing the file, I was wondering if it was possible to intercept a function call or compilation by going by a part of the function name, so that it could not be called or would not even be compiled if it does not fit certain conventions. Because every variable and function within that hacking SQF has the same (pretty unique) prefix.

If that should not be possible due to limitations of SQF, is it somehow possible to "destroy" specific functions or variables other than a continuous loop of

functionName = nil;

Best would be here too, if that was possible by a function name part.

I'd be very glad to read some ideas. Please share your mind!

Best regards,

waltenberg

Edited June 20, 2014 by waltenberg

[mariodu62 5]

use battleye .

[Belbo 462]

use battleye .

If you can't answer the question, you shouldn't be writing anything.

But waltenberg should take a look here:

http://www.armaholic.com/forums.php?m=posts&q=1478

or here:

http://forums.bistudio.com/showthread.php?92124-Exit-from-SQF

or here:

http://forums.bistudio.com/showthread.php?126155-help-with-terminating-sqf

[lappihuan 178]

Check this out. ;)

[k0rd 3]

If you can't answer the question, you shouldn't be writing anything.

But waltenberg should take a look here:

http://www.armaholic.com/forums.php?m=posts&q=1478

or here:

http://forums.bistudio.com/showthread.php?92124-Exit-from-SQF

or here:

http://forums.bistudio.com/showthread.php?126155-help-with-terminating-sqf

"use battleeye" is WAY more helpful than the links you posted.

[Belbo 462]

"use battleeye" is WAY more helpful than the links you posted.

But it's certainly not an answer to the question. Of course battleeye is supposed to be running nonetheless. :)

[k0rd 3]

But it's certainly not an answer to the question. Of course battleeye is supposed to be running nonetheless. :)

yes. they should have said "use battleye filters"

[Heeeere's johnny! 51]

use battleye .

"use battleeye" is WAY more helpful than the links you posted.

Well, guess what, BattlEye is OF COURSE running on the server and is required for every client to join. But as we all (should) know, BattlEye is not even close to being a good anti cheat engine (at least not for ArmA) as everyone, especially who played DayZ Mod, should know.

And once, that wall is breached and a script is injected, which is seemingly easy, there's absolutely everything that can be done!

yes. they should have said "use battleye filters"

What do you mean by "BattlEye filters"? I have dealt with BattlEye ScriptRestrictions and such in DayZ Mod, but could you please give a hint or explanation on what "BattlEye filters" means? I'd be glad!

Regards,

waltenberg

[lappihuan 178]

Check this out. ;)

as i said :)

[k0rd 3]

Well, guess what, BattlEye is OF COURSE running on the server and is required for every client to join. But as we all (should) know, BattlEye is not even close to being a good anti cheat engine (at least not for ArmA) as everyone, especially who played DayZ Mod, should know.

And once, that wall is breached and a script is injected, which is seemingly easy, there's absolutely everything that can be done!

What do you mean by "BattlEye filters"? I have dealt with BattlEye ScriptRestrictions and such in DayZ Mod, but could you please give a hint or explanation on what "BattlEye filters" means? I'd be glad!

Regards,

waltenberg

yeah - you can configure battleye to kick or ban if someone runs a script :)

http://forums.bistudio.com/showthread.php?159295-Battleye-is-here-%28Quick-tutorial%29