Method Not Found Easy Anti Cheat Server Hydra

23rd June 2021, 08:06 AM

The "Epic Online Services SDK" now has an Anti-Cheat module (= EAC) which allows developers to integrate Easy Anti Cheat into a game.

Quote:

You can use the Anti-Cheat interfaces (also known as Easy Anti-Cheat) to help reduce cheating in online multiplayer play. They provide tools to start your game client in an anti-cheat protected mode which can be validated by a game server or another game client. These interfaces are not digital rights management (DRM) or code obfuscation tools and are not useful for purely offline play.

The anti-cheat interfaces provide two kinds of protection:

Cheat prevention to passively prevent common cheating techniques such as reading and writing the game process memory using straightforward methods.

Cheat detection to identify accounts using more specialized methods to manipulate the game so that you can then apply sanctions to them.

I am not sure if I'm allowed to link to it here, but you can find it by googling for "Epic Online Services SDK". You need an Epic Games "Developer account" to download it.

23rd June 2021, 08:12 AM

Thanks for the information.
I'll check this out.

Envoy� de mon JSN-L21 en utilisant Tapatalk

23rd June 2021, 08:43 AM

Quote:

Originally Posted by freakyy View Post

The "Epic Online Services SDK" now has an Anti-Cheat module (= EAC) which allows developers to integrate Easy Anti Cheat into a game.

I am not sure if I'm allowed to link to it here, but you can find it by googling for "Epic Online Services SDK". You need an Epic Games "Developer account" to download it.

Pretty much means you can create your own game, and develop Hacks for it while training to reverse your game and bypass a shitty version of EAC on the way. I might put a game out and advertise it on here if they offer unbanning people that were EAC banned.

If neither of that exists, non-permanent bans and unbans, this can be used only in an inpractical way. Or you dev a Spoofer too in the meantime. Still good news for sure. This will cause a lot of indie games to include EAC, so you rather jump on this train while possible. As from this point on it only gets harder.

24th June 2021, 07:01 AM

Quote:

Originally Posted by D e f a u l t O View Post

~snip~

just email them and ask to test it on your "game". i bet they'll let you

24th June 2021, 08:22 AM

Quote:

Originally Posted by pinefin View Post

just email them and ask to test it on your "game". i bet they'll let you

Overcomplicated.

24th June 2021, 04:21 PM

Quote:

Originally Posted by freakyy View Post

I am not sure if I'm allowed to link to it here, but you can find it by googling for "Epic Online Services SDK". You need an Epic Games "Developer account" to download it.

You are allowed to link it.
If you wouldn't, you wouldn't have been allowed to say "google for xyz" either, though.

24th June 2021, 08:44 PM

Quote:

Originally Posted by freakyy View Post

I am not sure if I'm allowed to link to it here, but you can find it by googling for "Epic Online Services SDK". You need an Epic Games "Developer account" to download it.

Which takes 1 minute to make.

25th June 2021, 08:53 AM

Quote:

Originally Posted by Teoph View Post

Has anyone looked at their network encryption? They provide functions that game developers can use to encrypt/decrypt packets.
There seem to be an initial key that is static and hardcoded in the binary. There are few posts on this forum which are also talking of this static key, which is apparently later changed to a different key (not sure how, and if it's done in a safe way).
It doesn't seem to me like this system is very secure in any case, as the packets at the start of the connection seem encrypted with this static key. If I'm a game developer and calling that function to encrypt a packet, I would expect it to actually be secure, even for the first few packets.

This is only the case with the untrusted game server architecture, in p2p mode I have no idea how it functions.

In general you can decrypt the first few game packets, and even after the second phase key is set there is a window (iirc 30 sec) where you can send packets encrypted with the hardcoded key and the game server will recognise and decrypt them. Depends on the game and the rest of the networking if this is actually important, in some games I have seen it's abusable because the first thing they do is transmit authentication information which you can tamper with. Ideally EAC should expose an IsReady API and the only packet transmissions is EAC packets until that returns true, and then the game's welcome handshake can begin under mandatory stage 2 encryption.

25th June 2021, 03:25 PM

Quote:

Originally Posted by R00ted View Post

In general you can decrypt the first few game packets, and even after the second phase key is set there is a window (iirc 30 sec) where you can send packets encrypted with the hardcoded key and the game server will recognise and decrypt them. Depends on the game and the rest of the networking if this is actually important, in some games I have seen it's abusable because the first thing they do is transmit authentication information which you can tamper with. Ideally EAC should expose an IsReady API and the only packet transmissions is EAC packets until that returns true, and then the game's welcome handshake can begin under mandatory stage 2 encryption.

Do you know how they are generating/transmitting the second key? I've been thinking it could have be RSA between the game client/server to transmit it, although the SDK doesn't ask the game developers to generate any sort of keys, so that's weird.

25th June 2021, 04:44 PM

Quote:

Originally Posted by Teoph View Post

Do you know how they are generating/transmitting the second key? I've been thinking it could have be RSA between the game client/server to transmit it, although the SDK doesn't ask the game developers to generate any sort of keys, so that's weird.

Hydra is the name of the communication channel between the EAC client and the EAC backend.

Ceberus is the name of the communication channel between the EAC game server and the EAC backend.

Hydra has two modes of operation, one where it uses direct HTTP requests to the EAC backend, not very common and a little insecure. The other is where it transmits messages to the backend using the game server as a proxy - this is the more common and more secure version. Cerberus is initialised from the start, and then hydra begins, and once both are ready, the EAC backend transmits a random key via both and the second stage encryption can begin. If the EAC backend goes down or the game server cannot connect to it, then encryption never progresses. Hydra is fully cryptographically secure, there is no way to MITM/sniff it.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
[Help] ARK SE EOS/HAXBOT DISCORD BOTS?	UnknownDog1	Other FPS Games	0	1st June 2020 06:35 PM
[Question] [External Visibility] Which files contains detailed information about static props?	Apokrif	Counterstrike Global Offensive	2	30th June 2017 09:43 PM
[Help] Reversing minesweeper - knowing if tile contains a mine	acastree	General Programming and Reversing	4	26th February 2017 08:52 PM
[Release] No Grass Public (Contains full source)	UKHOPPA	DayZ SA	35	23rd November 2014 09:15 PM
Apple denies that iTunes contains spyware	monkey6666	Off Topic	0	14th January 2006 10:51 AM

Dillard Whave1961

Method Not Found Easy Anti Cheat Server Hydra

Post a Comment for "Method Not Found Easy Anti Cheat Server Hydra"