Raised This Month: $12 Target: $400
 3% 

[CSGO] Server Lagger Exploit Security Patch [3/7/2020]]


Post New Thread Reply   
 
Thread Tools Display Modes
Author
backwards
AlliedModders Donor
Join Date: Feb 2014
Location: USA
Plugin ID:
6971
Plugin Version:
1.0
Plugin Category:
Server Management
Plugin Game:
Counter-Strike: GO
Plugin Dependencies:
    Servers with this Plugin:
     
    Plugin Description:
    This plugin prevents users from abusing an exploit which causes the server to stutter and lag while bypassing the net_chan_limit_msec convar by being a very poor lag method.
    Old 03-07-2020 , 20:05   [CSGO] Server Lagger Exploit Security Patch [3/7/2020]]
    Reply With Quote #1

    There's yet another exploit going around the csgo community which allows players to cause the server to stutter. A client has been abusing it in one of the community servers I manage since they are unable to cheat due to a really strong server side anticheat. They resort to any exploit they can to attack the server.



    I'm unaware if this is a new feature inside a cheat or if it's completely private still. None the less here's the patch before it becomes a massive issue.

    Information:
    Your srcds console window will spam this message if it's currently being attacked.

    IPADDRESS : PORT:reliable state invalid (0)..


    This exploit may affect all source engine games.

    Installation:
    Just put the attached LagExploitFix_3_7_2020.txt file inside your csgo\addons\gamedata\ folder and install the smx in the plugins folder. Load the plugin manually with sm_rcon sm plugins load ServerLagExploitFix_3_7_2020 or restart your server for it to auto load.

    Clarification:
    This is an in-game engine denial of service attack. A client connects to your game server instance with a hack and forces the server to lag by spamming stuff you can't with a vanilla game client. This plugin removes those commands operations which are intensive via replacing the assembly instructions with nothing. (The description is vague to prevent easy recreation of the exploit which would cause a big surge in attacks)

    Warning:
    This plugin is written differently then most. It's just raw assembly instruciton replacement. This means it can easily break and lead to crashing after server updates. If you are using this plugin and your server starts crashing, start your debugging efforts by removing this plugin.

    Note to the "hackers" that keep attacking community servers I manage. I will keep figuring out the exploit you are abusing and create patchs which will be released publiclly. Please continue



    Updated on 10/22/2022:
    A CSGO update broke this plugin and lead to server crashes.
    Vauff#2804 from the sourcemod discord has updated it (Not Fully Tested)


    Updated on 02/03/2023:
    It's untested, leave comments if it crashes or isn't solving the issue and I'll update it.

    Download the `ServerLagExploitFix_3_7_2020 updated on 02_03_23.zip` attachment for the newest verison.
    Attached Files
    File Type: sp Get Plugin or Get Source (ServerLagExploitFix_3_7_2020.sp - 8374 views - 1.2 KB)
    File Type: txt LagExploitFix_3_7_2020.txt (525 Bytes, 6929 views)
    File Type: zip ServerLagExploitFix_3_7_2020 updated on 10_22_22 by vauff.zip (4.7 KB, 266 views)
    File Type: zip ServerLagExploitFix_3_7_2020 updated on 02_03_23.zip (4.7 KB, 429 views)
    __________________
    I highly recommend joining the SourceMod Discord Server for real time support.

    Last edited by backwards; 02-03-2023 at 14:59. Reason: Clarification
    backwards is offline
    Notifications
    AlliedModders Donor
    Join Date: Oct 2015
    Old 03-07-2020 , 20:23   Re: [CSGO] Server Lagger Exploit Security Patch [3/7/2020]]
    Reply With Quote #2

    Think adding a ban into this would be worthwhile? That way they also get banned for trying and would mostly reduce the number of attempts?
    Notifications is offline
    backwards
    AlliedModders Donor
    Join Date: Feb 2014
    Location: USA
    Old 03-07-2020 , 20:33   Re: [CSGO] Server Lagger Exploit Security Patch [3/7/2020]]
    Reply With Quote #3

    I would but the only way I see of doing that is with a mid function hook to shellcode allocated. The shellcode probably will break really easily with csgo updates. So for now I just have it block the attack. If anyone has a decent way of handling it inside of a sourcemod plugin then I would be interested in learning.
    __________________
    I highly recommend joining the SourceMod Discord Server for real time support.
    backwards is offline
    arcticx2
    Senior Member
    Join Date: Nov 2011
    Old 03-07-2020 , 22:13   Re: [CSGO] Server Lagger Exploit Security Patch [3/7/2020]]
    Reply With Quote #4

    tnx mate i was suffering from this kind of attacks, i will use it
    arcticx2 is offline
    xm3kilo
    Member
    Join Date: Jan 2018
    Old 03-08-2020 , 00:29   Re: [CSGO] Server Lagger Exploit Security Patch [3/7/2020]]
    Reply With Quote #5

    My servers are still being crashed even with this installed.
    xm3kilo is offline
    backwards
    AlliedModders Donor
    Join Date: Feb 2014
    Location: USA
    Old 03-08-2020 , 14:56   Re: [CSGO] Server Lagger Exploit Security Patch [3/7/2020]]
    Reply With Quote #6

    Quote:
    Originally Posted by xm3kilo View Post
    My servers are still being crashed even with this installed.
    you have this one installed as well?
    https://forums.alliedmods.net/showthread.php?p=2656975

    If so and your servers are being attacked, you can add me on steam and i'll figure out what they are doing to your server.
    __________________
    I highly recommend joining the SourceMod Discord Server for real time support.
    backwards is offline
    Enzyoo
    Member
    Join Date: Dec 2017
    Location: Įsgaršr
    Old 03-09-2020 , 02:04   Re: [CSGO] Server Lagger Exploit Security Patch [3/7/2020]]
    Reply With Quote #7

    Thank you, will be good to prepare in case of this attack.
    Enzyoo is offline
    Notifications
    AlliedModders Donor
    Join Date: Oct 2015
    Old 03-09-2020 , 15:56   Re: [CSGO] Server Lagger Exploit Security Patch [3/7/2020]]
    Reply With Quote #8

    There's one which works in Official Valve MM, wonder if this is the same exploit tbh
    Notifications is offline
    YourDignity
    Junior Member
    Join Date: Sep 2018
    Old 03-17-2020 , 12:27   Re: [CSGO] Server Lagger Exploit Security Patch [3/7/2020]]
    Reply With Quote #9

    Is this the same thing where people go into the server and everyone on the server goes to like 20 FPS and it lags
    YourDignity is offline
    yuv41
    Member
    Join Date: Jan 2020
    Old 03-17-2020 , 15:46   Re: [CSGO] Server Lagger Exploit Security Patch [3/7/2020]]
    Reply With Quote #10

    Thank you for the great release, keep up the good work
    yuv41 is offline
    Reply


    Thread Tools
    Display Modes

    Posting Rules
    You may not post new threads
    You may not post replies
    You may not post attachments
    You may not edit your posts

    BB code is On
    Smilies are On
    [IMG] code is On
    HTML code is Off

    Forum Jump


    All times are GMT -4. The time now is 15:28.


    Powered by vBulletin®
    Copyright ©2000 - 2024, vBulletin Solutions, Inc.
    Theme made by Freecode