Raised This Month: $12 Target: $400
 3% 

about rcon exploits and the rcon locker(s)


Post New Thread Reply   
 
Thread Tools Display Modes
Author Message
Ade
I love purple
Join Date: May 2010
Old 01-02-2014 , 09:07   about rcon exploits and the rcon locker(s)
Reply With Quote #1

both this module https://forums.alliedmods.net/showpo...56&postcount=7 and this plugin https://forums.alliedmods.net/showthread.php?t=93934 mention the possibility of the rcon password being changed
but what if mine stayed the same all throughout? does this mean it was changed then reverted?...

what can i do, what should i use to prevent someone from changing stuff like sv_pure through what i guess could only be an rcon hack of some sort?
__________________
Ade is offline
allienaded
AlliedModders Donor
Join Date: Feb 2013
Old 01-02-2014 , 13:56   Re: about rcon exploits and the rcon locker(s)
Reply With Quote #2

Afaik the SMAC Rcon Locker reverts the rcon password on the same frame it is changed (instantly) so there's no time for anyone to change anything. If you wan't to be 100% sure just disable rcon all together and only use sm_rcon.
allienaded is offline
Ade
I love purple
Join Date: May 2010
Old 01-02-2014 , 17:37   Re: about rcon exploits and the rcon locker(s)
Reply With Quote #3

that means no hlsw.. but how would i simply disable it altogether, just not put it in server.cfg is what u mean?
__________________
Ade is offline
allienaded
AlliedModders Donor
Join Date: Feb 2013
Old 01-03-2014 , 06:01   Re: about rcon exploits and the rcon locker(s)
Reply With Quote #4

Quote:
Originally Posted by Ade View Post
that means no hlsw.. but how would i simply disable it altogether, just not put it in server.cfg is what u mean?
Yes if you leave rcon_password blank the rcon will be completely disabled. If completely disabling the rcon isn't an option and you're on linux and know how to use iptables you could restrict the port rcon uses (27015 TCP) to specific IPs only. Or you could use the built in IP whitelist feature in the rcon locker but for that to work you will also have to install this https://forums.alliedmods.net/showthread.php?t=168403

Last edited by allienaded; 01-03-2014 at 06:03.
allienaded is offline
Ade
I love purple
Join Date: May 2010
Old 01-03-2014 , 07:12   Re: about rcon exploits and the rcon locker(s)
Reply With Quote #5

windows
yea i saw that ext, i just wanted to keep it light...

how can i check the list at any given time?

EDIT: thank you so far, I really appreciate it
__________________

Last edited by Ade; 01-05-2014 at 08:48.
Ade is offline
Ade
I love purple
Join Date: May 2010
Old 01-07-2014 , 08:01   Re: about rcon exploits and the rcon locker(s)
Reply With Quote #6

welp i added the extension, added my ip, then had someone try to access via rcon and couldn't, but i just tried now from work with hlsw and worked like wtf
__________________
Ade is offline
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 10:13.


Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Theme made by Freecode