Luigi Auriemma

Hey guys. I couldn't believe it when Q3 Directory transversal PoC worked! i can download files from almost ANY server.
To start with, i test if the server is vulnerable. The easiest way which works all the time is this command : /download /pb/svlogs/00000001.log
That file ALWAYS exists in cod4 punkbuster enabled servers. However, the file which contains the rcon pass, is sometimes not /main/server.cfg
So my question is, is there any exploit that allows me to get the list of files in a given directory? that would save so much time!
(btw, i have many rcon passes, but i don't use them, i do this just4fun!)

also, is there any workaround for the "cannot validate pure client" error ?

1) no. the most you could do is /sv_referencedIwdNames
2) dont join sv_pure servers