SS Guide

This SS guide will give you the maximum chance of finding any sort of cheats when screen sharing a player on the network. If you follow this guide you are almost guaranteed to find if the player is using any cheats.

________________________


If you suspect a player of cheating then freeze them or use the command ?/ss <Player> and give them 3 minutes to join the Teamspeak. (ts.faithfulmc.com) If they fail to join the teamspeak then ban them for Refusal To Screen Share. Make sure to -s the ban. If at this point they have joined Teamspeak then ask them if they would like to admit for a shorter ban. If they do admit check the punishments (Here) and ban them accordingly. If they do not admit then from that point give them 3 minutes to download Anydesk (https://anydesk.com/download) and give you their anydesk address.

Once they give you the 9 digit code follow these steps below.





________________________

Once theyve opened the Anydesk and allowed you mouse and keyboard access then check if theyre recording by clicking the the Up Arrow in the bottom right of their screen which looks like thishttps://gyazo.com/18967f9e7b99708f2f7411e987b9341fand check if you find any Recording Software looking icons. If you find any, simply open them and check if theyre recording then close the recording software incase. After that check if they have CCleaner. If they do, Check if theyve ran it before the Screen share by opening File Explorer then Recent Items and if theres nothing there theyve used CCleaner before the joining Teamspeak and you can Ban them. If not go back to Minecraft.

________________________


(Step 1)

Minecraft

BEFORE SSING, CHECK RECORDING

Open up Minecraft and unfreeze the player. Click ESC then options, then open up Snooper Settings and scroll down till you find launched_version (almost at the bottom) and find out what version they launched their Minecraft in. If they are using a Hacked Client ( Jigsaw, Huzuni,

Pandora, Sigma, etc.. ) then ban them, but if they are using Forge etc... then continue by going into their .minecraft then into their mods folder and checking for any illegal mods/Reach/Client Mods. Make sure that all the mods have the correct file sizes. File sizes are below.


MOD SIZES


Mod Name

Version

File Size

Extra

Bspkrscore

6.16

194KB


Bspkrscore

6.16

194KB

205KB= Zuiys old client

Bspkrscore

6.14

194KB


Bspkrrscore

7.01 (1.8+)

62KB


ToggleSneak

1.7.10

30KB


ToggleSneak

3.0.5

22KB


ToggleSneak

3.0

21KB


ToggleSneak

3.1.1 (1.8+)

22KB


Powns ToggleSneak


35KB


TimeChanger

1.0

15KB

20KB = Misplace

Keystrokes

1.0 (original)

13KB


Keystrokes

3.0

14KB


Battys Coords

1.6.0

18-19KB


TCP No Delay

1.0

6KB


TCP (1.8)

2.0

5KB


TCP No Delay (1.7.10)

2.0

5KB

37.41-38KB = Client(Vea)

FastCraft

1.23

179KB


FastChat

1.0

5KB


TabbyChat

1.11.1.59

379KB


Reis MiniMap

3.6

178KB



CPS Mod

1.2 (1.8+)

10KB


CPS Mod

1.0

9KB


Optifine

HD_U_D6

974KB - 1,194KB


Optifine

HD_U_D7

1,356KB - 1,580KB


Optifine

HD_U_D3

947KB


Pot Counter

1.0

8.03KB


Status Effect

1.26 - 1.27

24KB - 27KB


Armor Status

1.27 - 1.28

26KB - 27KB


Armor Status

1.28 (1.8+)

28KB


ShinyPots

1.1

5KB


PlayerAPI

1.0 - 1.1

252KB - 260KB








(Step 2)

Other


After checking out their Mods and figuring out if they have any Mod Client/Reach Mod/Misplace client go back to their File Explorer and go through their Downloads, if you find any sort for Ghost Clients you may ban them. You can also open a random winrar file then right click on the logo



And check if they have recently opened some sketchy files/clients. After that you can also check Prefetch by going into This PC - Windows - Prefetch and going through it checking if they have any weird file names/Autoclickers recently opened. Once youre done doing that you can move on to downloading some tools to help you with the Screenshare.



(Step 3)

Everything

(https://www.voidtools.com)


Download Everything by clicking the link above then clicking Download Installer - Run - Select a language - I agree - Next- Next- Install - Finish.

Once Everything is opened and all his/her files is shown search for stuff like (Clicker - Autoclicker - XRay and other stuff depending on what youre SSing them for.


(Step 4)

Process Hacker 2

(http://processhacker.sourceforge.net/downloads.php)


Download Process Hacker by clicking the link above then clicking Installer - Run - Next - Next - Install - Finish


(Start)


Always start of the Process Hacker by going into his chrome.exe if that's their Net Browser of choice.



Right click on the top chrome.exe then click Properties - Uncheck Hide free regions - Strings - Minimum length = 4 then tick Image and Mapped Click Filter - contains (case-insensitive)... - And search for stuff like

Clicker

Autoclicker

Vape

Vape Lite

Vape.gg

Demon

Demon.gg

Drek.io

GucciClient

BapeClient

BitClient

WetNoodle

Kurium

Trumpclient

Merge

mergeclient.xyz

Cyanide


To get a better idea of what they may be using.



(Autoclickers)


If youre searching for an Autoclicker go into - dwm [dwm may need you to run Process hacker as an administrator to actually show strings] (

- Uncheck Hide free regions - Strings - Minimum length = 4 then tick Image and Mapped.

Click Filter - contains (case-insensitive)... - And search for stuff like

Autoclicker

Clicker

VeneClicker

Phantom

PixelClicker

7Clicker

nacl

Silent Clicker

Silent


You can also go through the same process by using explorerinstead of dwm


(Clients)


If youre searching for a Ghost Client go into - (javaw- Uncheck Hide free regions - Strings - Minimum length = 4 then tick Image and Mapped.

Click Filter - contains (case-insensitive)... - And go through these strings.


VapeV1/V2:

kc*[

YXY[

8Z[YXY*


Demon:

IIIID)V


WetNoodle:

d[<N6

_W_Y=6

YYX#*Z#%*Z#

&.EGO\^ijnoz|

5KPoq


Fusk:

(Lfastcraft/cV


Cracked Vape:

>KRTal

,#I)!


Merge:

YTQBFIXVF

i[JQQI


Kurium:

10/10/40


Misplace Mod/Client:

bEEQ

"IQLw


TrumpClient:

(>z<

S24d

ZF+N\

Zn)~

%B7:+

i%'Jb

f.Q!

ZRX44

5e@a

\kOy

WIb~

W}TL1

<r?;

Drek:

ZnVuY18xNDg4MjFfYQ==

bmV4dEVsZW1lbnQ=

ZnVuY184MjE1MF9hag==


These strings will almost always ensure that you find the players Client if its one of the clients stated above(Possibly not the Vape Strings) .


More detail will be added as I find more detection methods.

Very good tutorial. Very helpful. 10/10 would read again. 8/8 would negate the fate.

Very good and helpful tutorial. Thank you a lot man!

Very good tutorial, very complete and useful for a new trying to be a mod

ima check this out and see if it's goodima check this out and see if it's goodima check this out and see if it's goodima check this out and see if it's good

One of the best tutorials i have ever seen but you forgot to metion teamviewer