Exploit Fingerprint Catalog

# What are Behavioral Fingerprints?

Modern script executors inject bundles of scripts that alter multiple game mechanics simultaneously. Rather than viewing a speed violation and a vertical displacement spike in isolation, RAC's AI Engine clusters them into recognizable behavioral signatures.

---

# 1. Movement Manipulation Suite

• Associated Detectors: Speed, Fly, InfiniteJump, Noclip
• Minimum Correlated Triggers: 2
• Base Confidence: 85%
• Assigned Risk: High
• Default Recommendation: TempBan
• Algorithmic Justification: Simultaneous horizontal velocity exceeding standard limits and ground detachment without physics support indicates an injected movement suite (e.g. infinite jump + fly + speed bypass).

---

# 2. Kill-All / Silent Aim Pattern

• Associated Detectors: ReachValidator, FireRateValidator, WeaponDamageValidator
• Minimum Correlated Triggers: 2
• Base Confidence: 92%
• Assigned Risk: Critical
• Default Recommendation: PermBan
• Algorithmic Justification: Extremely high damage output paired with impossible reach distances across sub-second attack intervals. Characteristic of "Kill-All" exploits or silent-aim target loops.

---

# 3. Remote Packet Flooding & Tamper

• Associated Detectors: RemoteRateLimiter, RemotePayloadValidator, Honeypot
• Minimum Correlated Triggers: 2
• Base Confidence: 95%
• Assigned Risk: Critical
• Default Recommendation: PermBan
• Algorithmic Justification: Rapid-burst remote invocations exceeding $35\text{ calls/sec}$ combined with malformed table structures or decoy honeypot hits. 100% indicative of external script executors scanning or brute-forcing remotes.

---

# 4. State Tampering & Godmode

• Associated Detectors: PropertyTamper, GodMode, StateAbuse
• Minimum Correlated Triggers: 2
• Base Confidence: 88%
• Assigned Risk: High
• Default Recommendation: Kick
• Algorithmic Justification: Unauthorized modification of character Humanoid.WalkSpeed or MaxHealth on the server, paired with failure to register verified incoming damage.

---

# Next Steps

• Understand how confidence is calibrated in False-Positive Analysis.
• Tour the Bento Admin Dashboard to view live AI reports.