Forum
Texture "exploit" abusing: cheating in TF2
Created 24th October 2010 @ 14:37
Add A Reply Pages: 1 2 3 Next »
Hello,
Since cheats via sourcemod are gone I want to reveal another security issue in TF2.
I won’t tell you how to do it and if not done correctly it will crash your game.
(anyways this security issue is far away from being as big as sourcemod/plugins in generell were)
Look at this video.
http://www.youtube.com/watch?v=aYIbGAVeRuE
The quality is a bit bad since I just uploaded it but ingame you can see the stickys even if you are at the opposite site of the map.
It works on sv_pure 2 servers and you can do this with any texture you want, for example the enemy medics critzkrieg.
Last edited by XHunter,
Quoted from broesel
[…]
explain please
clientside loading of unsigned plugins was (supposedly) fixed.
Quoted from broesel
[…]
explain please
valve disabled user side plugins unless they are signed or smth
sourcemod server side plugins can still be used tho
this is cool… there prolly already is thread on steamforums and and now just waiting for fix :] … maybe even on time for Halloween update?
Last edited by AnimaL,
yeah, I know that client-side plugins now require to be signed :)
but I meant Sourcemod, which is still server-side, after all..
Quoted from broesel
yeah, I know that client-side plugins now require to be signed :)
but I meant Sourcemod, which is still server-side, after all..
you could load sourcemod clientside and manipulate data sent to the server is the gist of it.
Quoted from broesel
[…]
explain please
Updates to Team Fortress 2, Counter-Strike: Source and Day of Defeat: Source have been released. The updates will be applied automatically when your Steam client is restarted. The major changes include:
Source Engine Changes (CS:S, DoD:S, TF2)
Disabled clients loading server plug-ins unless the plug-ins are signed by Steam or the client is running in insecure mode.
Added a checkbox to the Options->Audio dialog to control muting the audio when the game window is in the background.Counter-Strike: Source
Fixed crash in custom maps using the trigger_camera entity.Team Fortress 2
Fixed another bug in the Steamworks internal stats reporting.
Updated the localization files.
you could start a listenserver with sourcemod, quit it, join any server you wan’t and modify cvars clientside via sm_cvar (you could also change hidden cvars).
This allowed you to do things like:
– turn on a wireframe wallhack (r_drawothermodels 2).
– a pseudo speedhack (host_timescale x)
– thridperson view (thirdperson)
and many more crazy things like a real wallhack that makes all walls transparent instead of highlighting the playermoddels. lsd trip TF2 where everything was uhm … colourfull :P … (I think I tested 90% of all cvars marked as cheats…)
ah and don’t forget host_fakelag and host_fakeloss :PP warping FTW.
Last edited by XHunter,
Good job, thanks for telling everybody about that exploit. Now people can find out how it works and start abusing it, and it’ll probably never be fixed.
Quoted from AnAkkk
Good job, thanks for telling everybody about that exploit. Now people can find out how it works and start abusing it, and it’ll probably never be fixed.
Yes, because people who want to abuse/cheat will never find it otherwise.
The only right way to handle it is make it public and cry loud and long enough for the game company to fix it. Luckily this is Valve, and it might actualy get fixed, even if it takes some time.
Quoted from Vince
[…]
Yes, because people who want to abuse/cheat will never find it otherwise.
The only right way to handle it is make it public and cry loud and long enough for the game company to fix it. Luckily this is Valve, and it might actualy get fixed, even if it takes some time.
Some similar exploits have been known since August-September 2009, they have been posted on a lot of sites and the Steam Forums, I also sent many emails to Valve about them and they have never been fixed. I doubt this one is going to get fixed any faster.
EDIT: Oh and, anyway, the non competitive community doesn’t care about sv_pure, they use the all-super-mega modified shiny models.
Last edited by AnAkkk,
Free textures&Particles! Stop snitching anakin
This sort of thing has been around for a while, you can also i believe get really big models for stickies so they are seen from afar aswell
See, Darn is going to abuse it now.
Quoted from AnAkkk
Good job, thanks for telling everybody about that exploit. Now people can find out how it works and start abusing it, and it’ll probably never be fixed.
Because everyone knows the way to get something fixed is by not telling anyone!
If it gets public, Valve will have a bigger incentive to fix it.
Add A Reply Pages: 1 2 3 Next »
content rss