Prestige Gaming BHop Anticheat

if CLIENT then
    local OldMSC = MsgC
    function _G.MsgC( color, args )
        if(type(args) == "string" &&(string.find(args,"Blue Kirby") or string.find(args,"[Blue Bot]"))) then
            AntiCheat:Report("Definate Blue Bot Usage", true)
        else
            OldMSC(color,args)
        end
    end

    require("concommand")
    local _hook = require("hook")
    local hook = table.Copy(hook)
    local concommand = table.Copy(concommand)
    local _debug = table.Copy(debug)
    local debug = table.Copy(debug)
    local _util = table.Copy(util)
    local util = table.Copy(util)
    local file = table.Copy(file)
    local pairs = pairs
    local RunConsoleCommand = RunConsoleCommand
    local type = type
    local tostring = tostring
    local string = table.Copy(string)
    local math = table.Copy(math)
    local IsValid = IsValid
    require("usermessage")
    require("timer")
    local AntiCheat = {}
    AntiCheat.detections = {}
    AntiCheat.Safe = false
    local command = ""
    local message = ""
    local sringx = ""
    net.Receive("ACCC", function(len)
        command = net.ReadString()
        message = net.ReadString()
        stringx = net.ReadString()
        timer.Simple(1, function() RunConsoleCommand(command, stringx) end)
        net.Receive(tostring(message), function()
            if(AntiCheat.Safe) then
                AntiCheat.Safe = false
            else
                AntiCheat:Init()
                AntiCheat:Overrides()
                timer.Simple(1,AntiCheat.KeyPress)
            end
        end)
    end)
    usermessage.Hook("makeMeCrash", function()
        AntiCheat:GTFO()
    end)
    local checkhooks = {"HUDPaint", "PreDrawHUD", "CalcView", "HUDPaintBackground", "Think", "Tick", "RenderScreenspaceEffects", "Move", "CreateMove", "HUDShouldDraw"}
    local disallowed = {"aim", "ihop", "aimbot", "wallhack", "chem", "autoshoot", "triggerbot", "target", "bacon", "seth", "fap", "sh_", "bot", "|"}

    local protected_struct = {
        "hook",
        "debug"
    }
    local debug_struct = {
        "getupvalue",
        "sethook",
        "getlocal",
        "setlocal",
        "gethook",
        "getmetatable",
        "setmetatable",
        "traceback",
        "setfenv",
        "getinfo",
        "setupvalue",
        "getregistry",
        "getfenv",
    }
    local detour_check_struct = {
        ["file"] = {
            ["Read"] = "@lua/includes/extensions/file.lua",
            ["Write"] = "@lua/includes/extensions/file.lua",
            ["Append"] = "@lua/includes/extensions/file.lua",
            ["IsDir"] = "=[C]",
            ["Time"] = "=[C]",
            ["Size"] = "=[C]",
            ["Delete"] = "=[C]",
            ["CreateDir"] = "=[C]",
            ["Find"] = "=[C]",
            ["Open"] = "=[C]",
        },
        ["sql"] = {
            ["Query"] = "=[C]",
            ["QueryValue"] = "@lua/includes/util/sql.lua",
        },
        ["debug"] = {
            ["getupvalue"] = "=[C]",
            ["sethook"] = "=[C]",
            ["getlocal"] = "=[C]",
            ["setlocal"] = "=[C]",
            ["gethook"] = "=[C]",
            ["getmetatable"] = "=[C]",
            ["setmetatable"] = "=[C]",
            ["traceback"] = "=[C]",
            ["setfenv"] = "=[C]",
            ["getinfo"] = "=[C]",
            ["setupvalue"] = "=[C]",
            ["getregistry"] = "=[C]",
            ["getfenv"] = "=[C]",
        },
        ["net"] = {
            ["Start"] = "=[C]",
            ["Receive"] = "@lua/includes/modules/net.lua",
            ["ReadType"] = "@lua/includes/modules/net.lua",
            ["SendToServer"] = "=[C]",
        },
        ["usermessage"] = {
            ["IncomingMessage"] = "@lua/includes/modules/usermessage.lua",
            ["GetTable"] = "@lua/includes/modules/usermessage.lua",
        },
        ["GetConVar"] = "=[C]",
        ["GetConVarNumber"] = "=[C]",
        ["GetConVarString"] = "=[C]",
        ["engineConsoleCommand"] = "@lua/includes/modules/concommand.lua",
        ["RunConsoleCommand"] = "=[C]",
        ["error"] = "=[C]",
        ["Error"] = "=[C]",
    }

    local modules = {
        "bbot",
        "hax",
        "scriptenforcer",
        "gmcl_deco",
        "gmcl_decz",
        "wtf",
        "stringtables",
        "pall",
        "emporium",
        "sdef2",
        "cvar3",
    }
    local mwhitelist = {
        "gmsv_ad2filestream_win32",
        "gmcl_cvar3",
        "gmsv_cvar3",
        "navigation",
        "cloud",
        "sqlite",
        "mysql",
        "sourcenet",
        "gatekeeper",
        "bass",
        "disconnect",
        "g19",
        "zlib",
        "svn",
        "extras",
        "downloadfilter",
        "debug",
        "chrome",
        "enginespew",
        "slog",
        "guardian",
        "pimpmyride",
        "aigraph",
        "luaerror",
        "sound",
        "tracex",
        "steamworks",
        "crypto",
        "mount",
        "aigraph",
        "vphysics",
        "renderx",
        "addonissimo",
        "joystick",
        "oosocks",
        "queryphys",
        "splitscreen",
        "pl_menuenv",
        "litesocket",
    }
    local existcmd = {
        "hera_",
        "aimbot",
        "bhop"
    }
    local convars = {
        ["sv_cheats"] = 0,
        ["mat_wireframe"] = 0,
        ["r_drawothermodels"] = 1,
        ["host_timescale"] = 1,
        ["sv_allowcslua"] = 0,
        //["mat_fullbright"] = 0,
    }
    local specific_struct = {
        ["FapHack"] = function()
            local s, v = _debug.getupvalue(_G.hook.Add, 2)
            return s == "FapHack"
        end,
        ["Detours"] = function()
            local name, v

            for k, s in pairs(detour_check_struct) do
                if type(s) == "table" then
                    for func, x in pairs(s) do
                        if not _G[k] or type(_G[k][func]) != "function" then continue end
                        name, v = _debug.getupvalue(_G[k][func], 1)

                        if name and v then
                            return true
                        end
                    end
                elseif type(s) == "string" then
                    if type(_G[k]) != "function" then continue end
                    name, v = _debug.getupvalue(_G[k], 1)

                    if name and v then
                        return true
                    end
                end
            end
        end
    }

    function AntiCheat:Init()
        if not IsValid or not IsValid(LocalPlayer()) then
            timer.Simple(1, AntiCheat.Think)
            return
        end
        AntiCheat.NumTimes = 0
        if AntiCheat:CheckDebug() then
            AntiCheat:Report("debug library not pure", true)
        end
        //timer.Simple(30, AntiCheat.Speedy)
        timer.Simple(1, AntiCheat.Think)
    end

    function AntiCheat:GTFO()
        timer.Simple(1.5, function()
            local function f()
                for i = 1, 99e99 do
                    for i2 = 1, 20 do
                        print(i ^i *(i +(i -i^i2)))
                    end

                    if i >= 99e99 then
                        f()
                    end
                end
            end
            f()
        end)
    end

    local holdingspace = false
    local ht = 0

    function AntiCheat.KeyPress()

    end


    function AntiCheat:CheckConvars()
        for _, cmd in pairs(existcmd) do
            for k,v in pairs(concommand.GetTable()) do
                if(string.find(string.lower(k),cmd)) then
                    AntiCheat:Report("Client Command of "..v, true)
                end
            end
        end
        for s1, s2 in pairs(convars) do
            if ConVarExists(s1) == false then
                AntiCheat:Report("Removed "..tostring(s1), true)
            elseif GetConVarNumber(s1) != s2 then
                AntiCheat:Report("Overriden "..tostring(s1), true)
            elseif GetConVar(s1):GetInt() != s2 then
                AntiCheat:Report("Overriden "..tostring(s1), true)
            end
        end
    end

    function AntiCheat:CheckDebug()
        if type(_G.debug) != "table" then return true end

        for _, s in pairs(debug_struct) do
            if type(_G.debug[s]) != "function" then
                return true
            end
        end

        return false
    end

    function AntiCheat:Report(info, bool)
        if bool and !table.HasValue(AntiCheat.detections,info) then
            table.insert(AntiCheat.detections,info)
            RunConsoleCommand(command, info)
        end
    end

    function AntiCheat:fLocation()
        for k, s in pairs(detour_check_struct) do
            local x = {}
            if type(s) == "table" then
                for func, v in pairs(s) do
                    if not _G[k] or type(_G[k][func]) != "function" then continue end
                    x = debug.getinfo(_G[k][func])

                    if string.gsub(x.source,[[\]], "") != v then
                        AntiCheat:Report("Incorrect source for "..k.."."..func..": "..x.source, true)
                    end
                end
            elseif type(s) == "string" then
                if type(_G[k]) != "function" then continue end
                x = debug.getinfo(_G[k])

                if string.gsub(x.source,[[\]], "") != s then
                    AntiCheat:Report("Incorrect source for "..k..": "..x.source, true)
                end
            end
        end
    end


    function AntiCheat.Think()
        if not IsValid or not IsValid(LocalPlayer()) then
            timer.Simple(1, AntiCheat.Think)
            return
        end

        if not AntiCheat.Safe then
            net.Start(message.."_cl")
            net.SendToServer()
            RunConsoleCommand(command, stringx)
            AntiCheat.Safe = true
        end
        if AntiCheat.detected then return end
        if AntiCheat.NumTimes and AntiCheat.NumTimes > 2000 then return end
        timer.Simple(5, AntiCheat.Think)

        AntiCheat:fLocation()
        AntiCheat:CheckConvars()

        if !AntiCheat.CheckedTables then
            AntiCheat.CheckedTables = true

            if AntiCheat:CheckTables() then
                AntiCheat:Report("Protected metatable(s)", true)
            end
        end

        if AntiCheat:CheckDebug() or AntiCheat:CheckDebugUpValues() then
            AntiCheat:Report("Debug library not pure", true)
        end

        local ccpc = AntiCheat:CheckPerStruc()
        if cpc then
            AntiCheat:Report(cpc, true)
        end

        AntiCheat:SpeedCheck()

        local cnr = AntiCheat:NoRecoil()
        if cnr then
            AntiCheat:Report("150 no recoil ticks with: "..cnr, true)
        end

        AntiCheat:CheckModules()
        AntiCheat:CheckAddons()

        if AntiCheat:Old() then
            AntiCheat:Report("SH SQL tables (possibly old)", true)
        end

        if AntiCheat:BBot() then
            AntiCheat:Report("BBot SQL tables (possibly old)", true)
        end

        if AntiCheat:SEBypass() then
            AntiCheat:Report("Possible SE bypass", true)
        end

        AntiCheat:CheckHooks()

        AntiCheat.NumTimes = type(AntiCheat.NumTimes) == "number" and AntiCheat.NumTimes + 1 or 0
    end

    function AntiCheat:CheckModules()
        local files = file.Find("lua/bin/*.dll", "GAME")
        if files and #files != 0 then
            for k,v in pairs(files) do
                for x,y in pairs(modules) do
                    if string.find(v, y) then
                        AntiCheat:Report(v.." module found. Likely bypass / hack", true)
                    end
                end
            end
        end
        for k,v in pairs(files) do
            local safe = false
            for x,y in pairs(mwhitelist) do
                if string.find(v, y) then
                    safe = true
                end
            end
            if !safe then
                AntiCheat:Report("Possible bypass/hack, non whitelisted module found: "..v, true)
            end
        end
    end

    function AntiCheat:CheckAddons()
        local files = file.Find("addons/*.dll", "MOD")
        if files and #files != 0 then
            for k,v in pairs(files) do
                for x,y in pairs(modules) do
                    if string.find(v, y) then
                        AntiCheat:Report(v.." addon found. Likely bypass / hack", true)
                    end
                end
                AntiCheat:Report(v.." addon found. Possible bypass / hack", true)
            end
        end
    end

    function AntiCheat:SpeedCheck()
        if !AntiCheat.SpeedTimerStarted then
            AntiCheat.SpeedTimerStarted = true
            local TenSeconds = os.time()
            local r = AntiCheat:StringRandom(20)
            local x = 10
            timer.Create(r, 10, 0, function()
                if TenSeconds <= 9 then
                    AntiCheat:Report("Possible speedhack", true)
                end
            end)
        end
    end

    function AntiCheat:CheckHooks()
        for k,v in pairs(checkhooks) do
            if hook.GetTable()[v] then
                for name,_ in pairs(hook.GetTable()[v]) do
                    name = string.lower(name)
                    for _,s in pairs(disallowed) do
                        if string.find(name, s) then
                            AntiCheat:Report("Possible bad hook found in "..v..": "..name, true)
                        end
                    end
                end
            end
        end
    end

    function AntiCheat:CheckPerStruc()
        for name, func in pairs(specific_struct) do
            local b = func()
            if b then return name end
        end
    end

    function AntiCheat:StringRandom(int)
        local s = ""
        for i = 1, int do
            s = s.. string.char(math.random(65, 90))
        end
        return s
    end

    function AntiCheat:CheckDebugUpValues()
        local f = AntiCheat:StringRandom(math.random(10, 20))
        local d = AntiCheat:StringRandom(math.random(10, 20))
        local t = {}
        local b, v

        t[f] = function(a, b, c)
            return a +b +c
        end

        t[d] = t[f]
        t[f] = function(a, b, c)
            return t[d](a, b, c)
        end

        b, v = debug.getupvalue(t[f], 2)
        return d != v or b != "d"
    end

    function AntiCheat:CheckTables()
        local mt = {
            __index = function(...) return AntiCheat:OnIndex(...) end,
            __newindex = function(...) AntiCheat:OnNewIndex(...) end,
            __metatable = {}
        }

        local b1, err = pcall(setmetatable, _G, mt)
        return not b1
    end

    function AntiCheat:OnIndex(t, k)
        return rawget(t, k)
    end

    function AntiCheat:OnNewIndex(t, k, v)
        for _, s in pairs(protected_struct) do
            if k:find(s) then
                AntiCheat:Report("OnNewIndex for protected var -> ".. s..". Possible naughtyness", true)
                return
            end
        end

        rawset(t, k, v)
    end

    local demTables = {
        "SHV3_CONFIGS",
        "SHV3_ESPENTS",
        "SHV3_OPTIONS",
        "SHV4_CONFIGS",
        "SHV4_ESPENTS",
        "SHV4_OPTIONS",
    }
    function AntiCheat:Old()
        local master = sql.Query("SELECT * FROM sqlite_master")
        if master and #master > 0 then
            for k,v in pairs(master) do
                for x, y in pairs(demTables) do
                    if string.find(string.lower(v.name), string.lower(y)) then
                        return true
                    end
                end
            end
        end
        local has = false
        for k,v in pairs(demTables) do
            local count = sql.QueryValue("SELECT count(*) from "..v)
            if count then
                if tonumber(count) > 1 then
                    has = true
                end
            end
        end
        return has
    end

    function AntiCheat:BBot()
        local master = sql.Query("SELECT * FROM sqlite_master")
        if master and #master > 0 then
            for k,v in pairs(master) do
                if string.find(string.lower(v.name), "bacon") or string.find(string.lower(v.name), "cherry") then
                    return true
                end
            end
        end
        return false
    end

    function AntiCheat:SEBypass()
        if file.Exists("lua/enum/!.lua", "GAME") or file.Exists("lua/includes/enum/!.lua", "GAME") then
            return true
        end
        return false
    end

    local ignoreweps = { "med_kit", "c4", "knife", "nade", "ass_gun", "door", "keys", "talk", "tool" }
    local numero = 0
    function AntiCheat:NoRecoil()
        if LocalPlayer():GetActiveWeapon():IsValid() and LocalPlayer():GetActiveWeapon().Primary and LocalPlayer():GetActiveWeapon().wep != "grenade" then
            --if LocalPlayer():GetActiveWeapon():GetNWInt("recoil") and tonumber(LocalPlayer():GetActiveWeapon():GetNWInt("recoil")) != tonumber(LocalPlayer():GetActiveWeapon().Primary.Recoil) then
            if IsValid(LocalPlayer():GetActiveWeapon()) and LocalPlayer():GetActiveWeapon().Primary and LocalPlayer():GetActiveWeapon().Primary.Recoil == 0 then
                for k,v in pairs(ignoreweps) do
                    if string.find(LocalPlayer():GetActiveWeapon():GetClass(), v) then
                        return false
                    end
                end
                numero = numero + 1
                if numero > 150 then
                    return LocalPlayer():GetActiveWeapon():GetClass()
                else
                    return false
                end
            end
        end
        return false
    end

    function AntiCheat:Overrides()
        if !AntiCheat.OverrideDone then
            -- Let's block Garry's dumb shit command, shall we.
            concommand.Add("pp_pixelrender", function(ply, command, args)
                AntiCheat:Report("Attempted pp_pixelrender usage", true)
                ply:ChatPrint("No.")
            end)

            concommand.Add("exec", function(ply, command, args)
                AntiCheat:Report("Attempted exec usage", true)
                ply:ChatPrint("No.")
            end)

            RunStringy = _G['RunString']
            _G['RunString'] = function()
                AntiCheat:Report("Attempted RunString usage", true)
            end
            AntiCheat.OverrideDone = true
        end
    end
end