Tsuey / L4D2-Community-Update

Help us shape the potential future of L4D2 vanilla.
70 stars 23 forks source link

Server Crash Exploit with Jockey or Charger #175

Open Hawkins93 opened 2 years ago

Hawkins93 commented 2 years ago

Cheaters with Aimware use a function which chockes certain network packets, to teleport a grabbed survivor as jockey or turn when charging as chargers - When they set this function's value too high, it instantly kills the server, leaving players on a frozen screen for 30 seconds before all return to lobby.

lunatixxx commented 2 years ago

https://github.com/Tsuey/L4D2-Community-Update/issues/126

Hawkins93 commented 2 years ago

P.S: Its possible that it only works when grabbing real human player survivors.

lunatixxx commented 2 years ago

It is still very actual... but it's more important to change things about the vocalizer as we can see. There is really a problem of priorities here.

ErrorServers commented 1 year ago

Cheaters with Aimware use a function which chockes certain network packets, to teleport a grabbed survivor as jockey or turn when charging as chargers - When they set this function's value too high, it instantly kills the server, leaving players on a frozen screen for 30 seconds before all return to lobby.

How did you figure this out? Were you able to reproduce it?

Hawkins93 commented 1 year ago

@ErrorServers I had known someone who used to cheat. I havent bothered reproducing it myself though.

In the last weeks i encountered 2 cases on my server where this happened to users without cheats. In one case, taking over control of a tank by SDK call while riding a survivor as jockey (the tank was floating in the air as if with noclip enabled, but much slower). A few minutes later the same player spawned as jockey again and jumped a survivor, at which point the server froze.

If the server crashes by this exploit, the accelerator doesnt upload a crash report, as it is technically not a crash. The server cant resolve the issue, so it does not proceed: after 30 seconds of inactivity it restarts by itself automatically. If a cheater abusing this exploit / player with this bug leaves the server during that time, the game continues normally.

ErrorServers commented 1 year ago

@Hawkins93 I've encountered very similar if not same server shutdowns, sadly i wasn't there to witness it with my own eyes so i dont know what exactly happend. I know though that it was same person that caused it and in first case he was in control of jockey seconds before shutdown and in second case he was in control of charger, so very likely we are facing same issue. As for your non cheat case, do you happen to replace jockey player with a bot after sdk call?

Hawkins93 commented 1 year ago

As for your non cheat case, do you happen to replace jockey player with a bot after sdk call?

Yes.