next »

[ArmedGuy]

Hey guys, im currently in the progress of building an CoD based Server Security plugin that will have various fixes for CoD servers, mainly CoD4 and WaW.

 My simple question is, how can i check what parser is being being ran from within the code?
I need it due to logs being different in CoD4 and WaW.

Plugin currently works against RCon Blockers and No-Guid hackers in CoD4, but i want to expand it over to other games aswell, so if you know of anything(any security related issue etc), just shoot me a PM and ill take a look at it.

[Courgette]

Hi,

You can get the current parser name with

Code: python

self.console.gameName

There are examples in the login and publist plugins.

good luck

[MordyT]

Hey guys, im currently in the progress of building an CoD based Server Security plugin that will have various fixes for CoD servers, mainly CoD4 and WaW.

 My simple question is, how can i check what parser is being being ran from within the code?
I need it due to logs being different in CoD4 and WaW.

Plugin currently works against RCon Blockers and No-Guid hackers in CoD4, but i want to expand it over to other games aswell, so if you know of anything(any security related issue etc), just shoot me a PM and ill take a look at it.

Please do share when you are ready. We would VERY interested in this as well.

[ArmedGuy]

It will be released through my "company" to verified B3 uers(clans, communities and b3 hosters like you, but not single users). =) Free ofcourse.

[MordyT]

It will be released through my "company" to verified B3 uers(clans, communities and b3 hosters like you, but not single users). =) Free ofcourse.

Cool beans.
Thanks!

[pa3ck]

Quick question"

Have anybody seen server bot hackers? Sending up bots with 999 ping and make the server full? If yes, does anybody know how can I stop them if so can u add it to your Server Security plugin @ArmedGuy?

[MordyT]

Quick question"

Have anybody seen server bot hackers? Sending up bots with 999 ping and make the server full? If yes, does anybody know how can I stop them if so can u add it to your Server Security plugin @ArmedGuy?

I have seen this...
What I do is run a status command, which gives their guid, then ban the GUID. Issue resolved.
PITA, but happens.
kevinos was my last attacker...

[pa3ck]

Do they have the same GUID? If so it can be easily solve by a plugin which bans the players who have the same guid.

[MordyT]

Do they have the same GUID? If so it can be easily solve by a plugin which bans the players who have the same guid.

They do.
The problem is the bot never sees these players.
The reason why is because they get "stuck" somehow in the connecting screen. They normally are named after whatever they are advertising and they take up all slots.
So they never fully connect and never are seen by B3. That is why the only command I could find that sees them is a rcon status

[pa3ck]

They do.
The problem is the bot never sees these players.
The reason why is because they get "stuck" somehow in the connecting screen. They normally are named after whatever they are advertising and they take up all slots.
So they never fully connect and never are seen by B3. That is why the only command I could find that sees them is a rcon status

Oh yes you're right. its like the populator plugin isn it? As I read in the CoD4 Populator Plugin it says bots will connect to the server but wont finish joining. Is there any similar thing between the hack and that plugin if yes maybe we can solve it is that right?

[MordyT]

Oh yes you're right. its like the populator plugin isn it? As I read in the CoD4 Populator Plugin it says bots will connect to the server but wont finish joining. Is there any similar thing between the hack and that plugin if yes maybe we can solve it is that right?

I suspect they use the same method behind them.
I guess B3 could MAYBE deal with it.
Here is what B3 has to do:
1) during a status command, see a player is connecting
2) B3 already sees he is not fully connected and tries to auth him for 10 times.
3) during the NEXT status update, see the same player is not fully connected.
4) Issue a RCON (not pb, since he is not connected yet and I don't PB can touch him yet) ban command on the GUID which gets written to ban.txt on the gameserver.
5) Send a e-mail to admin informing him of this (optional) - code already exists in contact plugin.

[pa3ck]

I suspect they use the same method behind them.
I guess B3 could MAYBE deal with it.
Here is what B3 has to do:
1) during a status command, see a player is connecting
2) B3 already sees he is not fully connected and tries to auth him for 10 times.
3) during the NEXT status update, see the same player is not fully connected.
4) Issue a RCON (not pb, since he is not connected yet and I don't PB can touch him yet) ban command on the GUID which gets written to ban.txt on the gameserver.
5) Send a e-mail to admin informing him of this (optional) - code already exists in contact plugin.

Ye it would be cool, but is there any1 who would make this idea to a real plugin?

[ArmedGuy]

I could look in to it, i have a custom parser that reads console_mp.log and can get some interesting information. =)

Also, a test version for ServSeC is now ready.
MordyT, you interested?(CoD4 only atm)

[pa3ck]

I could look in to it, i have a custom parser that reads console_mp.log and can get some interesting information. =)

Also, a test version for ServSeC is now ready.
MordyT, you interested?(CoD4 only atm)

I am interested!! May i give it a try?

[ArmedGuy]

I am interested!! May i give it a try?

Heres the link:
http://pie-studios.co.cc/servsec/ServSeC-1.17public-cod4_pie-studios.rar

The code is compiled as this is just a test release, but later versions will be released as source code(to match with the licence).

For easy installation just put the .rar in your main b3 folder and use "Extract here".
The files will place themselves in /extplugins and /extplugins/conf.

For bans to work properly you must know how to setup IPSec policies(for Windows) that blocks addresses.(iptables example is in the config, but NOT tested).