Skip to content

Sutaigne/alibi

Repository files navigation

Alibi

Someone thinks you're cheating. You know you're not. Alibi helps you prove it.

You run one scan — right-click, wait a couple of minutes — and four files land on your Desktop: two plain-text reports and two visual HTML versions of the same thing. Send them to whoever asked: the tournament admin, the Discord mod, the lobby that called you out. That's the whole flow.

Under the hood it's a read-only forensic kit for Windows: it looks at your machine the way an investigator would and writes down what it finds, without changing anything. No install, no account, no telemetry — nothing about your PC leaves your PC. The one optional network call (downloading a public driver-safety list) asks permission first and is disclosed in every report.

Primarily built for Call of Duty, but the same engine covers CS2, Apex, Tarkov, Rust, R6, and Marvel Rivals.

Author: Bread — Activision ID Bread#3266221, GitHub @Sutaigne.


Quick start

  1. Get the kit: download alibi.zip from the latest release, then unzip it. (Use this built kit — not GitHub's "Download ZIP", which includes developer-only folders.)
  2. Right-click Run scan.batRun as administrator.
  3. Click YES on the UAC prompt and wait ~2–3 minutes.
  4. Collect the four output files from your Desktop and send the ones with findings.

New here? Read START HERE.txt first.

Why two scans?

Mode Looks at your PC as… Detects
PC a PC gamer's machine PC cheats, DMA artifacts, HWID spoofers
Console-rig a PC wired into a console rig capture-card software, vision aimbots, XIM/Cronus/ReaSnow adapters

Running both covers every scenario this PC could be involved in. If you only play one way, the other report will be CLEAN — that's expected. The relevant report is the one with findings.

Verdict tiers

Mode Verdicts
PC CHEATS DETECTED / INPUT DEVICES DETECTED / UNSURE / CLEAN
Console-rig MITM CHEAT STACK DETECTED / CAPTURE STACK PRESENT / UNSURE / CLEAN

What it looks like

Every scan writes a self-contained _visual.html next to the .txt report — verdict banner, recent-findings breakdown, a named "why this verdict" list, a log-scale recency timeline, and a per-scanner category signal map. No external assets; it works offline.

🔴 PC — CHEATS DETECTED

Alibi PC report showing a red CHEATS DETECTED verdict with named findings, recency timeline, and category signal map

🟡 Console-rig — CAPTURE STACK PRESENT

Alibi console-rig report showing an amber CAPTURE STACK PRESENT verdict, disclosed streamer/capture stack, and reviewer note

🟢 PC — CLEAN

Alibi PC report showing a green CLEAN verdict with all 14 detector groups returning no matches

Live, interactive example reports (full HTML, no download) are hosted at sutaigne.github.io/alibi — synthetic data rendered in the report's real layout. The hosted examples may lag the newest release.

Safety in one line

Every scan is read-only. Nothing leaves your machine. Every script under alibi-engine/scanner/ is plain text you can open and read. Search for Invoke-Web and you'll find exactly one result — the opt-in LOLDrivers fetch. Search for Remove-Item or Set-Item and you'll find none in the scan path.

Documentation

Doc For
alibi-engine/README.md Full technical README — what it detects, auditability, project history
docs/for-reviewers.md Reviewer guide — someone handed you a report and wants you to trust it
SECURITY.md Disclosure policy + antivirus / SmartScreen false-positive explanation
HASHES.txt Verify the kit you received matches this repo: sha256sum -c HASHES.txt

If your browser blocks the download as a virus: that's a known SmartScreen/AV false positive — an anti-cheat scanner ships the exact keyword patterns AV hunts for. Every file is plain readable source; verify against HASHES.txt or upload the ZIP to VirusTotal. Full explanation in SECURITY.md.

Requirements

  • Windows 10 or 11
  • Administrator (UAC) — without it, the scan loses access to Prefetch, BAM, USB history, driver-signing flags, ShimCache, and the full process module list
  • ~1 MB free disk space; no internet needed for the core scan

License

MIT — see LICENSE. Free to read, run, fork, redistribute.

About

Someone thinks you're cheating? Prove them wrong. One read-only scan, four report files on your Desktop, nothing installed or changed. PowerShell, open source, covers CoD / CS2 / Apex / Tarkov / Rust / R6 / Marvel Rivals plus DMA, BYOVD drivers, and AI-vision aimbots.

Topics

Resources

Stars

1 star

Watchers

0 watching

Forks

Packages

 
 
 

Contributors