"Core_Load" able to crash a dedicated server?

[Cortexian]

I just had every person exception from my CE server, because apparently (someone claimed responsibility) they used the "core_load" command via devmode to crash the server. Is this possible, and how to I protect against it?

[CtrlAltDestroy]

i think he wants you to stop hosting

your server

[Atty]

i think he wants you to stop hosting

your server

[Malloy]

I just had every person exception from my CE server, because apparently (someone claimed responsibility) they used the "core_load" command via devmode to crash the server. Is this possible, and how to I protect against it?


buckshot to the dome?

[Con]

Well Freelancer, I tried to talk to you in your server about this, but you don't respond to anyone. I tried this in another dedi, but it only crashed my game (it told me it was missing the game file yoyorast_island.map). The server was still there when I checked.

[Syuusuke]

If that person has rcon...then perhaps.

[jcap]

then check the logs

also, client devmode can't do anything to the server

[Cortexian]

Nothing about him executing commands, but something definitely forced everyone out.



2009-06-15 22:50:20 TEAMS LEAVE "a Mouse" player 6 team 0
2009-06-15 22:50:20 QUIT "a Mouse" player 6 machine 6 (0.0.0.0:2303) cdkey lulzthisisacdkeyhasharoonie
2009-06-15 22:50:25 TEAMS LEAVE "srozzi" player 2 team 1
2009-06-15 22:50:25 QUIT "srozzi" player 2 machine 2 (0.0.0.0:2303) cdkey lulzthisisacdkeyhasharoonie
2009-06-15 22:50:28 TEAMS LEAVE "BUCK N@STY" player 9 team 1
2009-06-15 22:50:28 QUIT "BUCK N@STY" player 9 machine 9 (0.0.0.0:2303) cdkey lulzthisisacdkeyhasharoonie
2009-06-15 22:50:29 TEAMS LEAVE "(DRT) BIG B" player 4 team 1
2009-06-15 22:50:29 QUIT "(DRT) BIG B" player 4 machine 4 (0.0.0.0:2303) cdkey lulzthisisacdkeyhasharoonie
2009-06-15 22:50:29 TEAMS LEAVE "cyco kitty" player 5 team 1
2009-06-15 22:50:29 QUIT "cyco kitty" player 5 machine 5 (0.0.0.0:2303) cdkey lulzthisisacdkeyhasharoonie
2009-06-15 22:50:29 TEAMS LEAVE "hry" player 14 team 0
2009-06-15 22:50:29 QUIT "hry" player 14 machine 14 (0.0.0.0:2303) cdkey lulzthisisacdkeyhasharoonie
2009-06-15 22:50:29 TEAMS LEAVE "ass of hell" player 13 team 0
2009-06-15 22:50:29 QUIT "ass of hell" player 13 machine 13 (0.0.0.0:2303) cdkey lulzthisisacdkeyhasharoonie
2009-06-15 22:50:29 TEAMS LEAVE "scarface" player 8 team 0
2009-06-15 22:50:29 QUIT "scarface" player 8 machine 8 (0.0.0.0:2303) cdkey lulzthisisacdkeyhasharoonie
2009-06-15 22:50:29 TEAMS LEAVE "msalerno" player 10 team 0
2009-06-15 22:50:29 QUIT "msalerno" player 10 machine 10 (0.0.0.0:2303) cdkey lulzthisisacdkeyhasharoonie
2009-06-15 22:50:29 TEAMS LEAVE "AL" player 11 team 1
2009-06-15 22:50:29 QUIT "AL" player 11 machine 11 (0.0.0.0:2303) cdkey lulzthisisacdkeyhasharoonie
2009-06-15 22:50:29 TEAMS LEAVE "Jlalman" player 1 team 1
2009-06-15 22:50:29 QUIT "Jlalman" player 1 machine 1 (0.0.0.0:2303) cdkey lulzthisisacdkeyhasharoonie
2009-06-15 22:50:29 TEAMS LEAVE "Hugo Papito" player 16 team 0
2009-06-15 22:50:29 QUIT "Hugo Papito" player 16 machine 16 (0.0.0.0:2303) cdkey lulzthisisacdkeyhasharoonie
2009-06-15 22:50:39 CHAT GLOBAL Renholdër LOL!
2009-06-15 22:50:41 TEAMS LEAVE "Ursiræ" player 3 team 1
2009-06-15 22:50:41 QUIT "Ursiræ" player 3 machine 3 (70.240.160.16:2303) cdkey 095a4e3929ce1df9fbaca28a11e9e3b2
2009-06-15 22:50:47 TEAMS LEAVE "Renholdër" player 7 team 1
2009-06-15 22:50:47 QUIT "Renholdër" player 7 machine 7 (0.0.0.0:2303) cdkey lulzthisisacdkeyhasharoonie
Then after I joined my empty server to get it repopulated...



2009-06-15 22:51:30 CHAT GLOBAL msalerno damn exception

2009-06-15 22:51:35 CHAT GLOBAL Freelancer™ ah

2009-06-15 22:51:47 CHAT GLOBAL msalerno did everyone get an exception?

2009-06-15 22:51:52 CHAT GLOBAL Freelancer™ I guess so

2009-06-15 22:52:14 KILL "Freelancer™" player 0 KILLED "msalerno" player 1

2009-06-15 22:52:21 CHAT GLOBAL msalerno how the hell did you not die? ;)

2009-06-15 22:52:26 CHAT GLOBAL Freelancer™ You never hit me.
2009-06-15 22:52:28 CHAT GLOBAL Freelancer™ lol

2009-06-15 22:52:29 JOIN SUCCESS "Ursiræ" player 5 machine 5 (70.240.160.16:2303) cdkey 095a4e3929ce1df9fbaca28a11e9e3b2
2009-06-15 22:52:29 TEAMS JOIN "Ursiræ" player 5 team 1
2009-06-15 22:52:46 CHAT GLOBAL Ursiræ did yu liek ur exceptions ^-^

2009-06-15 22:52:57 CHAT GLOBAL Freelancer™ Did the server crash or something?
2009-06-15 22:52:59 CHAT GLOBAL Freelancer™ I just got here.
2009-06-15 22:53:00 CHAT GLOBAL Freelancer™ lol

2009-06-15 22:53:19 CHAT GLOBAL Ursiræ I got bored and core_loaded the server ^-^

2009-06-15 22:53:30 CHAT GLOBAL Freelancer™ Uh...
2009-06-15 22:53:32 CHAT GLOBAL Freelancer™ You did what?

2009-06-15 22:53:36 CHAT GLOBAL Ursiræ lol
2009-06-15 22:54:04 CHAT GLOBAL Ursiræ it's like haloboom, except with devmode

2009-06-15 22:54:14 CHAT GLOBAL ßØß o_o

2009-06-15 22:54:15 CHAT GLOBAL Freelancer™ Really...

2009-06-15 22:54:24 CHAT GLOBAL msalerno pfffft

2009-06-15 22:54:41 CHAT GLOBAL Freelancer™ How did you do it without RCON...

2009-06-15 22:54:47 CHAT GLOBAL Ursiræ unc = Untimate Noob Clan
2009-06-15 22:54:59 CHAT GLOBAL Ursiræ crash whoever we hate

2009-06-15 22:55:16 CHAT GLOBAL Freelancer™ That's really pretty childish.


So yea.

[Sabre]

I'd like to know where this guy can be found, cause I have a few servers I reallllly want crashed :tehlag:

On a Serious Note:
1) Have you tried banning him >.>
2) Did you take off rec0
3) did you try it on different servers to see if the dick was telling the truth
4) ??????????
5) PROFIT

[Cortexian]

I tried the command multiple different ways on my server myself and nothing happened, he must have done something different or simply taken credit for a run of the mill server glitch.

[Sabre]

I tried the command multiple different ways on my server myself and nothing happened, he must have done something different or simply taken credit for a run of the mill server glitch.

Mm that could be it, and to support that therory, I ran a search on xfire's clans if there was really a clan named Ultimate Noob Clan, only results for the acronym: http://www.xfire.com/clans/?process=search&sk=unc

and when searching for the full name: http://www.xfire.com/clans/?process=search&sk=Ultimate+Noob+Clan

Perhaps if we had more accounts of this happening on other dedi's, we could form an accurate assumption wither this is true or not.

[Masterz1337]

So you think you've found a exploit to take down servers, and your first instinct is to post how it's done?

[jcap]

Well that makes sense. What else would you do with it?

I would.

[Masterz1337]

I'd go to talk to people who know about this sort of stuff in private, rather than have a public discussion on how it can be done.

[Donut]

well we dont know if the core load command is what actually crashed it. its speculation at this point.

[tythespy]

time for some crashing fun.

[Masterz1337]

well we dont know if the core load command is what actually crashed it. its speculation at this point.

But you're throwing out ideas that some yahoo can go use to make the next Haloboom. You might as well discuss ways someone could potentially steal your car in front of a crook.

[StankBacon]

i just tried it in a few servers and only my client crashed.

[Kornman00]

If the core file (core.bin) wasn't present when you tried to test this, then I doubt the game continued running the load core code.

The person would have to have rcon access, and the server would have to have dev mode enabled in order for this to even work. This would of course crash the server (assuming a core, no matter when it was last saved, was present) as its fucking with the game state memory.

[.Wolf™]

time for some crashing fun.
Grow up.

[tythespy]

Your sever has been acting weird.

http://screenshot.xfire.com/screenshot/large/d2409d9485c905ea347fd2202fe67e403da81cd8.jpg (http://www.xfire.com/screenshots/tythespy/ss_file-d2409d9485c905ea347fd2202fe67e403da81cd8.jpg)

[Cortexian]

It does that sometimes... I don't know why, same with the random "Player has used to many names to add to the list :|" messages.


I'd go to talk to people who know about this sort of stuff in private, rather than have a public discussion on how it can be done.
You're also the guy that want's to release CMT SP2 on a version of Halo CE that's only good for people that pirated the game... Your opinions are pretty null and void at this point.

[sevlag]

Grow up.as shocking as it may be, i have to agree with you on that wolf, if you seriously just go around crashing servers for "the fun of it" then you need to grow up and move out of your mommies basement...

shit like this just proves people have nothing better to do than to crash servers for the hell of it, instead of doing something GOOD for the CE community, they decide to be a dick and do villiany because to them its "cooler"

grow up or get the hell out of here little kids, this is halo, not elmo's counting adventure


and thats my rant

[tythespy]

I don't know why, same with the random "Player has used to many names to add to the list :|" messages.

I always though that was just player's getting rejected by the sever.

[Masterz1337]

It does that sometimes... I don't know why, same with the random "Player has used to many names to add to the list :|" messages.


You're also the guy that want's to release CMT SP2 on a version of Halo CE that's only good for people that pirated the game... Your opinions are pretty null and void at this point.

And you're a guy that gloats about how he pirates things. Your opinions are pretty null and void at this point.

[Sel]

oh damn, not gonna lie, that was a pretty fuckin good comeback

[Cortexian]

And you're a guy that gloats about how he pirates things. Your opinions are pretty null and void at this point.
Thing is, I pirate things to try them out like demo's. If I like it I buy it, if not I uninstall it.

Sorry to burst your bubble. :saddowns:

[Con]

I thought the warning would get the message across, but apparently not:

ATTN: Freelancer
shut up already
get back on topic
-Con

[Cortexian]

I'm sorry that I'm not allowed to express my completely honest and serious statements on this forum, it's not my fault that you're all taking yourselves so seriously.

ATTN: Staff
shape the fuck up
you're all getting to serious about your jobs
- Freelancer

Anyhow, does anyone have any idea if there's some kind of exploit out there that causes all the players in a server to exception? If it wasn't core_load I'd like to know what it was so I can look into finding a fix for the problem. I'm fairly certain that it wasn't the "new" haloboom either, since that simply causes the server to crash and forces everyone to loose connetion (as opposed to getting an exception). If it is a devmode command, you could probably just HEX edit the command on haloceded.exe to something else so that the exploit wouldn't work.

[SnaFuBAR]

see my avatar.

[Phopojijo]

I'm sorry that I'm not allowed to express my completely honest and serious statements on this forum, it's not my fault that you're all taking yourselves so seriously.

ATTN: Staff
shape the fuck up
you're all getting to serious about your jobs
- Freelancer

Anyhow, does anyone have any idea if there's some kind of exploit out there that causes all the players in a server to exception? If it wasn't core_load I'd like to know what it was so I can look into finding a fix for the problem. I'm fairly certain that it wasn't the "new" haloboom either, since that simply causes the server to crash and forces everyone to loose connetion (as opposed to getting an exception). If it is a devmode command, you could probably just HEX edit the command on haloceded.exe to something else so that the exploit wouldn't work.Ghost is paying a lot of money per month for the site, so yes it is serious for him... and when shit gets back on track -- a lot more.

Also, you can't really blame us for telling you not to talk about breaking the law in a publically accessible and perminantly archived venue.

[Cortexian]

It's only breaking the law from a certain point of view /Obi-Wan

[p0lar_bear]

Lancer, we've been down this road a million times.

MODACITY.NET IS NEITHER THE TIME NOR THE PLACE TO DISCUSS/PROMOTE/BASH PIRACY, SAVE FOR ONE THREAD REGARDING THE PIRATE BAY'S COURT TRIAL. STOP POSTING ABOUT YOUR PIRACY HABITS AND OPINIONS OR GET OUT. HOW MANY TIMES ARE WE GOING TO DO THIS BEFORE YOU GET IT THROUGH YOUR HEAD?

And I would be infracting Snaf if I didn't agree with him 100% on this: stop posting stupid shit. Hell, I still wouldn't have infracted it if it was posted by Strider.

If your ego wants to dispute this further, you WILL be penalized. Same goes for anyone else here. Get the fuck back on topic.

[Cortexian]

Every time I post something that's on topic I get told to stop posting or someone immediately posts something off-topic.

Staff members, get the fuck back on topic or PM me... FFS!

[supersniper]

... just lock this thread, obviously is was the new way to use haloboom that crashed his server.

[CtrlAltDestroy]

jesus do i have to post another sign on your lawn to get the point across !!

[StankBacon]

owned.

[Cortexian]

... just lock this thread, obviously is was the new way to use haloboom that crashed his server.
Obviously it was not the new way to use haloboom that crashed my server. My server did not crash, all of the players in the server were forced to get an exception.

This thread is NOT over.

[Kornman00]

Obviously it was not the new way to use haloboom that crashed my server. My server did not crash, all of the players in the server were forced to get an exception.

This thread is NOT over.

If a staff member locks your topic, do not reopen it. (http://www.modacity.net/forums/announcement.php?f=2&a=13)
Until someone can reproduce it, this thread doesn't need to be active (could have been a race chance). No one should be making the server load a core file to begin with. If someone is, they have access to your rcon and you need to address them.

[Cortexian]

Until someone can reproduce it, this thread doesn't need to be active (could have been a race chance). No one should be making the server load a core file to begin with. If someone is, they have access to your rcon and you need to address them.
No one except me has access to ANY administration features on my Halo CE server. The RCON is a completely random combination of capitalized and uncapitalized letters, numbers, and characters so I doubt someone guessed it. I'm also the only person with access to SAPP and the Devicator, so this was obviously not my "user error" for not keeping track of my administrators/friends.

I reopened it because it DOES warrent discussion based on the above, if there's some kind of exploit that does this it needs to be fixed. What do you mean by "race chance"?

I'll lock it again now, but I don't see why it can't remain open.