Cheat glossary: ESP, HWID, aimbot and 68 more terms

A cheat is undetected when the game's anti-cheat has no working signature for it and cannot identify it in memory or on disk. It describes a current state, not a permanent property — anti-cheats update constantly, so undetected status is something a provider maintains rather than achieves once.

Also called: Hardware ID

A fingerprint built from your hardware — motherboard, disk, network adapter and other serials. Games use it to ban a machine rather than an account, so a banned player cannot simply make a new account. Licences are usually locked to one HWID to stop key sharing, including every SERYX FiveM licence. Each FiveM licence also includes a HWID spoofer.

A tool that changes the hardware identifiers a game or anti-cheat reads, so that a hardware ban tied to the old values no longer matches your machine. It does not change account identifiers or your IP address, so it is not a guaranteed unban, and it does not prevent a future ban. Every SERYX FiveM licence includes one.

Clearing the hardware fingerprint attached to your licence so it can bind to a new machine. Needed after replacing components, reinstalling Windows, or moving to a different PC.

Also called: Extra Sensory Perception / Wallhack

An overlay that draws information you could not otherwise see — player boxes, health bars, names, distances, and items through walls. ESP is informational rather than mechanical: it changes what you know, not where your crosshair goes. See configurable ESP in the SERYX FiveM menu.

Assists or automates aiming at a target. Quality is judged by how configurable it is — smoothing, field of view, bone targeting — because an aimbot that snaps instantly across the screen is obvious to spectators and to server-side analysis. See the aimbot settings in SERYX FiveM.

Shots register on a target without the crosshair visibly moving toward it. To spectators and to a recording, the player's aim looks unremarkable, which makes it far less obvious than a conventional aimbot. Silent aim for FiveM is included in every SERYX FiveM plan.

Fires automatically the moment your crosshair crosses a valid target. You still aim yourself, so it reads as fast reactions rather than assisted aim.

Also called: Recoil Control

Cancels or compensates for weapon kick so shots land where you point. Especially significant in Rust, where recoil mastery is otherwise a large part of the skill gap.

A minimap overlay showing player positions around you. Lower risk than aim assistance because it never touches your input — it only changes what information you have.

Also called: OBS Proof

The overlay is invisible to screen capture, so streaming or recording software sees a clean game. Essential for anyone recording content, since the most common way cheaters are caught is showing their own overlay on camera. SERYX ships a stream-proof FiveM menu as standard.

Anti-cheat that runs at ring 0, the same privilege level as Windows itself, giving it visibility into everything on the system. Vanguard and modern BattlEye and EAC builds work this way, which is why they are far harder to work around than user-mode anti-cheats.

A widely deployed anti-cheat used by many multiplayer games, combining signature scanning, heuristics and periodic ban waves rather than instant detection.

Riot's anti-cheat, used by Valorant. It loads at boot before Windows finishes starting, which makes it one of the most invasive and most difficult anti-cheats in wide use.

Rather than banning on detection, anti-cheats often collect evidence quietly and ban in batches. This hides which detection method caught you and makes it harder for providers to identify what to fix. It is also why 'it worked yesterday' is not evidence that something is undetected.

The small application that authenticates your licence and injects the cheat into the game. Loaders are usually built per user and per session, so the same file is never distributed twice. The SERYX FiveM loader is downloaded from your dashboard after purchase.

Loading cheat code into the game's process so it can read and modify game memory. Manual mapping is a stealthier variant that avoids the Windows loader's own records of what was loaded.

A saved set of feature settings — aimbot smoothing, ESP colours, key binds. Good configs are the difference between looking like a strong player and looking obviously assisted, which is why shared config libraries matter.

A one-time purchase valid for as long as the product exists. Cheaper than repeated subscriptions if you play long-term, but it is worth understanding a provider's track record before betting on longevity.

An authorised partner who buys keys at wholesale and sells them through their own storefront. Buying from a legitimate reseller is safe; the risk is impostors, so verify a seller against the provider's official list.

Also called: Chameleon Materials

Replaces player models with a flat, solid colour that renders through walls. Cruder than skeleton ESP but far easier to read at a glance in a firefight, which is why some players prefer it.

Also called: Snaplines

Lines drawn from a fixed point on your screen to each player, showing direction and rough distance. Useful for tracking players you cannot see, cluttered on a busy server.

Restricts a feature to targets you could actually see. An aimbot with visibility checking will not lock through a wall, which is both more useful and far less obvious than one that targets anyone in range.

Slows how quickly an aimbot moves your crosshair to the target. High smoothing looks like a skilled player; zero smoothing snaps instantly and is the single most recognisable tell in a spectator clip.

Also called: Field of View

The cone around your crosshair inside which the aimbot will consider a target. A wide FOV assists constantly and looks artificial; a narrow one only helps when you are already close to on-target.

Also called: Hitbox Targeting

Which part of the model the aimbot aims at — head, chest, pelvis, or nearest bone. Head targeting kills fastest and is the most obvious; chest is the usual compromise.

Removes the random deviation applied to each shot, so rounds land exactly where you aim. Distinct from no recoil, which cancels the weapon's upward kick rather than its randomness.

Redirects a fired round to a target regardless of where the weapon was pointing. More aggressive than silent aim and correspondingly easier for server-side checks to flag as implausible.

Also called: Bhop

Automates the timed jumping that preserves momentum in Source-engine and similar movement systems. A movement advantage rather than an aim one, and usually low risk.

Prevents your character taking damage. Trivially detectable server-side, since the server knows exactly how much damage it applied and what your health should be. Among the fastest ways to get banned.

Increases movement speed beyond the game's limit. Like godmode, the server can measure it directly — a player covering ground faster than any vehicle is not a subtle anomaly.

Moves your character instantly to a chosen position. High risk for the same reason as speed hacking: position is authoritative on the server and impossible jumps are plainly visible in logs.

Marks vehicles and shows whether they are occupied. Especially relevant in FiveM roleplay, where knowing whether a parked car contains a player changes how you approach it.

Also called: Item ESP

Highlights items, containers and drops through the world, usually filterable by rarity. The defining feature for survival and battle-royale games where finding gear is most of the early game.

The catch-all category for things affecting your own character rather than others — movement tweaks, camera changes, inventory helpers. Usually the lowest-risk section of any menu.

Leads a moving target so the round arrives where they will be, accounting for projectile travel time and drop. Essential at long range in games where bullets are not instant.

Also called: EAC

An Epic-owned anti-cheat used across a large number of titles, including Fortnite and Rust. Modern builds run at kernel level and combine signature scanning with behavioural analysis.

FiveM's built-in anti-cheat. Most enforcement on roleplay servers, though, comes from server-side scripts and human moderators rather than Adhesive itself — which is why staying plausible matters more than raw client stealth.

Scanning memory or files for byte patterns known to belong to a specific cheat. It is why publicly downloadable cheats die fastest: anyone can obtain one and extract its signature, including the people writing the scanner.

Flagging behaviour rather than code — aim curves too smooth to be human, reaction times below biological limits, accuracy that never varies. This is why conservative settings matter: the software can be invisible while your behaviour is not.

The anti-cheat captures your screen and sends it for review. Stream-proof rendering defeats most implementations, because the overlay is excluded from capture in the same way it is excluded from OBS.

You are flagged but not told — typically matched only against other flagged players, or silently excluded from normal matchmaking. Designed so you cannot tell which detection caught you.

Also called: Hardware Ban

A ban applied to your machine rather than your account, so creating a new account does not help. This is what a spoofer exists to address. On FiveM, a server ban usually records your account identifiers (FiveM licence, Steam, Discord, Xbox Live) and IP address as well as hardware tokens, so a spoofer only covers the hardware part.

Checks run on the server, which knows the authoritative game state. It cannot see your software, only your behaviour — which makes it immune to client-side stealth and the reason implausible actions get punished regardless of how hidden your menu is.

Security software flagging something harmless. Every kernel-level injector trips Windows Defender, so the alert is expected rather than evidence of a problem.

Code injected into the game's own process, giving direct access to memory and rendering. Faster and more capable than an external, but it is inside the process the anti-cheat is watching most closely.

Runs as a separate process, reading game memory from outside. Less capable than an internal but harder to detect, since nothing foreign is loaded into the game itself.

Loading code into a process without using the Windows loader, so the module never appears in the standard list of what is loaded. A stealthier alternative to conventional injection.

Also called: Kernel Mode

The most privileged processor level, where Windows itself runs. Anti-cheats operating here see everything on the system, which is why kernel-level protection is so much harder to work around than user-mode.

Also called: User Mode

The privilege level ordinary applications run at. A user-mode cheat cannot hide from a kernel-mode anti-cheat, which is the core asymmetry in modern anti-cheat design.

Software running beneath the operating system itself. A hypervisor-based cheat sits below anything the OS — and therefore anything the anti-cheat — can observe, which is why virtualization must be enabled for some loaders.

Memory addresses identifying where the game stores particular values. Game updates move them, which is why a patch breaks a cheat until an update ships — most downtime you experience is offsets being remapped.

The layer drawn on top of the game to display ESP and menus. How it is drawn determines whether capture software can see it — which is exactly what stream-proof rendering controls.

Also called: Patch

A new game build shifts memory layout and usually breaks cheats until they are rebuilt against it. Responsible providers pause sales during this window rather than selling keys that will not work.

A UEFI feature that only permits signed code to load at boot. It blocks unsigned drivers, which is why setup guides ask you to disable it in BIOS before first launch.

Also called: VT-x / AMD-V / SVM

CPU support for running virtual machines, enabled in BIOS. Required by loaders that use a hypervisor, and off by default on many motherboards.

Also called: Trusted Platform Module

A chip storing hardware-backed cryptographic identifiers. Another value anti-cheats can read to fingerprint a machine, and part of what a spoofer has to address on modern systems.

Also called: Direct Memory Access

Reading game memory from a second machine using a dedicated PCIe card, so no cheat software runs on the gaming PC at all. Expensive and complex, but the hardest approach to detect because there is nothing to find.

A hardware device that injects mouse and keyboard input, so movement arrives as genuine USB input rather than a software call. Usually paired with a DMA setup.

A multiplayer modification framework for GTA V that lets people run custom servers, most of them roleplay. Servers are independently operated, so enforcement varies enormously between them and is usually driven by human moderators.

A free, open-source FiveM menu that server owners install on their own server, giving players and staff trainer and admin options limited by the server's permissions; it is not a cheat, and players only get it on servers that run it.

A free trainer-style menu that FiveM server owners can add to their own server as a resource; like vMenu, it is not a cheat, and players only get it on servers that run it.

Also called: RP Server

A FiveM server where players stay in character with enforced rules. Because moderation is human rather than automated, the realistic risk is being reported for behaviour rather than detected by software.

The last-player-standing format used by Fortnite and others. Loot ESP matters disproportionately here, because early-game gear largely determines whether you survive to the end.

A scheduled reset of all progress on a Rust server. Wipe day is the most competitive window of the cycle and the point at which most short-duration keys are bought.

Sold to a limited, paying userbase rather than distributed publicly. The restricted circulation is the security model: fewer copies in the wild means fewer samples reaching the people writing detection.

Also called: Free Cheat

Freely downloadable and therefore available to anti-cheat vendors on the same terms as everyone else. Detection typically follows quickly, and because there is no revenue, distribution is often monetised in ways that are not in the downloader's interest.

Also called: Skid

A cheat assembled from leaked or copied source with little original work. Inherits every signature of whatever it was copied from, so it tends to be detected almost immediately.

Time-limited access — a day, week or month — that expires unless renewed. Short durations suit testing or a single Rust wipe; lifetime is cheaper if you intend to keep playing.

A reduced per-key price for buying several at once, tiered by quantity. Relevant to resellers stocking inventory rather than individual players.

Disputing a payment through your bank instead of asking the seller for a refund. It costs the merchant the sale plus a fee, and nearly always results in the account and hardware being permanently blocked. Contact support first — it is faster and it keeps your access.