Remote logs

[ebay]

outdated info

 

[Snipesrock]

I've seen #8 before, today in fact. I wasn't sure exactly what it was, just that it wasn't good. Good to know all that.

 

[Fluxley]

Thanks for sharing this, i've caught a couple of guys using this info already.

 

[k4n30]

Basically ban anything with a ; in it, This has been apart of pyBEscanner for awhile and seems to cover most, if not all of the cases above

EDIT: Also anything with dwadern in it

 

[linkinx]

Keep in mind that scripters can make other people run this scripts, our server got attacked and everyone was running them, the logs were flooded with it.

 

[k4n30]

@linkinx - only in scripts.txt , the others cant be remote executed

 

[Hangender]

@linkinx - only in scripts.txt , the others cant be remote executed

Actually...you can remote exec a remote exec.

But currently none of the remote exec is doing it so just scan every log except scripts.txt

 

[Dick Cheney]

Thanks had this happen to me today.

 

[pamasepamase]

i can't use

 

[Sharkiller]

another

"remExField" = [,,";if (alive player) then { player setDamage 1;};"]

 

[OCNDayZ]

Basically ban anything with a ; in it, This has been apart of pyBEscanner for awhile and seems to cover most, if not all of the cases above

EDIT: Also anything with dwadern in it

You don't happen to know the obfuscated version do you? I remember seeing it, I could have sworn it was either on reddit or Hangender shared it somewhere.. I think it was %52..

Actually...you can remote exec a remote exec.

But currently none of the remote exec is doing it so just scan every log except scripts.txt

They are now.

 

[crustycharles]

Just a quick question in regards to #7, I experienced 3 kids on my server using this exact script.

"
if (true) then (usecInject
 
    select 0
    );"

I was lucky and caught them very quickly, is there an easy way to add this exact exploit to my remoteexec.txt filters?

 

[ebay]

.

 

[crustycharles]

^ some people will probably hate me for sharing this, but yes:

5 "if (true) then"
5 "(usecInject"

Beast, thanks.

 

[tay200k]

^ some people will probably hate me for sharing this, but yes:

5 "if (true) then"
5 "(usecInject"

Why would they???

 

[TheRighteous]

 - Value Restriction #12 "remExField" = [,<NULL-object>,"loc","JIPexec",[,,"per","execVM","ca\Modules\Functions\init.sqf"]]
- Value Restriction #25 "remExField" = [,<NULL-object>,"loc","JIPexec",[,,"per","execVM","ca\Modules\Functions\init.sqf"]]
21.04.2013

Probably not the right place to ask this but I caught this a while back and see nothing on it when I google it. Maybe someone else has some idea?

 

[ebay]

.