- Community & Support
- All Modules Status
- What is One Tap Script
- Installation
- FAQ
- Known Issues
- Detection / Bypass Status
- Hotkeys / Controls
- Overview
- Compatibility
- Quick Start
- The Solution
- Roadmap
You found this repo, so you already know the drill — One Tap Script spreads through word of mouth, private Discord servers, and the occasional mirror link. We keep the GitHub repo as the canonical front page so nobody has to trust a random reupload.
| Channel | Where | Purpose |
|---|---|---|
| Discord | Invite pinned in repo wiki | Build drops, config sharing, ban reports |
| GitHub Issues | This repo | Module bugs, false-positive VT reports, feature asks |
| Telegram | Mirror channel (linked in wiki) | Backup mirror when the landing page is throttled |
| Wiki | /wiki tab |
Per-module config syntax and legacy 2024 fork migration notes |
Support is community-run. There is no paid tier, no "support key", and nobody will ever DM you asking for your account credentials — if they do, it's a scam cloned from our branding.
The 2026 build refactors the 2024 fork's 41 modules into a single-menu, hot-reload-able structure. Each module can be toggled independently; profiles save per-game.
| Module | Status | Description |
|---|---|---|
| Tap Assist (core) | ✅ Working | The single-click trigger layer everything else hangs off |
| Aimbot — Linear | ✅ Working | Straight-line smoothing with adjustable arc bias |
| Aimbot — Bezier | ✅ Working | Curved path solver, harder to fingerprint than linear |
| Aimbot — Silent | Works on legacy titles; newer EB engines read intent differently | |
| ESP — Player Box | ✅ Working | 2D bounding boxes with distance fade |
| ESP — Skeleton | ✅ Working | Bone-link rendering, works with basic rigs |
| ESP — Item Glow | ✅ Working | Loot through walls, throttled by chunk radius |
| Wallhack — Soft | ✅ Working | Depth-buffer trick, render-only |
| Wallhack — Chams | Skin recolor, breaks on some DX12 paths | |
| Recoil Control | ✅ Working | Per-weapon patterns, tuned from last 200 samples |
| Trigger — Radius | ✅ Working | Anti-shift check built in |
| Trigger — Delay | ✅ Working | Adds human-scale reaction gap |
| FOV Changer | ✅ Working | Locked at engine cap so it doesn't trip heuristics |
| No-Spread | ✅ Working | Visual-only; server-side unaffected where it should be |
| No-Sway | ✅ Working | Scope sway zeroed |
| Fast Swap | ✅ Working | Skips swap animation frames where server validates leniently |
| Reload Cancel | Depends on netcode; a few titles deny client cancel | |
| Rapid Tap | ✅ Working | Rate-limits against input sanitizers |
| Anti-Flash | ✅ Working | Screen-space flash suppressed |
| Anti-Smoke | ✅ Working | Smoke shader skip |
| Anti-Recoil Camera | ✅ Working | Decoupled from aim, camera-only |
| Radar Hack | ✅ Working | Mini-map expansion via memory scrub |
| Vehicle ESP | ✅ Working | Armor value + crew count in overlay |
| Player Whois | ✅ Working | Reads known-names cache for repeat opponents |
| Streamproof | ✅ Working | OBS-safe overlay, hides ESP from capture API |
| HWID Spoofer | Works on most volumes; a few registry keys resync on boot | |
| Injector | ✅ Working | Manual-map loader; the only file that touches the game process |
| Sandbox Guard | ✅ Working | Fails fast on debugger / VM without crashing the target |
| Config Swapper | ✅ Working | Per-title profiles auto-load on exe launch |
| Panic Key | ✅ Working | Backs out every module in one press |
| Auto-Update | ✅ Working | Pulls module manifests; does not touch game files |
| Time Freeze | ❌ Unstable | Table-edit only; triggers integrity check on most titles |
| Noclip | ❌ Unstable | Physics check catches it in ~3s on current engines |
| Aimbot FOV Circle | ✅ Working | Render-only preview so you tune before committing |
| Hitmarker Audio | ✅ Working | Rounds fire rate to avoid spammed markers |
| Scoreboard Read | ✅ Working | Pulls server-advertised stats for overlay |
| Aim Trainer Bypass | ✅ Working | Skips warm-up screens |
| FPS Lock | ✅ Working | Frame-cap with jitter so timings look natural |
| Resolution Override | ✅ Working | Borderless window override |
| Macro Recorder | ✅ Working | Playback at chosen multiplier for recoil practice |
| Console Unlock | Some titles strip debug cmd during load | |
| Overlay Console | ✅ Working | Runtime log of every module decision, per-frame |
Important
"
If you came from the 2024 fork (everybody called it by the member who leaked it), you know the fork was a nightmare: 200 MB of bundled junk, three runtime installs, and the injector crashed every other launch. One Tap Script 2026 is a single .exe that ships 41 modules in a lazy-loaded format. Nothing touches disk beyond your profile folder.
| Term | Explanation |
|---|---|
| Tap | The single-click event the whole script is designed around — one press = one complete action cycle |
| Module | An independently-togglable feature (aim, esp, spoofer, etc.); loaded on first use, unloaded on toggle-off |
| Profile | A named set of module toggles + tuning values, auto-bound per game process |
| Injector | The manual-map loader that puts the script's memory in the target; the Injector module is the only process-facing part |
| HWID | Hardware identifier; spawn volume so engine metasystems see a fresh machine each boot |
| Streamproof | Overlay hiding so capture APIs (OBS, Discord, Medal) don't record ESP |
| Panic | The single key that unloads every module and closes the overlay in under 100ms |
- Realistic flick on the aim modules — the bezier aim treats the target as a moving point, not a magic-snap
- Config portability — packs are JSON; share them, branch them, revert them
- Lazy module load — a build that only uses Tap Assist + FOV carries ~30 MB resident instead of the fork's full 200 MB
- Safe toggle — every module has rollback; hitting Panic restores pre-injection memory before unload
- Single binary — no redistributable requirement, no runtime prep
- Visit the project landing page. Use the
link on this README — no mirrors, no ad-shortened URLs. *Do not* download a `.exe` from a random Discord DM claiming to be us; those are typical malware wraps of our branding.
2. **Extract the archive.** Right-click → Extract All (or 7-Zip). Run the `.exe` from *that specific folder* — extraction must complete first, one file loose in the same location breaks config auto-loading.
3. **Close the game process.** Right-click the game in Task Manager → End task. The injector refuses to touch a live process unless it was launched *after* our wrapper.
4. **Launch the `.exe`, pick a profile.** First-run creates `%APPDATA%\OneTapScript\profiles\`. Default ships with a conservative `safe` profile that only enables Streamproof + ESP Item at low opacity.
5. **Warm up Tap.** Enter a bot game or empty server; press the Configure key, hold the Tap bind left/right once to calibrate. Calibration is per-session unless saved as profile defaults.
6. **Panic if it looks weird.** The `Panic Key` binding should be second-nature before you go on a public server. Hold it and confirm the overlay gone + log line `[PANIC] all modules unloaded` in the console tab.
- Do I need Python, Node.js, or any runtime installed?
No. The build is a fully self-contained Windows binary. If your machine can run the game, it can run One Tap Script. This is the biggest departure from the 2024 fork (which wanted a runtime layer plus a packet proxy).
- Will my antivirus flag the
.exe?
Almost certainly, and that's expected cat-and-mouse — an injector touching another process's memory is indistinguishable from malicious behavior to heuristics. Publish periodic VirusTotal hash reports in the repo wiki and, if you trust the build, add the folder to exclusions. Never disable Windows Defender machine-wide.
- Do I get HWID banned?
The HWID Spoofer module spawns the disk-related registry keys and volatile hardware ID queries most HWID checks read. That said: an injection event that trips their anticheat process can still be flagged on behavior, not HWID. Treat spoofing as a delay, not a shield. Test on a throwaway account and a game you can afford to lose.
- Is the injector detected right now?
See the detection table below — status there is updated by maintainers after each sign. Between updates, always re-verify the current build signature on a test account before you play main.
- What does Streamproof actually hide?
Only the overlay. OBS/Medal/Discord window-capture won't record ESP or the FOV circle because the overlay lives in a surface they can't grab. Screen-recording at the kernel level can still see it.
- Where do I put the
.exe?
Anywhere with write access (Desktop, Docs, dedicated folder). It auto-creates its profile folder in %APPDATA%. Avoid redistributables-touching locations like Program Files to keep auto-update simple.
- Does the aim work with a controller?
Core features need a mouse; aim smoothing math reads deltas from raw pointer input. Gyro / controller work as input devices for movement only. Keep the controller plugged in for cases where anti-cheat flags disabled input devices.
- Can I run this on a stream?
Streamproof covers in-process screen capture. Whether running it on a monitored stream is allowed is a platform-specific question well outside this repo's scope.
- What happened to the old fork?
No releases. That "community fork" is unsupported, its injector is what caused the spike of false HWID ban reports in 2024, and this repo does not use any of its files.
| Issue | Fix |
|---|---|
| Injector says "process not found" even though the game is open | Fully close it (verify in Task Manager, not the taskbar), relaunch via your game launcher's shortcut rather than our wrapper — the anti-cheat boot sequence must run first |
| Overlay flickers on multi-monitor mixed refresh setup | Set both monitors to the same refresh rate, or in the Configure menu → Overlay settings → pin one monitor as the render surface |
| Streamproof hides ESP, but a webcam/desktop-capture second display still sees the box | Streamproof is per-capture-API; use a full desktop-capture filter, not window-grab |
| Panic key fires but the game freezes ~2 seconds | Known on titles with pre-injection GPU state; hard reboot the title (not your PC), and re-enable Store-pre-injection-memory in Settings |
| "Config not loaded" after Windows update | Antivirus locked %APPDATA%\OneTapScript\. Add that folder to exclusions — this is a protection-exclusion, not disabling protection |
| Bind not working with Fn-layout keyboard | Bind via physical scancode view, not character view — the Configure menu's Raw Input pane exposes both |
Updated after each meaningful signature change. There is no universal "undetected" claim — this is a row-per-method status from maintainers and field reports.
| Method | Status | Notes |
|---|---|---|
| Signature scan — injected module bytes | 🟡 Partial | Depends on build; manual-map reduces native-mark signature exposure |
| Anti-cheat driver — pre-injection window | 🟡 Partial | We wait for the game to settle ~8s, but early check can still catch it |
| Heap / memory scan — private code pages | 🟡 Partial | Randomized base and packed load, reduces trivially-catching patterns |
| Thread scan — injected GUI threads | 🟡 Partial | Panic path joins threads cleanly; a slow panic can still leave one alive |
| Server behavior — aim inconsistency | 🟢 Good | Bézier path + reaction jitter is the guardrail; enable Aimbot — Linear only on older titles |
| Server behavior — input flood (rapid tap) | 🟢 Good | Rapid Tap is rate-limited, but tapping through two modules + supercarry will flood — keep one tap module active per config |
| HWID check | 🟢 Good | Spoofer resets spawn volume + machine GUID + hw-profile strings |
| Overlay capture by anti-cheat (recording layer) | 🟡 Partial | Streamproof fights specific capture APIs; kernel-level capture is not blocked |
All keys are rebindable; the defaults are chosen so a new user can hit "Panic" without reading a manual.
| Key | Action | Notes |
|---|---|---|
F1 |
Menu open / close | Dark panel, tabbed-by-module |
F2 |
Configure loaded profile | Live edit; hot-reloads module on change |
F3 |
Tap | Primary fire macro — one press, full cycle |
F4 |
Tap + Aim assist | Allows aim modules to ride on the tap |
F5 |
Aimbot toggle | Main; no aim unless explicitly on |
F6 |
ESP cycle | Player → Skeleton → Item → Off |
F7 |
Streamproof toggle | Hides overlay from capture APIs |
F8 |
Save config | Writes to %APPDATA% profile |
F9 |
Load config | Auto-selects per game title |
F10 |
Overlay Console | Live log of module decisions |
Pause / End |
Panic | Best to memorize this one first |
Ctrl + P |
Panic alt | For keyboards where Pause is Fn-locked |
| Category | Details |
|---|---|
| Product | One Tap Script — 2026 build |
| Distribution | Single Windows .exe, self-contained, no runtime |
| Modules | 41 total; 34 Working, 5 Partial, 2 Unstable/Off |
| File footprint | < 30 MB fully loaded; < 12 MB when only Tap Assist + FOV active |
| Profile storage | %APPDATA%\OneTapScript\profiles\*.json |
| Injector | Manual-map, single inject |
| Update model | Manifest pull; never patches game files |
| License | Community lease — do not resell build or pair with closed-source wrappers |
The 2026 build's headline is that it is the first build of this project you can run without first installing three separate helper tools. No other scripts in this niche pull off a self-contained single binary in 2026 — this is deliberate engineering: the whole loader stack is written in one language with zero forwarding relay. If somebody hands you a "bundle" that installs two runtimes, they're handing you a 2024 artifact with a new icon.
| Platform | Status | Notes |
|---|---|---|
| Windows 10 (21H2+) | ✅ Supported | Full module set |
| Windows 11 23H2 / 24H2 | ✅ Supported | Streamproof and HWID spoofer refreshed for 24H2 |
| Windows 11 25H2 | HWID spoofer boots cleaner in 3 of 4 tested builds | |
| Windows Server 2022 | Overlay loses some capture API safety | |
| macOS | ❌ Unsupported | No plans |
| Linux (Wine/Proton) | ❌ Unsupported | Injection path is validated against Windows APIs |
| Steam deck | ❌ Unsupported | Anti-cheat driver not shipped on Proton |
| 64-bit processes | ✅ Supported | The only architecture we build for |
Test-target titles an average user builds configs on: FPS titles on Unreal, Source-2013+Lineage models, and a few popular open-engine titles. Configs are not universally transferable between engine families — practice the Configure workflow in a private match first.
Additionally, this is a project of voluntary, documented reverse-engineering. Please use only in contexts where that is legal — single-player, vanilla servers that allow it, or your own test VM. The maintainers won't coach, condone, or offer coverage for cheating on competitive-ladder or ranked third-party funded servers; a ban you catch there is your problem, and yes, HWID spoofing makes a ban expensive to remediate.
- ✅ Download — click the download link on the landpage. Hash your copy.
- 📂 Extract — extract into a dedicated folder. Right click, no trace-in-temp launch.
- 🐾 First run — open the
.exeonce, no game running. If it warns about SmartScreen, you probably know what to hit. - 🎯 Calibrate Tap in a bot/training match —
Configure(F2) preset, hold the Tap bind a few times, save. - 🧯 Memorize Panic — before you press anything else, practice the
Pause/Endkey. Then join a public server.
| Problem (from 2024 forks & world) | This 2026 build |
|---|---|
| Bundled toolchain, three runtimes | Single .exe, zero external deps |
| Injector crashes on second launch | One manual-map path, re-tested every build |
| All 40 features loaded every session (200MB) | Lazy per-module load; <30MB realistic usage |
| "Read my config on a text file and guess mine scope" | JSON per-title profiles with hot-reload |
| Alt-tabbing to the script to toggle | Panic key + hotkeys under Pause |
| Aim snap so obvious it's a single-frame teleport | Bézier flick + reaction jitter baked in |
| Someone else's spawner you didn't audit | Spoofer is one module, its state is a visible log |
| Feature bloat with no working status | Every module row has a maintenance status |
| Feature | Status | ETA |
|---|---|---|
| Bezier aim re-tune for unarmed + slow-rof weapons | In progress | 2026 Q3 |
| Kernel-level capture block (not just overlay) | Research | TBD |
| HWID spoofer — registry-full sync on boot | Research | TBD |
| Config sharing inside the menu (paste JSON) | Planned | 2026 Q3 |
| Skeleton ESP for non-standard bone counts | Planned | TBD |
| Streamproof desktop-capture filter | Blocked | 2027 if legal picture changes |
| 2K/ultra-wide overlay asset scale fix | Planned | 2026 Q2 |
| Noclip reattempt via dedicated test rig (may be shelved) | Shelved | — |
Note
Roadmap ETA "TBD" means it's not currently scheduled. Community modules merge when status flips from Partial→Working in field testing sustained for two weeks. If you've tested a "Partial" module on a title that isn't listed in the Compatibility section, the roadmap wants your config on Discord.
Warning
Everything here sits inside a kit of disclaimers that no README size can hide: you're running code that calls anti-cheat API behavior. Run on test machines, test accounts, and offline or private servers first. Update this README's local copy (or git pull) at least once per season, because detection status ages fast.
