[backwards]

This plugin is no longer needed for csgo and should be uninstalled if currenlty installed to prevent server crashes.

This exploit has been patched in csgo with the recent update:

PHP Code:

Exe version 1.37.4.5 (csgo)
Exe build: 14:10:24 Mar 19 2020 (7803) (730) 


This affects all source sdk2013 based games and csgo.
This patch is only for csgo linux and windows servers.
The sdk2013 based patchs will come at a later time.

Installation:
add "ExploitFix_3_20_2020.txt" to your servers "csgo\addons\sourcemod\gamedata\" directory.
add "ExploitFix_3_20_2020.smx" to your servers "csgo\addons\sourcemod\plugins\" directory.

*NOTE* This hasn't been extensively tested yet and may show unknown net messages in your server console when an attacker trys to exploit it.

[shavit]

I think for your own good it'd be better to send this to Valve via HackerOne; they'd definitely compensate.
Great release!

[backwards]

Valve's already aware of this, the hackerone report was marked as a duplicate from an ancient report that is greater than a year old. Sometimes it takes them a while to patch these, the RCE I submited 1.3 years ago still hasn't been resolved.

[cixoT]

super useful. nice job!

[Ejziponken]

Thanks for these. Just got my servers crashed today so I installed both.

[ErackZendor]

Thanks a lot.

[TheFlyingApple]

Thanks a lot for a quick fix!

[RealEdan]

Really appreciate your work on this exploit + the previous one everyone else knows about. I think we recently spoke regarding these and the H1 RCE Exploit you submitted awhile back. Thanks Norway!

[eliteroyal]

L 03/21/2020 - 12:15:43: [SM] Call stack trace:
L 03/21/2020 - 12:15:43: [SM] [0] LoadGameConfigFile
L 03/21/2020 - 12:15:43: [SM] [1] Line 16, /home/forums/content/files/2/4/6/0/2/9/180250.attach::OnPluginStart
L 03/21/2020 - 12:15:43: [SM] Unable to load plugin "ExploitFix_3_20_2020.smx": Error detected in plugin startup (see error logs)
L 03/21/2020 - 12:15:43: [SM] Error parsing gameconfig file "/home/server2731/service5565/csgo/csgo/addons/sourcemod/gamedata/LagExploitFix_3_7_2020.txt":
L 03/21/2020 - 12:15:43: [SM] Error 1 on line 0, col 0: Stream failed to open

compiled on last sm 1.10

PLEASE HELPE!

EDIT:
because of being too dumb i forgot to upload the gamedata file, issue solved

[The Killer NL]

Thanks for this buddy.