Due to the ever-present (but limited) customisable nature of osu!, the game can be influenced in such a way that allows players to discover ways to start using its customisability with malicious intent. Since there has been no reporting on this (or lack-there-of presence) and how players only know this through word of mouth, this post has been made to document every possible exploit on osu!catch the beat.
Limiting the ability to customise the game to remove exploits is a possibility but then two further issues arise;
- The treadmill problem may where regardless of any progress made is to patch out the issues, it's still possible that exploits will still be found.
- If a new exploit is found, depending on how malicious the exploiters are and how fully aware a patch will come out if it is found, it will be sure that it never rises to the surface, allowing for undetectable cheaters.
There are two potential ways to fix this:
- A new patch can be made such that every time a player beats a map and submits it, the client will automatically submit the skin. There are downsides to this where: I don't see peppy (+ team) implementing this any time soon (a new database may need to be made + skins may be overly bloated), and it potentially infringes on the player's privacy depending on the intention of said player (refer to `OPINIONATED NOTE`).
- (I believe the best option is to) Normalise the openness of the exploit skins. This doesn't mean "Normalise the use of the exploit skins" as it is deliberately cheating. As stated prior with malicious actors, disregarding exploit skins has the further potential to go underground, and so accepting the fact that these skins do exist can add to the list, help us gain more knowledge/data on how the exploits are used and allow for the ability to detect their usage.
It should be said that the use of these exploits should only be used ethically; this means that the use of these skins should only be used offline, with scorev2 (if it still doesn't submit plays), or depending on the given situation; such as to practise sections of a map, experiment with playstyles, or use it as a means for entertainment. Submitting/Applying it on ranked plays, tournaments, or challenged plays/bounties, without the expressed permission of the game itself, mapper, tournament staff, or bounty placers, destroys the intended use of the mod and how it should be interacting with the map, and can land you in hot water.
OPINIONATED NOTE
Hopefully now that this has started to go out, I hope that now it would be deemed unacceptable to submit plays using these exploits. Since it has been gone underground for some time, I have always heard that it was an unwritten rule that using this is OK but shitty because it's not possible to combat (or some other reason). But that can go the same for malicious hacking; the only difference is that now the osu! client painfully attempts to annoy hackers who want to ethically hack (refer to osu! opened sourced Livestream PP counters, plus, I've started to get a lot of PTSD from League of Legends but hopefully osu! client stands by their Privacy Policy on Anti-Cheat even if they have never mentioned that the game closes if applications like Cheat-Engine are opened (while `Cheat` is in the name, it's more for branding; there are many use cases that Cheat Engine provides where the biggest example is searching values through the computer memory)). Seeing that many people are addressing this (Twitter poll on Lanecovers), I am a firm believer that those who have used these exploits unfairly were misinformed or didn't know of the ramifications of their habits and deserve a second chance now that this can be further documented. As for whether or not exploited ranked plays should be removed from before, I'm a bit hesitant to say since exploited ranked plays such as the Gamma Flashlight mod from years(/a decade?) ago are still up. If you don't agree with any of these opinions, the comments are there and I am interested to see what you guys have to say!
With all of that out of the way; Here are all the exploits I was able to compile (and I will continue to add more if you put them in the comments):
Blatant ExploitsBlatant Exploits
Everything listed below allows the player to unfairly gain an advantage.
Everything listed below allows the player to unfairly gain an advantage.
Lanecover SkinLanecover Skin
Description:
The Lanecover skin uses the customisability of osu! to the extreme by scaling up the skin's health bar (specifically `scorebar-bg.png`).
Why is it an exploit:
The skin allows for the intended low Approach Rate maps, either with NoMod or Hidden mod, to prevent the ability to see many Hit Objects at once, which nullifies the intended act of overstimulating the player. (NOTE: Has potential to prevent the learning curve of low Approach Rate NoMod/Hidden thus incentivizing further normalisation of skin.)
Limitations:
Requires multiple skins configured for the correct settings.
Why is it not an exploit:
Since the intended mod of Flashlight has only one approach on how to practise specific parts of a map, that being to isolate a section of a map, (IMPORTANT/TEDIOUS PART) placing 100/200 Hit Objects to get Flashlight to its specific range (Shameless plug of a project I am working on to be more streamlined), then playing/practising the map normally, this skin can be modified to be served as an alternative.
Mimicking exploit outside of the game:
Putting a towel or a piece of cloth over the screen.
Any examples of this in the real world:
Discussion on Twitter about this
An image of the much more developed exploit
Is it detectable?
Not enough information or techniques has surfaced to be confident.
Download Skin
Description:
The Lanecover skin uses the customisability of osu! to the extreme by scaling up the skin's health bar (specifically `scorebar-bg.png`).
Why is it an exploit:
The skin allows for the intended low Approach Rate maps, either with NoMod or Hidden mod, to prevent the ability to see many Hit Objects at once, which nullifies the intended act of overstimulating the player. (NOTE: Has potential to prevent the learning curve of low Approach Rate NoMod/Hidden thus incentivizing further normalisation of skin.)
Limitations:
Requires multiple skins configured for the correct settings.
Why is it not an exploit:
Since the intended mod of Flashlight has only one approach on how to practise specific parts of a map, that being to isolate a section of a map, (IMPORTANT/TEDIOUS PART) placing 100/200 Hit Objects to get Flashlight to its specific range (Shameless plug of a project I am working on to be more streamlined), then playing/practising the map normally, this skin can be modified to be served as an alternative.
Mimicking exploit outside of the game:
Putting a towel or a piece of cloth over the screen.
Any examples of this in the real world:
Discussion on Twitter about this
An image of the much more developed exploit
Is it detectable?
Not enough information or techniques has surfaced to be confident.
Download Skin
Orbit SkinOrbit Skin
Description:
The Orbit skin uses the customisability of osu! to the extreme by scaling up the skin's catchable Hit Object (specifically `fruit-apple-overlay.png`, `fruit-grapes-overlay.png`, `fruit-orange-overlay.png`, and `fruit-pear-overlay.png`).
Why is it an exploit:
The skin allows for the intended Flashlight mod (with the Hidden mod added if wanted) to see further than the blindspot which nullifies the intended act of memorisation (making it more reactive), or the intended act of unseeable objects since the skin displays the Hit Object(s) location.
Limitations:
The higher the Approach Rate, the more you need to focus on memorising than reacting, making it useless to use (if not, more of a hassle).
The density of objects allows for the experience to be overstimulating, rendering the map unreadable.
Mimicking exploit outside of the game:
Doesn't seem possible
Any examples of this in the real world:
Discussion on Twitter about this
A play with the PSP
While not specifically using the Orbit skin still uses the philosophy of modification while being used in an entertaining way
Is it detectable?
Hypothetically; since the player can see multiple orbits, the further they go into a map, the more potential the player can get overstimulated by the number of objects, or misremember (prioritising reaction) where the next object will be, having this sort of rapid wiggles effect to decide where to go next.
Download Skin
Description:
The Orbit skin uses the customisability of osu! to the extreme by scaling up the skin's catchable Hit Object (specifically `fruit-apple-overlay.png`, `fruit-grapes-overlay.png`, `fruit-orange-overlay.png`, and `fruit-pear-overlay.png`).
Why is it an exploit:
The skin allows for the intended Flashlight mod (with the Hidden mod added if wanted) to see further than the blindspot which nullifies the intended act of memorisation (making it more reactive), or the intended act of unseeable objects since the skin displays the Hit Object(s) location.
Limitations:
The higher the Approach Rate, the more you need to focus on memorising than reacting, making it useless to use (if not, more of a hassle).
The density of objects allows for the experience to be overstimulating, rendering the map unreadable.
Mimicking exploit outside of the game:
Doesn't seem possible
Any examples of this in the real world:
Discussion on Twitter about this
A play with the PSP
While not specifically using the Orbit skin still uses the philosophy of modification while being used in an entertaining way
Is it detectable?
Hypothetically; since the player can see multiple orbits, the further they go into a map, the more potential the player can get overstimulated by the number of objects, or misremember (prioritising reaction) where the next object will be, having this sort of rapid wiggles effect to decide where to go next.
Download Skin
Video on Top of GameVideo on Top of Game
Description:
The exploit uses a media player by playing a video of the Hit Objects falling without any effects and osu to be reduced to a small window such it goes below the video such that it mimics the full game.
Why is it an exploit:
The exploit allows for the intended Flashlight mod to completely nullify the entire act of playing the mod as it plays exactly as if the mod weren't there.
Limitations:
The exploit requires careful timing such that both the video and the game are in sync. Is not viable in multiplayer.
Mimicking exploit outside of the game:
Using another device outside the computer.
Any examples of this in the real world:
TODO - THERE WAS A YOUTUBE VIDEO ON THIS BUT I CAN'T FIND IT ANYMORE; IF ANYONE HAS THE VIDEO, SEND IT IN THE COMMENTS AND I WILL UPDATE THIS!
Is it detectable?
Not enough information or techniques has surfaced to be confident.
Description:
The exploit uses a media player by playing a video of the Hit Objects falling without any effects and osu to be reduced to a small window such it goes below the video such that it mimics the full game.
Why is it an exploit:
The exploit allows for the intended Flashlight mod to completely nullify the entire act of playing the mod as it plays exactly as if the mod weren't there.
Limitations:
The exploit requires careful timing such that both the video and the game are in sync. Is not viable in multiplayer.
Mimicking exploit outside of the game:
Using another device outside the computer.
Any examples of this in the real world:
TODO - THERE WAS A YOUTUBE VIDEO ON THIS BUT I CAN'T FIND IT ANYMORE; IF ANYONE HAS THE VIDEO, SEND IT IN THE COMMENTS AND I WILL UPDATE THIS!
Is it detectable?
Not enough information or techniques has surfaced to be confident.
Questionable/Potentially ExploitsQuestionable/Potentially Exploits
Everything listed below should be questionable given certain specific circumstances.
Everything listed below should be questionable given certain specific circumstances.
Hit lightingHit lighting
Description:
The exploit is an inbuilt skin option that flashes a bright light on where the object will land (specifically `Hit lighting` in settings and `lighting.png`). It was used to emphasise a part of a beatmap.
Why it could be an exploit:
The use of the feature combined with a defining lighting skin allows for the intended Flashlight mod (with the Hidden mod added if wanted) to be given the location of the next Hit Object, nullifying the intended act of memorisation (making it more reactive).
Limitations:
This is only active during Kiai sections of a map.
The higher the Approach Rate, the more you need to focus on memorising than reacting, making it useless to use (if not, more of a hassle).
The density of objects allows for the experience to be overstimulating, rendering the map unreadable.
Mimicking exploit outside of the game:
Doesn't seem possible
Any examples of this in the real world:
TODO - THERE WAS A VIDEO FROM 119410 (WHERE HE PLAYED HDFL); I CAN'T FIND IT. IF ANYONE KNOWS WHERE IT IS, HIT ME UP IN THE COMMENTS
Is it detectable?
Hypothetically; since the player can see the Hit lighting, the further they go into a map, the more potential the player can reposition their catcher such that when they see the Hit lighting they've overextended on, they will reposition back to the Hit Lightings position. However, there is not enough information or techniques has surfaced to be conclusive.
Download Skin
Description:
The exploit is an inbuilt skin option that flashes a bright light on where the object will land (specifically `Hit lighting` in settings and `lighting.png`). It was used to emphasise a part of a beatmap.
Why it could be an exploit:
The use of the feature combined with a defining lighting skin allows for the intended Flashlight mod (with the Hidden mod added if wanted) to be given the location of the next Hit Object, nullifying the intended act of memorisation (making it more reactive).
Limitations:
This is only active during Kiai sections of a map.
The higher the Approach Rate, the more you need to focus on memorising than reacting, making it useless to use (if not, more of a hassle).
The density of objects allows for the experience to be overstimulating, rendering the map unreadable.
Mimicking exploit outside of the game:
Doesn't seem possible
Any examples of this in the real world:
TODO - THERE WAS A VIDEO FROM 119410 (WHERE HE PLAYED HDFL); I CAN'T FIND IT. IF ANYONE KNOWS WHERE IT IS, HIT ME UP IN THE COMMENTS
Is it detectable?
Hypothetically; since the player can see the Hit lighting, the further they go into a map, the more potential the player can reposition their catcher such that when they see the Hit lighting they've overextended on, they will reposition back to the Hit Lightings position. However, there is not enough information or techniques has surfaced to be conclusive.
Download Skin
Lanes SkinLanes Skin
Description:
The Lanes skin uses the customisability of osu! to the extreme by scaling up the skin's health bar (specifically `scorebar-bg.png`).
Why it could be an exploit:
The skin has the potential to be used as a reference point. A map with a high Circle Size (with the Hidden mod added if wanted), or the intended map to play with precision based on precise patterns, allows for the player to use the skin to their advantage on where they will need to be positioned next.
Limitations:
May potentially confuse the player on which relative lines to use the other.
May potentially make the playing field more convoluted.
Mimicking exploit outside of the game:
Using the in-game background art as a reference point instead.
Using a piece of cloth or taping lines to the screen.
Any examples of this in the real world:
While not being deliberately shown, a form of this skin was used confidently beat the ending
Is it detectable?
Not enough information or techniques has surfaced to be confident.
Download Skin
Description:
The Lanes skin uses the customisability of osu! to the extreme by scaling up the skin's health bar (specifically `scorebar-bg.png`).
Why it could be an exploit:
The skin has the potential to be used as a reference point. A map with a high Circle Size (with the Hidden mod added if wanted), or the intended map to play with precision based on precise patterns, allows for the player to use the skin to their advantage on where they will need to be positioned next.
Limitations:
May potentially confuse the player on which relative lines to use the other.
May potentially make the playing field more convoluted.
Mimicking exploit outside of the game:
Using the in-game background art as a reference point instead.
Using a piece of cloth or taping lines to the screen.
Any examples of this in the real world:
While not being deliberately shown, a form of this skin was used confidently beat the ending
Is it detectable?
Not enough information or techniques has surfaced to be confident.
Download Skin
Small SkinSmall Skin
Description:
The Small skin uses the customisability of osu! to it's advantage by scaling down the skin's Hit Objects (specifically `fruit-apple-overlay.png`, `fruit-grapes-overlay.png`, `fruit-orange-overlay.png`, and `fruit-pear-overlay.png`).
Why it could be an exploit:
The skin has potential to be used to counteract the readability of maps with a low Circle Size, specifically with the Easy mod.
Limitations:
Is not reflective of the Hit Objects hitbox, and may allow users to over or undershoot movements.
This skin has already been adopted and is used widely without combining it with the Easy mod or maps with a low Circle Size.
Mimicking exploit outside of the game:
Doesn't seem possible
Any examples of this in the real world:
TODO - I CAN'T THINK OF ANY BUT HYPERW7 USING HIS SKIN TO ABUSE HR INSTEAD LMAO. IF ANYONE HAS A VIDEO/PICTURE/DISCUSSION OF IT, HIT ME IN THE COMMENTS
Is it detectable?
Not enough information or techniques has surfaced to be confident.
Download Skin
Description:
The Small skin uses the customisability of osu! to it's advantage by scaling down the skin's Hit Objects (specifically `fruit-apple-overlay.png`, `fruit-grapes-overlay.png`, `fruit-orange-overlay.png`, and `fruit-pear-overlay.png`).
Why it could be an exploit:
The skin has potential to be used to counteract the readability of maps with a low Circle Size, specifically with the Easy mod.
Limitations:
Is not reflective of the Hit Objects hitbox, and may allow users to over or undershoot movements.
This skin has already been adopted and is used widely without combining it with the Easy mod or maps with a low Circle Size.
Mimicking exploit outside of the game:
Doesn't seem possible
Any examples of this in the real world:
TODO - I CAN'T THINK OF ANY BUT HYPERW7 USING HIS SKIN TO ABUSE HR INSTEAD LMAO. IF ANYONE HAS A VIDEO/PICTURE/DISCUSSION OF IT, HIT ME IN THE COMMENTS
Is it detectable?
Not enough information or techniques has surfaced to be confident.
Download Skin
Deprecated ExploitsDeprecated Exploits
Everything listed were exploits of a previous time and/or should no long be able to function as they have been patched out.
Everything listed were exploits of a previous time and/or should no long be able to function as they have been patched out.
GAMMAGAMMA
THIS IS ALL BASED ON HERE SAY; SOMEONE PLEASE PROVIDE ACTUAL EVIDENCE AND/OR AN OSU VERSION NUMBER SO I CAN EXPERIMENT
Description:
Increasing the value of GAMMA on the player's monitor.
Why it was an exploit:
The exploit allows for the intended Flashlight mod to completely nullify the entire act of playing the mod as it plays exactly as if the mod weren't there. The best guess would have to be that the Flashlight mod darkness had a slight opacity to it, thus exploiting this by using GAMMA to make sure the opacity was at 100%.
How did this exploit die:
By removing the opacity from the darkness and making it solid.
Any examples of this in the real world:
While not based on osu!ctb, I'm guessing there was at least some correlation
THIS IS ALL BASED ON HERE SAY; SOMEONE PLEASE PROVIDE ACTUAL EVIDENCE AND/OR AN OSU VERSION NUMBER SO I CAN EXPERIMENT
Description:
Increasing the value of GAMMA on the player's monitor.
Why it was an exploit:
The exploit allows for the intended Flashlight mod to completely nullify the entire act of playing the mod as it plays exactly as if the mod weren't there. The best guess would have to be that the Flashlight mod darkness had a slight opacity to it, thus exploiting this by using GAMMA to make sure the opacity was at 100%.
How did this exploit die:
By removing the opacity from the darkness and making it solid.
Any examples of this in the real world:
While not based on osu!ctb, I'm guessing there was at least some correlation
StoryboardStoryboard
THIS IS ALL BASED ON HERE SAY; SOMEONE PLEASE PROVIDE ACTUAL EVIDENCE + OSU VERSION NUMBER SO I CAN EXPERIMENT
Description:
Having a recording of the map or storyboard elements that mimicked the placement of the Hit Object. Modifying the map would make it unranked, but not the storyboard elements.
Why it was an exploit:
The exploit allows for the intended Hidden mod and/or Flashlight mod to completely nullify the entire act of playing the mod(s) since turning on the video or storyboard would allow the player to see ahead of time.
How did this exploit die:
If the modification of the map has been done in any way, including the storyboard, the map will be deemed unrankable.
Any examples of this in the real world:
COULDN'T FIND ANY, SOMEONE PLEASE PROVIDE EVIDENCE
THIS IS ALL BASED ON HERE SAY; SOMEONE PLEASE PROVIDE ACTUAL EVIDENCE + OSU VERSION NUMBER SO I CAN EXPERIMENT
Description:
Having a recording of the map or storyboard elements that mimicked the placement of the Hit Object. Modifying the map would make it unranked, but not the storyboard elements.
Why it was an exploit:
The exploit allows for the intended Hidden mod and/or Flashlight mod to completely nullify the entire act of playing the mod(s) since turning on the video or storyboard would allow the player to see ahead of time.
How did this exploit die:
If the modification of the map has been done in any way, including the storyboard, the map will be deemed unrankable.
Any examples of this in the real world:
COULDN'T FIND ANY, SOMEONE PLEASE PROVIDE EVIDENCE
If you guys have anything more to add (including spelling errors I may have made); post it in the comments. Make sure to add evidence such that it adds the basis for the exploit and streamlines the process for verification and which category to place it in.