Search found 23 matches

by s[sk]
Mon May 12, 2014 1:40 am
Forum: General discussion & notices
Topic: gamespy-technology-shutdown-date
Replies: 27
Views: 74347

Re: gamespy-technology-shutdown-date

The thing is this isnt a problem for the old bf pros, they know how to connect or check out servers, i havent really used the ingame browser for years except to check if my servers shows up. The problem is the players that doesnt know about this and just think the game is dead, its about the same t...
by s[sk]
Thu Dec 13, 2012 3:21 pm
Forum: Battlefield server and client
Topic: New crash exploit part III (17.11.2012)
Replies: 42
Views: 190822

Re: New crash exploit part III (17.11.2012)

wq_Compf wrote:Hi,

Thanks for fast respone, where I find this patch ?
it's not yet public, i'm waiting for feedback from testing, it's a set of sanity checks that need to be tweaked to catch all possible bad data
by s[sk]
Thu Dec 13, 2012 2:59 pm
Forum: Battlefield server and client
Topic: New crash exploit part III (17.11.2012)
Replies: 42
Views: 190822

Re: New crash exploit part III (17.11.2012)

(gdb) bt #0 0x0843145a in dice::ref2::io::NetworkManager::getNetUpdate(dice::ref2::io::BitStream&, dice::ref2::io::NetworkableDescriptor*, dice::ref2::io::NetworkableStateMask*, int, bool) () this is not an exploit, this is a known problem with bf1942 server caused by buggy code it crashes beca...
by s[sk]
Thu Dec 13, 2012 9:25 am
Forum: Battlefield server and client
Topic: New crash exploit part III (17.11.2012)
Replies: 42
Views: 190822

Re: New crash exploit part III (17.11.2012)

Hi again, I put debug but is useles. stack not found. How about this ? Cheers ! can you please be more specific what's the problem you're trying to solve? is this some new bug that has something to do with that "Fatal error: Control object not found!!! id 0" from your previous post? if so...
by s[sk]
Mon Dec 10, 2012 3:04 pm
Forum: Battlefield server and client
Topic: New crash exploit part III (17.11.2012)
Replies: 42
Views: 190822

Re: New crash exploit part III (17.11.2012)

I would test this as well on my server I just need to know how to patch the Linux server files. I am using the 1.62 patched version. I don't need a guide just give me a kick in the right direction and a link to the needed tools :P i suggest using vbindiff for hexediting in linux just be sure you ar...
by s[sk]
Sun Dec 09, 2012 10:19 pm
Forum: Battlefield server and client
Topic: New crash exploit part III (17.11.2012)
Replies: 42
Views: 190822

Re: New crash exploit part III (17.11.2012)

tuia wrote:It's there, but there is a previous pop esi instruction which should be nop'd, because the stack pointer will be changed.
yes, of course, i'm blind
thanks ;-)
by s[sk]
Sun Dec 09, 2012 2:17 pm
Forum: Battlefield server and client
Topic: New crash exploit part III (17.11.2012)
Replies: 42
Views: 190822

Re: New crash exploit part III (17.11.2012)

i've looked into windows binary, i can't easily test it so i just tried to blindpatch it, it's 50:50 i got it right, anyway someone will correct me if i'm wrong

1f75eb8b55ab5bb4d6782dd6f3be2e45 BF1942_w32ded.exe

001B360F: 5E B8 -> 90 BB
001B3615: 5B 59 -> EB E8

edit: fixed that extra pop
by s[sk]
Sun Dec 09, 2012 4:31 am
Forum: Battlefield server and client
Topic: New crash exploit part III (17.11.2012)
Replies: 42
Views: 190822

Re: New crash exploit part III (17.11.2012)

first of all, great analysis, we're not worthy! ;-) So looking around server packet no. 5593, this packet sent by the hacker, looks fishy because the 2 byte field that holds the size of the data contents is 0: i've tested it by injecting udp packet with that size being 0 into client-server communica...
by s[sk]
Tue Dec 04, 2012 9:17 pm
Forum: Battlefield server and client
Topic: New crash exploit part III (17.11.2012)
Replies: 42
Views: 190822

Re: New crash exploit part III (17.11.2012)

Re, Now, server stoped. Program received signal SIGSEGV, Segmentation fault. 0x0843145a in dice::ref2::io::NetworkManager::getNetUpdate(dice::ref2::io::BitStream&, dice::ref2::io::NetworkableDescriptor*, dice::ref2::io::NetworkableStateMask*, int, bool) () you can ignore that, that's the usual ...
by s[sk]
Tue Dec 04, 2012 8:13 pm
Forum: Battlefield server and client
Topic: New crash exploit part III (17.11.2012)
Replies: 42
Views: 190822

Re: New crash exploit part III (17.11.2012)

wq_Compf wrote:Hi again,

The problem is : server not stop, go away to 100% CPU.
I will do, now is only launched with dbg.

I hope to find solution for you.

Cya soon.
if it goes to 100%, set up those tbreaks to find out where's the loop that doesn't finish