CS2D Bug Reports
1,968 replies



@
Mami Tomoe: Can they log-in into their USGN accounts here or only in-game?

@
Mami Tomoe: can this exploit be used to bypass Game ban in USGN? I mean, is it possible to fake USGN accounts which are game banned?


You received a game ban because you seem to be a cheater. You are not able to log-in in-game anymore.
Yes 2 days ago i got banned in my server. Some new player join, in 1 minute change USGN ID to my USGN ID and ban me by Admin script... Idk how he do it but propably cheat engine? Can someone check it?

@
Kolia_rus, no.
@
Steru, I don't think this is how it's done, and I suggest against trying anything weird.

@

Look at me standing, here on my own again
@
mrc: currently it can be fixed by simple Lua. On the previous page I told that I made a script which checks for users' IP if his USGN ID belongs to an admin. It's not so hard to create this Anti-Exploit script manually.
Also I plan to let all my server users use this kind of protection. In a conception, it can have web-interface. If user will send a HTTP GET request (means he will open a link in browser as regularly) and it will look like www.example.com/trust.php?uid=12345 the handler on server-side will record the UID and IP and will trust it. The solution to prevent HTTP GET requests from violators is a Basic authentication. It is so simply to be configured.
If you are the one admin and would like to write a script just for yourself, on the web-side you can use something like this:
Not tested by the way, but this rewrite I did looks better than the first version of this script I made in before.
I think this is a good idea to use until the vulnerability will be fixed in CS2D and/or USGN code, so I suggest it to all server owners.

Also I plan to let all my server users use this kind of protection. In a conception, it can have web-interface. If user will send a HTTP GET request (means he will open a link in browser as regularly) and it will look like www.example.com/trust.php?uid=12345 the handler on server-side will record the UID and IP and will trust it. The solution to prevent HTTP GET requests from violators is a Basic authentication. It is so simply to be configured.
If you are the one admin and would like to write a script just for yourself, on the web-side you can use something like this:
Code:
1
2
3
4
5
6
7
8
2
3
4
5
6
7
8
<?php
// Makes your current IP as the one admin's IP should be trusted.
// Works with HTTP Basic Authentication. See for: https://www.php.net/manual/en/reserved.variables.server.php
file_put_contents("/usr/cs2d/sys/lua/data/ip-".$_GET['uid'].".txt", $_SERVER['REMOTE_ADDR']);
file_put_contents("/usr/logs.txt", "[".time()."]"." added for ".$_SERVER['PHP_AUTH_USER']." from ".$_SERVER['REMOTE_ADDR'].".");
die();
// Makes your current IP as the one admin's IP should be trusted.
// Works with HTTP Basic Authentication. See for: https://www.php.net/manual/en/reserved.variables.server.php
file_put_contents("/usr/cs2d/sys/lua/data/ip-".$_GET['uid'].".txt", $_SERVER['REMOTE_ADDR']);
file_put_contents("/usr/logs.txt", "[".time()."]"." added for ".$_SERVER['PHP_AUTH_USER']." from ".$_SERVER['REMOTE_ADDR'].".");
die();
Not tested by the way, but this rewrite I did looks better than the first version of this script I made in before.
I think this is a good idea to use until the vulnerability will be fixed in CS2D and/or USGN code, so I suggest it to all server owners.
You received a game ban because you seem to be a cheater. You are not able to log-in in-game anymore.

@
Mami Tomoe: Can they log-in into their USGN accounts here or only in-game?


@
The Dark Shadow, the exploit only works in-game.


Yes 2 days ago i got banned in my server. Some new player join, in 1 minute change USGN ID to my USGN ID and ban me by Admin script... Idk how he do it but propably cheat engine? Can someone check it?

@
Steru, I don't think this is how it's done, and I suggest against trying anything weird.

I just cracked it yesterday with

USGN in console was saying
U.S.G.N.: Ping/State 'not playing'
instead of U.S.G.N.: Ping/State 'playing'
Could it be caused by me requesting change to USGN server a year ago that
DC implemented to allow more relaxed IP address matching because my IP is "too dynamic"?



On the
shieldhit hook, the weapon paramter will return the source's currently held weapon.
This is not normal, because if the victim is being hit by a turret, the value will remain as the source's held weapon.
Example:
If CT gets hit by a T's turret, but the T is currently holding a knife, the weapon will be set as the knife, while the object will be set as the turret.

This is not normal, because if the victim is being hit by a turret, the value will remain as the source's held weapon.
Example:
If CT gets hit by a T's turret, but the T is currently holding a knife, the weapon will be set as the knife, while the object will be set as the turret.
Look at me standing, here on my own again
https://www.cs2d.com/help.php?hookcat=all&hook=hostagedamage#hook
LUA ERROR: Cannot add '_hostagedamage' to hook 'hostagedamage' (hook does not exist)!
hook doesn't exist ingame
LUA ERROR: Cannot add '_hostagedamage' to hook 'hostagedamage' (hook does not exist)!
hook doesn't exist ingame

Site: https://cs2d.com.br | Discord: https://discord.gg/85H6ACE8jp
I'm aware that there are reports about USGN security issues but I didn't manage to find the problem yet. I'm on it.
@
Mami Tomoe: You are right. This seems to be wrong. Also in some other hooks maybe. Will check.
@
mrc: true, there's a typo in the code.
It should work when you use
@

@

It should work when you use
hostedamage
. Will be fixed. edited 3×, last 17.10.21 12:19:46 pm
@
thx set the
mp_roundlimit to 0 and
mp_timelimit to 0 too and the map will not be available to change automatically.



You received a game ban because you seem to be a cheater. You are not able to log-in in-game anymore.
@
Kolia_rus: thanks
can someone help me create an awp script like do for fun awp because i want to play with my friends with this script can someone help me
I just want to have fun with this script for fun # awp his script is very good
can someone also help me create an aim_shot style script please always wanted to play with this script plis
@
DC: what do you think about teaching people to script


can someone help me create an awp script like do for fun awp because i want to play with my friends with this script can someone help me
I just want to have fun with this script for fun # awp his script is very good
can someone also help me create an aim_shot style script please always wanted to play with this script plis
@

sad
There's official guide to Lua scripting: https://www.cs2d.com/tut/tkdlua/luatut.html. It's not related to the AWP script you've mentioned, but the article would be helpful to start coding for CS2D.
I can't say Lua is so hard. I've made my first serious script for CS2D after few hours of studying it, but I already had experience in JS, Python and PHP (not related to this game directly). If you'll have any questions related to scripting in the future, you'll need to gently ask them here: https://www.unrealsoftware.de/forum_threads.php?forum=105&sub=2.
---
@

edited 2×, last 21.10.21 08:47:30 pm
You received a game ban because you seem to be a cheater. You are not able to log-in in-game anymore.