↓ Skip to main content

Tracking anticheat updates by pulling modules from their CDNs

··1 min

The research on tracking anticheat updates explores monitoring anticheat software such as EasyAntiCheat, BattlEye, EA Anti-Cheat and Vanguard by analyzing their Content Delivery Network (CDN) structures, download mechanisms, and module extraction techniques. By understanding how anticheats distribute and encrypt their software, researchers can gain insights into detection methods, potential vulnerabilities, and changes in protection strategies. The methodologies discussed include examining download URLs, extracting embedded files, decrypting modules, and analyzing binary structures to track and understand anticheat evolution. Why bother? vmcall’s diff of BattlEye’s shellcode updates on secret.club shows what a version comparison yields: a longer list of blacklisted timestamps, new banned module names, a swapped window title list and a dropped Cloudflare IP check.