Luigi Auriemma

aluigi.org (ARCHIVE-ONLY FORUM!)
It is currently 19 Jul 2012 16:54

All times are UTC [ DST ]





Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 11 posts ] 
Author Message
 Post subject: How it works? Can I get it? [JD Softs]
PostPosted: 02 Apr 2009 18:41 

Joined: 18 Apr 2008 10:28
Posts: 36
First of all I see Ventrilo Anti-Ban
http://www.youtube.com/watch?v=AnzUrnB-_Ak

How does it works?
And what is thet MD5? (If I crack him I will get the link to the soft? hh)
Somone can explain me?

2)

3.0.3 Server Unlimited Clients
http://www.youtube.com/watch?v=UPiCFw0D ... annel_page
How does it works?
[There is a patch or something?]

3)

Ventrilo Remote Rcon (VRR)
http://www.youtube.com/watch?v=brQnku5t ... re=related
What the hell happen while the soft is running...
How does it works?


--- JD if you have vent, PLEASE give me the IP [I want to talk with you] ---

(I think luigi already know how does it works on the first time he watch these videos)


Top
 Profile  
 
 
 Post subject: Re: How it works? Can I get it? [JD Softs]
PostPosted: 03 Apr 2009 15:54 

Joined: 24 Sep 2007 02:12
Posts: 1114
Location: http://sethioz.co.uk
can't give you any details, because i haven't touched ventrilo, but just as the message says on his video "might already be banned by subnet". he makes the server think that user is already banned. I know that similiar method have been used in several games like CSS, HL, HL2..etc. Voteban doesn't work, because they make server think they are either banned already or they are a local client.
so in this case i wouldn't be 100% sure it works in other servers than local.


Top
 Profile  
 
 Post subject: Re: How it works? Can I get it? [JD Softs]
PostPosted: 03 Apr 2009 17:50 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
for the anti-banning a (stupid) "idea" can be to force the automatic banning while the client is already connected.
for example after you join the server launch tcpfp versus it for 10 seconds (when the connections counter showed by it returns to zero) like: tcpfp -t 500 SERVER 3784
this will force the automatic 5 minutes banning but this idea is just stupid because if you get kicked you are out.


Top
 Profile  
 
 Post subject: Re: How it works? Can I get it? [JD Softs]
PostPosted: 03 Apr 2009 18:53 

Joined: 18 Apr 2008 10:28
Posts: 36
I cant belive I dosent think about thet earlier.

and what about the Ventrilo Remote Rcon?
what the "secret" here?
there is no brute forcing...
So WTH going behind this soft?

EDIT: I found a easy way [Winsock] :D


Top
 Profile  
 
 Post subject: Re: How it works? Can I get it? [JD Softs]
PostPosted: 23 Jul 2009 16:04 

Joined: 21 Jul 2009 14:25
Posts: 9
dor_g wrote:
I cant belive I dosent think about thet earlier.

and what about the Ventrilo Remote Rcon?
what the "secret" here?
there is no brute forcing...
So WTH going behind this soft?

EDIT: I found a easy way [Winsock] :D



DO YOU CAN EXPLAIN US?
i really want to know how to make it


Top
 Profile  
 
 Post subject: Re: How it works? Can I get it? [JD Softs]
PostPosted: 23 Jul 2009 17:04 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
ventrcon is a simple minimalistic ventrilo client which allows to send rcon commands easily, so I don't understand what's the relation with this topic.
and then Winsock is the set of APIs on Windows which allow to use the TCP/IP stack (ridiculous microsoft) so, again, I don't understand what's the relation with this topic.


Top
 Profile  
 
 Post subject: Re: How it works? Can I get it? [JD Softs]
PostPosted: 23 Jul 2009 21:23 

Joined: 08 Jun 2008 07:17
Posts: 92
Luigi, This is another link that someone copyed my video before i removed it

http://www.youtube.com/watch?v=8y7Oiy8s ... annel_page


If you watch it you can see I send Rcon commands without knowing the password. You probably already know how it's done, if not I suggest not to tell anyone as well remote Rcon people can cause problems with it.

but that is just my opinion you can release if it you want :D


Top
 Profile  
 
 Post subject: Re: How it works? Can I get it? [JD Softs]
PostPosted: 23 Jul 2009 22:08 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
no jd I have not performed additional vulnerability research on ventrilo due to the lack of interest in the application (and obviously the lack of interest in the security, it's less than 10 days ago that I have restarted to find some game bugs).

anyway if the problem is that someone could exploit the bug why not fixing it?


Top
 Profile  
 
 Post subject: Re: How it works? Can I get it? [JD Softs]
PostPosted: 23 Jul 2009 22:32 

Joined: 08 Jun 2008 07:17
Posts: 92
I don't like ventrilo, for a few reasons like..


5 years to make a linux client and it's still not out :[

They hide info about vulnerability around they're product


And last I don't know how to patch it to stop it :D

The only person I can be would find out the Rcon exploit would be you, but other then that I think its safe.


Top
 Profile  
 
 Post subject: Re: How it works? Can I get it? [JD Softs]
PostPosted: 23 Jul 2009 22:38 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
I agree at 100%, if I'm not in error there is still a thread on this forum about the behaviour of the ventrilo developers when ventrilobotomy was released (posts deleted and so on).

if you want I can take a look at it for an universal fix, depending by the bug it can be a joke to fix or something harder but nothing is impossible if there is a real interest in doing it.


Top
 Profile  
 
 Post subject: Re: How it works? Can I get it? [JD Softs]
PostPosted: 20 Sep 2009 17:26 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
ventrilo-remote-rcon-t1071.html


Top
 Profile  
 
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 11 posts ] 

All times are UTC [ DST ]


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for: