|
|
DoD Block Exploits
- Version 4.0
- 08.13.2008
- original: FireStorm
- updates: diamond-optic
IMPORTANT INFORMATION:
[PHP]
** IF UPDATING FROM A 2.x VERSION **
..with the 3.x+ versions, a lot of changes have been made,
so therefor you should redo any customization to CVAR values
that you had made with the previous 2.x versions and you will
also need to use the new .ini file as well[/PHP]
Credits:
[PHP]
- FireStorm: original DoD Block Exploits (v1.3)
- Gray Death: spectator fix
- Anthrax & DarkSnow: basis of setinfo check
- TatsuSaisei: help on the logging method & lots of SQL help
- ucubed: decals thru walls client cvar
- WARDOG: voice chat name spoofing exploit
- VEN: error logging
- Vet(3TT3V): dod_falaise crash fix
- Ramono: func_rotating fix
- AMXBans: Web front-end install script format[/PHP]
Information:
[PHP]
Contains the following blocks/detection/fixes/etc:
- fullupdate command block
* blocks a command that can be used as an 'exploit' in many plugins
* can also prevent an attempt to flood the server
- pistol zoom block
* blocks the exploit/bug where clients can zoom in with their pistol,
at least most of the time, still happens on a rare occasion
- spectator duck bug fix
* fix for the bug where sometimes when you die crouched, you have to
press crouch again afterwards to get out of the spectator 'option'
mode and whatnot
- decals thru walls
* theres a client cvar that can be set to allow players to see decals
(as in blood, bullet marks, explosions, etc) thru walls. This will
lock that cvar at the default value.
- dod_falaise crash fix
* fixes a known bug with windows servers where clients are able to
intentionally/accidently crash the server while on the map dod_falaise.
- func_rotating fix
* fixes a bug where func_rotating entities stop rotating after a while
- third-person view fix
* fixes a bug on player connect that allows players to be in
third-person view, which allows you to easily see around corners
- connecting client team fix
* connecting clients should now show as spectators instead
of appearing on a team
- end round kills
* stops players from getting kills after a round ends
- hlss block
* stops the usage of HLSS or other various music players
- steam id pending
* checks a clients steam id when they join, if it returns a value of
STEAM_ID_PENDING, it waits 60 seconds and checks the steam id again,
if the steam id still hasnt been auth'd it triggers this detection
- setinfo cheat traces
* scans a clients setinfo data when they join. Some known cheats
add specific traceable keys to a players setinfo when they run them.
a detection doesnt mean 100% that they are cheating, but the chances
are likely that they are. it also means that they at the very least
used the specific cheat in the past and didnt clean up after it
- spectator killing
* blocks & detects when clients attempt to use the exploit that will
allow them to be a 'spectator' and still kill people.
* this is fixed according to the dod change log from 08.24.05, but you
can still detect when a player attempts to use this exploit
- white player model
* blocks & detects when clients attempt to use the exploit that
makes their player model all white
- undeployed mg reload
* blocks & detects when clients attempt an exploit that will
allow them to reload an MG without having to deploy it first
- respawn timer bypass
* blocks & detects when clients try to bypass the respawn delay
- class limit bypass / white model
* there's a way to use the VGUI class selection menu to gain access
to a class that is full/turned off (mainly axis sniper)
* a player using this exploit also spawns with a white player model
- voice chat name spoofing
* clients can abuse certain characters to hide who they are, or to
spoof their name as someone else on the server while using voice chat.
* this block will stop clients from using voice chat if their name is a
single illegal character, or if it contains more then the cvar value.[/PHP]
CVARs (amxx.cfg):
[PHP]/////////////////////////////////////////
dod_blockexploits_adminflag "c" // Sets the admin level used by the plugin
/////////////////////////////////////////
// Warning Message
dod_blockexploits_warnmsg "...Exploits/Cheats/Bugs are not welcome here!"
dod_blockexploits_warnwho "2" // Who get warned
// 0 = nobody gets warned
// 1 = guilty client only
// 2 = guilty client & admins
// 3 = admins only
// 4 = all clients
/////////////////////////////////////////
// AMXBans
dod_blockexploits_amxbans "0" // Use AMXBans
// 0 = off
// 1 = on
// 2 = on, alternate syntax
/////////////////////////////////////////
// Join Message
dod_blockexploits_joinmsg "1" // Join Message Shown To Connecting Players
// 0 = off
// 1 = console
// 2 = chat
/////////////////////////////////////////
// Third Person View Block
dod_blockexploits_thirdperson "1" // Third Person View Setting
// 0 = Disable Blocking
// 1 = Enable Blocking
/////////////////////////////////////////
// End Round Kills Block
dod_blockexploits_endroundkill "0" // End Round Kills Setting
// 0 = Disable Blocking
// 1 = Enable Blocking
/////////////////////////////////////////
// HLSS Block CVARs
dod_blockexploits_hlss "1" // HLSS Block Setting
// 0 = Disable Blocking
// 1 = Enable Blocking
// HLSS Block Message
/dod_blockexploits_hlss_msg "** PLAYING MUSIC HAS BEEN DISABLED! **"
/////////////////////////////////////////
// Steam ID Pending CVARs
dod_blockexploits_idpending "1" // Steam ID Pending action
// 0 = do nothing
// 1 = show warning msg
// 2 = kick
dod_blockexploits_idpending_log "1" // Log Steam ID Pending detections
// 0 = off
// 1 = on
/////////////////////////////////////////
// Setinfo Traces CVARs
dod_blockexploits_setinfo "3" // Setinfo Traces action
// 0 = do nothing
// 1 = show warning msg
// 2 = kick
// 3 = ban
dod_blockexploits_setinfo_log "1" // Log Setinfo Traces detections
// 0 = off
// 1 = on
dod_blockexploits_setinfo_ban "180" // Setinfo Traces ban time in minutes (if set to ban)
/////////////////////////////////////////
// Spectator Killing CVARs
dod_blockexploits_speckilling "3" // Spectator Killing action
// 0 = do nothing
// 1 = silently block
// 2 = block with warning msg
// 3 = kick
// 4 = ban
dod_blockexploits_speckilling_log "1" // Log Spectator Killing detections
// 0 = off
// 1 = on
dod_blockexploits_speckilling_ban "60" // Spectator Killing ban time in minutes (if set to ban)
/////////////////////////////////////////
// White Player Model CVARs
dod_blockexploits_whitemodel "4" // White Player Model action
// 0 = do nothing
// 1 = silently block
// 2 = block with warning msg
// 3 = kick
// 4 = ban
dod_blockexploits_whitemodel_log "1" // Log White Player Model detections
// 0 = off
// 1 = on
dod_blockexploits_whitemodel_ban "120" // White Player Model ban time in minutes (if set to ban)
/////////////////////////////////////////
// Non-Deployed MG Reload CVARs
dod_blockexploits_mgreload "1" // Non-Deployed MG Reload action
// 0 = do nothing
// 1 = silently block
// 2 = block with warning msg
// 3 = kick
// 4 = ban
dod_blockexploits_mgreload_log "1" // Log Non-Deployed MG Reload detections
// 0 = off
// 1 = on
dod_blockexploits_mgreload_ban "60" // Non-Deployed MG Reload ban time in minutes (if set to ban)
/////////////////////////////////////////
// Respawn Timer Bypass CVARs
dod_blockexploits_respawntimer "0" // Respawn Timer Bypass action
// 0 = do nothing
// 1 = silently block
// 2 = block with warning msg
// 3 = kick
// 4 = ban
dod_blockexploits_respawntimer_delay "15" // Respawn Timer Bypass delay (in seconds)
// This controls the amount of time
// before the client can rejoin a team.
// 15seconds is the default dod spawn time
// but you might want to increase it to
// make it more of a punishment for trying.
dod_blockexploits_respawntimer_log "0" // Log Respawn Timer Bypass detections
// 0 = off
// 1 = on
dod_blockexploits_respawntimer_ban "10" // Respawn Timer Bypass ban time in minutes (if set to ban)
/////////////////////////////////////////
// Class Limit Bypass / White Player Model CVARs
dod_blockexploits_limitbypass "4" // Class limit bypass / white model action
// 0 = do nothing
// 1 = silently block
// 2 = block with warning msg
// 3 = kick
// 4 = ban
dod_blockexploits_limitbypass_log "1" // Log Class limit bypass / white model detections
// 0 = off
// 1 = on
dod_blockexploits_limitbypass_ban "120" // Class limit bypass / white model ban time in minutes (if set to ban)
/////////////////////////////////////////
// Voice Chat Name Spoofing
dod_blockexploits_micspoof "1" // Voice Chat Name Spoofing action
// 0 = do nothing
// 1 = block silently
// 2 = block with warning msg
// 3 = kick
// 4 = ban
dod_blockexploits_micspoof_log "1" // Log Voice Chat Name Spoofing detections
// 0 = off
// 1 = on
dod_blockexploits_micspoof_ban "60" // Voice Chat Name Spoofing ban time in minutes (if set to ban)
dod_blockexploits_micspoof_num "2" // Number of allowed illegal characters
[/PHP]
Commands:
[PHP]
dod_blockexploits_info - This console command will print out
some information & stats about the
the plugin on the current server.
- dod_blockexploits_adminflag CVAR also
controls the level needed to use this.[/PHP]
Installation:
[PHP]
- you should put this close to the top of your plugins.ini file, such as
putting it underneath all the default plugins but before third-party
plugins works very well. Otherwise some third-party plugins might hook
something before this plugin gets to block it.
- Put the "dod_blockexploits.ini" file in "../amxmodx/configs/"[/PHP]
Extra:
[PHP]
- Logs will be created daily in: addons/amxmodx/logs/dod_blockexploits/
- If you have a previous version installed on your server already,
I highly recommend rebooting your server for the sake of CVAR changes.[/PHP]
SQL Information:
[PHP]
- The SQL Version allows you to save all logged detections and
actions to a MySQL database for viewing via the web front-end.
- To install the web front-end, upload the web files to your
webserver. Then browse to the /install/install.php file and
follow the install script to setup the front-end.
- To enable the SQL code, run the dod_blockexploits_sql.amxx
You must have the database setup before the SQL version of
the plugin will work properly.
SQL CVARs:
dod_blockexploits_sql_host "localhost" //Database Host/IP
dod_blockexploits_sql_port "3306" //Database Port
dod_blockexploits_sql_db "database" //Database Name
dod_blockexploits_sql_user "username" //Database Username
dod_blockexploits_sql_pass "password" //Database User Password
dod_blockexploits_sql_logged "exp_logged" //Table Name For Logged Detections
dod_blockexploits_sql_servers "exp_servers" //Table Name For Servers[/PHP]</DIV>
Change Log:
[PHP]
- 12.26.06 - Version 1.4
added public tracking cvar
replaced some if statements with switches
fixed mistake in respawn timer handling
cleaned up code a bit
- 05.28.07 - Version 2.0
Rewrote almost everything...
Added fix for spectator duck bug
Added fix for connecting players showing up on a team
Added check for cheat traces in setinfo lines
Added Steam ID Pending check
Added FullUpdate block
Logs are now daily and in their own folder
- 06.04.07 - Version 2.1
Fixed banning function.. stupid me :P
- 08.07.07 - Version 2.2
Third Person View block actually works now
Added block for seeing decals thru walls
Added block class limit bypass (and white model)
Added control over who will see the warning msg
- 09.23.07 - Version 2.3
Added CVAR to control third-person view block
Removed detection for decals thru walls (now it just blocks)
Now using an INI file to set the detection names
Removed some junk left over from previous versions
- 11.06.07 - Version 2.4
Updated INI file * important *
Removed the pointless 'fullupdate' logging
Removed 'fullupdate' block console msg (showed when recording demos)
Enhanced INI file checking & error logging
Removed some old unused code
Reduced some msg sizes due to words being cut off
Added compiler define for new amxx 1.8.0+ log title format
- 11.27.07 - Version 2.5 (non-public release)
Updated INI file * important *
Fixed a mistake in one of the setinfo traces
- 03.09.08 - Version 3.0 Alpha Final
Total Plugin Re-Write
- 03.10.08 - Version 3.0 Beta 1
Public Beta Released
- 03.31.08 - Version 3.0
Fixed using wrong variable in public tracking cvar
White Model detection now checks if DoD Mortar Class is enabled
Added WIN32 dod_falaise crash fix
- 05.06.08 - Version 3.1
Improved handling method
Optimized some variables
Added ability to stop kills after round ends
Added Linux func_rotating fix
Added more info to dod_blockexploits_info command
Vault data for blocked exploits
Days of protection should now be accurate when maps dont change for over 24hrs
Changed some variables to statics
Fixed some error messages
Added alternate syntax value to amxbans cvar
Added 'dod_blockexploits_joinmsg' CVAR to control join msg display
- SQL Version
Checks for updated version
Added update info to dod_blockexploits_info printout
- 08.13.08 - Version 4.0
Changed version readout on dod_blockexploits_info command
Removed old debug server_print from ini version autoupdate
Fixed a chance of logging wrong current compatible ini version on update
Added ini file version to dod_blockexploits_info command
Added 'dod_blockexploits_reset' command to reset stored vault data
Reworked the way handling/logging is done (better compatibility for sql version)
Slight change to kick/ban chat messages
Plugin will now still work correctly when the INI file isnt found
Fixed join message
Fixed pistol zoom block not working with scoped fg42
Fixed bug in false respawn timer bypass detection on first team join
Added HLSS block
Now checks for plugins that are already included in DoD Block Exploits
* Connecting Team Fix
- SQL Version
Changed purpose of SQL version
Created web front-end with install script[/PHP]
** this is a CLOSED SOURCE plugin, as approved by bailopan.. there is no sma available for public download.. so technically you run this plugin at your own risk **
download the zip file attachment and inside you will find seperate folders for different AMXX versions, use the *.amxx that corresponds to the AMXX version you are running.... but be warned this is not tested on older versions of AMXX, so no guarantee that any previous versions work fully...
** also note that because the way i have the plugin files setup now, I can no longer upload to a web compiler for older versions of AMXX, so i must compile the plugin locally. Therefor if you need it for a specific version of AMXX not already available please request it and I will make an effort to get a copy of that version so I can attempt to compile it for you **
Download Mirror: http://www.avamods.com/download.php?view.164 |
本帖子中包含更多资源
您需要 登录 才可以下载或查看，没有账号？注个册吧
×
|
IP卡
狗仔卡
发表于 2008-9-24 22:26:55
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
显身卡