Demon UK Bagman2 Server hacked

[<doh!>mEXX]

HI!

Since 3 nights the named server is a hackertarget,
burning safes, moneycollectiongpoints full of smoke
20 or more HMG points in enemy safe...
a buyproduct is that the server crashed very often
in the middle of the game ...thats sh1t !!

Another "new" thing is that i´m overflowing at every mapchange and have to reconnect .

isnt there a patch out to prevent the thing named above ?


Greetings


mEXX
----------------------------------
Pokemon Hardcore Series under:
http://dohkingpin.clanpages.com

[Mr Skiff]

Lo there m8y!

Sounds like some 12 year old pre-pubic acne covered swine has struck again (No offence to other 12 year olds out there )

Come and play on the WP servers m8, there much better, no hacking of servers

[[CGF] Farqueue]

No hacking yet unless you have been on the item spawning B&H server.

I hope Monkey Harris is on this one, cos it is only a matter of time.

[[ELE]Dr. Dre]

****, i ment to come n post sommit bout this

i thought u would need the demon rcon password to do this??

[jjaf.de]

Originally posted by <doh!>mEXX
Since 3 nights

I wonder what take them so long, i think these "hackers" are only script-kids that can execute a script they get from a friend but do not realize what the functionality is.

isnt there a patch out to prevent the thing named above ?

Accoding to my changelog there was a patch out on 2000-09-29, [BC] and AKL servers have been getting the update. Theres also another patch by TiCaL (2000-10-02) which just patches mod-dlls without logging the attempts.

It is just the old thing: getting lazy admins to apply whats there. When B&H was hacked i contacted the mod-author for offering support and even on forum, but i think he just ignores me, so i went out to do some unasked by admin but asked by players admin-jobs on B&H.

This thing is so simple to counter, theres no reason for it residing on servers any more!

current unpublished version is 2.4f (incl. a "rules"-var URL being displayed in gamespy and on joining), much work being done on speed-hack variants.

from http://jjaf.de/kingpin/admin/
ChangeLog

jjaf-admin (modified bw-admin 1.72)
kingpin@jjaf.de

1.72.speed 2000-09-29T01:26
-activated KP timescale hack-detection.
-disabled timescale-change by server so only client changes are detected.
-included special KP-speed kick-message.
-included according to license "modified.speed: kingpin@jjaf.de" in console-banner.

1.72/j-2.1 2000-09-29T22:16
-disabled "spawn" command (req'd by Truzenzuzex[BC])
-changed according to license "modified: kingpin@jjaf.de" in console-banner.

1.72/j-2.2 2000-09-29T01:20
-started disabling "precache" command.
-added logging of "spawn"-attempt (req'd by Truzenzuzex[BC])

1.72/j-2.3 2000-10-01T16:11
-changed speed-detection to exclude Q2-bots again due to unexplained reported client-crashing "overflow" (req'd by Truzenzuzex[BC])
use bw-admin.cfg: "botcheck = 0; botkick = 1"
-changed logging of "spawn"-attempt to include item (req'd by Truzenzuzex[BC])
-added bw-admin.cfg-value "speedlimit = 1.0"
-changed kick-message on speeding to include speedlimit.
-added bw-admin.cfg-value "speedban = 0" to ban speeders.
-added display of "speedlimit" and "speedban" on server startup.
-changed logging application-id

1.72/j-2.4 2000-10-07T20:20
-changed kicking/banning for speeding from botkick to normal Kick/Ban-functions.
-this includes giving a reason "speeding" for kick/ban.
-added custom kick-message in bwadmin.cfg "kickmsgprefix" that will be suffixed with server-var "rules" url.

TODO
-skin restriction to auth nicks
-see-through-detection

[[CGF] Farqueue]

Nice 1

[xe-cute]

i can N E V E R reconnect to demon!!!!!

[<doh!>mEXX]

@jaff
1)....so why they dont apply the patch ?
2)dont think that these kids just use skripts and
xe-cute them !
whats about fire on safe or 21hmgs in the other
saferoom ?? (its funny , but sh1t)
3)if scripts then u would see some action
in the message log, like *locker** joined nikkies
*locker* killed himself and that 1000 times ....
again...thats not so in that case !!!

Yesterday the server acted so bad that most of the
ppl get off !!

Dont know if just the server is bad installed or
it was anotha attack.....


cya mEXX

-------------------------------------------
say_team "http://dohkingpin.clanpages.com"



[Edited by <doh!>mEXX on 20-10-2000 at 08:04 AM]

[jjaf.de]

Originally posted by <doh!>mEXX
1)....so why they dont apply the patch ?

I will Truzenzuzex[BC] answer that for me:

Truzenzuzex[BC]:
Server admins from my experience are a lazy bunch. Set it up and forget about the server running on your LInux box at the college dorm. Naturally an unmaintained server is ****. Can you say KPDM1-5. Can you say stock KP? What's the point. This is a game to be enjoyed, you should enjoy the game and participate if you run a a server. It makes the community grow.

2)dont think that these kids just use skripts and
xe-cute them !
whats about fire on safe or 21hmgs in the other
saferoom ?? (its funny , but sh1t)

There are scripts for whole weapon-racks and stuff. But what i meant was, they know what to do to get this result, but they do not know what else they could do, going from there.

3)if scripts then u would see some action
in the message log, like *locker** joined nikkies
*locker* killed himself and that 1000 times ....
again...thats not so in that case !!!

Nope, not in this case until you use above admin of course. It will tell you who tried to spawn what and disallow it of course.

Yesterday the server acted so bad that most of the
ppl get off !!

If they are so greedy and can not stop it will get unplayable by blocking important places/routes or by slowing the server down.

Hey you can also do some good by this. Make the standard map a custom one, by doing some good, reasonable modifications to it, that do look nice (and i do not mean 20 HMGs at one place with weapon stay on).

Dont know if just the server is bad installed or
it was anotha attack.....

It is administered badly if still available. So if you know an admin tell them to do something and put up some custom maps too.