Raised This Month: $51 Target: $400
 12% 

CS:GO Server Crash Exploit


Post New Thread Reply   
 
Thread Tools Display Modes
xeropw
AlliedModders Donor
Join Date: Jun 2016
Old 06-21-2016 , 23:42   Re: CS:GO Server Crash Exploit
Reply With Quote #21

Quote:
Originally Posted by ZASTRELIS View Post
and what i must do with it?) Where NormalizeAngles func must be used?
-snip-

???
It doesn't work, it is enough to send the angles while pressing any attack cmd and the server will stop.
You CAN log the change in eye angles and manually ban them after the server hang.
xeropw is offline
shavit
AlliedModders Donor
Join Date: Dec 2011
Location: Israel
Old 06-22-2016 , 00:23   Re: CS:GO Server Crash Exploit
Reply With Quote #22

Quote:
Originally Posted by Neuro Toxin View Post
OnPlayerRunCmd is a prehook and should override / fix the exploit.

Edit: Sounds like removing IN_ATTACK on invalid angles will fix the exploit.

Edit2:

An angle of -10058801942080820000000000000000000
Adding 360 will still leave an invalid angle
there's a while() loop
well, ofc it'd lag the server because of amount of time it takes it to run
yeah your IN_ATTACK removal solution should work properly, either that or returning Plugin_Stop
__________________
retired

Last edited by shavit; 06-22-2016 at 00:23.
shavit is offline
Neuro Toxin
Veteran Member
Join Date: Oct 2013
Location: { closing the void; }
Old 06-22-2016 , 01:07   Re: CS:GO Server Crash Exploit
Reply With Quote #23

Can someone do a snippet to remove in attack and return plugin changed while not changing the angles?
__________________
Neuro Toxin is offline
xeropw
AlliedModders Donor
Join Date: Jun 2016
Old 06-22-2016 , 01:15   Re: CS:GO Server Crash Exploit
Reply With Quote #24

Quote:
Originally Posted by shavit View Post
there's a while() loop
well, ofc it'd lag the server because of amount of time it takes it to run
yeah your IN_ATTACK removal solution should work properly, either that or returning Plugin_Stop
Well I've tried both just hardsetting the angles to reasonable values x within 135+- and y/z within 270+-. I've also tried to just return plugin_stop.

The very fact that these angles are broadcasted(to CGameServer or metamod/sourcemod) hangs the server.
xeropw is offline
ZASTRELIS
Veteran Member
Join Date: Nov 2010
Location: Siberia, Irkutsk
Old 06-22-2016 , 01:25   Re: CS:GO Server Crash Exploit
Reply With Quote #25

bad, very bad. Today I've 3 crashes :\

Last edited by ZASTRELIS; 06-22-2016 at 01:25.
ZASTRELIS is offline
xeropw
AlliedModders Donor
Join Date: Jun 2016
Old 06-22-2016 , 03:08   Re: CS:GO Server Crash Exploit
Reply With Quote #26

I just banned around 160 people from my servers and I haven't had a crash in about 3 hours so I'm going to sleep... while I cannot suspend usercmds from being received by the server, I was able to log all angle changes and I had a nice list for myself.

Beware most of these cheaters will go on populated servers and steal usernames via namechanger so that if you intend to ban via username you'll ban innocent people. There was also a mix of cmd spam, setinfo spam, etc... I managed to impose limits and kick/ban those abusing them so hopefully my community is good for a while.

Fundamentally, the very fact that viewangles can be changed to number limits which makes them incompulatable. There's nothing that can be done, since it's a simple memory edit.
xeropw is offline
sneaK
SourceMod Moderator
Join Date: Feb 2015
Location: USA
Old 06-22-2016 , 12:17   Re: CS:GO Server Crash Exploit
Reply With Quote #27

This has gotten from bad to worse, it seems like this exploit has gone public and kiddies are running around freely with it. Valve needs to do something, NOW.
sneaK is offline
root88
Senior Member
Join Date: May 2016
Old 06-22-2016 , 14:38   Re: CS:GO Server Crash Exploit
Reply With Quote #28

I'm 99% sure that plugin won't fix this, because we need to completly stop server from processing that high eye angles.
I've got smac_eyetest with some my fixes, and servers are still crashing sometimes.
__________________
root88 is offline
xeropw
AlliedModders Donor
Join Date: Jun 2016
Old 06-22-2016 , 17:06   Re: CS:GO Server Crash Exploit
Reply With Quote #29

I've tried kigen's ac, smac, and still servers crash... nothing can be done and this should be at the top of Valve's priorities, but of course, their greed for money overshadows the need to fix community servers.
xeropw is offline
Neuro Toxin
Veteran Member
Join Date: Oct 2013
Location: { closing the void; }
Old 06-22-2016 , 19:14   Re: CS:GO Server Crash Exploit
Reply With Quote #30

Quote:
Originally Posted by Neuro Toxin View Post
Can someone do a snippet to remove in attack and return plugin changed while not changing the angles?
__________________
Neuro Toxin is offline
Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 03:03.


Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Theme made by Freecode