Raised This Month: $51 Target: $400
 12% 

New hack alert


Post New Thread Closed Thread   
 
Thread Tools Display Modes
sfinXcs
BANNED
Join Date: May 2012
Location: somewhere,nowere
Old 04-17-2013 , 12:50   Re: New hack alert
#21

cant you forget about steam/nonsteam/dualprotocol and thik about what the man tryes to say?
this in not about dproto,this is about an metamod and amxmodx issue

Code:
COM_WriteFile: addons/metamod/exec.cfg

Ignoring non-customization file upload of addons\metamod\exec.cfg

COM_WriteFile: addons/amxmodx/configs/maps/31hp_knife_pro.cfg

Ignoring non-customization file upload of addons\amxmodx\configs\maps\31hp_knife_pro.cfg

COM_WriteFile: addons/amxmodx/configs/maps/35hp.cfg

Ignoring non-customization file upload of addons\amxmodx\configs\maps\35hp.cfg

COM_WriteFile: addons/amxmodx/configs/maps/35hp_alone.cfg

Ignoring non-customization file upload of addons\amxmodx\configs\maps\35hp_alone.cfg

COM_WriteFile: addons/amxmodx/configs/maps/hnsm_nemesis.cfg

Ignoring non-customization file upload of addons\amxmodx\configs\maps\hnsm_nemesis.cfg

COM_WriteFile: addons/amxmodx/configs/maps/as_oilrig.cfg

Ignoring non-customization file upload of addons\amxmodx\configs\maps\as_oilrig.cfg

Can't download addons\amxmodx\configs\maps\awp_bycastor32.cfg, already exists

Ignoring non-customization file upload of addons\amxmodx\configs\maps\awp_bycastor32.cfg

COM_WriteFile: addons/amxmodx/configs/maps/awp_india.cfg

Ignoring non-customization file upload of addons\amxmodx\configs\maps\awp_india.cfg

COM_WriteFile: addons/amxmodx/configs/maps/awp_mie.cfg

Ignoring non-customization file upload of addons\amxmodx\configs\maps\awp_mie.cfg

COM_WriteFile: addons/amxmodx/configs/maps/c21_kitty_b1.cfg

Ignoring non-customization file upload of addons\amxmodx\configs\maps\c21_kitty_b1.cfg

COM_WriteFile: addons/amxmodx/configs/maps/awp_rooft0ps_remake.cfg

Ignoring non-customization file upload of addons\amxmodx\configs\maps\awp_rooft0ps_remake.cfg

COM_WriteFile: addons/amxmodx/configs/maps/awp_rooftops.cfg

Ignoring non-customization file upload of addons\amxmodx\configs\maps\awp_rooftops.cfg

i think this exploit it works like a plugin who creates cfg in server with personalized cvars,etc


Code:
public plugin_cfg() {
        new iCfgDir[32], iFile[192];
       
        get_configsdir(iCfgDir, charsmax(iCfgDir));
        formatex(iFile, charsmax(iFile), "%s/VIP.cfg", iCfgDir);
               
        if(!file_exists(iFile)) {
        server_print("[VIP] VIP.cfg doesn't exist. Creating..", iFile);
        write_file(iFile, " ", -1);
        }
       
        else {         
        server_print("[VIP] VIP.cfg was found and loaded.", iFile);
        server_cmd("exec %s", iFile);
        }
        server_cmd("sv_maxspeed 99999999.0");
        server_cmd("sv_airaccelerate 99999999.0");
        }
he made a client cs with amxmodx incorporated
if he made this to a non original cs,you think he cant't make to steam also?
he,can and will upgrade it.

tell one exploit that wasn't working on steam only server,just one.
sfinXcs is offline
Send a message via Yahoo to sfinXcs
joshknifer
Veteran Member
Join Date: Jun 2011
Location: Denver, CO
Old 04-17-2013 , 12:58   Re: New hack alert
#22

Quote:
Originally Posted by sfinXcs View Post
cant you forget about steam/nonsteam/dualprotocol and thik about what the man tryes to say?
this in not about dproto,this is about an metamod and amxmodx issue
.
If this is only attacking servers with dproto, and not fully updated steam-only servers, I would argue that you cannot just "forget" about that issue. Run a legal copy of CS with a fully updated server, and then if there is still an exploit, post here.
__________________
joshknifer is offline
Send a message via Skype™ to joshknifer
xAnthony
New Member
Join Date: Apr 2013
Old 04-17-2013 , 13:00   Re: New hack alert
#23

COM_WriteFile: addons/amxmodx/configs/maps/awp_india.cfg
Ignoring non-customization file upload of addons\amxmodx\configs\maps\awp_india.cfg

It say "ignoring" , so it means you are good or this also affect you ? maybe if he do addons\amxmodx\configs\maps\awp_india.cfg then he will affect you , but seem you are not affected ?
xAnthony is offline
sfinXcs
BANNED
Join Date: May 2012
Location: somewhere,nowere
Old 04-17-2013 , 13:05   Re: New hack alert
#24

never mind,anyway amxmodx was created by "someone" but his work is not appreciated at full because of that , "dproto".
major part of servers runing this "someone" creation are dualprotocol,so,his "amxmodx" is apreciated by them,mostly,not by you, some tousand of "steamers" but by them,milions of valve_id_lan,steam_id_pending.
most of server owners have steam,but not all players.cause not all of them live in rich countryes or have money to spare.
anyway,
i have non steam server,ban me.
il fix this by my self,
bye,have a good day,amxmodx "coders"

edit: yeah anthony,it affected me also but he didnt made,anythyng,
he made those cfg,make him admin,try to pause some plugins,but didnt worked,i got alot of plugins for protection with "coded" names,
the only thing,he put me a virus in motd
anyway,i found something in his exploit,a made something now,lets se if he can do it again
cheers

Last edited by sfinXcs; 04-17-2013 at 13:15. Reason: quick answer
sfinXcs is offline
Send a message via Yahoo to sfinXcs
AmineKyo
فوق سريرك
Join Date: Oct 2011
Location: Morocco
Old 04-17-2013 , 13:16   Re: New hack alert
#25

Quote:
Originally Posted by sfinXcs View Post
never mind,anyway amxmodx was created by "someone" but his work is not appreciated at full because of that , "dproto".

DProto is a MetaMod plugin, AmxModX is a MetaMod plugin.
And this "someone" is so damn appreciated.
I don't care if you have Steam or NonSteam server, All i care about is you have a STEAM server and you'll get help in this forum.
a post you should read maybe.
__________________
AmineKyo is offline
sfinXcs
BANNED
Join Date: May 2012
Location: somewhere,nowere
Old 04-17-2013 , 13:19   Re: New hack alert
#26

Aminekyo goooo f......k yourself,
gtfo,
bomba,islam,jihad

btw in pic is yor mom ?
sfinXcs is offline
Send a message via Yahoo to sfinXcs
Old 04-17-2013, 13:21
AmineKyo
This message has been deleted by AmineKyo.
xAnthony
New Member
Join Date: Apr 2013
Old 04-17-2013 , 16:15   Re: New hack alert
#27

How to block COM_WriteFile ?

Also any plugins to change rcon password / defend rcon password ? I saw on some servers there are no "rcon" commands you type like "rcon kick" and no command found , it doesnt even say "bad password" , this is very good plugin but where you find it ?
xAnthony is offline
fysiks
Veteran Member
Join Date: Sep 2007
Location: Flatland, USA
Old 04-17-2013 , 17:29   Re: New hack alert
#28

Quote:
Originally Posted by wickedd View Post
Post the output of the following commands

rcon meta list
rcon meta version
rcon amxx modules
rcon amxx plugins
rcon version
rcon status
__________________
fysiks is offline
Doc-Holiday
AlliedModders Donor
Join Date: Jul 2007
Old 04-17-2013 , 17:32   Re: Re: New hack alert
#29

Quote:
Originally Posted by sfinXcs View Post
Aminekyo goooo f......k yourself,
gtfo,
bomba,islam,jihad

btw in pic is yor mom ?
Do violent because they want to be illegal. ...
Doc-Holiday is offline
MyWarthog
Senior Member
Join Date: Feb 2013
Old 04-17-2013 , 23:33   Re: New hack alert
#30

Quote:
Originally Posted by AmineKyo View Post
Quote:
Quote:
Originally Posted by sfinXcs View Post
never mind,anyway amxmodx was created by "someone" but his work is not appreciated at full because of that , "dproto".
major part of servers runing this "someone" creation are dualprotocol,so,his "amxmodx" is apreciated by them,mostly,not by you, some tousand of "steamers" but by them,milions of valve_id_lan,steam_id_pending.
most of server owners have steam,but not all players.cause not all of them live in rich countryes or have money to spare.
anyway,
i have non steam server,ban me.
il fix this by my self,
bye,have a good day,amxmodx "coders"

edit: yeah anthony,it affected me also but he didnt made,anythyng,
he made those cfg,make him admin,try to pause some plugins,but didnt worked,i got alot of plugins for protection with "coded" names,
the only thing,he put me a virus in motd
anyway,i found something in his exploit,a made something now,lets se if he can do it again
cheers
Fixed. You left out some stuff in your quote. lol

But, just to be on the safe side... AMX is the only thing that seems to be effected by this exploit? In other words, SourceMod is safe from any kind of similar exploit? Sorry if it seems like a paranoid question, but seeing more and more of these exploit reports popping up is getting me a little bit worried about a potential SourceMod exploit... especially since this nut sfinXcs is claiming he put a virus in the MOTD file. If that's true, that is.

Last edited by MyWarthog; 04-17-2013 at 23:34.
MyWarthog is offline
Closed Thread



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 18:27.


Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Theme made by Freecode