Luigi Auriemma

aluigi.org (ARCHIVE-ONLY FORUM!)
It is currently 19 Jul 2012 12:15

All times are UTC [ DST ]





Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 37 posts ]  Go to page 1, 2  Next
Author Message
 Post subject: Crash - steam
PostPosted: 07 Nov 2007 12:49 

Joined: 26 Oct 2007 17:38
Posts: 25
Can I crash steam servers ?


Top
 Profile  
 
 
 Post subject:
PostPosted: 07 Nov 2007 21:41 
yeah i really want to do that too :) but i couldn't find any


Top
  
 
 Post subject:
PostPosted: 08 Nov 2007 11:15 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
Steam servers are all updated so don't exist public vulnerabilities as far as I know


Top
 Profile  
 
 Post subject:
PostPosted: 09 Nov 2007 16:05 

Joined: 24 Sep 2007 02:12
Posts: 1114
Location: http://sethioz.co.uk
i was testing with my friend ... he hosted a ded server and i tested stuff in it...and i managed to cause a crash somehow.
game was CSS. i was just messing around with packet editor and memory editor, but im not sure what caused it.

if u still mean steam game server .. or u mean steam master servers ?


Top
 Profile  
 
 Post subject:
PostPosted: 09 Nov 2007 17:34 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
Usually when you receive an unexpected crash attach Olly to it (I hope you have the debugger attached as option) and take note of the offset in which the crash happens since could be useful for a later check.
Then click on the K command of Olly and take note of those addressesm they are the functions which called the one which crashed.
Depending by the type of crash (for example a format string is often easy to see in Olly) later you can set the needed breakpoints on those calls to know their purpose and, if a new crash happens, what caused it

Naturally these are only generic steps.


Top
 Profile  
 
 Post subject:
PostPosted: 01 Dec 2007 19:08 

Joined: 24 Sep 2007 02:12
Posts: 1114
Location: http://sethioz.co.uk
kind a old topic but ... friend who hosted it closed the error msg ..so blah. Well i was inside server so it wouldnt be external crash anyways...and once they ban you...there is nothing you can do.


Top
 Profile  
 
 Post subject:
PostPosted: 16 Jan 2008 23:04 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
There is a strange problem in Steam which can't be defined a security bug or a real problem at all, that's why I post it here:

steam://subscriptioninstall/0
or
steam://subscriptioninstall/what_you_wa ... ame_number

The effect is the freeze of Steam with CPU at 100%
in my opinion it's totally useless but probably could be useful to someone.


Top
 Profile  
 
 Post subject:
PostPosted: 31 Jan 2008 22:57 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
Today an user reported a Denial of Service which affected his server/configuration, anyway I doubt it works on all the servers (for example on Windows has no effect) or work at all.
In my opinion it can be a problem only in some specific conditions like the usage of certain type of terminals/console or the usage of screen, anyway the following is the proof-of-concept:

udpsz -l 10 127.0.0.1 27015 4010

On your server should appear many messages like the following:

"NET_QueuePacket: Oversize packet from 127.0.0.1:xxxxx"

So check your servers to see if this attack can be a problem.


Top
 Profile  
 
 Post subject:
PostPosted: 31 Jan 2008 23:57 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
And remaining in theme of udpsz, I have seen online many people talking about a type of Denial of Service versus Counter Strike using a packet of 55555 bytes like the following command:

udpsz -l 0 127.0.0.1 27015 55555

I have not verified if 55555 is a specific size (like in my previous post where 4010 is the needed packet size for causing the error message) or is just used as a big packet for flooding


Top
 Profile  
 
 Post subject:
PostPosted: 01 Feb 2008 15:04 

Joined: 24 Sep 2007 02:12
Posts: 1114
Location: http://sethioz.co.uk
udpsz ? ..not following. what is that ?


Top
 Profile  
 
 Post subject:
PostPosted: 01 Feb 2008 20:43 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
udpsz is a tool I wrote some time ago for playing easily with UDP packets:

http://aluigi.org/testz.htm


Top
 Profile  
 
 Post subject:
PostPosted: 02 Feb 2008 02:25 

Joined: 24 Sep 2007 02:12
Posts: 1114
Location: http://sethioz.co.uk
downloaded it. im sure it will come in handy somewhere.


Top
 Profile  
 
 Post subject:
PostPosted: 25 Feb 2008 00:26 

Joined: 12 Oct 2007 21:02
Posts: 4
55555 is not a specific size. It just worked when i tested udpsz


Top
 Profile  
 
 Post subject:
PostPosted: 25 Feb 2008 18:19 

Joined: 24 Sep 2007 02:12
Posts: 1114
Location: http://sethioz.co.uk
just a tought but ... is it possible to crash steam server/s with a valid user ? if i have cd-key and stuff...
or cd-keys.
not sure how .. but if i can get in server then it can be remade somehow ?
or maybe the simple login/logout flood will do it ?! ..or at least it should lag the crap out of the server.
if im correct you cant really ban player if its logging in and out really quickly.


Top
 Profile  
 
 Post subject: Re: Crash - steam
PostPosted: 25 Oct 2008 21:10 

Joined: 09 Sep 2007 18:38
Posts: 15
luigi if you do udpsz pack sender for 158KiloByte, all hlds servers can crash.... And I tested this...


Top
 Profile  
 
 Post subject: Re: Crash - steam
PostPosted: 25 Oct 2008 21:14 

Joined: 09 Sep 2007 18:38
Posts: 15
do not be limit 65535 byte pls... can you do it 158kb ?


Top
 Profile  
 
 Post subject: Re: Crash - steam
PostPosted: 25 Oct 2008 21:48 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
sure, I can break the limit of 64 kilobyte per packet of the TCP/IP protocol and I can also create material from nothing breaking the rule that the material can't be created or destroyed but only modified... blah


Top
 Profile  
 
 Post subject: Re: Crash - steam
PostPosted: 25 Oct 2008 21:51 

Joined: 08 May 2008 02:49
Posts: 8
I can generate black holes whenever I want.


Top
 Profile  
 
 Post subject: Re: Crash - steam
PostPosted: 21 Dec 2008 21:03 

Joined: 21 Dec 2008 19:01
Posts: 9
udpsz have really crashed my sv.
Very nice.


Top
 Profile  
 
 Post subject: Re: Crash - steam
PostPosted: 21 Dec 2008 22:00 

Joined: 24 Sep 2007 02:12
Posts: 1114
Location: http://sethioz.co.uk
umm, so you ppl found the way to actually crash steam based server ? or what am i missing here ?


Top
 Profile  
 
 Post subject: Re: Crash - steam
PostPosted: 21 Dec 2008 22:10 

Joined: 21 Dec 2008 19:01
Posts: 9
well..
Ive tested in nonsteam server. Not steam yet.


Top
 Profile  
 
 Post subject: Re: Crash - steam
PostPosted: 22 Dec 2008 14:13 

Joined: 24 Sep 2007 02:12
Posts: 1114
Location: http://sethioz.co.uk
bah, don't think it works on steam. somehow steam servers are quite secured against flooding, crashing, exploiting..etc
anyways if you have any luck, let us know :)


Top
 Profile  
 
 Post subject: Re: Crash - steam
PostPosted: 02 Feb 2009 06:35 

Joined: 02 Feb 2009 06:29
Posts: 13
you can do a server overflow using rcon


Top
 Profile  
 
 Post subject: Re: Crash - steam
PostPosted: 03 Feb 2009 19:57 

Joined: 03 Feb 2009 19:55
Posts: 2
TSuNaMi wrote:
luigi if you do udpsz pack sender for 158KiloByte, all hlds servers can crash.... And I tested this...


hlds crash server with hlshield ?

i try udpsz but only send 65500 byte not 158000 bytes ?

how can you do that ?


Top
 Profile  
 
 Post subject: Re: Crash - steam
PostPosted: 04 Feb 2009 02:19 

Joined: 28 Nov 2008 00:27
Posts: 7
how can we protect hlds against this type of dos ? any fix/patch ?


Top
 Profile  
 
 Post subject: Re: Crash - steam
PostPosted: 04 Feb 2009 09:53 

Joined: 08 Sep 2007 18:55
Posts: 22
[quote]i try udpsz but only send 65500 byte not 158000 bytes ? [/quote] Max udp packet size is 65500 bytes ;)

[quote]how can we protect hlds against this type of dos ? any fix/patch ?[/quote] Look above. This attack type is impossible ;o ?


Top
 Profile  
 
 Post subject: Re: Crash - steam
PostPosted: 04 Feb 2009 13:52 

Joined: 28 Nov 2008 00:27
Posts: 7
"NET_QueuePacket: Oversize packet from 127.0.0.1:xxxxx"

so ? imposible u say ai ?


Last edited by energypower on 10 Feb 2009 20:54, edited 1 time in total.

Top
 Profile  
 
 Post subject: Re: Crash - steam
PostPosted: 04 Feb 2009 15:10 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
crashes?!
in HL x.1.1.1e that message is showed only as log (as I wrote in a previous post) without the handling of the packet or other results like a crash or a termination.

what exact version of HL are you using?
on what platform?
what mods?
and what security patches/work-arounds/solutions?
is it a crash or a termination of the server?
if it's a crash attach gdb at the process and let me know where the exception happens


Top
 Profile  
 
 Post subject: Re: Crash - steam
PostPosted: 04 Feb 2009 16:56 

Joined: 28 Nov 2008 00:27
Posts: 7
in console apears this messege "NET_QueuePacket: Oversize packet from my ip:xxxxx" i gues is overflooding console because it apears many times and the hlds console gets time out and the server has no ping, i`m using hlds 4.1.1.1e mod cstrike,on windows. when i stop flooding server he recovers almost instantly.


Last edited by energypower on 10 Feb 2009 20:57, edited 2 times in total.

Top
 Profile  
 
 Post subject: Re: Crash - steam
PostPosted: 04 Feb 2009 17:39 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
mah, if you want to make a test change the byte at offset 0x4d331 of swds.dll from 0xaa to 0xa9 and retest the server.
and don't use -l 0 on local addresses because they are handled differently (faster packets which saturate everything, moreover 127.0.0.1 which is a virtual interface)


Top
 Profile  
 
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 37 posts ]  Go to page 1, 2  Next

All times are UTC [ DST ]


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for: