Luigi Auriemma

aluigi.org (ARCHIVE-ONLY FORUM!)
It is currently 19 Jul 2012 15:35

All times are UTC [ DST ]





Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 10 posts ] 
Author Message
 Post subject: [Help] SourceUpFile
PostPosted: 24 Aug 2009 22:18 

Joined: 24 Aug 2009 22:13
Posts: 5
I cant seem to get it to work i even compiled it and this is exactly what i do.

1.) CD C:\Exploit (where sudpipe is along with the .dll)
2.) sudppipe -l myproxocket.dll ********* 27015 27015
3.) go into garrysmod and type "Connect 127.0.0.1:27015" yet it doesnt connect to anything even though you tell us to connect the client to it :< any help?

This is the source + dll of the prog

http://www.mediafire.com/?ndyywdcnmwt


Top
 Profile  
 
 
 Post subject: Re: [Help] SourceUpFile
PostPosted: 24 Aug 2009 23:35 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
it's enough useless that you upload "source+dll" since I'm the author ot them and its absolutely not needed to recompile myproxocket.dll for verifying the 2 vulnerabilities of that advisory (hex editor job).

while about the problem the only thing you can do is checking in the window of sudppipe if is displayed the message:
Code:
- add 127.0.0.1:xxxxx
which means that the connection from the client has been successfully received and so can be excluded an error in it (that in any case is not caused by sudppipe).


Top
 Profile  
 
 Post subject: Re: [Help] SourceUpFile
PostPosted: 24 Aug 2009 23:39 

Joined: 24 Aug 2009 22:13
Posts: 5
actully i figured out that you cant use 127.0.0.1 on my computer, i have to use my actuall lan ip EX 192.168.2.XX
but the plugin still wont upload the test.txt to the other pc, i put the default file in the .C file to

"C:\test.txt"
then i check my host yet the file doesnt upload there :<


Top
 Profile  
 
 Post subject: Re: [Help] SourceUpFile
PostPosted: 24 Aug 2009 23:46 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
that proof-of-concept doesn't perform the upload of a real file, it simply creates an empty file in the arbitrary location provided where is located the XXXXXXXXX...XXX string into the remote server to test.
while there are no limitations for the file deletion testing.


Top
 Profile  
 
 Post subject: Re: [Help] SourceUpFile
PostPosted: 24 Aug 2009 23:47 

Joined: 24 Aug 2009 22:13
Posts: 5
Oh so i cant actully upload any real files with data inside of them? O_o


Top
 Profile  
 
 Post subject: Re: [Help] SourceUpFile
PostPosted: 25 Aug 2009 00:01 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
exactly, you can only create them


Top
 Profile  
 
 Post subject: Re: [Help] SourceUpFile
PostPosted: 25 Aug 2009 00:08 

Joined: 24 Aug 2009 22:13
Posts: 5
another question, how would i go about having multiple ports but the same ip? for sudppipe?


Top
 Profile  
 
 Post subject: Re: [Help] SourceUpFile
PostPosted: 25 Aug 2009 00:19 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
uhmmm I guess to have understood your question (something like sending the same packets to SERVER:1234 SERVER:1235 SERVER:1236 and so on) but this is not possible in the Source engine and practically in almost all the other games due to the handshakes/challenges and other details of the protocol (ids, qports and so on).

anyway sudppipe implements 2 options for doing a similar job:
-X the packets will be sent to all the specified hosts using a new local port
-Y the packets will be sent to all the specified hosts using the same local port

example:
Code:
sudppipe -X 1.2.3.4:1234,1.2.3.4:1235,1.2.3.4:1236,192.168.0.14:12345 0 1234
I have used 0 as destination port because all the hosts I have specified have their port (:port)


Top
 Profile  
 
 Post subject: Re: [Help] SourceUpFile
PostPosted: 25 Aug 2009 00:39 

Joined: 24 Aug 2009 22:13
Posts: 5
No, thats not what i want :D. i want like.

1.2.3.4:27015,1.2.3.5:27015,1.2.3.6:27015 0 1234 would that work?


Top
 Profile  
 
 Post subject: Re: [Help] SourceUpFile
PostPosted: 25 Aug 2009 00:45 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
sudppipe can do anything but remains the problem that the Source servers will never accept the connections for that technical feature of the protocol I told in the previous post


Top
 Profile  
 
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 10 posts ] 

All times are UTC [ DST ]


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
cron