Where it comes from

This is a refactored version of the anticheat its author ran on their own server for more than five years. The detection list was built from cases that actually happened. It handles the common exploit patterns and otherwise stays out of the way.

Everything runs on the server, and it does not depend on a framework. It fits ESX, QBCore, Qbox or a custom base.

What it stops

Super punch. The overpowered melee exploit is blocked.

Entity spam. Players who mass spawn vehicles, objects or peds are caught. Limits can be set per model and per entity type.

Fake events. A preloaded list of server events is blocked, so attempts at fake job payments and similar tricks lead to a ban.

Restricted models. A curated list of 841 props, vehicles and peds is cancelled or banned on spawn.

Weapon natives. Players cannot give weapons to others, or remove them, through specific natives.

Bans that stick

• Bans are stored in the script's own database table. You can connect it to an existing ban system.
• Players are tracked across several identifiers, tokens included.
• When a banned player tries to rejoin, the ban record is updated.

Your rules

Each violation has its own action. A detection can ban, log or do something else. The script is written to keep resmon low while the checks run.

Commands

• /gs_ban [playerId] bans a player by server ID. A reason is optional.
• /gs_removeban [banId] removes a ban by ban ID.
• /gs_refreshbans reloads bans from the database after manual edits.
• /gs_blockentities [playerId] temporarily stops a player from spawning entities.
• /gs_unblockentities [playerId] lifts that restriction.
• /gs_entitycleanup [playerId] deletes entities the player spawned recently.