How it works? Can I get it? [JD Softs]

dor_g · **Joined:** 18 Apr 2008 10:28 **Posts:** 36

First of all I see Ventrilo Anti-Ban
http://www.youtube.com/watch?v=AnzUrnB-_Ak

How does it works?
And what is thet MD5? (If I crack him I will get the link to the soft? hh)
Somone can explain me?

2)

3.0.3 Server Unlimited Clients
http://www.youtube.com/watch?v=UPiCFw0D ... annel_page
How does it works?
[There is a patch or something?]

3)

Ventrilo Remote Rcon (VRR)
http://www.youtube.com/watch?v=brQnku5t ... re=related
What the hell happen while the soft is running...
How does it works?

--- JD if you have vent, PLEASE give me the IP [I want to talk with you] ---

(I think luigi already know how does it works on the first time he watch these videos)

Sethioz · **Posted:** 03 Apr 2009 15:54

can't give you any details, because i haven't touched ventrilo, but just as the message says on his video "might already be banned by subnet". he makes the server think that user is already banned. I know that similiar method have been used in several games like CSS, HL, HL2..etc. Voteban doesn't work, because they make server think they are either banned already or they are a local client.
so in this case i wouldn't be 100% sure it works in other servers than local.

aluigi · **Posted:** 03 Apr 2009 17:50

for the anti-banning a (stupid) "idea" can be to force the automatic banning while the client is already connected.
for example after you join the server launch tcpfp versus it for 10 seconds (when the connections counter showed by it returns to zero) like: tcpfp -t 500 SERVER 3784
this will force the automatic 5 minutes banning but this idea is just stupid because if you get kicked you are out.

dor_g · **Joined:** 18 Apr 2008 10:28 **Posts:** 36

I cant belive I dosent think about thet earlier.

and what about the Ventrilo Remote Rcon?
what the "secret" here?
there is no brute forcing...
So WTH going behind this soft?

EDIT: I found a easy way [Winsock] :D

Nightmare · **Joined:** 21 Jul 2009 14:25 **Posts:** 9

dor_g wrote:

I cant belive I dosent think about thet earlier.

and what about the Ventrilo Remote Rcon?
what the "secret" here?
there is no brute forcing...
So WTH going behind this soft?

EDIT: I found a easy way [Winsock] :D

DO YOU CAN EXPLAIN US?
i really want to know how to make it

aluigi · **Posted:** 23 Jul 2009 17:04

ventrcon is a simple minimalistic ventrilo client which allows to send rcon commands easily, so I don't understand what's the relation with this topic.
and then Winsock is the set of APIs on Windows which allow to use the TCP/IP stack (ridiculous microsoft) so, again, I don't understand what's the relation with this topic.

JD · **Joined:** 08 Jun 2008 07:17 **Posts:** 92

Luigi, This is another link that someone copyed my video before i removed it

http://www.youtube.com/watch?v=8y7Oiy8s ... annel_page

If you watch it you can see I send Rcon commands without knowing the password. You probably already know how it's done, if not I suggest not to tell anyone as well remote Rcon people can cause problems with it.

but that is just my opinion you can release if it you want :D

aluigi · **Posted:** 23 Jul 2009 22:08

no jd I have not performed additional vulnerability research on ventrilo due to the lack of interest in the application (and obviously the lack of interest in the security, it's less than 10 days ago that I have restarted to find some game bugs).

anyway if the problem is that someone could exploit the bug why not fixing it?

JD · **Joined:** 08 Jun 2008 07:17 **Posts:** 92

I don't like ventrilo, for a few reasons like..

5 years to make a linux client and it's still not out :[

They hide info about vulnerability around they're product

And last I don't know how to patch it to stop it :D

The only person I can be would find out the Rcon exploit would be you, but other then that I think its safe.

aluigi · **Posted:** 23 Jul 2009 22:38

I agree at 100%, if I'm not in error there is still a thread on this forum about the behaviour of the ventrilo developers when ventrilobotomy was released (posts deleted and so on).

if you want I can take a look at it for an universal fix, depending by the bug it can be a joke to fix or something harder but nothing is impossible if there is a real interest in doing it.

aluigi · **Posted:** 20 Sep 2009 17:26

ventrilo-remote-rcon-t1071.html

Luigi Auriemma

How it works? Can I get it? [JD Softs]