Re: [Csgo_servers] Update

[Dan B (Narry)]

Are we doing this again?

On Mon, May 7, 2018 at 6:41 PM, Stealth Mode 
wrote:

> I was mapping before you knew what cs even was. Lmao. Ever hear of
> worldcraft 3.3?
>
> On Mon, May 7, 2018, 18:28 David  wrote:
>
>> oh look, another topic stealthmode is clueless on
>>
>> On 7 May 2018 at 23:04, ProJaCore  wrote:
>>
>>> And there we go
>>>
>>> again? :)
>>>
>>> Stealth Mode  schrieb am Di., 8. Mai 2018,
>>> 01:03:
>>>
 One additional feedback. Any chance tour environment mapping people can
 go through there maps? And fix the tears, collisions, and other high
 polygon/calculation areas? Meaning, fix the bugs in their mapping to help
 reduce gfx lag/stuttering on some clients?

 If they need help shoot the uncompiled maps to this email address. It
 really isn't hard to line up faces, and vertices properly.

 -Stealthmode

 On Mon, May 7, 2018, 17:57 Stealth Mode 
 wrote:

> +1
>
> Great job getting this update coded, and patched quickly to address
> the issues.
>
> On Mon, May 7, 2018, 16:43 Vitaliy Genkin 
> wrote:
>
>> An optional stability update for CS:GO game servers to address
>> several network exploits has been released with PatchVersion=1.36.3.4 and
>> ServerVersion=667.
>>
>>
>> ___
>> Csgo_servers mailing list
>> Csgo_servers@list.valvesoftware.com
>> https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers
>
> ___
 Csgo_servers mailing list
 Csgo_servers@list.valvesoftware.com
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers
>>>
>>>
>>> ___
>>> Csgo_servers mailing list
>>> Csgo_servers@list.valvesoftware.com
>>> https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers
>>>
>>
>> ___
>> Csgo_servers mailing list
>> Csgo_servers@list.valvesoftware.com
>> https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers
>
>
> ___
> Csgo_servers mailing list
> Csgo_servers@list.valvesoftware.com
> https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers
>
___
Csgo_servers mailing list
Csgo_servers@list.valvesoftware.com
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers

Re: [Csgo_servers] Exploit that spams/lags clients

[Dan B (Narry)]

You'd be really good at writing copypastas.

On Tue, Apr 24, 2018 at 12:42 PM, Stealth Mode 
wrote:

> Mac addresses translate up to IP addresses. That's how they make it out of
> the "home network" before the router. IP translation. Hexidecimal to
> decimal plus subnet mask. What most people who haven't studied electronics
> first, prior to I.T.. Is that your Mac address converts even lower to
> binary. Which every piece of electronics hardware uses to speak to one
> another. Including routers, switches, gateways, headends, network interface
> devices, fiber optics cabling/75ohm coax cabling, frame relays, t1/t3,
> blade servers, switch master/slave, etc.
>
> It all comes down to a single bit. An electron with either 0-2.5vdc, or
> 2.5-5vdc. A low state, or a high state. And your IP address directly
> translates down to the Mac address below the software/transport layer (
> below the hardware layer, the writable electronics components layer ) of
> the OSI model. In this layer everything is binary addressed before machine
> assembly/reassembly. Ya know the layer where only us electronics engineers,
> and technicians really know how it all works.
>
> If you've ever seen a network training curriculum you know what an IP
> address range/translation table was built from. And if you knew electronics
> you'd know how computers, cellular phones, and lan/wifi all tie in
> together. If it's connected to a network it has a Mac address. Because Macs
> have to be used to communicate OVER a network. Through translation in the
> software layer before packet assembly to the transport layer. And once you
> translate down to a Mac address you can filter all incoming udp packets
> from any given device using Mac addressing.
>
> It's not for just the hobbyist who doesn't really know how electronic
> components speak to one another.
>
> Period. That said. Have a nice day. Very few here have a proper education
> in networking/NETSec/ITSec. Most of these people are running leased
> servers, most of the ones with the immature responses. Who don't have a
> CLUE how it all really works.
>
> When you begin studying ccde/ccie through Cisco come speak with me. Until
> then, make all the juvenile untrained/uneducated comments you want. I
> really don't care. I stopped running a go server the second I found out
> people still play source. Less bugs. Less vulnerabilities. Less bugged
> netcode. And much easier to modify.
>
> Willing to bet no one here ever used the sdk either. Or you'd know what
> code was flawed in go.
>
> I will comment from time to time to pass along wisdom. I will ignore the
> juveniles, and uneducated people that respond in ignorance/lack of
> education. Ya read a tutorial on how to setup an hlds/go server and you
> think you know everything. When you have one piece of a ten thousand piece
> puzzle figured out.
>
> Just this list. So you know the packets it took just for this msg to get
> to Valve servers and to your isp smtp server? Probably not.
>
> Probably don't know what packet sniffing is, nor who does it, nor how it
> can be injected/reformed/malformed. So farewell to the script kiddies and
> juvenile mentality people on this list.
>
> To everyone else, see ya on the next issue you're encountering server
> side. And Hi Alfred been a minute since I wrote directly. Hope Gabe doesn't
> fall asleep on hl3/cs3 development. Steam needs an update too. A 64 bit
> Steam squared client using vulkan based api, and rendering would be nice as
> well. You could port the older games content to mobile/any device, and
> launch the newer stuff on whatever platforms you wanted.
>
> Someday I will let Alfred explain how Steam became Steam when it was
> originally called Reaktor.
>
> -StealthMode
>
> On Tue, Apr 24, 2018, 09:30 m0gely  wrote:
>
>> MAC addresses are unique to each network hardware component and assigned
>> by the manufacture. They are also non-routable, meaning that information
>> doesn't make it past the home router the device is connected to. A CS
>> server won't see a client's MAC. Also, IP addresses are handed out by each
>> ISP. How could one ever be translated into another? Clients can get
>> different IP's from their router at home at any time and their router will
>> get different IP's from the ISP frequently as well. The MAC doesn't change,
>> the IP likely will. The two are unrelated to each other. This is all basic
>> network knowledge and easily searchable. Maybe you can provide a link to
>> something that is the reason you think this way.
>>
>> Going back to lurker mode.
>>
>> On Tue, Apr 24, 2018 at 3:57 AM Stealth Mode 
>> wrote:
>>
>>> When you uneducated people learn electronics you will understand the
>>> difference between a script kiddie. And a professional electronics engineer
>>> who branched into I.T.
>>>
>>> Everything I have stated is fact.
>>>
>>> On Tue, Apr 24, 2018, 05:34 Ryan Bentley  wrote:

Re: [Csgo_servers] Exploit that spams/lags clients

[Dan B (Narry)]

 Yeah I mean it's not like  I can literally open the driver settings for my
nic and change my mac address 

On Sat, Apr 21, 2018 at 11:35 PM, Stealth Mode 
wrote:

> LoL. Mac addressing is for any device or computer that is on a network.
> The network card/WiFi card/cellular modem is what generates the Mac
> address. IP can be changed/altered randomly. That's why most people don't
> ban IP addresses. Because it is a waste of time when a client can just go
> in and release the network IP lease, and force a new IP.
>
> Seriously, study networking before you ever attempt to manage a server.
>
> On Sat, Apr 21, 2018, 23:10 Nathaniel Theis  wrote:
>
>> I've heard that some advanced hackers are circumventing Mac address bans
>> by using PCs, so you should ban by IP.
>>
>> On Sat, Apr 21, 2018, 8:07 PM Stealth Mode 
>> wrote:
>>
>>> The fix is to create a bash script that looks for that in the server log
>>> (the repietitive call to null.wav), and automatically ban. If you push the
>>> IP through a ip/decimal conversion tool you can make it a Mac address ban
>>> right in the hardware packet/transport layer.
>>>
>>> End of message.
>>>
>>> On Thu, Apr 19, 2018, 20:04 wickedplayer494 
>>> wrote:
>>>
 Just to keep everyone on the list in the loop, McJohn said that a fix
 for servers crashing (which I can only assume is a result of this) is being
 worked on: https://www.reddit.com/r/GlobalOffensive/comments/
 8d7hkr/3kliksphilips_interview_with_a_cheater/dxljl53/?context=3

 On 4/17/2018 3:22 PM, iNilo wrote:

 A player on my server was able to spam all the clients with a script he
 later linked ( https://hastebin.com/fufarowuba.cpp )

 its causing massive console spams.

 https://i.imgur.com/nOWLkeq.png

 Someone has a fix for this?

 - iNilo.



 ___
 Csgo_servers mailing 
 listCsgo_servers@list.valvesoftware.comhttps://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers

 ___
 Csgo_servers mailing list
 Csgo_servers@list.valvesoftware.com
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers
>>>
>>> ___
>>> Csgo_servers mailing list
>>> Csgo_servers@list.valvesoftware.com
>>> https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers
>>
>> ___
>> Csgo_servers mailing list
>> Csgo_servers@list.valvesoftware.com
>> https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers
>
>
> ___
> Csgo_servers mailing list
> Csgo_servers@list.valvesoftware.com
> https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers
>
___
Csgo_servers mailing list
Csgo_servers@list.valvesoftware.com
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers

Re: [Csgo_servers] Exploit that spams/lags clients

[Dan B (Narry)]

Ignore him. He's a fearmongerer who doesn't know what he's talking about.
If you're ever in for a laugh, read the archives of this mailing list
(might have been HLDS?) and look at the absolute giant thread caused by him
claiming the existence of remote upload exploits while making an absolute
fool of himself.

On Wed, Apr 18, 2018 at 8:52 PM, Nomaan Ahmad  wrote:

> What do you mean by MAC Address? I don't think that is available to the
> server.
>
> On 19 April 2018 at 01:46, Stealth Mode  wrote:
>
>> The top part of that is calling to a memory address location in
>> hexidecimal where null.wav is stored. Without null.wav on the server it
>> eats up cycles to search for it in memory.
>>
>> Can create a bash script to look for keywords in this script and
>> automatically ban the MAC ADDRESS. Not the IP address (takes some
>> translation from decimal to hexidecimal).
>>
>> Cough Valve AntiCheat/Alfred hope you see this.
>>
>> -Stealthmode
>>
>> On Wed, Apr 18, 2018, 20:37 Stealth Mode 
>> wrote:
>>
>>> Thanks God for sandbox virtual machine environments to run servers in.
>>> That's all I will say.
>>>
>>> On Wed, Apr 18, 2018, 20:35 Stealth Mode 
>>> wrote:
>>>
 Think about this carefully. This client is able to inject scripts
 through the server to all clients. I warned this list months ago about how
 unsecure these servers really are. That can easily be a different script
 through a spoofed steamid that randomly changes. Image injections. Packet
 injections. Script injections. I'd be more worried about what he can use
 the server to inject into the OS cmd shell/powershell.

 These servers are really vulnerable from a network security standpoint.
 Be glad your client isn't malicious. Or your server and all of those
 clients could be remote hijacked.

 -Stealthmode

 On Wed, Apr 18, 2018, 17:42 Nathaniel Theis  wrote:

> hook recvmsg and kick if you get more than one signon message on a
> given cnetchan (might need to check the server count though, not sure
> if you get another signon message from legit clients at map
> change...)?
>
> (normal connection throttling should stop the obvious workaround (just
> reconnecting)
>
> On Tue, Apr 17, 2018 at 1:22 PM, iNilo  wrote:
> > A player on my server was able to spam all the clients with a script
> he
> > later linked ( https://hastebin.com/fufarowuba.cpp )
> >
> > its causing massive console spams.
> >
> > https://i.imgur.com/nOWLkeq.png
> >
> > Someone has a fix for this?
> >
> > - iNilo.
> >
> >
> > ___
> > Csgo_servers mailing list
> > Csgo_servers@list.valvesoftware.com
> > https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers
>
> ___
> Csgo_servers mailing list
> Csgo_servers@list.valvesoftware.com
> https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers


>> ___
>> Csgo_servers mailing list
>> Csgo_servers@list.valvesoftware.com
>> https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers
>>
>
>
> ___
> Csgo_servers mailing list
> Csgo_servers@list.valvesoftware.com
> https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers
>
___
Csgo_servers mailing list
Csgo_servers@list.valvesoftware.com
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers