Question NEW EXPLOIT

csblackangelscom · **Author**

Hello, for all you know there is a new exploit that draws players from cs, now again this exploit is used as the name and entering the playar cs #Cstrike_GIGN_Label #Cstrike_GIGN_Label name and write something in chat out others players in cs. can you help me with it

fysiks · 09-04-2014 , 17:46 Re: Question NEW EXPLOIT

Before we can help you, you need to say that in comprehensible english.

**hornet** · 09-04-2014 , 18:32 Re: Question NEW EXPLOIT

Quote:

Originally Posted by fysiks

Before we can help you, you need to say that in comprehensible english.

Something related to the player changing their name to that text reference.

Phant · 09-05-2014 , 06:37 Re: Question NEW EXPLOIT

As I know, there is bug:

Code:

say "#Cstrike_GIGN_Label #Cstrike_GIGN_Label"

Not name of player.

Quote:

Originally Posted by HamletEagle

Non-steamer. This exploit si not working on latest server builds without dproto.

You mean it's dproto bug

?

**HamletEagle** · 09-05-2014 , 07:20 Re: Question NEW EXPLOIT

I don't mean anything, just remove dproto and update your server, then you won't get any bug.

GordonFreeman (RU) · 09-05-2014 , 07:31 Re: Question NEW EXPLOIT

Quote:

Originally Posted by HamletEagle

I don't mean anything, just remove dproto and update your server, then you won't get any bug.

Wrong.

Code:

name "1#Cstrike_GIGN_Label #Cstrike_GIGN_Label"

And ask admin for ban,kick,slay and watch the fun.

**HamletEagle** · 09-05-2014 , 08:00 Re: Question NEW EXPLOIT

Quote:

Originally Posted by GordonFreeman (RU)

Wrong.

Code:

name "1#Cstrike_GIGN_Label #Cstrike_GIGN_Label"

And ask admin for ban,kick,slay and watch the fun.

Lol, it seems that you are right. When typing in chat it does nothing, but when using commands it crash the server.

^SmileY · 09-05-2014 , 11:49 Re: Question NEW EXPLOIT

OMFG!

Kick by userid

slLent · 09-05-2014 , 14:14 Re: Question NEW EXPLOIT

this bug works on messages SayText, TextMsg, ShowMenu
native/stock client_print,client_print_color etc.

Code:

name "d #Spec_Help_Text #Spec_Duck"

and send message.

Code:

message_begin(MSG_ALL,get_user_msgid("SayText"));
write_byte(id);
write_string("d #Spec_Help_Text #Spec_Duck : Hello people!");
message_end();

players that received a message - client crashes.
more info

fysiks · 09-05-2014 , 16:02 Re: Question NEW EXPLOIT

So, it is not a bug of the engine, it is a bug in plugins/modules that resend these things with message_begin() etc. It's basically like SQL injection.

You can test this by first doing it on a server without MetaMod installed. I bet it doesn't do anything. Then, test it on a server with AMX Mod X.