rumblefrog / go-a2s

Golang implementation of Source Query
MIT License
66 stars 16 forks source link

New server query protocol #4

Closed ghost closed 3 years ago

ghost commented 3 years ago

A2S_INFO may now respond with a challenge request. A quote from here https://developer.valvesoftware.com/wiki/Server_queries :

Servers may respond with the data immediately. However, since this reply is larger than the request, it makes the server vulnerable to a reflection amplification attack. Instead, the server may reply with a challenge to the client using S2C_CHALLENGE ('A' or 0x41). In that case, the client should repeat the request by appending the challenge number. This change was introduced in December 2020 to address the reflection attack vulnerability, and all clients are encouraged to support the new protocol.

Please add support

mpawlowski commented 3 years ago

I ran into this issue today. I think I fixed it with https://github.com/rumblefrog/go-a2s/pull/5.