I used LD_PRELOAD for patching RCE vulnerability in PunkBuster[0]. They did patch the exploit, but that didn't involve many of the older games they dropped support for. The AC itself isn't effective or even operational for the most part in those, but it still serves as a reliable method of identifying players.
Even their server libraries are obfuscated, and hooking open() turned out to be just easier than trying to patch the binaries themselves.
Even their server libraries are obfuscated, and hooking open() turned out to be just easier than trying to patch the binaries themselves.
[0] https://medium.com/@prizmant/hacking-punkbuster-e22e6cf2f36e