[cod] COD4 players can enable cheats via cvars without RCON password

Jeffrey Veenhuis jeffroiscool at gmail.com
Thu Jun 12 15:26:14 EDT 2008


Lukasz Awiorko schreef:
> /rcon devmap mp_mapname
> ----- Original Message ----- From: "|T-OC|Morpheus|:.Web" 
> <morpheus at clantoc.org>
> To: <cod at icculus.org>
> Sent: Thursday, June 12, 2008 6:03 PM
> Subject: Re: [cod] COD4 players can enable cheats via cvars without RCON
> password
>
>
>> For almost 8 months, I've tried to set the sv_cheat var to 1, but even
>> without punkbuster, it has never worked. I wanted it to have the 
>> ability,
>> with the noclip, to follow the magic nades I wanted to work on. It is 
>> also
>> very useful for all strating concerns, but there's no "strat" 
>> gametype as
>> there was in cod2 (built into PAM mod if I'm not wrong).
>>
>> Does anyone know a (mini)mod that integrate some sort of strat mode ? I
>> did not find it in the PAM4, and found nothing the web (maybe I don't 
>> use
>> the right words)...
>>
>> Christopher Simmons wrote:
>>> I have created the mod, it is very basic.
>>>  check it out on
>>>  http://acm.umflint.edu/~chsimmon/cod4mods/
>>> <http://acm.umflint.edu/%7Echsimmon/cod4mods/>
>>>
>>> On Wed, Jun 11, 2008 at 9:29 PM, Tyson 
>>> <twisted at twistedgamingservice.com
>>> <mailto:twisted at twistedgamingservice.com>> wrote:
>>>
>>>     From what I understand as long as sv_cheat is at zero, they cannot
>>>     exploit
>>>     the cheat-protected cvars. Therefore, I would think that all you
>>>     would need
>>>     to do is continually set sv_cheat 0 once a second or so.
>>>
>>>     However, as I stated already Tony of Even Balance said they would
>>>     scan for
>>>     the cvar themselves and since they have, the ability to do some
>>> things
>>>     straight off their master servers without updates so we may not
>>>     see a client
>>>     or server update for them to stop this exploit.
>>>
>>>     I do see that ET of Escapted Turkey GSP contacted Even Balance as
>>>     was given
>>>     the same info as PunksBusted.com was.
>>>     http://www.escapedturkey.com/forums/viewtopic.php?f=50&t=5588
>>>     <http://www.escapedturkey.com/forums/viewtopic.php?f=50&t=5588>
>>>
>>>     Tyson
>>>     Twisted Gaming Service
>>>     http://www.twistedgamingservice.com
>>>     <http://www.twistedgamingservice.com/>
>>>
>>>
>>>
>>>     -----Original Message-----
>>>     From: Christopher Simmons [mailto:twinbcss at gmail.com
>>>     <mailto:twinbcss at gmail.com>]
>>>     Sent: Wednesday, June 11, 2008 5:47 PM
>>>     To: cod at icculus.org <mailto:cod at icculus.org>
>>>     Subject: Re: [cod] COD4 players can enable cheats via cvars
>>>     without RCON
>>>     password
>>>
>>>     The only other option I can come up with is to create a mod to fix
>>> the
>>>     problem
>>>
>>>     In the _callbacksetup.gsc file (maps/mp/gametypes), create a
>>>     thread that
>>>     runs as the user connects. Inside the tread create an infinite
>>>     loop that
>>>     continually changes the required dvars by using the following
>>>     function:
>>>
>>>     self SetClientDvars( "cg_drawhud", "0", "cg_draw2d", "0", ... );
>>>
>>>     more information on modding can be found at
>>>
>>>     http://www.infinityward.com/wiki/index.php?title=Main_Page
>>>
>>>     I will work on this mod to see if I can get it working. No
>>>     promises though.
>>>
>>>     On Wed, Jun 11, 2008 at 4:07 PM, Tyson
>>>     <twisted at twistedgamingservice.com
>>>     <mailto:twisted at twistedgamingservice.com>>
>>>     wrote:
>>>
>>>
>>>            Nope. It will take a patch from the Dev's.
>>>
>>>
>>>            Tyson
>>>            Twisted Gaming Service
>>>            Http://www.twistedgamingservice.com
>>>     <http://www.twistedgamingservice.com/>
>>>     <http://www.twistedgamingservice.com/>
>>>
>>>
>>>
>>>
>>>            -----Original Message-----
>>>
>>>            From: "Regissounet" <regissounet at free.fr
>>>     <mailto:regissounet at free.fr>>
>>>            To: cod at icculus.org <mailto:cod at icculus.org>
>>>
>>>            Sent: 6/11/08 10:16 AM
>>>            Subject: Re: [cod] COD4 players can enable cheats via cvars
>>>     without
>>>     RCON password
>>>
>>>
>>>            Hello,
>>>
>>>            The only solution to prevent this kind of cheat is to enable
>>>     Punkbuster? Is
>>>            there any other solution without it?
>>>
>>>            On Wednesday 11 June 2008, Geoff Goas wrote:
>>>
>>>            > Tyson, do you have a source that shows that the PB client
>>> was
>>>     updated?
>>>            > Evenbalance normally posts these releases to their 
>>> website.
>>>            >
>>>            > On Wed, Jun 11, 2008 at 8:59 AM, Tyson
>>>     <twisted at twistedgamingservice.com
>>>     <mailto:twisted at twistedgamingservice.com>>
>>>            >
>>>            > wrote:
>>>            > > Actually there were two in that thread relating to the
>>>     HUD that
>>>     would
>>>            > > kick "all" players in hardcore servers.
>>>            > >
>>>            > > If you are running hardcore server, do not check 
>>> these two
>>>     because they
>>>            > > are dynamically turned on and off.
>>>            > >
>>>            > > pb_sv_cvar ui_hud_hardcore IN 0
>>>            > > pb_sv_cvar ui_uav_allies IN 0
>>>            > >
>>>            > > Remove them.
>>>            > >
>>>            > > In addition, some of you might have notice the COD4
>>>     Punk Buster
>>>     client
>>>            > > updated last night, reason is that Punk Buster software
>>>     is now
>>>     checking
>>>            > > for the sv_cheat cvar client side so you should not
>>>     have to put
>>>     that list
>>>            > > in your pbsv.cfg anymore but it does not hurt to keep
>>>     it around.
>>>            > >
>>>            > > Tyson
>>>            > > Twisted Gaming Service
>>>            > > http://www.twistedgamingservice.com
>>>     <http://www.twistedgamingservice.com/>
>>>     <http://www.twistedgamingservice.com/>
>>>            > >
>>>            > >
>>>            > >
>>>            > > -----Original Message-----
>>>            > > From: Stephan De Jonge
>>>     [mailto:stephanovitsj at hotmail.com 
>>> <mailto:stephanovitsj at hotmail.com>]
>>>            > > Sent: Wednesday, June 11, 2008 2:28 AM
>>>            > > To: cod at icculus.org <mailto:cod at icculus.org>
>>>            > > Subject: RE: [cod] COD4 players can enable cheats via
>>> cvars
>>>     without RCON
>>>            > > password
>>>            > >
>>>            > > Please check this thread:
>>>            > >
>>>            > >
>>>     http://www.infinityward.com/community/forum/index.php?topic=42769.0
>>>            > >
>>>            > > All necassary cvars are included, gl hf!
>>>            > >
>>>            > > Stephan
>>>            > >
>>>            > >
>>>            > >
>>>            > >
>>>            > >
>>>            > > ________________________________
>>>            > >
>>>            > > > From: info at ronny-schedel.de
>>>     <mailto:info at ronny-schedel.de>
>>>            > > > To: cod at icculus.org <mailto:cod at icculus.org>
>>>            > > > Date: Wed, 11 Jun 2008 09:01:53 +0200
>>>            > > > Subject: [cod] COD4 players can enable cheats via 
>>> cvars
>>>     without RCON
>>>            > >
>>>            > > password
>>>            > >
>>>            > > > Hello,
>>>            > > >
>>>            > > > players can change some cvars to enable built in 
>>> cheats
>>>     without RCON
>>>            > >
>>>            > > access.
>>>            > >
>>>            > > > To prevent this add the following line to the 
>>> pbsv.cfg:
>>>            > > >
>>>            > > > pb_sv_cvar sv_cheats IN 0
>>>            > > >
>>>            > > > Restart the pb server with pb_sv_restart.
>>>            > > >
>>>            > > > The long story behind this in German:
>>>            > > >
>>>     http://cod.esgnserver2.de/?w=news&action=detail&id=5226&t=1
>>>     <http://cod.esgnserver2.de/?w=news&action=detail&id=5226&t=1>
>>>            > > >
>>>            > > > Best regards
>>>            > > >
>>>            > > > Ronny
>>>            > > >
>>>            > > >
>>>            > > > ---
>>>            > > > To unsubscribe, send a blank email to
>>>     cod-unsubscribe at icculus.org <mailto:cod-unsubscribe at icculus.org>
>>>            > > > Mailing list archives:
>>>     http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?38
>>>            > >
>>>            > > ---
>>>            > > To unsubscribe, send a blank email to
>>>     cod-unsubscribe at icculus.org <mailto:cod-unsubscribe at icculus.org>
>>>            > > Mailing list archives:
>>>     http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?38
>>>
>>>            ---
>>>            To unsubscribe, send a blank email to
>>>     cod-unsubscribe at icculus.org <mailto:cod-unsubscribe at icculus.org>
>>>            Mailing list archives:
>>>     http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?38
>>>
>>>
>>>
>>>
>>>            ---
>>>            To unsubscribe, send a blank email to
>>>     cod-unsubscribe at icculus.org <mailto:cod-unsubscribe at icculus.org>
>>>            Mailing list archives:
>>>     http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?38
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>     ---
>>>     To unsubscribe, send a blank email to cod-unsubscribe at icculus.org
>>>     <mailto:cod-unsubscribe at icculus.org>
>>>     Mailing list archives: 
>>> http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?38
>>>
>>>
>>>
>>
>> ---
>> To unsubscribe, send a blank email to cod-unsubscribe at icculus.org
>> Mailing list archives: http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?38
>>
>>
>
>
> ---
> To unsubscribe, send a blank email to cod-unsubscribe at icculus.org
> Mailing list archives: http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?38
>
>
>
devmap mp_name enables cheats



More information about the Cod mailing list