Source Engine DLL Exploit Found

Discussion in 'General' started by TheCreeper, Jan 13, 2016.

  1. TheCreeper

    TheCreeper Member

    Messages:
    161
    Likes Received:
    54
    Trophy Points:
    0


    Another source engine exploit. Very little information about this anywhere.
     
    Neoony likes this.
  2. vipervicki

    vipervicki Member

    Messages:
    2,611
    Likes Received:
    130
    Trophy Points:
    0
    hmm not a good thing but as long as we stick to servers we know and trust like NUBS and EPIC or the equivalent in other games, we should be ok. I cant believe valve knows about this for over 10 years and has not fix it. Valve cares little about servers as I found out when pcwidzan and slayer were dossing VIPER constantly :( They just wanna sell their games.
     
  3. ViroMan

    ViroMan Black Hole (*sniff*) Bully

    Messages:
    8,382
    Likes Received:
    4
    Trophy Points:
    0
    Says "This video is private."
     
  4. vipervicki

    vipervicki Member

    Messages:
    2,611
    Likes Received:
    130
    Trophy Points:
    0
    hmm I saw it earlier today , that's weird it says that for me to now too.
     
  5. complete_

    complete_ lamer

    Messages:
    6,438
    Likes Received:
    144
    Trophy Points:
    0
    maybe it was made private cause it turned out to be false
     
  6. Neoony

    Neoony Member

    Messages:
    1,370
    Likes Received:
    106
    Trophy Points:
    0
    probably... need to check other sources..

    he also said in the video that it was only known for a couple of hours before making the vid, btw
     
  7. Neoony

    Neoony Member

    Messages:
    1,370
    Likes Received:
    106
    Trophy Points:
    0
    So apparently this was discovered by Valve few years ago.
    Some say it was definitely fixed in TF2 and GMOD. (probably all games running same/similar version of engine)
    Some say that it wasnt fixed for all source games and that SDK2013 engine stuff wasnt fixed/protected from this.

    So it seems like it was somewhat fixed, but not completely/properly.
    But apparently there are many other not so known exploits, Valve just fixes the popular ones (the ones that get viral.)

    So it looks like it was an old issue.
    The guy was most probably just monetizing the video, claiming he wants to raise awareness to this :P

    Some details about how it works can be found here: https://facepunch.com/showthread.php?t=1501319

    If you want to protect yourself from this, just use those commands:

    Code:
    cl_allowdownload 0
    cl_allowupload 0
    cl_customsounds 0
    cl_playerspraydisable 1
    cl_downloadfilter none
    But this will disable any downloads from the servers, like maps, sprays, sounds or etc... pretty much everything.

    Just a quick search on this.
     
    Last edited: Jan 15, 2016
    vipervicki likes this.
  8. ViroMan

    ViroMan Black Hole (*sniff*) Bully

    Messages:
    8,382
    Likes Received:
    4
    Trophy Points:
    0
    I swear I have seen this posted on the forum before.
     
  9. Neoony

    Neoony Member

    Messages:
    1,370
    Likes Received:
    106
    Trophy Points:
    0

Share This Page