Luigi Auriemma

aluigi.org (ARCHIVE-ONLY FORUM!)
It is currently 19 Jul 2012 11:28

All times are UTC [ DST ]





Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 3 posts ] 
Author Message
 Post subject: Directory listing with CoD4
PostPosted: 12 Dec 2010 14:30 

Joined: 12 Dec 2010 14:20
Posts: 3
Hey guys. I couldn't believe it when Q3 Directory transversal PoC worked! i can download files from almost ANY server.
To start with, i test if the server is vulnerable. The easiest way which works all the time is this command : /download /pb/svlogs/00000001.log
That file ALWAYS exists in cod4 punkbuster enabled servers. However, the file which contains the rcon pass, is sometimes not /main/server.cfg
So my question is, is there any exploit that allows me to get the list of files in a given directory? that would save so much time!
(btw, i have many rcon passes, but i don't use them, i do this just4fun!)


Top
 Profile  
 
 
 Post subject: Re: Directory listing with CoD4
PostPosted: 12 Dec 2010 14:45 

Joined: 12 Dec 2010 14:20
Posts: 3
also, is there any workaround for the "cannot validate pure client" error ?


Top
 Profile  
 
 Post subject: Re: Directory listing with CoD4
PostPosted: 16 Dec 2010 04:12 

Joined: 07 Aug 2008 06:01
Posts: 45
1) no. the most you could do is /sv_referencedIwdNames
2) dont join sv_pure servers


Top
 Profile  
 
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 3 posts ] 

All times are UTC [ DST ]


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for: