ZenHAX

Free Game Research Forum - Official QuickBMS support - Twitter @zenhax
It is currently Tue Jan 17, 2017 2:47 am

All times are UTC




Post new topic  Reply to topic  [ 3 posts ] 
Author Message
PostPosted: Thu Sep 18, 2014 8:52 pm 
Site Admin
User avatar

Joined: Wed Jul 30, 2014 9:32 pm
Posts: 5357
http://revuln.com/files/ReVuln_Exploiti ... obbies.pdf

It's a paper about some vulnerabilities that affected the Steam lobbies used by many games like Counter Strike Global Offensive, Left for Dead 1 and 2, Borderlands 2, all the Codemasters games, Alien Swarm, Day Z and a lot of other games.

The effect is zero servers online, no multiplayer.

The attack is very easy to perform and quite silent, basically one single attacker can take down the multiplayer of all the affected games without particular bandwidth/network requirements.

All the bugs are now fixed but they were there for many years, the scary part is that they were extremely easy to find and exploit... just basic Steamworks programming.

Hope you will appreciate the reading.


Top
   
PostPosted: Fri Sep 19, 2014 8:11 pm 

Joined: Thu Aug 28, 2014 1:28 pm
Posts: 6
Wonderful read, wow that was a heck of an exploit lol nice discovery mate!

i wonder what if it was discovered by another guy and released it the public it would've caused havoc.


PS:check ur PM"s xD...


Top
   
PostPosted: Fri Sep 19, 2014 10:08 pm 
Site Admin
User avatar

Joined: Wed Jul 30, 2014 9:32 pm
Posts: 5357
Yeah, "havoc" is the perfect word to describe that situation :)

What's more funny is that the code of the exploit is extremely simple, it simply uses the Steamworks API without malformed parameters, just the plain API.


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic  [ 3 posts ] 

All times are UTC


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Powered by phpBB® Forum Software © phpBB Limited