EscapeFromTarkov-Trainer
I'm not responsible for any consequences that result from using this code. BattleState / BattlEye will ban you if you try to use it 'live'.
TLDR => Use the Universal Installer. Default key for in-game GUI is Right-Alt
.
This is an attempt -for educational purposes only- to alter a Unity game at runtime without patching the binaries (so without using Cecil nor Reflexil).
master
branch can build against EFT 0.12.12.17349
(tested with spt-aki Version 2.3.1
). If you are looking for another version, see branches
and releases
.
If you want to compile the code yourself, make sure you cleaned-up your solution properly after upgrading your EFT/sptarkov bits (even removing
bin
andobj
folders) and check all your references.
If you are using
SPT-AKI
, please make sure you have run the game at least once before compiling/installing the trainer.SPT-AKI
is patching binaries during the first run, and we need to compile against those patched binaries.
The typical issue when something is out of sync is that the game will freeze at the startup screen with type/tokens errors in
%LOCALAPPDATA%Low\Battlestate Games\EscapeFromTarkov\Player.log
Features
trainer.ini section | GUI/console | Description |
---|---|---|
Aimbot |
aimbot |
Aimbot (distance, smoothness, silent aim with speed factor and shot delay, fov radius, fov circle). |
AutomaticGun |
autogun |
Force all guns (even bolt action guns) to use automatic firing mode with customizable fire rate. |
Commands |
commands |
Popup window to enable/disable all features (use right-alt or setup your own key in trainer.ini). |
CrossHair |
crosshair |
Crosshair with customizable size, color, thickness and auto-hide feature when aiming. |
Examine |
examine |
All items already examined. |
ExfiltrationPoints |
exfil |
Exfiltration points with customizable colors given eligibility, status filter, distance. |
FreeCamera |
camera |
Free camera with fast mode and teleportation. |
Grenades |
grenade |
Grenades outline. |
Health |
health |
Full health, prevent any damage (so even when falling), keep energy and hydration at maximum. |
Hits |
hits |
Hit markers (hit, armor, health with configurable colors). |
Hud |
hud |
HUD (compass, ammo left in chamber / magazine, fire mode, coordinates). |
LootableContainers |
stash |
Hidden stashes like buried barrels or ground caches. |
LootItems |
loot |
List all lootable items and track any item by name or rarity in raid (even in containers and corpses), with prices. |
NightVision |
night |
Night vision. |
NoCollision |
nocoll |
No physical collisions, making you immune to bullets, grenades and barbed wires. |
NoRecoil |
norecoil |
No recoil. |
NoVisor |
novisor |
No visor, so even when using a face shield-visor you won't see it. |
Players |
wallhack |
Wallhack (you'll see Bear/Boss/Cultist/Scav/Usec with configurable colors through walls). Charms, boxes, info (weapon and health), skeletons and distance. |
Quests |
quest |
Locations for taking/placing quest items. Only items related to your started quests are displayed. |
Skills |
skills |
All skills to Elite level (51) and all weapons mastering to level 3. |
Speed |
speed |
Speed boost to be able to go through walls/objects, or to move faster. Be careful to not kill yourself. |
Stamina |
stamina |
Unlimited stamina. |
ThermalVision |
thermal |
Thermal vision. |
WallShoot |
wallshoot |
Shoot through wall/helmet/vest/material with maximum penetration and minimal deviation/ricochet. |
WorldInteractiveObjects |
opener |
Door/Keycard reader/Car unlocker. |
You can Load/Save all settings using the console
or the GUI
.
Easy and automatic installation
Simply use the Universal Installer.
Manual installation
You can try to compile the code yourself (you will need a recent Visual Studio, because we are using CSharp 9). You can use a precompiled release as well.
Copy all files in your EFT directory like C:\Battlestate Games\EFT
:
EscapeFromTarkov_Data\Managed\NLog.EFT.Trainer.dll
(this is the compiled code for the trainer)EscapeFromTarkov_Data\outline
(this is the dedicated shader we use to outline players [wallhack])
If you are using the Live version (you should NOT do that, you'll be detected and banned):
Rename EscapeFromTarkov_Data\Managed\NLog.dll.nlog-live
to NLog.dll.nlog
https://www.sp-tarkov.com):
If you are using sptarkov (Overwrite the existing EscapeFromTarkov_Data\Managed\NLog.dll.nlog
using NLog.dll.nlog-sptarkov
, or update the existing file accordingly. We must include the following
<target name="EFTTarget" xsi:type="EFTTarget" />
in the targets
section for the trainer to be loaded properly.
Configuration
This trainer hooks into the command system, so you can easily setup features using the built-in console:
Command | Values | Default | Description |
---|---|---|---|
autogun | on or off |
off |
Enable/Disable automatic gun mode |
crosshair | on or off |
off |
Show/Hide crosshair |
dump | Dump game state for analysis | ||
examine | on or off |
off |
Enable/Disable all item examined |
exfil | on or off |
on |
Show/Hide exfiltration points |
grenade | on or off |
off |
Show/Hide grenades |
health | on or off |
off |
Enable/Disable full health |
hits | on or off |
off |
Show/Hide hit markers |
hud | on or off |
on |
Show/Hide hud |
list | <optional filter> |
List lootable items | |
listr | <optional filter> |
List only rare lootable items | |
listsr | <optional filter> |
List only super rare lootable items | |
load | Load settings from trainer.ini |
||
loadtl | filename |
Load current tracklist from file | |
loot | on or off |
Show/Hide tracked items | |
night | on or off |
off |
Enable/Disable night vision |
nocoll | on or off |
off |
Disable/Enable physical collisions |
norecoil | on or off |
off |
Disable/Enable recoil |
novisor | on or off |
off |
Disable/Enable visor |
quest | on or off |
off |
Show/Hide quest POI |
save | Save settings to trainer.ini |
||
savetl | filename |
Save current tracklist to file | |
stamina | on or off |
off |
Enable/Disable unlimited stamina |
stash | on or off |
off |
Show/Hide stashes |
status | Show status of all features | ||
thermal | on or off |
off |
Enable/Disable thermal vision |
track | [name] or * |
Track all items matching name |
|
track | [name] <color> |
Ex: track roler red |
|
track | [name] <rgba> |
Ex: track roler [1,1,1,0.5] |
|
tracks | same as track |
Track rare items only | |
tracksr | same as track |
Track super rare items only | |
tracklist | Show tracked items | ||
untrack | [name] or * |
Untrack a name or * for all |
|
wallhack | on or off |
on |
Show/hide players |
wallshoot | on or off |
on |
Enable/Disable shoot through walls |
trainer.ini
configuration file
Sample Please note that there is no need to create this file by yourself. If you want to customize settings, use save
, edit what you want then use load
.
This file is located in %USERPROFILE%\Documents\Escape from Tarkov\trainer.ini
.
; Be careful when updating this file :)
; For keys, use https://docs.unity3d.com/ScriptReference/KeyCode.html
; Colors are stored as an array of 'RGBA' floats
EFT.Trainer.Features.Aimbot.Key="Slash"
EFT.Trainer.Features.Aimbot.MaximumDistance=200.0
EFT.Trainer.Features.Aimbot.Smoothness=0.085
EFT.Trainer.Features.Aimbot.FovRadius=0.0
EFT.Trainer.Features.Aimbot.ShowFovCircle=false
EFT.Trainer.Features.Aimbot.FovCircleColor=[1.0,1.0,1.0,1.0]
EFT.Trainer.Features.Aimbot.FovCircleThickness=1.0
EFT.Trainer.Features.Aimbot.SilentAim=false
EFT.Trainer.Features.Aimbot.SilentAimNextShotDelay=0.25
EFT.Trainer.Features.Aimbot.SilentAimSpeedFactor=100.0
EFT.Trainer.Features.AutomaticGun.Enabled=false
EFT.Trainer.Features.AutomaticGun.Key="None"
EFT.Trainer.Features.AutomaticGun.Rate=500
EFT.Trainer.Features.Commands.Key="RightAlt"
EFT.Trainer.Features.Commands.X=40.0
EFT.Trainer.Features.Commands.Y=20.0
EFT.Trainer.Features.CrossHair.Enabled=false
EFT.Trainer.Features.CrossHair.Key="None"
EFT.Trainer.Features.CrossHair.Color=[1.0,0.0,0.0,1.0]
EFT.Trainer.Features.CrossHair.HideWhenAiming=true
EFT.Trainer.Features.CrossHair.Size=10.0
EFT.Trainer.Features.CrossHair.Thickness=2.0
EFT.Trainer.Features.Examine.Enabled=false
EFT.Trainer.Features.Examine.Key="None"
EFT.Trainer.Features.FreeCamera.Key="None"
EFT.Trainer.Features.FreeCamera.Forward="UpArrow"
EFT.Trainer.Features.FreeCamera.Backward="DownArrow"
EFT.Trainer.Features.FreeCamera.Left="LeftArrow"
EFT.Trainer.Features.FreeCamera.Right="RightArrow"
EFT.Trainer.Features.FreeCamera.FastMode="RightShift"
EFT.Trainer.Features.FreeCamera.Teleport="T"
EFT.Trainer.Features.FreeCamera.FreeLookSensitivity=3.0
EFT.Trainer.Features.FreeCamera.MovementSpeed=10.0
EFT.Trainer.Features.FreeCamera.FastMovementSpeed=100.0
EFT.Trainer.Features.ExfiltrationPoints.Enabled=true
EFT.Trainer.Features.ExfiltrationPoints.Key="None"
EFT.Trainer.Features.ExfiltrationPoints.CacheTimeInSec=7.0
EFT.Trainer.Features.ExfiltrationPoints.EligibleColor=[0.0,1.0,0.0,1.0]
EFT.Trainer.Features.ExfiltrationPoints.NotEligibleColor=[1.0,0.921568632,0.0156862754,1.0]
EFT.Trainer.Features.ExfiltrationPoints.MaximumDistance=0.0
EFT.Trainer.Features.GameState.CacheTimeInSec=2.0
EFT.Trainer.Features.Grenades.Enabled=false
EFT.Trainer.Features.Grenades.Key="None"
EFT.Trainer.Features.Grenades.CacheTimeInSec=0.25
EFT.Trainer.Features.Grenades.Color=[1.0,0.0,0.0,1.0]
EFT.Trainer.Features.Health.Enabled=false
EFT.Trainer.Features.Health.Key="None"
EFT.Trainer.Features.Hits.Enabled=false
EFT.Trainer.Features.Hits.Key="None"
EFT.Trainer.Features.Hits.HitMarkerColor=[0.882352948,0.258823544,0.129411772,1.0]
EFT.Trainer.Features.Hits.ArmorDamageColor=[0.0,0.494117647,1.0,1.0]
EFT.Trainer.Features.Hits.HealthDamageColor=[1.0,0.129411772,0.129411772,1.0]
EFT.Trainer.Features.Hits.DisplayTime=2.0
EFT.Trainer.Features.Hits.FadeOutTime=1.0
EFT.Trainer.Features.Hits.ShowHitMarker=true
EFT.Trainer.Features.Hits.ShowArmorDamage=true
EFT.Trainer.Features.Hits.ShowHealthDamage=true
EFT.Trainer.Features.Hud.Enabled=true
EFT.Trainer.Features.Hud.Key="None"
EFT.Trainer.Features.Hud.Color=[1.0,1.0,1.0,1.0]
EFT.Trainer.Features.Hud.ShowCompass=true
EFT.Trainer.Features.Hud.ShowCoordinates=true
EFT.Trainer.Features.LootableContainers.Enabled=false
EFT.Trainer.Features.LootableContainers.Key="None"
EFT.Trainer.Features.LootableContainers.CacheTimeInSec=11.0
EFT.Trainer.Features.LootableContainers.Color=[1.0,1.0,1.0,1.0]
EFT.Trainer.Features.LootableContainers.MaximumDistance=0.0
EFT.Trainer.Features.LootItems.Enabled=true
EFT.Trainer.Features.LootItems.Key="None"
EFT.Trainer.Features.LootItems.CacheTimeInSec=3.0
EFT.Trainer.Features.LootItems.Color=[0.0,1.0,1.0,1.0]
EFT.Trainer.Features.LootItems.MaximumDistance=0.0
EFT.Trainer.Features.LootItems.SearchInsideContainers=true
EFT.Trainer.Features.LootItems.SearchInsideCorpses=true
EFT.Trainer.Features.LootItems.ShowPrices=true
; Example: ["foo", "bar"] or with or with extended properties: [{"Name":"foo","Color":[1.0,0.0,0.0,1.0]},{"Name":"bar","Color":[1.0,1.0,1.0,0.8],"Rarity":"Rare"}]
EFT.Trainer.Features.LootItems.TrackedNames=[]
EFT.Trainer.Features.NightVision.Enabled=false
EFT.Trainer.Features.NightVision.Key="None"
EFT.Trainer.Features.NoCollision.Enabled=false
EFT.Trainer.Features.NoCollision.Key="None"
EFT.Trainer.Features.NoRecoil.Enabled=false
EFT.Trainer.Features.NoRecoil.Key="None"
EFT.Trainer.Features.NoVisor.Enabled=false
EFT.Trainer.Features.NoVisor.Key="None"
EFT.Trainer.Features.Players.Enabled=true
EFT.Trainer.Features.Players.Key="None"
EFT.Trainer.Features.Players.BearBorderColor=[1.0,0.0,0.0,1.0]
EFT.Trainer.Features.Players.BearColor=[0.0,0.0,1.0,1.0]
EFT.Trainer.Features.Players.BossBorderColor=[1.0,0.0,0.0,1.0]
EFT.Trainer.Features.Players.BossColor=[1.0,0.0,0.0,1.0]
EFT.Trainer.Features.Players.CultistBorderColor=[1.0,0.0,0.0,1.0]
EFT.Trainer.Features.Players.CultistColor=[1.0,0.921568632,0.0156862754,1.0]
EFT.Trainer.Features.Players.ScavBorderColor=[1.0,0.0,0.0,1.0]
EFT.Trainer.Features.Players.ScavColor=[1.0,0.921568632,0.0156862754,1.0]
EFT.Trainer.Features.Players.ScavRaiderBorderColor=[1.0,0.0,0.0,1.0]
EFT.Trainer.Features.Players.ScavRaiderColor=[1.0,0.0,0.0,1.0]
EFT.Trainer.Features.Players.UsecBorderColor=[1.0,0.0,0.0,1.0]
EFT.Trainer.Features.Players.UsecColor=[0.0,1.0,0.0,1.0]
EFT.Trainer.Features.Players.MaximumDistance=0.0
EFT.Trainer.Features.Players.ShowBoxes=true
EFT.Trainer.Features.Players.BoxThickness=2.0
EFT.Trainer.Features.Players.ShowCharms=true
EFT.Trainer.Features.Players.XRayVision=true
EFT.Trainer.Features.Players.ShowInfos=true
EFT.Trainer.Features.Players.ShowSkeletons=false
EFT.Trainer.Features.Players.SkeletonThickness=2.0
EFT.Trainer.Features.Quests.Enabled=false
EFT.Trainer.Features.Quests.Key="None"
EFT.Trainer.Features.Quests.CacheTimeInSec=5.0
EFT.Trainer.Features.Quests.Color=[1.0,0.0,1.0,1.0]
EFT.Trainer.Features.Quests.MaximumDistance=0.0
EFT.Trainer.Features.Skills.Key="None"
EFT.Trainer.Features.Speed.Key="None"
EFT.Trainer.Features.Speed.Intensity=50.0
EFT.Trainer.Features.Stamina.Enabled=false
EFT.Trainer.Features.Stamina.Key="None"
EFT.Trainer.Features.ThermalVision.Enabled=false
EFT.Trainer.Features.ThermalVision.Key="None"
EFT.Trainer.Features.WallShoot.Enabled=true
EFT.Trainer.Features.WallShoot.Key="None"
EFT.Trainer.Features.WallShoot.CacheTimeInSec=5.5
EFT.Trainer.Features.WorldInteractiveObjects.Key="KeypadPeriod"
Mono injection
EFT is using:
- Battleye for process isolation, so you cannot use trivial mono injection techniques as SharpMonoInjector.
- Hash verification and a basic assembly obfuscation to prevent assembly patching. It is still possible to use Reflexil or DnSpy to patch the game and the loader, but this is to be done for each update. You can also paste a patched payload just after the hash check, and before the file is really loaded by the mono runtime.
Given I was not able to “force push” my code into the EFT AppDomain, I searched a way for my code to be pulled by EFT directly. So, using ILSpy, I audited all calls to Assembly.Load* methods, and given EFT is using the NLog framework, I was able to find the following:
NLog is auto-loading all assemblies located in the Managed folder (where the main Nlog.dll is located), if they start with the name NLog.
So from here I was able to load my code, given I copied my NLog.EFT.Trainer.dll to the managed folder:
After that, I needed a way to have an initial call to my code. In the .NET world you have something named module initializers, but before going this way, I found again another trick using NLog:
If you create a file named “Nlog.dll.nlog” along with the NLog.dll file, it will be auto-loaded by default:
So I just crafted a proper config file, making NLog invoking the ctor of my stub Logger Target :
[Target(nameof(EFTTarget))]
public sealed class EFTTarget : TargetWithLayout
{
public EFTTarget()
{
Loader.Load();
}
}
Then, I’m now loaded in the Game AppDomain, I can hook to the current gameObjects:
public class Loader
{
public static GameObject HookObject
{
get
{
var result = GameObject.Find("Application (Main Client)");
if (result == null)
{
result = new GameObject("Trainer");
Object.DontDestroyOnLoad(result);
}
return result;
}
}
public static void Load()
{
HookObject.AddComponent<TrainerBehaviour>();
}
}
I can then use all the EFT API surface. Finding GameObjects, getting components and calling methods. When something is private or obfuscated, I can even use Reflection:
private static void UnlockDoors(Player player)
{
var doors = FindObjectsOfType<Door>();
foreach (var door in doors)
{
// door unlocker
if (door == null)
continue;
if (door.DoorState != EDoorState.Locked)
continue;
var offset = player.Transform.position - door.transform.position;
var sqrLen = offset.sqrMagnitude;
// only unlock if near player, else you'll get a ban if you brute-force-unlock all doors
if (sqrLen <= 20.0f)
door.DoorState = EDoorState.Shut;
}
}