Luigi Auriemma

An m8 of mine did it yesterday, but wont tell me how-.-

Does any1 know what program to use or maybe write an tutorial?
I downloaded a couple of cracker/sniffers/brute..whatever, they seem to be out of date or plain suckeh..


Is there any simple guide that can be understood by non-programmers for this:
http://aluigi.altervista.org/adv/webmodz-adv.txt


The Ddos attack, where you send 200 http packages, where do I find info about it?
I forgot where I read it >.<(I know I didnt see it here tho, so Im not refering to aluigis stuff)






I found this on myg0t, about rcon bruteforce or something, can any1 confirm if this works?

READ:












I also found this:


An old bug for CS 1.6, but if you find an server with Fast-Download for CSS,
you can type sv_downloadurl and youl see the directory for map downloads.

I tried to guess back and forth to find the correct directory in browser, but when i found the cfg directory, server.cfg aint there, protected or something(in big communities that is).

Is there any way around it?



NOTE: I dont want the sv_cheats 1 rcon takeover bug tutorial or script, I alleady got it, and theres few sv_cheats 1 server left.

NOTE 2: Im sry if this is noobie or not allowed to ask or something, but I dont see any forum rules or anything, maybe im blind, but whatever.

uhmmm some corrections and informations for this thread and in general:

uhmmm downloading uncertain programs from untrusted sources (and moreover without source code) with fluffiness is ever a bad idea.
just a generic suggestion for anyone.

it's a technical advisory intended for developers and people in the security field anyway the negative effects of those vulnerabilities should be plus or less comprehensible to anyone who knows that software (admins and people who use it).

the initial 'd' in the ddos term stands for "distribuited" which means that the Denial of Service (even a simple connection can be defined a DoS in particular conditions) is performed by 2 or more clients.
in this specific case I guess you refer only to a simple resource consumption probably caused by an internal limit of the http server (webmod or what? you have not specified it).

through brute forcing there is no way in the world to have fast results so who said a similar thing wasn't talking about "brute forcing" (which means trying a sequence of text strings using a specific charset) or was lying (classical way for bad people who wants to spread malware because there is ever one or more ignorants who trust such idiocies).

it's a logical thing, first because the result of a brute forcing depends by the real password ("aaa" is different than "2h3jh27';asdf3" and depending by the used charset (example azAZ09) so the second one can be just not guessed at all after days of testing), then because the continuous trying of strings built at runtime occupies lot of time due to the abnourmous amount of combinations and finally because on the network (even in LAN) there is the huge problem of the latency between the sending of the request and the receiving of the input... so a thing which is already slow and uncertain for its nature becomes worst in such conditions.

same problems also for the worldlist method were there is a starting base (the word in the wordlist) but remain all the other negative points said before for brute forcing (but obviously with a smaller amount of combinations).

obviously as said before :)

this is a classical example of disinformation.
in the security field there are various things which are of vital importance and are logically needed for understanding the security problem:
- the name of the affected software (missing in this case)
- the latest version of the affected software which has been tested vulnerable (missing too)
- the possible conditions in which the vulnerability is exploitable (missing too)
- possibly other useful details about the vulnerability, its causes and its effects (missing too).
so that short set of "instructions" you found means just nothing.

the forum rules are available here: welcome-and-rules-t14.html
anyway being a personal forum are welcome all the threads about my personal research, tools and other stuff (that's why the forum has the same sections of my website) but are accepted also discussions about new possible projects or other informations of public interest.
instead are avoided all lame requests and related things (easy to recognize) which have a direct and clear malicious intent, some examples are available in the trash section.

hmm ok, so lets rule out most of it, how do you think my m8 did it?

I have another m8 that told me about the ddos or dos attack, I dont got any source or link for it it(yet), ill show it to you when he get it =)

Again, im a bit newbie, with the http://123.123.123.123/cstrike/server.cfg thing, what software are you refering to? you mean like platform its located on?

The closest I can get is guessing the comination of the host name, its usually teh pass for clan server.

with "software" I mean the program which binds the port 80 about you refer (http://123.123.123.123).
as far as I know (I don't have the game and I have never tried/tested it) the Source engine binds only the game port (udp 27015) and optionally the rcon one which is on a tcp port, so on that port 80 is running another third party program (for example webmod which is affected by a directory traversal but that example "test" you pasted does nothing).

while about your friend... one of the interesting and incredible things of the security vulnerabilities is that their direct and indirect effects can be totally diffrent and moreover "user dependent" and "situation dependent".
that's why a directory traversal can lead to the compromise of the game server (like the directory traversal in the quake 3 engine if used to get the server.cfg file) and the same can happen with a simple voting (like the callvote bug in q3 used to execute commands on the servers) or a simple say command (cvars expansion affecting some old mods of q3) and so on forever.

Hey, Im bumping this again.

About this:
http://www.youtube.com/user/BackwardsSu ... OCdWLDUhlQ
http://www.hackforums.net/showthread.php?tid=228557
http://aluigi.org/adv/sourceupfile-adv.txt

Cam and Backwards sell this with HWID lock for 125?? also its backdoored...

Are you able to crack it, so the ppl who use it dont get added to his botnet?

First off It isnt backdoored, there is code there that looks like it is. But its all ineffective. Also Aluigi Does White hat Hacking not Black Hat...find another place for ur bs

Can anyone confirm its ineffective?

Also its not my bullshit, as Luigi found the exploit i thought he found it interesting.

Stop being cocksucker.

@dj6230
I don't understand what you mean (botnet? sell? eh?).
anyway as written in the update of my advisory the 17 Sep 2009 the vulnerability was still unpatched (CSS, TF2, any), so anything done by Valve after that date is totally unknown to me because I don't touch the engine from there (and I will never return on it).