erfg, while your software is good, and does prevent some smaller levels of detection, its not perfect. since unknownlegend says he can detect it with his server i checked it out on mine, yes it is detectable with the current build of EQEmu straight from their github.
how the detection currently works is it looks to see if a player's movement (warp/speed) is higher than possible and if it is, what caused it (was this a door like in BoThunder). if it has no reason to the cause it assumes your guilty of hacking and places you into a pretty little list of other people suspected of hacking. the way we have always got around this was by doing what we called jumped warps. if i want to go from X:-1234 Y:4 Z:67 to X:-1234 Y:10 Z: 67 then i need to warp to each of the Y in between (for loops are great for this) how the code basically breaks down to is it grabs your current server side location each time you do a location update, then compares that with your last location update, if the distance is greater than possible by legit means than mark as a warp (legit max distance is 300 on most servers to account for lag spikes and other variables like if you have a speed increase buff of any sort or you use shadowstep)
so with all of this in mind, here is what is the most important, you can not possibly go more than 300 units of 3D distance using warp without being detected. there is no work around on this, its all server sided, its unbreakable.
if i can find it i'll post one of my old snippets for how to properly warp and not be detected. its not perfect, but it gets the job pretty well done. and in all the time i've been playing i've only been detected once because the gm noticed i was gaining levels at a extremely fast rate and watched me for about a week while hidden so that my bot couldn't detect him.
next section. Zone hacks.
ALL ZONE HACKS ARE DETECTABLE. period. no ways around it. no you can not just send the packet and jump from one zone to another, nor can you send a packet and fade/succor or any of those.
the only way i see around this is if you write down each and every zone line location, then your program pulls the location of the zone line and does mini warps to it. but even this *COULD* be detected by outside methods that i aren't in place yet, IE logs, timestamps of when you zoned in and when you zone out, ect. all of these can and possibly are in place on p99. they have a pretty decent mq detection system on their server, and the source code for their particular server is not public so idk what they really can do or what they can detect.
btw erfg i know for a fact that p99 does ban waves. the reason you got a insta ban was probably because someone actually reported you and they don't want to look like they don't care or you were using a careless method that they have on a insta ban script. (this wouldn't surprise me ether)
the reason servers like p99 and such do ban waves instead of insta bans is because insta bans give away what can they detect. think of it as a obsolescence. if you use speed on day 1, warp on day 3, zone on day 4, and got banned on day 15, what truely got you banned? where as if you use speed on day 1, warp on day 2, got insta banned on the first or second warp, then we know what got you banned. and we can attempt other methods to bypass the detection method.
erfg if you TRUELY want a completely undetectable program, here is what you need to do, first go get a vpn, a good one... and a bunch of accounts that have absolutly no link to each other, (not even through eqemu's website since rog is a admin there... so this is also going to take a LOT of email addresses) make all the accounts, use the vpn while your making each account and change ip in between once they are all created (notepad is very helpfull with remembering all the passwords and account names), log on the first one, test ONE function, log off, change ip, log on next account, test ONE function, log off, ... i think you get it from here...
now after you've tested each active hack, loading... please wait...
you might need to wait a few days, a few weeks, hell, maybe a year but any case, there will be a clear sign on when you need to go to step 3? (i don't remember what step it is really)
ANNOUNCEMENTS: BAN HAMMER HAS FALLEN! 4000 ACCOUNTS BANNED!!! <---- theres your sign...
this means they have done a ban wave.. now.. open that vpn again and change your ip, log on account 1, is it good? ok that method is safe, change ip, ... pretty sure you can figure this all out... break out that note pad again all the accounts that are not ban'd, thats your safe methods, all the accounts that are, thats your not safe methods...
*note the safe methods CAN be still unsafe, new detection methods might of came out. they might of let yours slip through for some odd reason.
this is the method that i used on live when i was testing new hacks out, its not perfect. server admins and active hack devs are constantly playing a cat and mouse game
my best suggestion is NEVER think you've got them beat and take EVERY ban report serious. while it might be something just went wrong and the person got reported and didn't know it, it still might be relevant.
- - - Updated - - -
i really should write a book on all the stuff i know on this crap... and to think... i don't even play anymore rofl...