Luigi Auriemma

hi guys :)
i saw a video that hacking fast a call of duty 4 server rcon password.
hes just downloaded the config server from the server.
how can i do it too? its fast hacking without scaning...
the video : http://www.youtube.com/watch?v=oHFE_WGVvos
ty very much

it's clear and visible the usage of my q3dirtrav proof-of-concept with the forfopen tool that avoids Call of Duty to delete the downloaded file.
it's all material (vulnerability and proof-of-concept) documented and public by years:
http://aluigi.org/poc/q3dirtrav.zip
download/file.rar?id=77

every time I'l getting this error:

"download failure while getting http://......

but file is exist....

tested for UO/cod2 several times

if cod2/uo can use the http download (like seems from that error) you must disable them:
set cl_wwwDownload to 0

hi,its me again.
I created a file in call of duty folder called server.cfg,then i entered into the program you gave me,clicked on the c:/programfiles/call of duty and then name the file (server.cfg) in the out put file name and after that i click active expliot.
then a message appeared
- perfect, now all you need to do is opening the console from your game client
and type /download followed by the name of the file you want to download
usually the console can be opened with the ~ (tilde) key or shift + ~
the following are some examples of download commands:
/download base/server.cfg
/download baseq3/server.cfg
/download baseq3/q3key
/download main/server.cfg
/download mainta/server.cfg


I wrote in game /download main/server.cfg and the map was loaded again, i think its work but i didnt see the file with the cfg server,where can i find it?

it's a "particularity" of the CoD series that automatically deletes the file after its download, solution here:
post3478.html#p3478

I did what you said,and I didnt see the file.
I entered to the forfopen and then type in tmp.txt and after that I entered into the q3dirtrav and then chose the activision call of duty and then type tmp.exe and active expliot.
Also I put the wwwdownload to 0,I did the command,the map was loaded again and still I dont see the file I was trying to create.
help plz :(

when you launch forfopen try to specify the full path of the tmp.txt file (like "C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\tmp.txt").

as usual in case of doubts use sysinternals procmon to know if tmp.txt is created by the game and where (Path->contains->tmp.txt)

Ty very much,I was wrong the server.cfg wasnt on the main folder in call of duty modern war fare,it was in virtualstore and then call of duty.

Hello,I have a problem with some servers.
The rcon password doesnt wrote in the config,the admin just change it on modern rcon to set rcon password and the password doesnt appear in the config server.
What can I do?
ty.

if you are making a malicious usage of the proof-of-concept go away:
welcome-and-rules-t14.html
topic locked