RequestFile exploit release ( RCON stealing )

Holy shit i didnt know i had to give huge spoonfeed instructions with this. Just go into a server and request a file, if it says opening then you grabbed it ( saves to your downloads folder in gmod ). also it only works on servers with sv_allowdownload to 1, And you cant tell what the cvar is set to because it isnt replicated to the client. So you just gotta test and see what servers are vulnerable

I just enter to one server,got rcon password.
writed rcon_password password to the console.
Nothing happened.

- - - Updated - - -

I just enter to one server,got rcon password.
writed rcon_password password to the console.
Nothing happened.
lol he just banned me from wrong rcon lol

- - - Updated - - -

for*
lolollol

I would love to know how it works in detail.

Is it request_file/send_file in engine.dll?

use sourcesdk
include inetchannel.h
https://github.com/ValveSoftware/sou...tchannel.h#L73

i think that's all there is.

then you'd also use convar.h to add the concommands

No, There is a bit more to it. You need to detour some shit and hook a file function ( forget the exact name ). iirc it sends a huge payload or something

Sorry to be rude and idiotic but may I please have some instructions as to what to do once the dll is injected?

IsSafeFileToDownload

you can do it without hooking anything at all - it's not hard

nobody said it was hard

i never said anyone said it was hard

Thank you mate

how do you use it on any server

lua_run_cl cam.End3D();request_file cfg/cfg