fade-null core was pretty much an insta vac for a super long time pretty much immediately after release and it wasn't even a paste.
like if i'm wrong please tell me
you're wrong, it was detected twice and both times were due to testers sending it to valve. ever since that the userbase has been purged twice and the loader has actual security now (NCC binary was never detected).
also good luck ban evading esea without actually swapping your hardware. even after using software solutions like organner's chameleon (lol) which change your hwid+mac and stuff for you esea still slapped a year-long (not sure on length) ban for ban evasion.
fade-if i recall correctly ur config also gets blacklisted too on either cevo or faceit or both so if you play again with the exact same config you get flagged at the very least or banned (idk) i'm not sure how this works if you decide to copy paste a pro's config though
faceit does this in CS:GO, not sure if they'll implement this in tf2 though
fade-even more for vac where i'm sure that valve / game devs would love to manually ban cheaters
valve has given game devs the possibility of doing this via game bans, too bad most devs don't actually go through with them even after they acknowledged that one exact person is basically destroying the game*cough* kelse in contagion *cough*
fade-can you also explain how cheats that literally do not inject into the game process get vac detected?
you should ask tristan that, his cheat seems to get hit more than polak's with a smaller userbase.
dollarlayerLike implement random hidden hitboxes in maps that aim hacks will try to lock onto. If the cheater has a lot of false shots on these hidden hitboxes = ban.
this is pointless because you could filter out those hitboxes if your cheat actually shot them and most cheats wouldn't aim at them without any filtering.
DarkNecridI dunno what method people use anymore to not inject into the game tho, if that's still common or not, haven't kept super up to date on this since my interest in TF2 itself has waned.
they read and write the process memory, it's a gimmick at this point since your chance of getting detected is as high as when you go internal.