News for hackers. Stuff that matters.

A comment on We Outsmarted CSGO Cheaters with IdentityLogger. Parent comment

Re:We Outsmarted CSGO Cheaters with IdentityLogger by snarfy on Thursday October 17, 2024 @10:10AM (#41869848)
> There's also "illegal" amx plugins and commands, which are generally frowned upon and extremely abusable, but quite useful in these situations. My favorite (which most of the "illegal plugins" are based around) is amx_exec which essentially gives admins direct access to any client's in-game console, to run any command or set any setting!

Yes, we have something similar for UT2004, but only a handful of people are even aware it exists. It's too powerful and too easily abused. I have yet to share it, even with other admins.

[ Parent | on HN ]
Re:We Outsmarted CSGO Cheaters with IdentityLogger by voldacar on Thursday October 17, 2024 @11:04AM (#41870361)
Isn't this a huge security vulnerability for the client?
[ Parent | on HN ]
Re:We Outsmarted CSGO Cheaters with IdentityLogger by Rohansi on Thursday October 17, 2024 @11:41AM (#41870703)
It can be. There have been in-game commands with code execution vulnerabilities that turn into RCE because the game server can make clients run commands.
[ Parent | on HN ]
Re:We Outsmarted CSGO Cheaters with IdentityLogger by snarfy on Thursday October 17, 2024 @01:18PM (#41871589)
Yes, it's why I don't share knowledge of it. There are less than 300 people actively playing this game (maybe fewer) so any impact of something like a RCE running wild is relatively small.
[ Parent | on HN ]