[CSGO] SRCDS Rcon Server Lagger Exploit Patch [1/2/21]
 

Here's yet another patch for an exploit being abused in csgo to lag/dos servers within the last few weeks. This patch affectively just disables rcon from working. The real way to solve the issue and maintain rcon for sourcebans or admins would be to firewall off all ips to the tcp port of your game server except ones you whitelist. However many cheap hosts don't give access to firewall options along with not giving clients the ability to just never set an rcon_password. Setting rcon_password "" inside your server.cfg (and never setting it anywhere else) will prevent rcon from working and will solve the issue with the exploit.

This patch should only be used if you have no way to access the firewall and you can't not set the rcon_password convar.
THIS WILL BREAK SOURCEBANS AND OTHER SOFTWARE THAT COMMUNICATES WITH YOUR SERVER VIA RCON PROTOCOL

Updated on 2/4/2023 for linux changes:
Download rcon_exploit_fix_v1.1.zip for latest verison.

Re: [CSGO] SRCDS Rcon Server Lagger Exploit Patch [1/2/21]
 

Bit out of the topic question. Witch your exploit patch plugins is still necessary to use because I still use all of them (except this one).

Btw great release as always thank you = )

Re: [CSGO] SRCDS Rcon Server Lagger Exploit Patch [1/2/21]
 

Re: [CSGO] SRCDS Rcon Server Lagger Exploit Patch [1/2/21]
 

My servers have some ddos attacks with A2S, and NOW i found this: https://steamcommunity.com/discussio...8351344359625/
For CS:GO server i'm using linux32 .so files, so i now starting testing, with your exploit fix plugin.
But Backwards, still do we need your exploit fix?

Re: [CSGO] SRCDS Rcon Server Lagger Exploit Patch [1/2/21]
 

:shock:

Re: [CSGO] SRCDS Rcon Server Lagger Exploit Patch [1/2/21]
 

The only one that i'm aware of that has been patched by valve and isn't needed anymore is this one:

https://forums.alliedmods.net/showthread.php?p=2687724

However yesterday I did release an update to the SendFile Exploit Patch:
v3.1

https://forums.alliedmods.net/showthread.php?p=2656975

although it's untested. It should prevent 2 more variation of that exploit that exists. along with one that still works even with sv_allowupload 0 and sv_allowdownload 0 set.

Re: [CSGO] SRCDS Rcon Server Lagger Exploit Patch [1/2/21]
 

How does one even spam the TCP connection of the RCON protocol? edu purposes c:

Re: [CSGO] SRCDS Rcon Server Lagger Exploit Patch [1/2/21]
 

Will it have the same effect if i block all tcp connections and only allow the ip of the server ?

Re: [CSGO] SRCDS Rcon Server Lagger Exploit Patch [1/2/21]
 

Yes

Re: [CSGO] SRCDS Rcon Server Lagger Exploit Patch [1/2/21]
 

Even after putting rcon_password "" in my server file, when i am in game i still receive an answer with rong password if type rcon kick for example. Is it normal?