Giter VIP home page Giter VIP logo

escapefromtarkov-trainer's Introduction

EscapeFromTarkov-Trainer

I'm not responsible for any consequences that result from using this code. BattleState / BattlEye will ban you if you try to use it 'live'.

TLDR => Use the Universal Installer. Default key for in-game GUI is Right-Alt.

This is an attempt -for educational purposes only- to alter a Unity game at runtime without patching the binaries (so without using Cecil nor Reflexil).

master branch can build against EFT 0.12.12.17349 (tested with spt-aki Version 2.3.1). If you are looking for another version, see branches and releases.

If you want to compile the code yourself, make sure you cleaned-up your solution properly after upgrading your EFT/sptarkov bits (even removing bin and obj folders) and check all your references.

If you are using SPT-AKI, please make sure you have run the game at least once before compiling/installing the trainer. SPT-AKI is patching binaries during the first run, and we need to compile against those patched binaries.

The typical issue when something is out of sync is that the game will freeze at the startup screen with type/tokens errors in %LOCALAPPDATA%Low\Battlestate Games\EscapeFromTarkov\Player.log

Features

trainer.ini section GUI/console Description
Aimbot aimbot Aimbot (distance, smoothness, silent aim with speed factor and shot delay, fov radius, fov circle).
AutomaticGun autogun Force all guns (even bolt action guns) to use automatic firing mode with customizable fire rate.
Commands commands Popup window to enable/disable all features (use right-alt or setup your own key in trainer.ini).
CrossHair crosshair Crosshair with customizable size, color, thickness and auto-hide feature when aiming.
Examine examine All items already examined.
ExfiltrationPoints exfil Exfiltration points with customizable colors given eligibility, status filter, distance.
FreeCamera camera Free camera with fast mode and teleportation.
Grenades grenade Grenades outline.
Health health Full health, prevent any damage (so even when falling), keep energy and hydration at maximum.
Hits hits Hit markers (hit, armor, health with configurable colors).
Hud hud HUD (compass, ammo left in chamber / magazine, fire mode, coordinates).
LootableContainers stash Hidden stashes like buried barrels or ground caches.
LootItems loot List all lootable items and track any item by name or rarity in raid (even in containers and corpses), with prices.
NightVision night Night vision.
NoCollision nocoll No physical collisions, making you immune to bullets, grenades and barbed wires.
NoRecoil norecoil No recoil.
NoVisor novisor No visor, so even when using a face shield-visor you won't see it.
Players wallhack Wallhack (you'll see Bear/Boss/Cultist/Scav/Usec with configurable colors through walls). Charms, boxes, info (weapon and health), skeletons and distance.
Quests quest Locations for taking/placing quest items. Only items related to your started quests are displayed.
Skills skills All skills to Elite level (51) and all weapons mastering to level 3.
Speed speed Speed boost to be able to go through walls/objects, or to move faster. Be careful to not kill yourself.
Stamina stamina Unlimited stamina.
ThermalVision thermal Thermal vision.
WallShoot wallshoot Shoot through wall/helmet/vest/material with maximum penetration and minimal deviation/ricochet.
WorldInteractiveObjects opener Door/Keycard reader/Car unlocker.

You can Load/Save all settings using the console or the GUI.

Wallhack Skeleton Exfils Loot Quests Stashes Track NightVision Popup

Easy and automatic installation

Simply use the Universal Installer.

Manual installation

You can try to compile the code yourself (you will need a recent Visual Studio, because we are using CSharp 9). You can use a precompiled release as well.

Copy all files in your EFT directory like C:\Battlestate Games\EFT:

  • EscapeFromTarkov_Data\Managed\NLog.EFT.Trainer.dll (this is the compiled code for the trainer)
  • EscapeFromTarkov_Data\outline (this is the dedicated shader we use to outline players [wallhack])

If you are using the Live version (you should NOT do that, you'll be detected and banned):

Rename EscapeFromTarkov_Data\Managed\NLog.dll.nlog-live to NLog.dll.nlog

If you are using sptarkov (https://www.sp-tarkov.com):

Overwrite the existing EscapeFromTarkov_Data\Managed\NLog.dll.nlog using NLog.dll.nlog-sptarkov, or update the existing file accordingly. We must include the following <target name="EFTTarget" xsi:type="EFTTarget" /> in the targets section for the trainer to be loaded properly.

Configuration

console

This trainer hooks into the command system, so you can easily setup features using the built-in console:

Command Values Default Description
autogun on or off off Enable/Disable automatic gun mode
crosshair on or off off Show/Hide crosshair
dump Dump game state for analysis
examine on or off off Enable/Disable all item examined
exfil on or off on Show/Hide exfiltration points
grenade on or off off Show/Hide grenades
health on or off off Enable/Disable full health
hits on or off off Show/Hide hit markers
hud on or off on Show/Hide hud
list <optional filter> List lootable items
listr <optional filter> List only rare lootable items
listsr <optional filter> List only super rare lootable items
load Load settings from trainer.ini
loadtl filename Load current tracklist from file
loot on or off Show/Hide tracked items
night on or off off Enable/Disable night vision
nocoll on or off off Disable/Enable physical collisions
norecoil on or off off Disable/Enable recoil
novisor on or off off Disable/Enable visor
quest on or off off Show/Hide quest POI
save Save settings to trainer.ini
savetl filename Save current tracklist to file
stamina on or off off Enable/Disable unlimited stamina
stash on or off off Show/Hide stashes
status Show status of all features
thermal on or off off Enable/Disable thermal vision
track [name] or * Track all items matching name
track [name] <color> Ex: track roler red
track [name] <rgba> Ex: track roler [1,1,1,0.5]
tracks same as track Track rare items only
tracksr same as track Track super rare items only
tracklist Show tracked items
untrack [name] or * Untrack a name or * for all
wallhack on or off on Show/hide players
wallshoot on or off on Enable/Disable shoot through walls

Sample trainer.ini configuration file

Please note that there is no need to create this file by yourself. If you want to customize settings, use save, edit what you want then use load. This file is located in %USERPROFILE%\Documents\Escape from Tarkov\trainer.ini.

; Be careful when updating this file :)
; For keys, use https://docs.unity3d.com/ScriptReference/KeyCode.html
; Colors are stored as an array of 'RGBA' floats

EFT.Trainer.Features.Aimbot.Key="Slash"
EFT.Trainer.Features.Aimbot.MaximumDistance=200.0
EFT.Trainer.Features.Aimbot.Smoothness=0.085
EFT.Trainer.Features.Aimbot.FovRadius=0.0
EFT.Trainer.Features.Aimbot.ShowFovCircle=false
EFT.Trainer.Features.Aimbot.FovCircleColor=[1.0,1.0,1.0,1.0]
EFT.Trainer.Features.Aimbot.FovCircleThickness=1.0
EFT.Trainer.Features.Aimbot.SilentAim=false
EFT.Trainer.Features.Aimbot.SilentAimNextShotDelay=0.25
EFT.Trainer.Features.Aimbot.SilentAimSpeedFactor=100.0

EFT.Trainer.Features.AutomaticGun.Enabled=false
EFT.Trainer.Features.AutomaticGun.Key="None"
EFT.Trainer.Features.AutomaticGun.Rate=500

EFT.Trainer.Features.Commands.Key="RightAlt"
EFT.Trainer.Features.Commands.X=40.0
EFT.Trainer.Features.Commands.Y=20.0

EFT.Trainer.Features.CrossHair.Enabled=false
EFT.Trainer.Features.CrossHair.Key="None"
EFT.Trainer.Features.CrossHair.Color=[1.0,0.0,0.0,1.0]
EFT.Trainer.Features.CrossHair.HideWhenAiming=true
EFT.Trainer.Features.CrossHair.Size=10.0
EFT.Trainer.Features.CrossHair.Thickness=2.0

EFT.Trainer.Features.Examine.Enabled=false
EFT.Trainer.Features.Examine.Key="None"

EFT.Trainer.Features.FreeCamera.Key="None"
EFT.Trainer.Features.FreeCamera.Forward="UpArrow"
EFT.Trainer.Features.FreeCamera.Backward="DownArrow"
EFT.Trainer.Features.FreeCamera.Left="LeftArrow"
EFT.Trainer.Features.FreeCamera.Right="RightArrow"
EFT.Trainer.Features.FreeCamera.FastMode="RightShift"
EFT.Trainer.Features.FreeCamera.Teleport="T"
EFT.Trainer.Features.FreeCamera.FreeLookSensitivity=3.0
EFT.Trainer.Features.FreeCamera.MovementSpeed=10.0
EFT.Trainer.Features.FreeCamera.FastMovementSpeed=100.0

EFT.Trainer.Features.ExfiltrationPoints.Enabled=true
EFT.Trainer.Features.ExfiltrationPoints.Key="None"
EFT.Trainer.Features.ExfiltrationPoints.CacheTimeInSec=7.0
EFT.Trainer.Features.ExfiltrationPoints.EligibleColor=[0.0,1.0,0.0,1.0]
EFT.Trainer.Features.ExfiltrationPoints.NotEligibleColor=[1.0,0.921568632,0.0156862754,1.0]
EFT.Trainer.Features.ExfiltrationPoints.MaximumDistance=0.0

EFT.Trainer.Features.GameState.CacheTimeInSec=2.0

EFT.Trainer.Features.Grenades.Enabled=false
EFT.Trainer.Features.Grenades.Key="None"
EFT.Trainer.Features.Grenades.CacheTimeInSec=0.25
EFT.Trainer.Features.Grenades.Color=[1.0,0.0,0.0,1.0]

EFT.Trainer.Features.Health.Enabled=false
EFT.Trainer.Features.Health.Key="None"

EFT.Trainer.Features.Hits.Enabled=false
EFT.Trainer.Features.Hits.Key="None"
EFT.Trainer.Features.Hits.HitMarkerColor=[0.882352948,0.258823544,0.129411772,1.0]
EFT.Trainer.Features.Hits.ArmorDamageColor=[0.0,0.494117647,1.0,1.0]
EFT.Trainer.Features.Hits.HealthDamageColor=[1.0,0.129411772,0.129411772,1.0]
EFT.Trainer.Features.Hits.DisplayTime=2.0
EFT.Trainer.Features.Hits.FadeOutTime=1.0
EFT.Trainer.Features.Hits.ShowHitMarker=true
EFT.Trainer.Features.Hits.ShowArmorDamage=true
EFT.Trainer.Features.Hits.ShowHealthDamage=true

EFT.Trainer.Features.Hud.Enabled=true
EFT.Trainer.Features.Hud.Key="None"
EFT.Trainer.Features.Hud.Color=[1.0,1.0,1.0,1.0]
EFT.Trainer.Features.Hud.ShowCompass=true
EFT.Trainer.Features.Hud.ShowCoordinates=true

EFT.Trainer.Features.LootableContainers.Enabled=false
EFT.Trainer.Features.LootableContainers.Key="None"
EFT.Trainer.Features.LootableContainers.CacheTimeInSec=11.0
EFT.Trainer.Features.LootableContainers.Color=[1.0,1.0,1.0,1.0]
EFT.Trainer.Features.LootableContainers.MaximumDistance=0.0

EFT.Trainer.Features.LootItems.Enabled=true
EFT.Trainer.Features.LootItems.Key="None"
EFT.Trainer.Features.LootItems.CacheTimeInSec=3.0
EFT.Trainer.Features.LootItems.Color=[0.0,1.0,1.0,1.0]
EFT.Trainer.Features.LootItems.MaximumDistance=0.0
EFT.Trainer.Features.LootItems.SearchInsideContainers=true
EFT.Trainer.Features.LootItems.SearchInsideCorpses=true
EFT.Trainer.Features.LootItems.ShowPrices=true
; Example: ["foo", "bar"] or with or with extended properties: [{"Name":"foo","Color":[1.0,0.0,0.0,1.0]},{"Name":"bar","Color":[1.0,1.0,1.0,0.8],"Rarity":"Rare"}]
EFT.Trainer.Features.LootItems.TrackedNames=[]

EFT.Trainer.Features.NightVision.Enabled=false
EFT.Trainer.Features.NightVision.Key="None"

EFT.Trainer.Features.NoCollision.Enabled=false
EFT.Trainer.Features.NoCollision.Key="None"

EFT.Trainer.Features.NoRecoil.Enabled=false
EFT.Trainer.Features.NoRecoil.Key="None"

EFT.Trainer.Features.NoVisor.Enabled=false
EFT.Trainer.Features.NoVisor.Key="None"

EFT.Trainer.Features.Players.Enabled=true
EFT.Trainer.Features.Players.Key="None"
EFT.Trainer.Features.Players.BearBorderColor=[1.0,0.0,0.0,1.0]
EFT.Trainer.Features.Players.BearColor=[0.0,0.0,1.0,1.0]
EFT.Trainer.Features.Players.BossBorderColor=[1.0,0.0,0.0,1.0]
EFT.Trainer.Features.Players.BossColor=[1.0,0.0,0.0,1.0]
EFT.Trainer.Features.Players.CultistBorderColor=[1.0,0.0,0.0,1.0]
EFT.Trainer.Features.Players.CultistColor=[1.0,0.921568632,0.0156862754,1.0]
EFT.Trainer.Features.Players.ScavBorderColor=[1.0,0.0,0.0,1.0]
EFT.Trainer.Features.Players.ScavColor=[1.0,0.921568632,0.0156862754,1.0]
EFT.Trainer.Features.Players.ScavRaiderBorderColor=[1.0,0.0,0.0,1.0]
EFT.Trainer.Features.Players.ScavRaiderColor=[1.0,0.0,0.0,1.0]
EFT.Trainer.Features.Players.UsecBorderColor=[1.0,0.0,0.0,1.0]
EFT.Trainer.Features.Players.UsecColor=[0.0,1.0,0.0,1.0]
EFT.Trainer.Features.Players.MaximumDistance=0.0
EFT.Trainer.Features.Players.ShowBoxes=true
EFT.Trainer.Features.Players.BoxThickness=2.0
EFT.Trainer.Features.Players.ShowCharms=true
EFT.Trainer.Features.Players.XRayVision=true
EFT.Trainer.Features.Players.ShowInfos=true
EFT.Trainer.Features.Players.ShowSkeletons=false
EFT.Trainer.Features.Players.SkeletonThickness=2.0

EFT.Trainer.Features.Quests.Enabled=false
EFT.Trainer.Features.Quests.Key="None"
EFT.Trainer.Features.Quests.CacheTimeInSec=5.0
EFT.Trainer.Features.Quests.Color=[1.0,0.0,1.0,1.0]
EFT.Trainer.Features.Quests.MaximumDistance=0.0

EFT.Trainer.Features.Skills.Key="None"

EFT.Trainer.Features.Speed.Key="None"
EFT.Trainer.Features.Speed.Intensity=50.0

EFT.Trainer.Features.Stamina.Enabled=false
EFT.Trainer.Features.Stamina.Key="None"

EFT.Trainer.Features.ThermalVision.Enabled=false
EFT.Trainer.Features.ThermalVision.Key="None"

EFT.Trainer.Features.WallShoot.Enabled=true
EFT.Trainer.Features.WallShoot.Key="None"
EFT.Trainer.Features.WallShoot.CacheTimeInSec=5.5

EFT.Trainer.Features.WorldInteractiveObjects.Key="KeypadPeriod"

Mono injection

EFT is using:

  • Battleye for process isolation, so you cannot use trivial mono injection techniques as SharpMonoInjector.
  • Hash verification and a basic assembly obfuscation to prevent assembly patching. It is still possible to use Reflexil or DnSpy to patch the game and the loader, but this is to be done for each update. You can also paste a patched payload just after the hash check, and before the file is really loaded by the mono runtime.

Given I was not able to “force push” my code into the EFT AppDomain, I searched a way for my code to be pulled by EFT directly. So, using ILSpy, I audited all calls to Assembly.Load* methods, and given EFT is using the NLog framework, I was able to find the following:

ilspy

NLog is auto-loading all assemblies located in the Managed folder (where the main Nlog.dll is located), if they start with the name NLog.

So from here I was able to load my code, given I copied my NLog.EFT.Trainer.dll to the managed folder:

process monitor

After that, I needed a way to have an initial call to my code. In the .NET world you have something named module initializers, but before going this way, I found again another trick using NLog:

ilspy

If you create a file named “Nlog.dll.nlog” along with the NLog.dll file, it will be auto-loaded by default:

process monitor

So I just crafted a proper config file, making NLog invoking the ctor of my stub Logger Target :

config

[Target(nameof(EFTTarget))]
public sealed class EFTTarget : TargetWithLayout
{
	public EFTTarget()
	{
		Loader.Load();
	}
}

Then, I’m now loaded in the Game AppDomain, I can hook to the current gameObjects:

public class Loader
{
    public static GameObject HookObject
    {
        get
        {
            var result = GameObject.Find("Application (Main Client)");
            if (result == null)
            {
                result = new GameObject("Trainer");
                Object.DontDestroyOnLoad(result);
            }
            return result;
        }
    }
    
    public static void Load()
    {
        HookObject.AddComponent<TrainerBehaviour>();
    }
}

I can then use all the EFT API surface. Finding GameObjects, getting components and calling methods. When something is private or obfuscated, I can even use Reflection:

private static void UnlockDoors(Player player)
{
    var doors = FindObjectsOfType<Door>();
    foreach (var door in doors)
    {
        // door unlocker
        if (door == null)
            continue;

        if (door.DoorState != EDoorState.Locked)
            continue;

        var offset = player.Transform.position - door.transform.position;
        var sqrLen = offset.sqrMagnitude;

        // only unlock if near player, else you'll get a ban if you brute-force-unlock all doors
        if (sqrLen <= 20.0f)
            door.DoorState = EDoorState.Shut;
    }
}

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.