What is it?
Its a glow ESP that runs completely from a web page. No EXE, no DLL.
How does it work?
Its built using Microsoft's Silverlight. Due to Windows security there is an exe that must be run once, it will only ever need to be run once no matter how many times you start the cheat. The exe just makes one change to the registry to enable trusted applications to run in-browser. It will also install a certificate into the Trusted Publisher's certificate store. Without these two changes the cheat doesn't gain the required permissions to do what it needs to do. The exe is digitally signed for your peace of mind.
Can it be detected?
As it stands now, VAC has absolutely no way to detect this at all.
How do I get it?
All you have to do is visit http://csgo-web.chods-cheats.com using internet explorer.