Luigi Auriemma

Hi Aluigi! Is that possible to use q3msgboom from outside - WITHOUT u have to join a server before? If yes, could u make a tool?

no, the q3msgboom bug affects a function which is reachable only in-game

uhm...isnt msgboom a message boom which uses chat messages in game ?
or you mean like make an auto bot that enters and uses it ?

Maybe but the game i play u dont need a valid cmd u just need a big cfg.
For example I use aluigis script but i removed this 'vsay' and the info - my script only includes that aaaa.... but it works - every server goes down when i exec it 4 times.
I thought, maybe it is ppssible with rcon - u just send a very long rconpassword 4 (or more) times to the server and its crashed - maybe. Or if it would be possible to just send trash to the server like this aaaaaaaa... - just 4 times - maybe maybe...
Idk so I asked :P

eh ur referring to jk2 1.02
no u cannot do it from the outside
no u cannot use rcon to do it

duh.
the exploit is the size of any message overflowing the server.

I think that the reason it still works when you remove 'vsay' and just leave 'aaaaaaaaaaaaaaaaa...' is that if the command you enter doesn't match a client-side or server-side command, it is automatically assumed to be chat, and so you're cfg is basically the same as 'say aaaaaaa...'. If the 'say' command were removed (Unlikely that server would do that lol,) then your script would probably not work ... or it's possible that as it checks to see if it matches a server-side command, that's when it crashes or disconnects clients or w/e. If 'aaaaaaaa' in the cfg works in your game, probably rcon, vote, +taunt, etc. will all work too. I'd suggest sending a very long rcon command, like rcon aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa, don't worry about the pw, it should still crash.

eh, not what i think...
hi pathetique! :P

Hi JD :D

What do you think the actual cause is?

well i dont think it automatically goes to chat, i just think as everything processes through the server, any sort of msg would exploit 1.02 ...
i dont think removing say would do it either :P
rcon aaa... suprisingly wont work for me, may work for some1 else.

Oh yeah, I just remembered that rcon is a connectionless command, not an in-game one, even though it can be used from in game, so the q3infoboom fix prevents that probably.

i do believe it does because in the infoboom.exe thingy, u can select rcon as 1 of the overflows

Can anyone send me this q3msgboom ?

no, no one can.
it doesn't exist.