Raised This Month: $100 Target: $400
 25% 

CmdFix - CS:GO Server Crash Exploit Fix


Post New Thread Reply   
 
Thread Tools Display Modes
sneaK
SourceMod Moderator
Join Date: Feb 2015
Location: USA
Old 10-10-2016 , 03:49   Re: CmdFix - CS:GO Surf Server Crash Exploit Fix
Reply With Quote #11

Quote:
Originally Posted by dilalmon View Post
This also seems to kick valid clients.
Is there any way to block the command and not kick them?
Just out of curiosity, how often are you experiencing this? It's interesting because I've logged 24 separate users who got kicked for corrupt cmd data, and upon investigation all 24 appeared to have been malicious users.
__________________
sneaK is offline
Lubricant Jam
AlliedModders Donor
Join Date: Oct 2016
Location: United Kingdom
Old 10-10-2016 , 06:22   Re: CmdFix - CS:GO Surf Server Crash Exploit Fix
Reply With Quote #12

Is this just for surf servers I take it, or does it apply for all servers?
Lubricant Jam is offline
Cooky
AlliedModders Donor
Join Date: Jun 2010
Location: 127.0.0.1
Old 10-10-2016 , 08:32   Re: CmdFix - CS:GO Surf Server Crash Exploit Fix
Reply With Quote #13

Quote:
Originally Posted by GoD-Tony View Post
This extension fixes a known crash that can occur (usually by malicious clients) when CS:GO's sv_clamp_unsafe_velocities ConVar is set to 0, which is pretty much required for surf servers.

It is similar in operation to the closed-source fix by backwards here, https://forums.alliedmods.net/showpo...9&postcount=39

More info about the crash is at https://forums.alliedmods.net/showthread.php?t=284184
Cooky is offline
Lubricant Jam
AlliedModders Donor
Join Date: Oct 2016
Location: United Kingdom
Old 10-10-2016 , 09:19   Re: CmdFix - CS:GO Surf Server Crash Exploit Fix
Reply With Quote #14

I am aware, however why does it only appear for Surf servers and not others?
Lubricant Jam is offline
Bacardi
Veteran Member
Join Date: Jan 2010
Location: mom's basement
Old 10-10-2016 , 09:28   Re: CmdFix - CS:GO Surf Server Crash Exploit Fix
Reply With Quote #15

Well I can say, one time player crash server and it's not surf server and that cvar is still enabled.
But we don't have this extension on server.
__________________
Bacardi is offline
dilalmon
AlliedModders Donor
Join Date: Apr 2013
Old 10-10-2016 , 10:35   Re: CmdFix - CS:GO Surf Server Crash Exploit Fix
Reply With Quote #16

Quote:
Originally Posted by blackhawk74 View Post
Just out of curiosity, how often are you experiencing this? It's interesting because I've logged 24 separate users who got kicked for corrupt cmd data, and upon investigation all 24 appeared to have been malicious users.
We have a plugin that freezes the clients and unfreezes them.
Right as they unfreeze they get teleported to other player's spawn.

Code:
SetEntityMoveType (client, MOVETYPE_WALK);
TeleportEntity (client, g_fSpawnPoint[CS_TEAM_CT], NULL_VECTOR, NULL_VECTOR);
This kicked 19 people in the same occurrence, leaving the rest 6 for some reason.
dilalmon is offline
dilalmon
AlliedModders Donor
Join Date: Apr 2013
Old 10-15-2016 , 02:32   Re: CmdFix - CS:GO Surf Server Crash Exploit Fix
Reply With Quote #17

Can anyone compile it without kicking the clients?

I tried building it myself, but trying to even build it outputs "Exception: Unable to find a suitable CC compiler".
I do have Visual Studio 2015 and Python 2.7 (mozilla build) installed.
Spent hours trying to figure out, but I gave up.
dilalmon is offline
sneaK
SourceMod Moderator
Join Date: Feb 2015
Location: USA
Old 10-31-2016 , 03:49   Re: CmdFix - CS:GO Surf Server Crash Exploit Fix
Reply With Quote #18

Just an added bit of info, I believe that this extension still fixes certain server crash exploits, regardless of sv_clamp_unsafe_velocities value. I've had several users attempting to crash a few of my servers recently, interestingly enough one of them is a competitive server, where sv_clamp_unsafe_velocities is of course set to 1.

tl;dr It's not just for surf servers, I believe every server should be running this. Exploiters be going wild.
__________________
sneaK is offline
kiko.
AlliedModders Donor
Join Date: Dec 2015
Old 11-01-2016 , 02:03   Re: CmdFix - CS:GO Surf Server Crash Exploit Fix
Reply With Quote #19

Thats right. But also the extesion kicks legit players. Maybe just block the corrupt stuff without kicking the clients?
kiko. is offline
sneaK
SourceMod Moderator
Join Date: Feb 2015
Location: USA
Old 11-01-2016 , 02:41   Re: CmdFix - CS:GO Surf Server Crash Exploit Fix
Reply With Quote #20

Quote:
Originally Posted by kiko. View Post
Thats right. But also the extesion kicks legit players. Maybe just block the corrupt stuff without kicking the clients?
I'm really interested in figuring out what causes the legit player kicks... every single circumstance a player has been logged sending corrupt data, and I mean 100% of the time, it has been maliciously.

As dilalmon said above, his is caused by a server-side plugin, I wonder if legit players would be kicked without such a plugin.
__________________
sneaK is offline
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 20:47.


Powered by vBulletin®
Copyright ©2000 - 2017, vBulletin Solutions, Inc.
Theme made by Freecode