Raised This Month: $ Target: $400
 0% 

Interfeering with password check


Post New Thread Reply   
 
Thread Tools Display Modes
Author Message
m0v3
Member
Join Date: May 2009
Old 07-12-2010 , 18:03   Interfeering with password check
Reply With Quote #1

Hi. Is there a way to change the way server checks if user has the right password ? For example server would not check if player has a password from mysql , or some other player's cvar ?
m0v3 is offline
SpeeDeeR
Veteran Member
Join Date: Mar 2010
Location: Bulgaria
Old 07-12-2010 , 18:25   Re: Interfeering with password check
Reply With Quote #2

For what password are you talking about.
SpeeDeeR is offline
m0v3
Member
Join Date: May 2009
Old 07-12-2010 , 18:34   Re: Interfeering with password check
Reply With Quote #3

The password , which you set with "sv_password" , and player fills in with "password" commands..
m0v3 is offline
SpeeDeeR
Veteran Member
Join Date: Mar 2010
Location: Bulgaria
Old 07-12-2010 , 19:08   Re: Interfeering with password check
Reply With Quote #4

Why all people put '...' at the end of there answers.I FUCKN HATE THIS like I'm retarded or something else or too blind to see the answer.Excuse me for not knowing the asnwer @m0v3 I just wanted to help.
PS : Help yourself and sorry for offtopic.
SpeeDeeR is offline
fysiks
Veteran Member
Join Date: Sep 2007
Location: Flatland, USA
Old 07-12-2010 , 20:07   Re: Interfeering with password check
Reply With Quote #5

Quote:
Originally Posted by m0v3 View Post
The password , which you set with "sv_password" , and player fills in with "password" commands..
You can't bypass the sv_password. It's either there or it's not.

Quote:
Originally Posted by SpeeDeeR View Post
Why all people put '...' at the end of there answers.I FUCKN HATE THIS like I'm retarded or something else or too blind to see the answer.Excuse me for not knowing the asnwer @m0v3 I just wanted to help.
PS : Help yourself and sorry for offtopic.
What are you ranting about? It's called an "ellipsis" and I don't see one in his post.
__________________
fysiks is offline
m0v3
Member
Join Date: May 2009
Old 07-13-2010 , 04:48   Re: Interfeering with password check
Reply With Quote #6

Bypassing is not the exact thing i want to do. Maybe server could check the pass , and then at exact time do something else either ? Something I could program. The idea is that i'm working on the simpliest way to get rid of the CDoS. Any linux "hlfirewall" hadn't done it's work, but i noticed that person can not CDoS servers , if the server has a pass on it , or if the person is banned. So is there a way to check something more that a simple pass , and if player doesn't meet the requirements , server would pop up the same type of message it pop up's when your pass isn't correct , but with my text. "You don't belong here" , or anything else. Maybe amxx has a proc , which could react after server checks if password is correct. Or (I know this could be offtopic here) maybe metamod has something i could use.

P.S. SpeeDeeR , I wasnt "...." , as you think. Just a double dot , a mistake of mine. Sorry ;)

P.P.S How to delete another thread? Created a double , but couldn't fint any delete post or something
m0v3 is offline
Hunter-Digital
Veteran Member
Join Date: Aug 2006
Location: In the Game [ro]
Old 07-13-2010 , 04:55   Re: Interfeering with password check
Reply With Quote #7

CDoS ? or you mean CSDOS ? I think that exploit only works on verry old HLDS versions.
__________________
Hunter-Digital is offline
m0v3
Member
Join Date: May 2009
Old 07-13-2010 , 05:00   Re: Interfeering with password check
Reply With Quote #8

Don't know man , but our servers were being CDoS'ed for a few days a week ago. The hlds and everything else is the newest version we could find. Players told that some random generated nick connects to a server , and the server crashes. We turned on logging , found an IP , banned it and the problem dissapeared , but don't want this to happen again from another source.

EDIT: Yup , i was talking aboud CSDoS.

Last edited by m0v3; 07-13-2010 at 05:03.
m0v3 is offline
Hunter-Digital
Veteran Member
Join Date: Aug 2006
Location: In the Game [ro]
Old 07-13-2010 , 05:06   Re: Interfeering with password check
Reply With Quote #9

Are you sure that wasn't actually a player and not a cmd line that abuses public commands to generate lag ?
There are ways do that, even pre-made configs, and most servers have plugins that are not protected against abusive usage.

Therefore, setting a password and all that wouldn't help... just leave it alone and if another attack comes, you just ban it :}

And for the record, amxx can't detect players connecting before server checks his password and kicks him.
__________________

Last edited by Hunter-Digital; 07-13-2010 at 05:10.
Hunter-Digital is offline
m0v3
Member
Join Date: May 2009
Old 07-13-2010 , 05:16   Re: Interfeering with password check
Reply With Quote #10

Hmm , what about metamod ?
m0v3 is offline
Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 07:11.


Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Theme made by Freecode