Raised This Month: $51 Target: $400
 12% 

CS:GO Server Crash Exploit


Post New Thread Reply   
 
Thread Tools Display Modes
xeropw
AlliedModders Donor
Join Date: Jun 2016
Old 06-22-2016 , 19:50   Re: CS:GO Server Crash Exploit
Reply With Quote #31

Code:
new pCmd = GetClientButtons(client); if(pCmd & IN_ATTACK) {     pCmd &= ~IN_ATTACK;     return Plugin_Changed; }

However, you are editing the returned buttons, not the actual client buttons.
Why this will never work? Because IN_ATTACK is generated clientside and then sent to the server.
Even if you block fire_event gameevent, remove all bullets, the server will still receive the in_attack cmd.

Valve needs to impose clientside checks to viewangles, but even then I fear that cheats can still
hardset them via a simple memory write :/
xeropw is offline
shavit
AlliedModders Donor
Join Date: Dec 2011
Location: Israel
Old 06-23-2016 , 04:36   Re: CS:GO Server Crash Exploit
Reply With Quote #32

Quote:
Originally Posted by xeropw View Post
Code:
new pCmd = GetClientButtons(client); if(pCmd & IN_ATTACK) {     pCmd &= ~IN_ATTACK;     return Plugin_Changed; }

However, you are editing the returned buttons, not the actual client buttons.
Why this will never work? Because IN_ATTACK is generated clientside and then sent to the server.
Even if you block fire_event gameevent, remove all bullets, the server will still receive the in_attack cmd.

Valve needs to impose clientside checks to viewangles, but even then I fear that cheats can still
hardset them via a simple memory write :/
from my experience with cheat development, you could just add IN_ATTACK to the usercmd and the server will also see you shooting
(talking about cs:s)
__________________
retired
shavit is offline
asdfxD
Veteran Member
Join Date: Apr 2011
Old 06-25-2016 , 08:39   Re: CS:GO Server Crash Exploit
Reply With Quote #33

any new infos about this? possible to get a log who crash the server. like smac "XXX was banned for cheating with their eye angles.
asdfxD is offline
Aymeric VII
BANNED
Join Date: Jun 2016
Location: Hiding under my sheets
Old 06-25-2016 , 13:01   Re: CS:GO Server Crash Exploit
Reply With Quote #34

I guess throwing down these corrupt users for other owners to ban them is against the rules here

anyways this is a serious issue still, we get 5-7 crashes from blatant kids crashing the servers every day. any fix would be greatly appreciated

Last edited by Aymeric VII; 06-25-2016 at 13:01.
Aymeric VII is offline
blaacky
Senior Member
Join Date: Oct 2012
Old 06-26-2016 , 01:58   Re: CS:GO Server Crash Exploit
Reply With Quote #35

It seems to be only Windows servers this bug effects.

Last edited by blaacky; 06-26-2016 at 14:24.
blaacky is offline
nikooo777
AlliedModders Donor
Join Date: Apr 2010
Location: Lugano, Switzerland
Old 06-26-2016 , 08:54   Re: CS:GO Server Crash Exploit
Reply With Quote #36

today i had an user crash my server multiple times. the crash dump is the following:

https://crash.limetech.org/7qns47htuigt
Quote:
SERVER CRASH BY FIEDLERCREW ENJOY IT 3..2...1.. AND ITS DOWN
if you want to prevent this specific user from crashing your server feel free to ban his steam id: STEAM_0:0:9920086


PS: i'm running linux (debian x64)
__________________

Last edited by nikooo777; 06-26-2016 at 08:55.
nikooo777 is offline
blaacky
Senior Member
Join Date: Oct 2012
Old 06-26-2016 , 11:30   Re: CS:GO Server Crash Exploit
Reply With Quote #37

Can someone try my attempt at a fix? Requires dhooks. I have no way to test if it works but what it's doing is hooking the Teleport function and preventing it from being called if the view angles are impossible values

EDIT: Doesn't work
Attached Files
File Type: sp Get Plugin or Get Source (anticrash.sp - 164 views - 2.9 KB)

Last edited by blaacky; 06-26-2016 at 11:43.
blaacky is offline
asdfxD
Veteran Member
Join Date: Apr 2011
Old 06-26-2016 , 14:12   Re: CS:GO Server Crash Exploit
Reply With Quote #38

Quote:
Originally Posted by blaacky View Post
It seems to be only Windows servers this bug effects.
no, i'am on linux and they crash my server too.
asdfxD is offline
blaacky
Senior Member
Join Date: Oct 2012
Old 06-26-2016 , 15:34   Re: CS:GO Server Crash Exploit
Reply With Quote #39

Here is a fix that works for Windows servers. Made by backwards. Place the files in your server's addons folder
Attached Files
File Type: dll CSGOAntiCrash.dll (1,004.0 KB, 457 views)
File Type: vdf CSGOAntiCrash.vdf (45 Bytes, 279 views)

Last edited by blaacky; 06-26-2016 at 15:35.
blaacky is offline
Bara
AlliedModders Donor
Join Date: Apr 2012
Location: Germany
Old 06-26-2016 , 15:35   Re: CS:GO Server Crash Exploit
Reply With Quote #40

Quote:
Originally Posted by asdfxD View Post
no, i'am on linux and they crash my server too.
Are you sure? I can't confirm this on my test server. Maybe it's a plugin bug like with https://forums.alliedmods.net/showthread.php?p=2399078 and sm_status (crash server).
__________________
Discord (Bara#5006) | My Plugins (GitHub)
You like my work? Support is not a crime.
Bara is offline
Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 05:48.


Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Theme made by Freecode