Cheating

Not to be confused with Cheats, console commands that need sv_cheats 1 to work.

Material wallhacking on 2Fort.

Material wallhacking on 2Fort.

Cheater using ESP on Dustbowl.

“

Nothing stokes my ire like a cheater. Deception, duplicity, murder -- these are merely tools in a toolbox one can use to ensure a job done well. But cheating? I cannot even wrap my head around the point of it. Wouldn't you know you had cheated? How on Earth could you maintain crisp certainty of your superiority to all others? And if you're unable to do that, what's the point of anything? — The Administrator

”

Cheating is a term that describes the use of third-party programs or material changes in order to gain an unfair advantage.

Valve has a strict policy against cheating and will ban detected cheats with the Valve Anti-Cheat system, also known as VAC. Unfortunately, most current cheat providers bypass VAC. This means the users won't recieve a VAC ban unless Valve patches the method.

Players can be reported in game via the scoreboard or by pressing escape, clicking the report button on the menu, or by sending an abuse report (Default key: F7).

Most cheats take the form of:

• Engine hooks, which "hook" parts of the Source Engine and use them for their cheat.

Ex: Createmove, PaintTraverse, DrawModelExecute...

• Material cheats (chams, short for chameleon skins), use custom materials to lower the opacity of walls or make players easier to see.

These cheats are referred to as "internal cheats".

"External cheats" also exist. They do not "hook" but they read/write the game memory externally. These are fairly uncommon in Team Fortress 2.

Working Cheats

These are features in cheats that work in the latest version of Team Fortress 2.

Achievement Unlocker

Some community hosted servers have a plugin which is able to unlock all achievements in-game with a special command, granting all achievement items. This can also be achieved by using third-party softwares.

Aimbot

Automatically aim at an enemy for the player. This can be customized to ignore Spy's cloak, disguise, or Medic's Vaccinator and have "legit" features such as smoothing.

There are multiple variants of this, which include Hitscan Aimbot, Melee Aimbot, and Projectile Aimbot.

• Hitscan Aimbot includes the following sub-variants, sorted from Rage to Legit:
  • Aimbot: Allows for the crosshair to be locked onto the enemy.
  • Silent Aim: Allows for firing the weapon at the target without facing the target, however flicking or locking is visible to spectators.
    • Before the July 23, 2015 Patch, pSilent Aim allowed for firing in one direction without facing it. After the patch, players attempting to use pSilent Aim will appear to flick to a spot in one frame then flick back to the original spot the crosshair was on.
    • Some cheats will attempt to suppress the flicking by simply moving the location of the crosshair onto the enemy in order to prevent the 'flicking' that certain silent aimbots have.
  • Smooth Aim: Similar to Aimbot, however smoothing is applied when locking onto enemies in order to prevent the sudden flicks that Aimbot creates.
  • TriggerBot: There are multiple sub-variants of this, which include:
    • Default Triggerbot: Fires whenever an enemy is under a crosshair.
    • Auto Uber: Automatically activates ÜberCharge the moment the target being healed takes damage.
    • Auto Vaccinator Resistance Switcher: Automatically switches the Vaccinator resistance mode depending on the type of damage the target is taking.
  • Aim Assist: Helps move your crosshair to your target, but autofire is disabled.

• Melee Aimbot includes the following sub-variants, sorted from Rage to Legit:
  • Melee Aim: Locks your crosshair onto the enemy and attacks.
  • Silent Melee Aim: Silent Melee Aim allows for swinging your melee without facing it, however spectators will see you flicking or locking onto the target.
  • Smooth Melee Aim: Similar to Melee Aim. however this applies smoothing when locking onto a target.
  • Melee TriggerBot: There are multiple sub-variants of this, which include:
    • Predicted TriggerBot: Swings the melee weapon in advance before being in range of a target, as most melee weapons have a firing delay.
    • Normal Triggerbot: Swings the melee weapon the moment the target is in range and the crosshair is in front of the target.
  • Melee Aim Assist: Helps move your crosshair to your target, but autofire is disabled.
  • pSilent Melee Aim: Unlike Silent Melee Aim, pSilent Melee Aim allows for swinging your melee without facing the target.
  • (Spy only) AutoBackstab: Backstabs the instant the back hitbox is hittable. Your viewmodel also silently changes angle depending on the targets location in order to be able to execute a backstab.

• Projectile Aimbot includes the following sub-variants, sorted from Rage to Legit:
  • Projectile Aim: Locks onto the predicted location of the target and fires.
  • Silent Projectile Aim: Silent Projectile Aim allows for firing your weapon at a target without facing it, however spectators will see you flicking or locking onto the target.
    • However, some cheats will just move the location of the crosshair onto the enemy in order to prevent the 'flicking' that certain silent aimbots have.
  • Smooth Projectile Aim: Similar to Projectile Aim, however smoothing is applied when locking onto enemies in order to prevent the sudden flicks that Projectile Aim creates.
  • Projectile TriggerBot: There are multiple sub-variants of this, which include:
    • (Demoman and Pyro only) Auto Detonate: Detonates whenever the detonatable projectile is at a lethal distance from the target.
    • Default Triggerbot: Fires whenever an enemy is under a crosshair.
      • This is usually not used by most cheaters as projectiles typically have a travel time, so there will be inaccuracies.
  • (Pyro only) Auto Deflect: There are multiple sub-variants of this, which include:
    • Auto Extinguish: Automatically extinguishes teammates whenever the teammate is in range.
    • Legit Auto Deflect: Automatically deflects projectiles towards the closest enemy when projectile is in view.
    • Silent Auto Deflect/Rage Auto Deflect: Automatically deflects projectiles towards the closest enemy.
  • Projectile Aim Assist: Draws a dot where the predicted position of the enemy will be when you fire at that location. Also helps move your crosshair to your target, but autofire is disabled.
  • pSilent Projectile Aim: Unlike Silent Projectile Aim, pSilent Melee Aim allows for firing your weapon at a target without facing it.

Anti Autobalance

Some cheats disconnect and reconnect to the server in order to bypass autobalance.

Anti-Aim

Anti-Aim modifies the view angles of the player by editing the values in pitch or yaw (roll has been patched in later source engine versions) into an out-of-bound value, so the viewmodel can appear facing one direction, when in reality the real hitbox is facing the other direction.

A limitation of Anti-Aim is that the visual hitbox cannot be facing away from the direction of fire, i.e. when the cheater fires forwards, the visual viewmodel snaps forwards.

• Anti-Backstab is also achieved with Anti-Aim. It detects if a Spy is near your back hitbox and snaps the real viewmodel backwards, making the Spy miss their stab.
  • However, if the Spy is using backtrack, the Spy can backstab a previous tick sent by the cheater in order to backstab the cheater.

Anti-Anti Aim

Anti-Anti Aim, or Aim Resolver, attempts to brute force the enemies real viewmodel by shooting at certain locations until a headshot is made.

Anti Resolver

Anti-Resolver, or Jitter, is when your cheat randomly changes its anti aim angles in order to throw off other aimbotters resolvers.

Autostrafer

Autostrafing, or auto airstrafing, can refer to 2 things. Legit Autostrafe and Rage Autostrafe.

• Legit Autostrafe: Legit Autostrafe helps your client automatically airstrafe left or right when your mouse moves left or right.

• Rage Autostrafe: Rage Autostrafe allows for optimal airstrafes in the direction you are facing. This is perfectly silent from the client, server, or spectator.

This is only active in conjunction with Bunnyhopping, as simply strafing left and right on the floor will no longer give you a speed boost due to the speed cap that has been added from the release of the Source Engine.

Backtrack

Abuses the Source Engine's lag compensation to "send people back in time". Cheats can backtrack up to 200 milliseconds, or ~13 ticks on 66 tick servers. Signs of cheaters using backtrack are when a player is killed after walking behind cover, however this may be due to latency issues. If a player or bot is holding the Intelligence / Mann vs. Machine bomb and they get backtracked, the Intelligence (or bomb) gets teleported to the position they were backtracked to.

NPCs, such as tanks or ghosts can not be backtracked due to them not being lag compensated. Cheaters cannot backtrack with projectile weapons due to the same reason.

Often people accuse players who seem to facestab them of abusing the cl_interp command. In most cases, this simply is not true.

Bunny Hop / Bhop

Automatically jumps when you land which prevents the game from slowing your velocity down.

Partially fixed in the October 31, 2007 Patch by lowering the maximum air velocity while in a 'jump' state, however bhopping still gives a slight speed boost when combined with air strafing.

Bypass SMAC

Prevents detections on servers with running Source-Mod-Anti-Cheat.

Bypass Interp restrictions

Allows cl_interp to be set to 0. This is only for increasing accuracy, and does not have much effect on gameplay.

Crit Bucket Manipulation

To fix constant criticals, Valve released a new random crit system which requires players to fill a bucket by shooting before they can receive random crits.

It's possible to "store" random crits by filling up the crit bucket (range 0-1000) and sending crit requests to get crits on demand as long as you have it filled. Some weapons can take longer to receive crits as they require a bigger bucket.

Melee weapons do not follow this crit bucket system, which allows them to crit 100% of the time with cheats. For a short period it was discovered that weapons with "No Random Crits" could still crit (0.015% chance). This was abused to get nearly constant crits on these weapons until it was fixed in the Meet Your Match update.

In order for any sort of crit hack to work, the server must have 'tf_weapon_criticals' and 'tf_weapon_criticals_melee' set to 1 respectively (which is enabled on Valve Casual servers).

Chatspam

Spams messages in chat, normally advertising something. Some cheats abuse newlines / linebreaks to "clear" chat and make only their messages visible.

Patched in the June 16, 2020 Patch, which added rate limit checks for in-game text chat.

Custom Item Schema

Cheaters can load a temporary custom item schema that normally defies the rules of the item schema provided by the game.

Things custom item schema can do:

• Remove any equip_region restriction, which can be seen by everybody.
• Add attributes to any item in the game, which only shows up for them and disappears once the schema is unloaded.
• Add any item into their backpack, which only shows up for them and disappears once the schema is unloaded.
• Increase the amount of backpack slots they have, which can trick websites that use Steam's API to get false backpack data.

This does not allow for any economy breaking exploits as Valve has added extra measures to prevent that from happening.

ESP

ESP stands for Extra Sensory Perception. ESP is considered anything that gives extra information visually.

• Showing player positions.
• Showing player health.
• Showing player ÜberCharge and its current percentage.
• Showing player class.
• Chams (changes the colors of the model, making them easier to spot & visible through walls).
• Making the players glow constantly, similar how your teammates glow after you respawn.
• Showing information about the player, such as the currently equipped weapons, or if the player is zoomed in.

Fakelag

Abuses packets so the server doesn't update your position for a maximum of ~23 ticks. To others it looks like they are "lagging", but their ping will be relatively low and from their view the game looks fine.

Due to the nature of fakelag, it is mostly used to counter cheaters to make their aimbot miss.

Fake Latency

Fake Latency can refer to 2 things.

• Ping Increaser:Artificially inflates your ping to the server. The higher the ping is, the longer the backtrack is, meaning cheaters can hit players way after they went behind a wall.
• Ping Decreaser: Artificially decreases your ping to the server. This has no real effect on gameplay, and the real ping can easily be found by typing 'ping' in console.

FOV Manipulation

Allows for FOV (also known as Field Of View) to be manipulated beyond the range of 55 to 90, the default range accessible to non-cheaters.

Force Halloween

Allows for attributes such as spells to be usable in non-halloween games.

• Unlike Custom Item Schema, this allows spells to be shown to other players, rather than being just client sided.

Followbot / Walkbot / Multiboxing

A bot that can perform actions without user input. Commonly used to assist cheaters or cause mayhem.

Unlike regular bots, these bots are different because of how they are presented. For instance, regular bots are able to freely roam around a specific map, while walkbots must have a set path that is created by the host.

These bots will usually walk on a predefined path and aimbot at the location set. Unlike regular bots, walkbots do not detect Sentry Guns, and will usually walk straight into their line of sight, allowing for a well-hidden Engineer to easily deal with them.

Capabilities:

• Following a player.
• Healing and ubering players.
• Defending a location.

Killsay

Says a message when a player is killed, normally insulting them with the victim's steam username, class, or weapon.

Noisemaker Spamming

Allows cheaters to use any noisemakers that have limited uses without actually using their limited use.

No Recoil

Removes any bobbing received by shooting weapons or getting hurt, mostly cosmetic but can help with aimbot accuracy.

No Projectile Inaccuracy

Under the same category as No Spread, this removes any inaccuracy projectile weapons have, such as Beggar's Bazooka deviation or Huntsman charge inaccuracy.

Roll Speedhack

When Valve patched "viewangle speedhack", they only patched it for people standing, the patch does not apply to cheaters that crouch and can be easily seen as they crouch and walk backwards.

This will allow cheaters to crouch at walking speeds.

Server Seed Prediction

If the server runs long enough, the seed value (which determines the spread for client weapons) will be a big floating point.

This introduces a big imprecision (as it gets rounded more and more). The client can predict the pattern generated by the server as you only need a value approximately close to that of the servers, and the rounding will do the rest, which will allow for no spread-like properties to work again. This doesn't work that well on Valve's Casual servers due to them not running for a long enough, however it can work well on some community servers depending if they automatically restart or not.

Thirdperson

Allows cheaters to go into thirdperson regardless if the server has 'sv_cheats' set to 1 or has any plugins installed on a community server.

Taunt Slide

Originally a bug that would allow player actions when taunting if you taunted right before you fell off something. Cheaters took advantage of this so they could taunt slide whenever they taunted, without needing to fall off anything.

This was fixed in an update but is still partially possible, using moving taunts to instantly turn without any turn delay, or moving sideways while using the taunt.

Voice Spam

Spams an audio file into the voice chat system.

VAC Bypass

Also known as VAC Disabler, this cheat has been built into many cheat injectors and causes VAC to not verify the game files. This however does not remove VAC Bans.

Warp/Tickbase Manipulation

Allows the client to "warp" on command up to ~23 ticks on Valve servers (value is dictated by sv_maxusrcmdprocessticks) by sending multiple usercmds after faking packet loss. This will cause the player to teleport ~23 ticks (roughly a third of a second on 66 tick servers). This feature exists due to the way the game compensates for packet loss, and can be broken down into airstucking and speedhacking for a short period of time.

This can also be utilised for another feature commonly referred to as doubletap, which allows firing in quick succession.

Patched Cheats

These are features in cheats that have been patched by Valve within content updates.

Achievement Spammer

Cheaters could rapidly unlock and relock achievements, which would spam the chat and constantly play the achievement earned sound.

This was fixed sometime in 2014 by Valve adding a limit of how many achievements can be displayed in chat at once.

Anti-Votekick

Cheaters could type 'retry' on Quickplay accepted servers in the Developer Console right before a votekick would go through, making the vote useless.

Fixed in July 7, 2016 Patch with the introduction of Casual Mode.

Airstuck

Causes a cheater to float in mid-air by sending no usercmds to the server.

This was found to contain various exploits, such as:

• Building velocity with Soldier's Rocket Launcher or Demoman's Stickybomb Launcher.
• Pyro's Phlogistinator to have infinite ÜberCharge if one activated it and spammed taunts.
• Infinite Bonk! Atomic Punch / ÜberCharge.
• Infinite Medi Gun healing range.
• Capture Control Points in Casual Mode during countdown timer.
• Breaking certain aimbots.

Fixed in April 20, 2017 Patch by introducing a new command 'sv_player_usercommand_timeout' which will require cheaters to send a usercmd depending on the value set, setting to 0 disables the fix.

Constant Criticals

Originally cheats could get 100% crits by setting the tickcount to when they would get crits.

Fixed sometime in 2013 with the introduction of the crit bucket system.

Hitscan Silent Aim

Hitscan refers to weapons that use hitscan to hit players, like Shotguns or Pistols.

"Perfect Silent Aim" (commonly known as pSilent in cheats) used to hide silent aim snaps from spectators.

Fixed in July 23, 2015 Patch by introducing a new command 'sv_maxusrcmdprocessticks_holdaim' which allows servers to hold client ticks for multiple ticks, setting to 0 disables the fix.

Minigun Jumping

Normally when you're revved up with the Heavy's Minigun, you can not jump. Cheats could remove this restriction by simply telling the game that you're not revved up.

Fixed sometime in 2013.

No Spread

Predicts or changes the seed of a weapon to remove/reduce weapon spread.

Fixed in July 23, 2015 Patch by making the server control the seed instead of the client.

Name Stealer

Steals the names of players to get them kicked or help cheaters avoid kicks.

Valve introduced several fixes to mitigate the issue of namestealing, such as:

• Showing avatars in callvote UI.
• Adding sv_namechange_cooldown_seconds: Set amount of time before a player can change their name again.
• Adding sv_vote_issue_kick_namelock_duration: Set amount of time a player can set their name again after getting a vote called on them.
• Adding tf_allow_player_name_change which prevents changing names completely

Fixed in September 16, 2021 Patch that disables the ability for 2 or more players to have the same name in a server.

Speed Hack

Caused by cheats sending a lot of usercmds at once. Fixed across the Source Engine games by limiting the number of usercmds accepted at a time.

Another form of speedhacking rose soon after the patch, known as "viewangle speedhack", it would allow for higher than normal velocities, but wouldn't have the same effects of normal speedhacking.

Original speedhacking was fixed sometime in 2013, viewangle speedhack was fixed in July 24, 2014 Patch.

Scope Hack

This hack helps you charge the scope faster/instantly.

Server Lagging

Spamming commands per tick could cause the server rubberband or completely freeze players, often timing out connected players.

This was fixed in the June 7, 2018 Patch by limiting the amount of commands a player can send per tick.

Sequence Freezing / Remove Conditions

Abused the netchannel to skip sequences. Nearly all conditions could be removed such as fire/bleed.

Depending on how many sequences you skipped, cheaters could break player lag compensation, making it hard for people to hit the cheater with hitscan based weapons.

Other side effects included:

• Prematurely ending taunts (Phlogistinator included giving extended ÜberCharge protection).
• Removing stuns applied by ghosts.
• Duping infinite Health Packs.
• Duping infinite Ammo Packs.
• Infinitely throw Sniper's Jarate or Scout's Mad Milk.
• Instantly or speed up captures on control points.
• Instantly decloak as Spy, skipping the decloak animation.
• Instantly reload, depending on the weapon.
• Instant spinup with Heavy's Minigun.
• Reverse capture control points, allowing the defending team to capture points for the attacking team. This also caused sequence breaks, causing no MVP screens and long setup times.
• Getting ignored by NPCs, such as an Engineer's Sentry Gun.
• Using the Sniper's Huntsman to deal negative damage, giving enemies massive overheal.
• Shoot twice at once with weapons that have delays before their next shot (ex. Shotguns or Rocket Launchers).
• Firing Demoman's Stickybomb Launcher stickies all at once.
• Abusing Healthpacks to give infinite overheal using Heavy's Gloves of Running Urgently.
• Delay charges on any weapon that could be charged, such as Soldier's Cow Mangler or Demoman's Stickybomb Launcher.

The remove conditioning effect could be done by legitimate means by purposely freezing the game (such as spamming snd_restart) to desync yourself from the server.

Condition removing was fixed in November 7, 2017 Patch, but some of the effects still remained, which were patched at a later date.

Bots

Since late 2019, bots (semi/fully automated cheating programs with little to no input from humans) have been created to join Casual servers using aimbot cheats, chat spam, server lag, spinbot, walkbot, and votekick real players.

Several updates have attempted to fix or mitigate the chat and voice spam, name stealing, votekick initiation, team name changing, server lagging, and the unequipping of cosmetics.