its fixed now
PatchedRequestFile exploit release ( RCON stealing )
Originally Posted by currymurry
Hi thank you very much for this, I was just interested if there was a way of finding servers that have sv_allowdownload 1?
Maybe game tracker could be used?
Thanks
Maybe game tracker could be used?
Thanks
Still works on multiple servers that have their rcon pass in the SERVER.CFG, anyway thanks for the free rcon release, never expected to find a free one.
cannot find free ones, doesnt work in most of them anymore
think its fixed for most of them now
think its fixed for most of them now
Anyone found a server where this works?
PM me if you have lets have some fun :P
PM me if you have lets have some fun :P
Crusty Bread Crumbs |FastDL|Pointshop|CSS Weapons|
its a deathrun server with rcon available, if u do get on unban PG. Gorzoid pls, decided to be nice hacker and this is what i get.
ye all u need to do is enter the command and rcon should still be there
They know its rcon so make sure to do some damage before they ban you and change rcon
its a deathrun server with rcon available, if u do get on unban PG. Gorzoid pls, decided to be nice hacker and this is what i get.
ye all u need to do is enter the command and rcon should still be there
They know its rcon so make sure to do some damage before they ban you and change rcon
Ive got a problem, i did it with this.. request_file cfg/server.cfg, but the problem is if i go to GarrysMod/garrysmod/download, there is no cfg help pls
Originally Posted by Darrek03
Ive got a problem, i did it with this.. request_file cfg/server.cfg, but the problem is if i go to GarrysMod/garrysmod/download, there is no cfg help pls
Yes it did say that
Originally Posted by Gorzoid
did it say Opening cfg/server.cfg: in console? if it didnt the you need to try different server
- - - Updated - - -
Originally Posted by Gorzoid
did it say Opening cfg/server.cfg: in console? if it didnt the you need to try different server
It's gonna get patch in the next update 
http://wiki.garrysmod.com/changelist/ⓘ
http://wiki.garrysmod.com/changelist/ⓘwhat if it says rcon_password "" // rcon password does this mean I cant access it?
Next update of Garry's Mod:
"Fixed another exploit related to downloading restricted files from the server"
"Fixed another exploit related to downloading restricted files from the server"
i inject it it cool but how do i use it now i type rcon like lets say rcon ulx adduser "jassim3003" superadmin then i click enter then it says bad password help..........
Originally Posted by jassim3003
i inject it it cool but how do i use it now i type rcon like lets say rcon ulx adduser "jassim3003" superadmin then i click enter then it says bad password help..........
Do these people have the worst case of autism in the world or something? How to use it has been said many times over.
Even by the OP as well.
-.- If you can't figure it out after this then your on your own.
Even by the OP as well.
-.- If you can't figure it out after this then your on your own.
Originally Posted by ehex
Holy shit i didnt know i had to give huge spoonfeed instructions with this. Just go into a server and request a file, if it says opening then you grabbed it ( saves to your downloads folder in gmod ). also it only works on servers with sv_allowdownload to 1, And you cant tell what the cvar is set to because it isnt replicated to the client. So you just gotta test and see what servers are vulnerable
Originally Posted by lolman59
Ok skiddies here's how to use it.
Step 1. Download
Step 2. Inject using an inject
Step 3. go to a server with sv_allowdownload 1
Step 4. in console type "request_file cfg/server.cfg"
Step 5. Go to this in your folder GarrysMod\garrysmod\download\cfg
Step 6. in cfg there will be a file called server, open it and find the RCON password
Step 7. type the rcon password in the console with rcon_password
Step 8. Hack the server.
When you want to download another servers server.cfg just delete the one you had before and then type request_file cfg/server.cfg.
Have fun!
Step 1. Download
Step 2. Inject using an inject
Step 3. go to a server with sv_allowdownload 1
Step 4. in console type "request_file cfg/server.cfg"
Step 5. Go to this in your folder GarrysMod\garrysmod\download\cfg
Step 6. in cfg there will be a file called server, open it and find the RCON password
Step 7. type the rcon password in the console with rcon_password
Step 8. Hack the server.
When you want to download another servers server.cfg just delete the one you had before and then type request_file cfg/server.cfg.
Have fun!
Remember. THIS WILL ONLY WORK ON SERVERS THAT HAVE sv_allowdownload SET TO 1!
sv_allowdownload isn't replicated so its a shot in the dark to find a server that has it.
Also IF IT DOESN'T SAY "Opening:" THEN IT DOESN'T WORK!
Take the hint. This literally made me lose even more of my nonexistent faith in humanity.
sv_allowdownload isn't replicated so its a shot in the dark to find a server that has it.
Also IF IT DOESN'T SAY "Opening:" THEN IT DOESN'T WORK!
Take the hint. This literally made me lose even more of my nonexistent faith in humanity. By the way "Fixed another exploit related to downloading restricted files from the server" is in the http://wiki.garrysmod.com/changelist/ now so it will be patched.
stop acting like the patch is new news, it's been in the changlist for 2 months
This thread is closed for replies.
