Show HN: Triggering anti-cheats with just a browser tab title

Category: security

Tags: anti-cheat, security, proof-of-concept

Score: 4.0/10 (Innovation: 4, Technical: 3, Documentation: 4, Utility: 5)

DontTrustTitles is a proof-of-concept HTML page that repeatedly changes the browser tab title to names of reverse engineering tools (e.g., x64dbg, Cheat Engine) to trigger anti-cheat systems in games like Fortnite. It cleverly exploits how games scan window titles, causing false positives that can lead to kicks or bans even without any actual cheating tools installed. This project is interesting as a security research demo and raises awareness about the limitations of title-based anti-cheat detection.

Target audience: security researchers, game developers, reverse engineers

Repository: https://github.com/elliott-diy/DontTrustTitles · HTML · 5 stars

View on Hacker News