@Joe The potential is so good that you can literally execute any bash/batch script you want calling to whatever file/function you want. That is why I am not stating any specific part. The exploit is the custom file. The potential misuse can be a range of things. From benign game hacks, to system, and network exploiting root priveleges, to background installation of ransomware, or other malicious malware. This is why I did not go into specifics other than code injection into the custom files. In my example, I popped a shell up on the server, a cmd window that said "Have a nice day!". I shouldn't need to go into specifics, as all server company owners, and admins should know what I am referencing.
Last msg today, got to go. -StealthMode On Tue, Oct 10, 2017 at 10:54 AM, Joe Brown <[email protected]> wrote: > If you are pointing to an exploit, you should be able to replicate the > exploit and maybe even go further to give what function resulted in this > exploit (not checking types, not sanitizing input, etc.) There should also > be a description on what the exploit leads to (Remote Code Execution, > Denial of Service, etc) > ------------------------------ > *From:* Csgo_servers <[email protected]> on > behalf of thedudeguy1 <[email protected]> > *Sent:* Tuesday, October 10, 2017 10:38 AM > *To:* [email protected] > *Subject:* Re: [Csgo_servers] Custom files exploit > > Stealth Mode. Please post some sort of demonstration or steps to > demonstrate > this vulnerability. Just one example is all you need to convince us. > > > > -- > Sent from: http://csgo-servers.1073505.n5.nabble.com/ > > _______________________________________________ > Csgo_servers mailing list > [email protected] > https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers > > _______________________________________________ > Csgo_servers mailing list > [email protected] > https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers >
_______________________________________________ Csgo_servers mailing list [email protected] https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers
