PDA

View Full Version : DoD Block Exploits (v2.1)


Firestorm
07-08-2006, 11:56 AM
DoD Block Exploits
- Version 2.1
- 06.04.2007
- original: FireStorm
- updates: diamond-optic

Credits:
- FireStorm: original DoD Block Exploits (v1.3)
- Anthrax & DarkSnow: basis of setinfo check
- TatsuSaisei: lots of help on new logging method
Information:
Contains blocks/detection/fixes for the following:

- connecting client team fix
* connecting clients should now show as spectators instead of appearing on a team

- fullupdate command block
* blocks a command that can be used as an 'exploit' in some plugins.
logging is off by default because the command appears to also
be called when a client starts to record a demo

- non-deployed MG reload
* blocks & detects when clients attempt an exploit that will
allow them to reload an MG without having to deploy it first

- pistol zoom block
* blocks the exploit/bug where clients can zoom in with their pistol

- respawn timer bypass
* blocks & detects when clients try to bypass the respawn delay

- setinfo cheat traces
* scans a clients setinfo data when they join. Some known cheats
add specific traceable keys to a players setinfo when they run them.
a detection doesnt mean 100% that they are cheating, but the chances
are likely that they are. it also means that they at least installed
and ran the specific cheat at some point in the past

- spectator duck bug fix
* fix for the bug where sometimes when you die crouched, you have to
press crouch again afterwards to get out of the spectator 'option'
mode and whatnot

- spectator killing
* blocks & detects when clients attempt to use the exploit that will
allow them to be a 'spectator' and still kill people.
* this is fixed according to the dod change log from 08.24.05, but you
can still detect when a player attempts to use this exploit

- steam id pending
* checks a clients steam id when they join, if it returns a value of
STEAM_ID_PENDING, it waits 60 seconds and checks the steam id again,
if the clients steam id still hasnt been auth'd it triggers this detection

- third-person view fix
* fixes a possible bug on player connect that allows players to be
be in third-person view, which allows you to easily see around corners

- white player model
* blocks & detects when clients attempt to use the exploit that makes
their player model all white


Logs will be created daily in: addons/amxmodx/logs/dod_blockexploits/Installation:
- you should put this close to the top of your plugins.ini file, such as
putting it underneath all the default plugins but before third-party
plugins works very well. Otherwise some third-party plugins might hook
something before this plugin gets to block it.CVARs:
// Warning Message
dod_blockexploits_warnmsg "...Exploits/Cheats/Bugs are not welcome here!"

// AMXBans
dod_blockexploits_amxbans "0" // Use AMXBans
// 0 = off
// 1 = on


// Spectator Killing CVARs
dod_blockexploits_speckilling "2" // Spectator Killing action
// 0 = silently block
// 1 = block w/ warning msg
// 2 = kick
// 3 = ban
dod_blockexploits_speckilling_log "1" // Log Spectator Killing detections
// 0 = off
// 1 = on
dod_blockexploits_speckilling_ban "60" // Spectator Killing ban time in minutes (if set to ban)


// White Player Model CVARs
dod_blockexploits_whitemodel "2" // White Player Model action
// 0 = silently block
// 1 = block w/ warning msg
// 2 = kick
// 3 = ban
dod_blockexploits_whitemodel_log "1" // Log White Player Model detections
// 0 = off
// 1 = on
dod_blockexploits_whitemodel_ban "60" // White Player Model ban time in minutes (if set to ban)


// Respawn Timer Bypass CVARs
dod_blockexploits_respawntimer "0" // Respawn Timer Bypass action
// 0 = silently block
// 1 = block w/ warning msg
// 2 = kick
// 3 = ban
dod_blockexploits_respawntimer_delay","15" // Respawn Timer Bypass delay (in seconds)
// This controls the amount of time
// before the client can rejoin a team.
// 15seconds is the default dod spawn time
// but you might want to increase it to
// make it more of a punishment for trying.
dod_blockexploits_respawntimer_log "0 // Log Respawn Timer Bypass detections
// 0 = off
// 1 = on
dod_blockexploits_respawntimer_ban "5" // Respawn Timer Bypass ban time in minutes (if set to ban)


// Non-Deployed MG Reload CVARs
dod_blockexploits_mgreload "1" // Non-Deployed MG Reload action
// 0 = silently block
// 1 = block w/ warning msg
// 2 = kick
// 3 = ban
dod_blockexploits_mgreload_log "1" // Log Non-Deployed MG Reload detections
// 0 = off
// 1 = on
dod_blockexploits_mgreload_ban "60" // Non-Deployed MG Reload ban time in minutes (if set to ban)


// Setinfo Traces CVARs
dod_blockexploits_setinfo "1" // Setinfo Traces action
// 0 = do nothing
// 1 = show warning msg
// 2 = kick
// 3 = ban
dod_blockexploits_setinfo_log "1" // Log Setinfo Traces detections
// 0 = off
// 1 = on
dod_blockexploits_setinfo_ban "180" // Setinfo Traces ban time in minutes (if set to ban)


// Steam ID Pending CVARs
dod_blockexploits_idpending "2" // Steam ID Pending action
// 0 = do nothing
// 1 = show warning msg
// 2 = kick
dod_blockexploits_idpending_log "1" // Log Steam ID Pending detections
// 0 = off
// 1 = on


// FullUpdate Block CVAR
dod_blockexploits_fullupdate_log "0" // Log FullUpdate detections
// 0 = off
// 1 = on
Change Log:
- 12.26.06 - Version 1.4
added public tracking cvar
replaced some if statements with switches
fixed mistake in respawn timer handling
cleaned up code a bit

- 05.28.07 - Version 2.0
Rewrote almost everything...
Added fix for spectator duck bug
Added fix for connecting players showing up on a team
Added check for cheat traces in setinfo lines
Added Steam ID Pending check
Added FullUpdate block
Logs are now daily and in their own folder

- 06.04.07 - Version 2.1
Fixed banning function.. stupid me :PDownload URL: http://www.avamods.com/download.php?view.154

* if you need it compiled for a different AMXX version other then the latest (currently 1.76d) please request it and I'll attempt to get it posted for you, but be warned.. the plugin may or may not work properly on any previous AMXX version *

tegu
09-09-2006, 04:13 PM
can we have the sma?

diamond-optic
09-09-2006, 07:20 PM
i believe we are keeping the source private to prevent spreading how the exploits are done in the 1st place..

Zor
09-09-2006, 10:14 PM
Yes this is why its not public sma. Thx diamond-optic.

Cheers!

Box Cutter
09-11-2006, 09:49 AM
Just as an FYI I am running this plugin on my server and I caught someone the other day using the white model.

sparky99
09-18-2006, 03:24 AM
Could you kindly re-compile under amxmodx 1.76 :)


sandshoe berry multch.

tegu
09-18-2006, 08:22 AM
Yes this is why its not public sma. Thx diamond-optic.

Cheers!
Good enough answer to me. I cant code to save my life anyway, just wanted to have all the files...

I put every plugin in both scripts and plugins folders.

diamond-optic
09-18-2006, 10:32 AM
hmm all ive got is the source for a slightly custom 1.3

odd that theres only v1.2 here.. If zor/pen/hell etc etc... doesnt have the 1.2 or normal 1.3 source to compile.. ill throw up the one I have later today

Garion
09-20-2006, 01:07 AM
hope we get an updated version soon, sucks that we don't have the old forums when testers and that had access to the sma.

diamond-optic
09-21-2006, 09:47 PM
ok i added the amxx 1.76 compiled .amxx of my 'slightly' modified v1.3a

and i only have amxx 176 on my pc, so i cant compile it on an older version.. but using 1.2 is just fine if your too lazy to update :-P

Garion
09-22-2006, 02:39 PM
so what's different in 1.3a?

diamond-optic
09-22-2006, 10:41 PM
lol i dont really know.. because i dont have the source for 1.2 to compare it to

hehe oh well..

tho i do remember that I added pcvars & changed from engine to fakemeta

mantk
11-01-2006, 10:20 AM
I install the DoD Mortar Class (http://www.dodplugins.net/forums/showthread.php?t=110) and can't use the mortar class because DoD BlockExploits blocks this class.


L 11/01/2006 - 12:45:30: Log file started (file "dod\addons\amxmodx\logs\dod_blockexploits.log") (game "dod") (amx "1.76a")
L 11/01/2006 - 12:45:30: -=N.P.M=-ManTK[OwP] <STEAM_ID_LAN> <loopback> has been caught White Model Exploiting!

diamond-optic
11-01-2006, 11:42 AM
hmm try putting the mortar class before this plugin in the plugins.ini might help.. tho it still might catch it..

but when i get outta work tonight ill try and remember to edit this a little bit and make it so you can completely turn off each exploit check...

mantk
11-01-2006, 02:23 PM
hmm try putting the mortar class before this plugin in the plugins.ini might help.. tho it still might catch it..

but when i get outta work tonight ill try and remember to edit this a little bit and make it so you can completely turn off each exploit check...

Works puttin before, don't need to work tonight

diamond-optic
12-26-2006, 08:33 PM
compiled for 1.76c

....also, 1.76c version is updated to 1.4

- 12.26.06 - Version 1.4
added public tracking cvar
replaced some if statements with swtiches
fixed mistake in respawn timer handling
cleaned up code a bit
............................

and i suppose for those of you who refuse to update your amxx.. lol.. just post what version your running and i will attempt (lol) to get 1.4 compiled for you

tegu
12-26-2006, 11:20 PM
updated and thank you!

-=][SYA][=- Lucky
02-27-2007, 09:40 PM
Hey, Firestorm can you compile this for amxmodx 1.70?

diamond-optic
02-27-2007, 10:22 PM
[SYA][=- Lucky;4212']Hey, Firestorm can you compile this for amxmodx 1.70?



CLICK HERE (http://www.dodplugins.net/forums/attachment.php?attachmentid=378&d=1172625692)



:D

-=][SYA][=- Lucky
02-28-2007, 12:14 AM
Thanks diamond-optic :)

diamond-optic
02-28-2007, 08:14 PM
just like to make a note that i removed the old versions that were attached to the initial post.. just to get rid of the confusion of having different versions compiled for different versions of amxx..

so now if you need this for a version that isnt already there.. let me know and ill get it for you

diamond-optic
06-02-2007, 11:45 PM
Big Update!

- 05.28.07 - Version 2.0
Rewrote almost everything...
Added fix for spectator duck bug
Added fix for connecting players showing up on a team
Added check for cheat traces in setinfo lines
Added Steam ID Pending check
Added FullUpdate block
Logs are now daily and in their own folder

superbulette.nordend
06-04-2007, 03:46 PM
hey, iŽd like to have the actual version for amxx 1.75, is that possible?

thanks and greetz,

bulette

diamond-optic
06-04-2007, 10:00 PM
well actually lol.. hold on a bit lol...

i made a really dumb mistake lol... and when you have things set to ban the player.. it adds the ban but doesnt kick them.. cause im dumb and never put in who to kick lol...

gonna test a fix real soon hopefully (like once my server changes maps) then I'll try and post the fix tonight...


heh then ill try getting it for 1.75 for you


* ps * ..if you're already using v2.0, its not a HUGE deal lol.. so dont get too worried.. as i should have the fix up hopefully tonight

diamond-optic
06-05-2007, 12:11 AM
ok sorry for the stupid mistake lol...

- 06.04.07 - Version 2.1
Fixed banning function.. stupid me :P

I also attached the binary compiled on AMXX 1.75, not sure if it works.. but i didnt get any errors on compiling..

jason
06-05-2007, 08:54 PM
Nice update....I will install this when I get home hehe

Well done!

Antihax
06-15-2007, 01:01 PM
Nice update, i have used this plugin since it came out and love it!

What SetInfo strings are you looking for? Just the current popular one or anything abnormal? I use a setinfo string to taunt demofreak users. :D

diamond-optic
06-16-2007, 10:15 PM
What SetInfo strings are you looking for?

hmm not really sure if i should post them lol.. afraid of slow hacking admins putting them in clients setinfo lol

=|[76AD]|= TatsuSaisei
06-17-2007, 06:16 AM
afraid of slow hacking admins putting them in clients setinfo lol

tsk.. now who would do that ??

:p

diamond-optic
06-17-2007, 10:50 PM
/me doesnt have enough fingers to point


;)

Grottenolm
06-26-2007, 07:00 PM
Will this compiled version by any chance load OK in AMXmodX 1.76a? Or can you please compile it for that? Thanks!

diamond-optic
06-26-2007, 07:03 PM
Will this compiled version by any chance load OK in AMXmodX 1.76a? Or can you please compile it for that? Thanks!

added amxx 1.76a compiled version to 1st post...

:)

Grottenolm
06-27-2007, 06:42 PM
added amxx 1.76a compiled version to 1st post...

:)

Thanks a lot!

dlambert1989
07-04-2007, 03:53 AM
ive been looking around for a plugin that will block people form using the thirdperson funtion in my day of defeat servers.

i like this plugin but is there some way to make it so it affects thirdperson players also?

diamond-optic
07-04-2007, 12:07 PM
how are they using thirdperson?

dlambert1989
07-04-2007, 04:08 PM
i sent u a pm explaining how to use it, because i dont want to post it on the forums where anyone can see it.

{SR} *Raggy*
07-04-2007, 07:38 PM
Thirdperson would be interesting to see :P

dlambert1989
07-04-2007, 09:27 PM
its not fun when people are using it to wall hack during a realism scrim.

diamond-optic
07-05-2007, 12:42 AM
Thirdperson would be interesting to see :P

there is a dod third person plugin floating around here i think.. but like he said.. you can basically wallhack with it lol.. by going up like sideways to a wall and turning from side to side and stuff and you can see the other side of the wall.. etc

dlambert1989
07-05-2007, 12:45 AM
u dont even have to have the plugin to do it.

but what i wanted to know is is there a way to block it like an exploit.

dlambert1989
08-07-2007, 06:23 PM
I don't suppose anyone else knows how to block the use of thirdperson do they?

MBosta
08-07-2007, 07:45 PM
There's a glitch for 3rd person? I never heard of it...

diamond-optic
08-07-2007, 08:18 PM
it should be fixed in the next update...

im just doing some final testing with the new decal thru walls & class limit bypass detection... if i can motivate myself.. ill post it tonight.. i really planned on posting this like last week but starting having problems with logging one of the new detections.. seemed when ppl had a script that was trying to change the setting that it would get detected like 20 times in 1 second lol... creating large log files and such before it kicked/banned them

diamond-optic
08-08-2007, 03:57 AM
half of this thread is really old and alot of it is pointless to go thru lol,
so i just created a new thread for it (also cause i messed up and this is easier then starting over, i just wanna get this posted)

CLICK HERE FOR VERSION 2.2
(http://www.dodplugins.net/forums/showthread.php?t=962)