It's a server plugin, not a client plugin. It's using ClientCommand + an exploit to execute "jpeg", then INetChannel::RequestFile to upload it.
On Mon, Sep 10, 2012 at 8:08 PM, Bruno Garcia <garcia.bru...@gmail.com> wrote: > This is obviously not using the "screenshot" command, rather the screenshot > client function call. > As well as the INetChannel SendFile function to upload the file. > > I wouldn't expect VALVe to update this function, this also used to upload > spray tags to the server, and it has a very secure extension block that > won't let you upload almost anything (Except for screenshots in this case) > > @Anakin: If I were you, I would find a way to get the stack of loaded DLLs > to Hl2.exe and print them on a txt on the client, and then upload that to a > server, that way you could have a handful of cheat's DLLs and block em by > default if they are detected on the client. Anything if possible, of course. > > Take care. > > On Mon, Sep 10, 2012 at 3:29 PM, ics <i...@ics-base.net> wrote: > >> Screenshots are saved to tf/resource and also the player will have the >> shots taken from his/her screen on the same location on his/her pc. >> >> -ics >> >> 10.9.2012 21:09, Thomas K kirjoitti: >> >> In what folder the screenshots are uploaded to the server? >>> >>> -----Ursprüngliche Nachricht----- From: Ejziponken - >>> Sent: Monday, September 10, 2012 7:35 PM >>> To: hlds_linux@list.valvesoftware.**com<hlds_linux@list.valvesoftware.com> >>> Subject: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No spread) >>> detection plugin >>> >>> >>> lol need this for CS 1.6 and CSGO.. :P >>> >>> Date: Mon, 10 Sep 2012 13:19:42 -0400 >>>> From: epichat...@litewin.net >>>> To: hlds_linux@list.valvesoftware.**com<hlds_linux@list.valvesoftware.com> >>>> Subject: Re: [hlds_linux] TriggerBot/Prediction hack(Crit hack/No >>>> spread) detection plugin >>>> >>>> Would be nice if valve added a legitimate way for server admins to grab >>>> screenshots if they are going to patch this exploit. Considering the >>>> screenshots only take an in-game image the only people to have reasons >>>> against it are hackers themselves. >>>> >>>> --EHG >>>> >>>> On 9/10/2012 1:04 PM, Ryan Stecker wrote: >>>> > There's clearly a lack of understanding in this thread. >>>> > >>>> > The plugin simply executes 'jpeg' or 'screenshot' on the client (which >>>> > is >>>> > the exploit everyone is talking about), and uses the client's > >>>> INetChannel >>>> > (an interface in the source engine) to have the server request the file >>>> > from the client. >>>> > >>>> > It can't take a screenshot of your desktop, or steam chats, or anything >>>> > else other than the game's screen. The jpeg command has only ever taken >>>> > screenshots of your game. >>>> > >>>> > Really there's two sides of the coin on the issue of making clients > >>>> execute >>>> > commands. >>>> > >>>> > On one side, malicious server operators could do bad things, and on the >>>> > other, it made it possible for an anticheat to get client screenshots. >>>> > >>>> > I would have loved it if this plugin could have survived longer, but it >>>> > seems like the command execution method is being fixed. I'd kill to >>>> get > a >>>> > proper anticheat in source, and not the flawed disaster that is VAC. >>>> > >>>> > On Mon, Sep 10, 2012 at 11:58 AM, ics <i...@ics-base.net> wrote: >>>> > >>>> >> http://tftrue.redline-**utilit**ies.net/anakinac.html<http://utilities.net/anakinac.html> >>>> <http://**tftrue.redline-utilities.net/**anakinac.html<http://tftrue.redline-utilities.net/anakinac.html> >>>> > >>>> >> >>>> >> -ics >>>> >> >>>> >> 10.9.2012 19:52, Cameron Munroe kirjoitti: >>>> >> >>>> >> So really it just takes a screen shot of whats on their screen and >>>> >> then >>>> >>> uploads it to the game server / FTP? and then at a later time you >>>> look >>>> >>> through them and see if someone had a wall hack on. Is there >>>> anything >>> else >>>> >>> that it can detect as really a screen shot isn't useful in most >>>> other >>> hacks. >>>> >>> >>>> >>> On 9/10/2012 9:49 AM, ics wrote: >>>> >>> >>>> >>>> You need to check the screenshots yourself that it picks. Makes one >>>> >>>> once >>>> >>>> in an hour. >>>> >>>> >>>> >>>> PS: cl_allowupload 0 doesn't block uploading the shot. This plugin >>>> is >>>> >>>> simply awesome tool for every server owner that wants to catch >>>> >>>> wallhackers >>>> >>>> and such. >>>> >>>> >>>> >>>> -ics >>>> >>>> >>>> >>>> 10.9.2012 19:46, Cameron Munroe kirjoitti: >>>> >>>> >>>> >>>>> Asher? Can you give us an example, or some info on the subject. >>>> >>>>> >>>> >>>>> On 9/10/2012 9:31 AM, Drogen Viech wrote: >>>> >>>>> >>>> >>>>>> I assume you have to go through all of them on your server, the no >>>> >>>>>> spread and trigger bot detection is fully automatic, other >>>>>> >>>> heuristic >>>> >>>>>> detections are printed to your console >>>> >>>>>> >>>> >>>>>> 2012/9/10 Cameron Munroe <cmun...@cameronmunroe.com>: >>>> >>>>>> >>>> >>>>>>> No, I mean how would you use this to detect if someone is >>>> >>>>>>> cheating? >>>> >>>>>>> >>>> >>>>>>> >>>> >>>>>>> On 9/10/2012 9:23 AM, Drogen Viech wrote: >>>> >>>>>>> >>>> >>>>>>>> It takes a screenshot randomly, only anakin knows when (he said >>>> >>>>>>>> every >>>> >>>>>>>> 10 or so minutes) >>>> >>>>>>>> He's using some really fucked up kind of exploit - not even the >>>> >>>>>>>> following config will prevent it from taking screenshots: >>>> >>>>>>>> >>>> >>>>>>>> http://pastebin.com/raw.php?i=****Xr39hrys<http://pastebin.com/raw.php?i=**Xr39hrys> >>>> <http://pastebin.**com/raw.php?i=Xr39hrys<http://pastebin.com/raw.php?i=Xr39hrys> >>>> > >>>> >>>>>>>> >>>> >>>>>>>> 2012/9/10 Cameron Munroe <cmun...@cameronmunroe.com>: >>>> >>>>>>>> >>>> >>>>>>>>> So how does this work? >>>> >>>>>>>>> >>>> >>>>>>>>> It takes a snapshot every X minutes and then you have to go >>>> >>>>>>>>> through >>>> >>>>>>>>> them? >>>> >>>>>>>>> >>>> >>>>>>>>> It takes a snapshot when someone is cheating? >>>> >>>>>>>>> >>>> >>>>>>>>> It slows down the cheaters computer by making them take >>>> >>>>>>>>> 100000000000000000000000000000****0000 snapshots a sec? >>>> >>>>>>>>> >>>> >>>>>>>>> >>>> >>>>>>>>> >>>> >>>>>>>>> ______________________________****_________________ >>>> >>>>>>>>> To unsubscribe, edit your list preferences, or view the list >>>> >>>>>>>>> archives, >>>> >>>>>>>>> please visit: >>>> >>>>>>>>> https://list.valvesoftware.****com/cgi-bin/mailman/listinfo/** >>>> ** >>>> >>>>>>>>> hlds_linux<https://list.**valvesoftware.com/cgi-bin/** >>>> mailman/listinfo/hlds_linux<https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux> >>>> > >>>> >>>>>>>>> >>>> >>>>>>>> ______________________________****_________________ >>>> >>>>>>>> To unsubscribe, edit your list preferences, or view the list >>>> >>>>>>>> archives, >>>> >>>>>>>> please visit: >>>> >>>>>>>> https://list.valvesoftware.****com/cgi-bin/mailman/listinfo/*** >>>> * >>>> >>>>>>>> hlds_linux<https://list.**valvesoftware.com/cgi-bin/** >>>> mailman/listinfo/hlds_linux<https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux> >>>> > >>>> >>>>>>>> >>>> >>>>>>> >>>> >>>>>>> ______________________________****_________________ >>>> >>>>>>> To unsubscribe, edit your list preferences, or view the list >>>> >>>>>>> archives, >>>> >>>>>>> please visit: >>>> >>>>>>> https://list.valvesoftware.****com/cgi-bin/mailman/listinfo/**** >>>> >>>>>>> hlds_linux<https://list.**valvesoftware.com/cgi-bin/** >>>> mailman/listinfo/hlds_linux<https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux> >>>> > >>>> >>>>>>> >>>> >>>>>> ______________________________****_________________ >>>> >>>>>> To unsubscribe, edit your list preferences, or view the list >>>> >>>>>> archives, >>>> >>>>>> please visit: >>>> >>>>>> https://list.valvesoftware.****com/cgi-bin/mailman/listinfo/*** >>>> *hlds_linux<https://list.**valvesoftware.com/cgi-bin/** >>>> mailman/listinfo/hlds_linux<https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux> >>>> > >>>> >>>>>> >>>> >>>>> >>>> >>>>> ______________________________****_________________ >>>> >>>>> To unsubscribe, edit your list preferences, or view the list >>>>> >>>> archives, >>>> >>>>> please visit: >>>> >>>>> https://list.valvesoftware.****com/cgi-bin/mailman/listinfo/*** >>>> *hlds_linux<https://list.**valvesoftware.com/cgi-bin/** >>>> mailman/listinfo/hlds_linux<https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux> >>>> > >>>> >>>>> >>>> >>>> >>>> >>>> ______________________________****_________________ >>>> >>>> To unsubscribe, edit your list preferences, or view the list >>>> >>>> archives, >>>> >>>> please visit: >>>> >>>> https://list.valvesoftware.****com/cgi-bin/mailman/listinfo/*** >>>> *hlds_linux<https://list.**valvesoftware.com/cgi-bin/** >>>> mailman/listinfo/hlds_linux<https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux> >>>> > >>>> >>>> >>>> >>> >>>> >>> ______________________________****_________________ >>>> >>> To unsubscribe, edit your list preferences, or view the list >>>> archives, >>>> >>> please visit: >>>> >>> https://list.valvesoftware.****com/cgi-bin/mailman/listinfo/*** >>>> *hlds_linux<https://list.**valvesoftware.com/cgi-bin/** >>>> mailman/listinfo/hlds_linux<https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux> >>>> > >>>> >>> >>>> >> >>>> >> ______________________________****_________________ >>>> >> To unsubscribe, edit your list preferences, or view the list archives, >>>> >> please visit: >>>> >> https://list.valvesoftware.****com/cgi-bin/mailman/listinfo/*** >>>> *hlds_linux<https://list.**valvesoftware.com/cgi-bin/** >>>> mailman/listinfo/hlds_linux<https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux> >>>> > >>>> >> >>>> > ______________________________**_________________ >>>> > To unsubscribe, edit your list preferences, or view the list archives, >>>> > please visit: >>>> > https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**hlds_linux<https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux> >>>> >>>> >>>> ______________________________**_________________ >>>> To unsubscribe, edit your list preferences, or view the list archives, >>>> please visit: >>>> https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**hlds_linux<https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux> >>>> >>> >>> ______________________________**_________________ >>> To unsubscribe, edit your list preferences, or view the list archives, >>> please visit: >>> https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**hlds_linux<https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux> >>> >>> ______________________________**_________________ >>> To unsubscribe, edit your list preferences, or view the list archives, >>> please visit: >>> https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**hlds_linux<https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux> >>> >> >> >> ______________________________**_________________ >> To unsubscribe, edit your list preferences, or view the list archives, >> please visit: >> https://list.valvesoftware.**com/cgi-bin/mailman/listinfo/**hlds_linux<https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux> >> > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list archives, please > visit: > https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux
