BattleEye Script Detection

[mahatmajonny 6]

Yes i have a very extensive scripts.txt that I use. I will not distribute it however as that will render it completely worthless except for weapon classnames.

Its amazing how immature and unhelpful the server hosting community in DayZ is. There's this culture that everything has to be kept a secret. If you develop anything its for your server only. I don't know where this comes from, but its something that seems pretty unique to DayZ.

Props to a lot of you other guys for actually workign to solve this problem.

[tardis609 8]

What's AMAZING is that neither ROCKET nor BattleEye sees fit to give us a script file to prevent hacking on our servers.

It's like - oh, I don't know - they don't give a shit about us?

[matt216@email.com 22]

Ty will be using this as well

[ebianbluefox 29]

What's AMAZING is that neither ROCKET nor BattleEye sees fit to give us a script file to prevent hacking on our servers.

It's like - oh, I don't know - they don't give a shit about us?

It's in the default dayz server download.

[isoterik 7]

What's AMAZING is that neither ROCKET nor BattleEye sees fit to give us a script file to prevent hacking on our servers.

It's like - oh, I don't know - they don't give a shit about us?

its like cat and mouse, and what i can say about $able from BE, he does a lot for us, but you will never get a 100% safe game, nothing is 100% safe, you can only try to keep up with the "bad guys" and try to prevent as much as you can. and the thing with the scripts.txt is, you cant made one only for ArmA. ArmA has so many different mods and gametypes. everything uses other stuff, so it can be complicated to use an one for all solution. you have the tools given from BE to us, you just have to learn how to use them right and try to get the best out of them! bitching dont bring you nor us forward.

[disorder 344]

Hey I could probably make a small program that lets you search the log and highlight any lines that have used lines from the scripts.txt file. If more than 4 people are interested let me know, I don't want to work on something that wont be used.

Edited July 23, 2012 by disorder

[MarKeR (DayZ) 57]

Go for it mate...

[leepfrog 26]

that would be great disorder

[disorder 344]

ok i'll take a look in a bit.

[zq7 67]

This might sound stupid, but from what I gathered is that these 'hackers' are able to bypass BE (completely or just partly?) and therefor I would assume that this does not do anything since they are bypassing BE anyways, or am I missing something?

[deathcobra 5]

Nah, thats correct, doesn't apply always though. Some hacks will simply inject a script and hope for the best, the "better ones" bypass BE and won't be detected by the script.txt. But as one can see in the ban.txt, BE occasionally finds something.

[xksimon 4]

OFF TOPIC!!!!!!

after the newest update of Battleye scripts detection, the way and contents of logging commands is changed totally!!!

Right now i have no idea what's the log about. For example.

23.07.2012 19:51:10: 111 (119.xx.xx.xx:2304) 111111111111111111 - #27 if (alive player) then { player SetDamage 1;};

23.07.2012 19:51:10: 111 (119.xx.xx.xx:2304) 1111111111111111111 - #142 if (alive player) then { player SetDamage 1;};

23.07.2012 19:51:10: 111 (119.xx.xx.xx:2304) 11111111111111111 - #27 awn player_alertZombies;

sleep 0.5;

player setDamage 1;

0.1 fadeSound 0;

_id = player spawn spawn

It seems i have no way to see who is killing who / even what commands that the players is using already like the old one

[suspense 210]

OFF TOPIC!!!!!!

after the newest update of Battleye scripts detection, the way and contents of logging commands is changed totally!!!

Right now i have no idea what's the log about. For example.

It seems i have no way to see who is killing who / even what commands that the players is using already like the old one

You need to update your scripts.txt to the new format

[xksimon 4]

You need to update your scripts.txt to the new format

I did updated from Dayz server hoster FTP already

[jskibo 143]

scipts.txt got removed with the last update. With HFB there's no way to put it back in......

[suspense 210]

I did updated from Dayz server hoster FTP already

Its working fine for me.

[xksimon 4]

Its working fine for me.

could you share your txt to me in pm / email?

[disorder 344]

First version of script parser is ready, will post it in new thread..

yarp ! http://dayzmod.com/forum/index.php?/topic/42702-cheat-finder-script-parser-for-admins/

Edited July 23, 2012 by disorder

[beginner 4]

So everyone is using lastest Tonic's scripts.txt?

[Magotchi 74]

So everyone is using lastest Tonic's scripts.txt?

Many people are using the latest version of the official one that's had some massive changes in the last couple days.

[beginner 4]

Anyone know is that hack?

06.07.2012 00:44:19: Joe (173.34.32.204:2304) cbacc71fb602df6469ae1219a21e5635 - #37 ;weaponAmmo = ["PG7V"];ammoCount = 10;player addWeapon weaponClass;for [{_i=0}, {_i < count weaponAm

10.07.2012 16:31:47: Truster (91.3.231.143:2316) cff29099158e806c5001fef2d294650f - #34 = _weapons select 1;
_countr = 0;
{
_holder addweaponcargoGlobal [_x,(_objWpnQty select _countr)];

20.07.2012 01:07:17: DukeFlukem (60.242.69.162:2316) 08fb9e3aac3a56c0da92a48516ea58f3 - #14 private ["_dummy"]; _dummy = [_this,"onload"] execVM "\ca\ui\scripts\dedicatedServerInterface.sqf";
20.07.2012 01:07:17: DukeFlukem (60.242.69.162:2316) 08fb9e3aac3a56c0da92a48516ea58f3 - #98 est","_data","_action","_display","_control","_lbUsersControl","_selectedUserIndex","_selectedUser",

13.07.2012 23:41:33: supersaw (150.101.189.11:2316) 370a09d7151c20f9d3a81082ae489af6 - #40 private ["_dummy"]; _dummy = [_this,"onLBSelChanged"] execVM "\ca\ui\scripts\handleGear.sqf"; _dummy
13.07.2012 23:41:33: supersaw (150.101.189.11:2316) 370a09d7151c20f9d3a81082ae489af6 - #43 private ["_dummy"]; _dummy = [_this,"onLBSelChanged"] execVM "\ca\ui\scripts\handleGear.sqf"; _dummy
13.07.2012 23:41:33: supersaw (150.101.189.11:2316) 370a09d7151c20f9d3a81082ae489af6 - #34 "Die";
};
player allowDamage true;


player addWeapon "Loot";
player addWeapon "Flare";


r_player_

Edited July 24, 2012 by Beginner

[isoterik 7]

Anyone know is that hack?

06.07.2012 00:44:19: Joe (173.34.32.204:2304) cbacc71fb602df6469ae1219a21e5635 - #37 ;weaponAmmo = ["PG7V"];ammoCount = 10;player addWeapon weaponClass;for [{_i=0}, {_i < count weaponAm

10.07.2012 16:31:47: Truster (91.3.231.143:2316) cff29099158e806c5001fef2d294650f - #34 = _weapons select 1;
_countr = 0;
{
_holder addweaponcargoGlobal [_x,(_objWpnQty select _countr)];

20.07.2012 01:07:17: DukeFlukem (60.242.69.162:2316) 08fb9e3aac3a56c0da92a48516ea58f3 - #14 private ["_dummy"]; _dummy = [_this,"onload"] execVM "\ca\ui\scripts\dedicatedServerInterface.sqf";
20.07.2012 01:07:17: DukeFlukem (60.242.69.162:2316) 08fb9e3aac3a56c0da92a48516ea58f3 - #98 est","_data","_action","_display","_control","_lbUsersControl","_selectedUserIndex","_selectedUser",

13.07.2012 23:41:33: supersaw (150.101.189.11:2316) 370a09d7151c20f9d3a81082ae489af6 - #40 private ["_dummy"]; _dummy = [_this,"onLBSelChanged"] execVM "\ca\ui\scripts\handleGear.sqf"; _dummy
13.07.2012 23:41:33: supersaw (150.101.189.11:2316) 370a09d7151c20f9d3a81082ae489af6 - #43 private ["_dummy"]; _dummy = [_this,"onLBSelChanged"] execVM "\ca\ui\scripts\handleGear.sqf"; _dummy
13.07.2012 23:41:33: supersaw (150.101.189.11:2316) 370a09d7151c20f9d3a81082ae489af6 - #34 "Die";
};
player allowDamage true;


player addWeapon "Loot";
player addWeapon "Flare";


r_player_

the 1st code quote: ["PG7V"] is ammunition for the RPG7V. i never saw one in dayz so far only the M136.

the 2nd code quote: nothing to care about

the 3rd code quote: when you press ingame SHIFT+P you get kicked and that comes to the logs

the 4th code quote: when you press G to view your inventory that is written into the logs and the 3 other strings are normal too.

im testing currently my new scripts.txt and such entrys execpt the ammo and the SHIFT+P kick entry are history then, much better to look at the logs ;)

[beginner 4]

the 1st code quote: ["PG7V"] is ammunition for the RPG7V. i never saw one in dayz so far only the M136.

the 2nd code quote: nothing to care about

the 3rd code quote: when you press ingame SHIFT+P you get kicked and that comes to the logs

the 4th code quote: when you press G to view your inventory that is written into the logs and the 3 other strings are normal too.

im testing currently my new scripts.txt and such entrys execpt the ammo and the SHIFT+P kick entry are history then, much better to look at the logs ;)

Thank you. BTW new patch with new BattlEye and new scripts.txt by Tonic doesn't help. Hackers was again on our server (multi teleporting, spawning tanks/jest), I've stopped the server and open scipts.log - there was nothing about it. Looks like hacks are bypasses BE.

[isoterik 7]

Thank you. BTW new patch with new BattlEye and new scripts.txt by Tonic doesn't help. Hackers was again on our server (multi teleporting, spawning tanks/jest), I've stopped the server and open scipts.log - there was nothing about it. Looks like hacks are bypasses BE.

the smart ones use bypass, someone released just yesterday a "privat bypass" but i think that will get detected soon...