search

danielga / gmsv_serversecure

A module for Garry's Mod that mitigates exploits on the Source engine.
https://github.com/danielga/gmsv_serversecure
Other
127 stars 31 forks source link

steam auth packet (k) abused for ddos attack #89

Closed klen-list closed 2 years ago

klen-list commented 2 years ago

Many sandbox servers were attacked using an invalid steam authorization packet size without sending a handshake initialization packet: изображение изображение Tested without attack, here is valid steam auth size: изображение

danielga commented 2 years ago

I've got a possible solution on this release candidate. It should validate most of the packet data before allowing it through. I've tested it against a legit Windows Garry's Mod client so it should work for legit clients, don't have a way to test against attackers though.