Thread: HLDS exploit !
View Single Post
anakusama
New Member
Join Date: Mar 2010
Old 03-01-2010 , 21:50   Re: HLDS exploit !
Reply With Quote #39

Falls because of the data in the second package:
00 00 00 01 00 00 00 00 5B 19 01 01 1B 01 11 41 01 11 41 01 56 04 18 41 04 54 14 04 11 51 41 44 53 41 11 01 41 11 01 01
These are the ciphered data. Actually this message at decoding looks so:
08 44 44 44 44 44 44 44
This line 8 means a type package clc_voicedata (i.e. the vocal data from a hammock).
The subsequent 2 bytes (0x4444) is a length of the vocal data.
And as it is known at value higher 0x1000 the server itself falls (gives out message and stops work).
More shortly, to programmers from VALVE in general laziness if's to write.

-------------------------------
Has experimented patching is sensitive:
In swds.dll it is changed:
8B EC B8 0C 10 00 00
On
8B EC B8 0C 50 00 00
And also:
3D 00 10 00 00 89 45
On
3D 00 50 00 00 89 45
After this operation server does not fall.
But as it is easily possible patching exploit, having replaced 0x4444 on 0x7FFE (and it will bring down yours servers and further).
And it is possible to be engaged in more "abrupt" patching: to add additional Check for the length and as it is possible to add a cycle of reading of the buffer recv.
anakusama is offline