sirpapate / playercore

MIT License
1 stars 4 forks source link

E2 Client Overflow error Exploit #3

Open grammyy opened 1 year ago

grammyy commented 1 year ago

The following function can be used to exploit and crash players by spamming \n thouands of times using :repeat

https://github.com/sirpapate/playercore/blob/ed6a456082c4a5567dcf27d7f2f023ba3d915be1/lua/entities/gmod_wire_expression2/core/custom/cl_playercore.lua#L37

image example of use provided to me by attacker unknownly ^

sirpapate commented 1 year ago

Lol, that makes sense. I'll add a spam protection, like the one with the print(...). I don't have a lot of time, but I'll try to fix it ASAP.

grammyy commented 1 year ago

Thank you <3

grammyy commented 1 year ago

It's also worth noting anything similar has the same issue, like sendMessage or other functions I don't even know about.