Raised This Month: $53 Target: $400
 13% 

[CSGO] Server Crasher Exploit Patch [3/20/2020]


Post New Thread Reply   
 
Thread Tools Display Modes
Author
backwards
AlliedModders Donor
Join Date: Feb 2014
Location: USA
Plugin ID:
6992
Plugin Version:
1.0
Plugin Category:
Server Management
Plugin Game:
Counter-Strike: GO
Plugin Dependencies:
    Servers with this Plugin:
     
    Plugin Description:
    Fixes an exploit for csgo servers which allows attackers to crash it. (recently added to aimware)
    Unapprover:
    Reason for Unapproving:
    Fixed by Valve version 1.37.4.5
    Old 03-20-2020 , 06:00   [CSGO] Server Crasher Exploit Patch [3/20/2020]
    Reply With Quote #1

    This plugin is no longer needed for csgo and should be uninstalled if currenlty installed to prevent server crashes.

    This exploit has been patched in csgo with the recent update:
    PHP Code:
    Exe version 1.37.4.5 (csgo)
    Exe build14:10:24 Mar 19 2020 (7803) (730
    This affects all source sdk2013 based games and csgo.
    This patch is only for csgo linux and windows servers.
    The sdk2013 based patchs will come at a later time.

    Installation:
    add "ExploitFix_3_20_2020.txt" to your servers "csgo\addons\sourcemod\gamedata\" directory.
    add "ExploitFix_3_20_2020.smx" to your servers "csgo\addons\sourcemod\plugins\" directory.

    *NOTE* This hasn't been extensively tested yet and may show unknown net messages in your server console when an attacker trys to exploit it.
    Attached Files
    File Type: sp Get Plugin or Get Source (ExploitFix_3_20_2020.sp - 3820 views - 1.0 KB)
    File Type: txt ExploitFix_3_20_2020.txt (500 Bytes, 2567 views)

    Last edited by backwards; 03-22-2020 at 20:14.
    backwards is offline
    shavit
    AlliedModders Donor
    Join Date: Dec 2011
    Location: Israel
    Old 03-20-2020 , 07:59   Re: [CSGO] Server Crasher Exploit Patch [3/20/2020]
    Reply With Quote #2

    I think for your own good it'd be better to send this to Valve via HackerOne; they'd definitely compensate.
    Great release!
    __________________
    retired
    shavit is offline
    backwards
    AlliedModders Donor
    Join Date: Feb 2014
    Location: USA
    Old 03-20-2020 , 08:12   Re: [CSGO] Server Crasher Exploit Patch [3/20/2020]
    Reply With Quote #3

    Valve's already aware of this, the hackerone report was marked as a duplicate from an ancient report that is greater than a year old. Sometimes it takes them a while to patch these, the RCE I submited 1.3 years ago still hasn't been resolved.
    backwards is offline
    pToxic
    New Member
    Join Date: Mar 2020
    Old 03-20-2020 , 16:36   Re: [CSGO] Server Crasher Exploit Patch [3/20/2020]
    Reply With Quote #4

    super useful. nice job!
    pToxic is offline
    Ejziponken
    AlliedModders Donor
    Join Date: Apr 2008
    Old 03-20-2020 , 17:09   Re: [CSGO] Server Crasher Exploit Patch [3/20/2020]
    Reply With Quote #5

    Thanks for these. Just got my servers crashed today so I installed both.
    Ejziponken is offline
    ErackZendor
    Junior Member
    Join Date: Dec 2019
    Old 03-20-2020 , 17:53   Re: [CSGO] Server Crasher Exploit Patch [3/20/2020]
    Reply With Quote #6

    Thanks a lot.
    ErackZendor is offline
    TheFlyingApple
    Member
    Join Date: Aug 2016
    Old 03-20-2020 , 18:44   Re: [CSGO] Server Crasher Exploit Patch [3/20/2020]
    Reply With Quote #7

    Thanks a lot for a quick fix!
    TheFlyingApple is offline
    RealEdan
    Member
    Join Date: Dec 2016
    Location: United States
    Old 03-20-2020 , 22:59   Re: [CSGO] Server Crasher Exploit Patch [3/20/2020]
    Reply With Quote #8

    Really appreciate your work on this exploit + the previous one everyone else knows about. I think we recently spoke regarding these and the H1 RCE Exploit you submitted awhile back. Thanks Norway!
    __________________
    RealEdan is offline
    eliteroyal
    AlliedModders Donor
    Join Date: Dec 2016
    Location: Moldova
    Old 03-21-2020 , 06:38   Re: [CSGO] Server Crasher Exploit Patch [3/20/2020]
    Reply With Quote #9

    L 03/21/2020 - 12:15:43: [SM] Call stack trace:
    L 03/21/2020 - 12:15:43: [SM] [0] LoadGameConfigFile
    L 03/21/2020 - 12:15:43: [SM] [1] Line 16, /home/forums/content/files/2/4/6/0/2/9/180250.attach::OnPluginStart
    L 03/21/2020 - 12:15:43: [SM] Unable to load plugin "ExploitFix_3_20_2020.smx": Error detected in plugin startup (see error logs)
    L 03/21/2020 - 12:15:43: [SM] Error parsing gameconfig file "/home/server2731/service5565/csgo/csgo/addons/sourcemod/gamedata/LagExploitFix_3_7_2020.txt":
    L 03/21/2020 - 12:15:43: [SM] Error 1 on line 0, col 0: Stream failed to open

    compiled on last sm 1.10

    PLEASE HELPE!

    EDIT:
    because of being too dumb i forgot to upload the gamedata file, issue solved
    __________________
    PEACE FROM MOLDOVA

    Last edited by eliteroyal; 03-21-2020 at 07:21.
    eliteroyal is offline
    The Killer NL
    AlliedModders Donor
    Join Date: Aug 2018
    Location: The Netherlands
    Old 03-21-2020 , 06:55   Re: [CSGO] Server Crasher Exploit Patch [3/20/2020]
    Reply With Quote #10

    Thanks for this buddy.
    __________________

    The Killer NL is offline
    Reply


    Thread Tools
    Display Modes

    Posting Rules
    You may not post new threads
    You may not post replies
    You may not post attachments
    You may not edit your posts

    BB code is On
    Smilies are On
    [IMG] code is On
    HTML code is Off

    Forum Jump


    All times are GMT -4. The time now is 18:22.


    Powered by vBulletin®
    Copyright ©2000 - 2021, vBulletin Solutions, Inc.
    Theme made by Freecode