Looking for someone with knowledge about lua injections and how cheats work for Anti-Cheat project

Hi! I’m looking for someone who can explain exactly how cheats work and how they run events on servers thru injections and menus. I want to try to create som kind of a universal anti-cheat program but i don’t have enough knowledge about how cheats work on fiveM yet. If you have previous experience with cheats or just know how it all work please contact me, all information I can get is appriciated.

I have read some topics here about how you can secure your server by changing your event names and then check if someone is trying to call an old event but that is not what I’m trying to do.
I want to know in detail how the cheats work so that I can create something that can counter that.

Thanks for reading.

Basically everything that is in clientside cheater can see and trigger. They inject their executor inside one of the FiveM resource lua files and then execute something (lua file or your own code)
Serverside is hidden, so they don’t see any of it.
Hope that helps! :slight_smile:

Thanks for the reply, so how exactly do these executions work? Do they have a program that does it for them or do they use the console?

As far as I know, they can do it in console and in a different program.

As far as I am aware, the injector, injects into FiveM’s Executable, they can then load mod tables, like GodMode ETC, but if they choose they can dump the server grabbing all your client side code, so they would see any event handlers or any code that is not coded server side. Most anti cheat projects will just stop people from being able to trigger god mode and other cheats like giving themselves money through an external menu. (almost like the ones you’de see in GTAV:O) As far as executing your servers Event triggers, I’ve no clue on how to stop that.

Do injected scripts have any access to global variables. If it were to inject into a file with a global variable (string) called “secret”, would they be able to print that string?

If they inject into the given resource, then i think yes, so if you have some value lying around they can get it, however, all executors by standard are using isolated lua enviorments now instead of injecting into existing resources, injecting into existing resources is easily detected.