Announcement

Collapse
No announcement yet.

Huge CoD4 Exploit - How to prevent it!

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Huge CoD4 Exploit - How to prevent it!

    A few community members have recently discovered a new CoD4 exploit, this exploit works on all previous patches of the game... this will need to be fixed for patch 1.7.

    What does the exploit do?
    Basically allows players to turn sv_cheats on, it will be set on for them only, but then they can use any cheat protected dvar.

    The only way to prevent this is by adding this line to your pb server config file: (pbsv.cfg found in CoD4/pb folder)

    Code:
    pb_sv_cvar aim_autoaim_debug IN 0
    pb_sv_cvar aim_autoaim_enabled IN 0
    pb_sv_cvar aim_automelee_debug IN 0
    pb_sv_cvar aim_lockon_debug IN 0
    pb_sv_cvar aim_slowdown_debug IN 0
    pb_sv_cvar bg_shock_lookControl IN 0
    pb_sv_cvar bg_shock_lookControl_maxpitchspeed IN 0
    pb_sv_cvar bg_shock_lookControl_maxyawspeed IN 0
    pb_sv_cvar bg_shock_sound IN 0
    pb_sv_cvar cg_airstrikeKillCamNearBlurStart IN 0
    pb_sv_cvar cg_constantSizeHeadIcons IN 0
    pb_sv_cvar cg_debug_overlay_viewport IN 0
    pb_sv_cvar cg_debugevents IN 0
    pb_sv_cvar cg_debugposition IN 0
    pb_sv_cvar cg_drawHealth IN 0
    pb_sv_cvar cg_drawThroughWalls IN 0
    pb_sv_cvar cg_gun_move_f IN 0
    pb_sv_cvar cg_gun_move_minspeed IN 0
    pb_sv_cvar cg_gun_move_r IN 0
    pb_sv_cvar cg_gun_move_rate IN 0
    pb_sv_cvar cg_gun_move_u IN 0
    pb_sv_cvar cg_gun_ofs_f IN 0
    pb_sv_cvar cg_gun_ofs_r IN 0
    pb_sv_cvar cg_gun_ofs_u IN 0
    pb_sv_cvar cg_gun_x IN 0
    pb_sv_cvar cg_gun_y IN 0
    pb_sv_cvar cg_gun_z IN 0
    pb_sv_cvar cg_heliKillCamNearBlurStart IN 0
    pb_sv_cvar cg_laserforceon IN 0
    pb_sv_cvar cg_thirdperson IN 0
    pb_sv_cvar ehDebugServer IN 0
    pb_sv_cvar fixedtime IN 0
    pb_sv_cvar fx_count IN 0
    pb_sv_cvar fx_debugBolt IN 0
    pb_sv_cvar fx_freeze IN 0
    pb_sv_cvar fx_mark_profile IN 0
    pb_sv_cvar fx_profile IN 0
    pb_sv_cvar g_compassshowenemies IN 0
    pb_sv_cvar g_debugBullets IN 0
    pb_sv_cvar g_debugDamage IN 0
    pb_sv_cvar g_debugLocDamage IN 0
    pb_sv_cvar inertiaAngle IN 0
    pb_sv_cvar inertiaDebug IN 0
    pb_sv_cvar mantle_debug IN 0
    pb_sv_cvar melee_debug IN 0
    pb_sv_cvar missileJavClimbCeilingDirect IN 0
    pb_sv_cvar pickupPrints IN 0
    pb_sv_cvar player_adsExitDelay IN 0
    pb_sv_cvar player_breath_fire_delay IN 0
    pb_sv_cvar player_dmgtimer_minScale IN 0
    pb_sv_cvar player_footstepsThreshhold IN 0
    pb_sv_cvar player_move_factor_on_torso IN 0
    pb_sv_cvar player_scopeExitOnDamage IN 0
    pb_sv_cvar player_sprintRechargePause IN 0
    pb_sv_cvar player_sustainAmmo IN 0
    pb_sv_cvar player_turnAnims IN 0
    pb_sv_cvar r_blur IN 0
    pb_sv_cvar r_brightness IN 0
    pb_sv_cvar r_dof_tweak IN 0
    pb_sv_cvar r_filmUseTweaks IN 0
    pb_sv_cvar r_fullbright IN 0
    pb_sv_cvar r_glowTweakBloomDesaturation IN 0
    pb_sv_cvar r_glowTweakEnable IN 0
    pb_sv_cvar r_glowUseTweaks IN 0
    pb_sv_cvar r_lockPvs IN 0
    pb_sv_cvar r_norefresh IN 0
    pb_sv_cvar r_portalWalkLimit IN 0
    pb_sv_cvar r_showLightGrid IN 0
    pb_sv_cvar r_showMissingLightGrid IN 0
    pb_sv_cvar r_showPortals IN 0
    pb_sv_cvar r_singleCell IN 0
    pb_sv_cvar r_skipPvs IN 0
    pb_sv_cvar r_sun_from_dvars IN 0
    pb_sv_cvar r_texFilterDisable IN 0
    pb_sv_cvar r_texFilterMipBias IN 0
    pb_sv_cvar r_zfar IN 0
    pb_sv_cvar ragdoll_debug IN 0
    pb_sv_cvar sc_showDebug IN 0
    pb_sv_cvar sc_showOverlay IN 0
    pb_sv_cvar sv_cheats IN 0
    pb_sv_cvar ui_allow_classchange IN 0
    pb_sv_cvar ui_allow_teamchange IN 0
    pb_sv_cvar ui_hud_hardcore IN 0
    pb_sv_cvar ui_showList IN 0
    pb_sv_cvar ui_uav_allies IN 0
    pb_sv_cvar ui_uav_axis IN 0
    pb_sv_cvar ui_uav_client IN 0
    pb_sv_cvar vehDebugClient IN 0
    pb_sv_cvar vehHelicopterInvertUpDown IN 0
    pb_sv_cvar vehHelicopterTiltFromFwdAndYaw IN 0
    pb_sv_cvar vehTextureScrollScale IN 0
    Then restart your server, and you would be protected from this exploit.

    I won't post how to do the exploit, because there are SO MANY servers that this exploit will work on, and having sv_cheats set to 0 in your server config does NOT prevent it, it needs to be in your PB config.

  • #2
    Re: Huge CoD4 Exploit - How to prevent it!

    Thank you for not explaining how to do the exploit.

    Comment


    • #3
      Re: Huge CoD4 Exploit - How to prevent it!

      yeah thanks

      Comment


      • #4
        Re: Huge CoD4 Exploit - How to prevent it!

        IW is now aware of this, and is looking into it.

        Comment


        • #5
          Re: Huge CoD4 Exploit - How to prevent it!

          This has been known for a while now... why is everyone freaking out? I've had this exploit fixed on my servers since the first month. :thumbsup:

          Comment


          • #6
            Re: Huge CoD4 Exploit - How to prevent it!

            anyone who knows the exploit in question would you mind pm ming me the info for the exploit so i can inform my clan leader and whatnot..of what to do with our server thx...

            Comment


            • #7
              Re: Huge CoD4 Exploit - How to prevent it!

              Originally posted by Hellsent View Post
              anyone who knows the exploit in question would you mind pm ming me the info for the exploit so i can inform my clan leader and whatnot..of what to do with our server thx...
              The first post in this thread tells what to do with the server...seems to just require adding a single line to the Punkbuster server config file.

              Comment


              • #8
                Re: Huge CoD4 Exploit - How to prevent it!

                Originally posted by Hellsent View Post
                anyone who knows the exploit in question would you mind pm ming me the info for the exploit so i can inform my clan leader and whatnot..of what to do with our server thx...
                Lol nothing suss here.. he also takes credit card numbers incase he finds one he will knows who's it is.

                Comment


                • #9
                  Re: Huge CoD4 Exploit - How to prevent it!

                  Hmm, after looking into it - that one line doesn't completly fix it, because pb only checks those commands once every so often, so players can toggle the cheat on then toggle on thirdperson then toggle the sv_cheats off - so pb will think they are playing legally, but they will be using thirdperson etc.

                  So you need to add a bunch of the cheat protected commands: lasers, showEnemyCompass, Thirdperson etc.

                  Comment


                  • #10
                    Re: Huge CoD4 Exploit - How to prevent it!

                    Updated with some of the 'main' cheat protected dvars, turns out the console command (the exploit) can toggle ANY cheat protected command, it does not need to be done via sv_cheats.

                    Comment


                    • #11
                      Re: Huge CoD4 Exploit - How to prevent it!

                      I suggest to stream to punksbusted with the AutoMBL

                      Comment


                      • #12
                        Re: Huge CoD4 Exploit - How to prevent it!

                        Full list added, cheers to redpin.

                        Comment


                        • #13
                          Re: Huge CoD4 Exploit - How to prevent it!

                          GV have updated there PB scripts:



                          and there has been word from 402 on the IW forums that this issue is being addressed and a fix will be released (hopefully asap, within a week)

                          Comment


                          • #14
                            Re: Huge CoD4 Exploit - How to prevent it!

                            So you just copy and paste those lines into the .cfg and restart the server yes?

                            Comment


                            • #15
                              Re: Huge CoD4 Exploit - How to prevent it!

                              Into the pbsv.cfg found in CoD4/pb folder... but if you run hardcore mode you would need to remove this line:
                              pb_sv_cvar ui_hud_hardcore IN 0

                              and you may need to remove these lines too, else UAV won't work when called in:
                              pb_sv_cvar ui_uav_allies IN 0
                              pb_sv_cvar ui_uav_axis IN 0
                              pb_sv_cvar ui_uav_client IN 0

                              Comment

                              Working...
                              X