Anti-hack script execution backdoor
This is about a prominent script based anti-hack that shall not be named because he has buddies in the mods here that will remove it for him.
Bummed out about the BE kernel upgrade? Don't be - Voldemort's got you covered!
Two days ago Voldemort's added a backdoor method to execute scripts through the client portion of his anti-hack because he knew the kernel update was coming. He couldn't leave his friends and hack customers hanging, could he? No! So he added this little bit of code to the anti-hack:
What does this do you ask? If you type "adminstart", "execute", or "admin_start" into your chat bar, VOLDEMORT EXECUTES "admin_start.sqf" FOR YOU! But only if you are NOT an admin on the server! LOL I guess he didn't want the actual admins stumbling onto it!
This backdoor is present on CCG, MGT, and The Walking Dead so I assume it's in the general AH sent to everyone.
To execute scripts on updated Voldemort servers:
A brief history of Voldemort's intentional backdoors into his anti-cheat
Since the begining Voldemort has included default admint UIDs in his anti-cheat. These included himself and his friends, such as Big Ben. He and his friends could go to any server and get admin access.
When that got controversial, Voldemort removed his friends UIDs from the default admin UIDs, but added a sneaky backdoor. If you got into a vehicle and typed ".ban (your name)", the anti-hack would add you to the admin list and if you disconnected and reconnected to the server you would have admin controls over the server. This worked for anyone that knew of the backdoor on every server.
Voldemort kept a low profile after that until he learned from Bastian "$able" Suter that the new kernel module was going to whitelist DLLs or whatever it's doing. He couldn't leave his hack customers and Big Ben unable to hack, so he put in the simple script injection backdoor we see here.
And these stupid fucking servers keep paying him monthly fees while he gives people backdoors into their servers. Just brilliant.
Bummed out about the BE kernel upgrade? Don't be - Voldemort's got you covered!
Two days ago Voldemort's added a backdoor method to execute scripts through the client portion of his anti-hack because he knew the kernel update was coming. He couldn't leave his friends and hack customers hanging, could he? No! So he added this little bit of code to the anti-hack:
Code:
if !(_puid in ["76561198031499135","76561198004111275","76561198052866101","76561197960280023","76561198031499135","76561198004111275","76561198052866101","76561198084854983","76561198075967807","76561197960280023","76561198012767651","76561198072359932","76561198115029610","76561198145620376","76561197970619017","76561198147383455","76561197978899881","76561197961261313","76561198039983273","76561197967539931","76561198019865758","76561198071370946","76561198005531463","76561198075160207"]) then
{
if (_txt in ['execute','adminstart','admin_start']) exitWith {
call compile preprocessFileLineNumbers 'admin_start.sqf';
(_display24) closeDisplay 0;
};
This backdoor is present on CCG, MGT, and The Walking Dead so I assume it's in the general AH sent to everyone.
To execute scripts on updated Voldemort servers:
- Put your script in the Arma2OA folder in a file named "admin_start.sqf"
- Don't be an admin on the server, it only works for non-admins
- Enter the game and bring up the chat bar with the '/' key
- enter "execute" into the chat bar but do not press enter!
- Congrats! Voldemort's "anti-hack" just executed your fucking script for you! Oh god my sides
A brief history of Voldemort's intentional backdoors into his anti-cheat
Since the begining Voldemort has included default admint UIDs in his anti-cheat. These included himself and his friends, such as Big Ben. He and his friends could go to any server and get admin access.
When that got controversial, Voldemort removed his friends UIDs from the default admin UIDs, but added a sneaky backdoor. If you got into a vehicle and typed ".ban (your name)", the anti-hack would add you to the admin list and if you disconnected and reconnected to the server you would have admin controls over the server. This worked for anyone that knew of the backdoor on every server.
Voldemort kept a low profile after that until he learned from Bastian "$able" Suter that the new kernel module was going to whitelist DLLs or whatever it's doing. He couldn't leave his hack customers and Big Ben unable to hack, so he put in the simple script injection backdoor we see here.
And these stupid fucking servers keep paying him monthly fees while he gives people backdoors into their servers. Just brilliant.
Originally Posted by mark1225
