How to properly ban evade
I ll give you instruction how to ban evade on kernel level anti cheat tools like faceit or vanguard:
1. You need a router where you can spoof the MAC address. Every Linux System can do this with ifconfig command: ifconfig wlan0 hw ether 00:50:EF:AB:CD:EF
Also disable all onboard devices: Bluetooth, network card, Wi-Fi, LED, etc. on your gaming PC before you connect anything to your new Linux router.
The easy method would be to buy a 2nd small pc with 2 ethernet cards. Connect the gaming pc to one of the ethernet cards directly and the other ethernet card you connect to your router. Then you assign an ip to your linux pc for example 10.255.255.254 with subnet mask /24 or 255.255.255.0. Then you connect your gaming pc to that network card where you previously assigned that ip. After that you login directly on the linux pc. DO NOT use SSH since the key can be saved and read from anti cheat later. Set ip address of your gaming pc manually to 10.255.255.1 and subnet mask to 255.255.255.0 and gateway 10.255.255.254. Set the DNS Server to 8.8.8.8 and alt dns to 8.8.4.4.
Configure NAT and Routing on the Linux Router according to your linux distro.
The important thing here the mac spoof must be done on the interface where you set the 10.255.255.254 IP Address. You dont need to spoof the MAC of the interface which is connected to your real router.
Connect the 2nd network card directly to your router.
2. You need a USB network adapter where you can flash the MAC address. Google it some vendors known for selling cheat hardware have these.
3. You need an NVMe disk where you can flash the vendor and serial number. The same applies here some known cheat hardware sellers do sell these disks.
4. Using the DMIEdit tool, set the motherboard's serial number and UUID to all zeros.
5. Then check with tools like HWiNFO and USB Device View to see if any other device (e.g., RAM, GPU, etc.) still has a serial number. If yes, check how to change it, or replace the GPU (AMD cards usually don’t have a serial number) or the hardware which does have a serial like RAM, LED-Controllers, Audio Devices, Headsets, Mouse and Keyboard.
6. Buy an HDMI EDID emulator from a store and flash its firmware. Make sure that the edid emualtor is not write protected. You may have to ask the seller first.
There is a linux software for that called edid-rw from developer "bulletmark Mark Blakeney ". You can find the software on github.
With this software you can export your current EDID from current monitor then open the firmware with edid tool or hex editor and stripe out the serial numbers. Since EDID is a open standard you can paste the content of the firmware file to a edid reader tool and experiment by setting the appropiate bytes to 00. I recommand some online edid parser tools to accomplish this.
After that save the bin file again and flash it to your edid emulator. Then make sure that your monitor is connected through the edid emualtor only since you may destroy edid of monitor if done not correctly.
7. Wipe all disks using diskpart clean.
8. Install Debian, then in the UEFI/BIOS perform a TPM 2.0 reset and install tpm2-tools.
Run the following commands:
tpm2_clear
tpm2_createprimary -C e -g sha256 -G rsa -c primary.ctx
tpm2_readpublic -c primary.ctx -f pem -o endorsem
tpm2_evictcontrol -C o -c primary.ctx 0x81010001
Install Windows after you have installed Debian (Dual Boot):
Dont use your product key instead use a kms client key which is generic to every install. You can find the kms client keys on the microsoft website. Be aware you have the watermark that you windows install may not be genuine. There are KMS Server emulators out there which you can run on your linux router too like pykms which then shows your client as activated. You just need to point the kms server with slmgr.vbs -skms 10.255.255.254 amd slmgr.vbs -ato after you installed the pykms tool on your linux router or you just ignore that message. You Windows will run perfectly fine without beeing activated.
In Windows PowerShell, run the command:
Get-TpmEndorsementKeyInfo -Hash "Sha256"
The PublicKeyHash value from the PowerShell command must be different from the original endorsement key of the TPM module.
9. Before you install the AntiCheat show non present devices in windows device manager and delete them all.
Do NOT connect any hardware you previously had connected with serials to your pc. Also keep in mind that usb flash drives etc do also have serial numbers.
10. DO NOT use any payment methods on gaming pc. Do it outside of the PC. Also do not log in old Accounts or Social Media.
Dont forget to get a new wan ip too by restarting your real router.
 |
