search

ValveSoftware / Source-1-Games

Source 1 based games such as TF2 and Counter-Strike: Source
647 stars 75 forks source link

[TF2] Zombie Infection has a massive vulnerability to cheaters playing as zombies. #5255

Open tabby0x opened 1 year ago

tabby0x commented 1 year ago

Apparently the attack cooldown is not properly defined and is only done on the client. Cheats can directly call the attack function and bypass this cooldown, effectively having a instant kill.

I assume this is because you are given the "Voodo Cursed Soul" instead of a actual weapon. Maybe it has no attributes for a cooldown on it?

JoriKos commented 1 year ago

The Zombie Infection mode gives you the tf_weapon_fists with custom attributes and viewmodels, Voodoo-Cursed Soul is not a weapon. You can see that the Scout has no custom damage attributes, yet still does the default 65 damage and has default swing speed.

tabby0x commented 1 year ago

I can attach a video of the issue. There is a non functional serverside cooldown. Or it is very short.