Suljettu

Developing application that limits getstatus request based on Q3 engine Game

The Quake 3 engine has problems to handle big queries allowing an

attacker to shutdown any game server based on this engine:

ERROR: Info_SetValueForKey: oversize infostring

In some of the vulnerable games is also possible to crash the server.

"I have released an universal patcher that limits the amount of handled

data in the queries from 1023 to 512 solving the problem in any game:

http://aluigi.altervista.org/patches/q3infofix.zip"

Using a malware script that floods the server with getstatus requests (aaaaaaaaa), you can take them down - especially Soldier of Fortune 2.

The patch doesnt work fully. When adding a mod to the game, it is still crashable.

This project is about creating an external application or similiar that limits the amount of getstatus queries, as the flooding of these works like a DoS-attack.

More info will be presented to the person that gets hired for the project.

Taidot:

Näytä lisää: getstatus, getstatus request, quake dos getstatus, soldier fortune getstatus, getstatus attack, application limits, getstatus dos attack, quake getstatus, vulnerable, soldier, patch, game server, game application, fortune, dos, dos game, server error application, application engine, problem presented, game error, gets, person games, request application, flooding attack, server based

About the Employer:
( 2 reviews ) Amsterdam, Netherlands

Projektin tunnus: #25166