November 26 2024 08:32:07
Navigation
· Home
· Articles
· Downloads
· FAQ
· Discussion Forum
· Web Links
· News Categories
· Contact Me
· Photo Gallery
· Search
· Gameservers
Languages
Users Online
· Guests Online: 56

· Members Online: 0

· Total Members: 1,134
· Newest Member: Brody
Teamspeak 3
Last Seen Users
· hackepter10:02:19
· GONZO16:08:44
· Intruder16:35:27
· Sully 1 day
· desintegrator 2 days
· WEZ 2 days
· Homi 3 days
· The ACE 4 days
· xhc 1 week
· dRgiGGLeZ 1 week
· El Dookie 1 week
· Melber 2 weeks
· SGT PEPPER 2 weeks
· martyr 2 weeks
· Terminator 2 weeks

View Thread: VC GUARD v10.2 Exploit (BAN) Codes
Vietcong.Info » Vietcong General Discussion » General Discussion
Who is here? 1 Guest
Current Rating: (Total: 0 ratings)  
 Print Thread
VC GUARD v10.2 Exploit (BAN) Codes
dRgiGGLeZ
I have a question regarding VC GUARD v10.2 BAN CODES (exploits). Some of the exploits are labeled such as #5 Fast Shots, #6 Fast Flags, however, #10 exploit has banned two (2) players recently but does not stipulate what the cheat is. My question is:

Can you give me a list of the "Exploit Codes" and the related cheat for reference? This would identify the cheats VC GUARD is trying to discourage and also clear up controversy as to whether it is attempting to stop the infamous "Wall Hack", "Aim Bot", etc. that I have been told that it is supposed to stop. Any information is appreciated. DR^ GiggLez. Smile
 
https://www.facebook.com/groups/147630708642766/
Nosek
VCGuard is just a server-side tool, so it cannot detect aimbot and WH.

See vcguard.ini, detected cheats/exploits are listed there:
Download source  Code
// Anticheat

noinvisibility = 1
nomrmedicspam = 1

// The following means [on/off X Y Z] Maximum of Y shots/flags/heals/explosions/objects/votes in X milliseconds, with Z chances left

nofastshots =          1 1000 24 2      // Maximum of 24 shots in 1000 milliseconds, with 2 chances left
nofastflags =         1 7000 1 0      // Maximum of 1 flags scores in 7000 milliseconds, with 0 chances left
noplayerfreeze =      1 4000 2 0      // ...
nomassexplosions =      1 4000 2 0      //
nomassobjects =         1 2000 20 1      //
nomassvoting =         1 20000 3 0      //

// Chances increase by 1 every minute (up to its set maximum)

// Anticrash

paramvalidate = 1            // Validates memory of pointers passed to various functions
hidvalidate = 1               // Missing/Multiple HID, multiple "connects"
joinvalidate = 1            // Invalid player/class
playervalidate = 1            // Spoofed player ID
objectvalidate = 1            // Invalid object ID
dplayvalidate = 1            // Fix DirectPlay exploiting (very experimental)




But I can't help you with the Exploit Codes. As I remember, #10 should be Mass Objects Cheat (massive ammo spawn - can cause the server to crash, so VCGuard blocks it) and I've already seen code #8 (subcode #3) and code #3 in 30MiNuTeS' banlist.
Edited by Nosek on 24-03-2014 12:14
  x 1
 
www.clan-delta.websnadno.cz
Brchi
dRgiGGLeZ wrote:
... stop the infamous "Wall Hack", "Aim Bot", etc. that I have been told that it is supposed to stop.

Who told you that? It cannot detect it... as Nosek said.

I don't want to give too much explanation as it describes ways of exploiting..
Exploit #3: a player joins multiple times, creating an "unreleased player" (iirc) error.
#8: player is using the id of another player (seems legal sometimes)
#10: mass objects spawned (ammo cheat or causing massive lag)
  x 1
 
http://www.myCong.net
dRgiGGLeZ
Thank you for the clarification and I understand your concerns.

One other issue I forgot to mention, but was reminded of when reading Nosek's comments about exploit #10 preventing the server from crashing, is that our server has crashed 2-times in the last 6-Days for no apparent reason. I was looking in the VC Directory for the log files and noticed that the file "Shutdown.txt" is no longer recording the dates, times of "graceful" or "Exception" type shutdowns. Did you discontinue updating this file?

I looked in the file folder "pt_excp.txt" and see that only the "Exception" shutdowns are being recorded there, which is fine, but I'm trying to determine what caused it to crash in looking at the data. I was hoping that listing it here you might be able to review and interpret what went wrong. Any help is appreciated. The data recorded was as follows:

==========================================================
Ptero-Engine-II Exception
Code: EXCEPTION_ACCESS_VIOLATION
Date: 03-22-2014
Time: 22:05:43
Computer/User: JAWSERVER / Admin
MP version: 198
Ticks: 103363314
excp_vars:
740088 [0.00000000]
1 [0.00000000]
106 [0.00000000]
0 [0.00000000]
1 [0.00000000]
0 [0.00000000]
240 [0.00000000]
6543067 [0.00000000]
0 [0.00000000]
103063529 [0.00000000]

COM_EXCP_txt:
0) AmmoboxCTF1
1)
2)
3) levels\train\3sf-roulette.sco
4) SC_MP_FpvMapSign_Set(unsignedlong,*s_SC_FpvMapSignVCoid - END
5) EXECUTING SCRIPT: ini\multiplayer\scripts\ctf_u.scr

Unhandeled Exception
======================

- Caused in ----------------------
Module base: 0x00540000
Address: 0x006AC249
Sym system failed
Address: 0x006AC249
Unrecognized function

- type -----------
Access Violation

- reason ---------
Read: 0x00000000

- Called from (maybe) ------------
Unrecognized function

- Registers ----------------------

EAX=00000000 CS=0000001b EIP=006ac249 EFL=00010217
EBX=00000247 SS=00000023 ESP=0012e0ac EBP=0012e0d8
ECX=0ecca808 DS=00000023 ESI=00000000 FS=0000003b
EDX=00000002 ES=00000023 EDI=00000002 GS=00000000

--------------------------------

************************************ Stack ************************************
ESP+00 00000099 0.0000
ESP+01 00000002 0.0000
ESP+02 00CED4C4 0.0000
ESP+03 00000247 0.0000
ESP+04 00D0104C 0.0000
ESP+05 0012E0B0 0.0000
ESP+06 00000001 0.0000
ESP+07 0012F72C 0.0000
ESP+08 0071741C 0.0000
ESP+09 00729140 0.0000
ESP+10 00000000 0.0000
ESP+11 00000108 0.0000
ESP+12 00683CEE 0.0000
ESP+13 0012E15C 0.0000
ESP+14 00000039 0.0000
ESP+15 0000003A 0.0000
ESP+16 00000247 0.0000
ESP+17 0012EBD8 0.0000
ESP+18 00000002 0.0000
ESP+19 0B604FB8 0.0000
ESP+20 10F1F658 0.0000
ESP+21 41A54AC0 20.6615
ESP+22 41590200 13.5630
ESP+23 4014E580 2.3265
ESP+24 C21FBAD3 -39.9324
ESP+25 C1D85F30 -27.0465
ESP+26 3FEF7D84 1.8710
ESP+27 C21FBAD3 -39.9324
ESP+28 C1D85F30 -27.0465
ESP+29 3FEF7D84 1.8710
ESP+30 C19A2AE6 -19.2709
ESP+31 C157BC60 -13.4835
********************************** End Stack **********************************

Again, thank you for your time and expertise!! DR^ GiggLez. Smile
 
https://www.facebook.com/groups/147630708642766/
Brchi
Luckily, the "Caused in" address 0x006AC249 tells me that it crashed when using the "downlist" ptero command. It seems crashy, also happened to me. So I recommend not to use it.
The shutdown log should be updated, can you make a test? Write "devexcp" to the console (crashes the server!) and see if it adds an EXCEPTION entry.
What operating system is the server running on?
  x 1
 
http://www.myCong.net
dRgiGGLeZ
Brchi, Thank you for you reply. I have used the "downlist" command quite often and will use it sparingly from now on. I entered "decexcp" and it crashed the server as you said it would. It also recorded the exception in "pt_excp.txt", however, the file "shutdown.txt" was not updated as an exception neither has it been recording "graceful"shutdowns (by admin) as shown in the sample of the "shutdown.txt" file below:

02.01.2014 17:49:39:087] GRACEFUL (by admin)
[03.01.2014 19:42:58:894] GRACEFUL (by admin)
[03.01.2014 22:38:25:757] EXCEPTION
[04.01.2014 17:52:34:431] GRACEFUL (by admin)
[04.01.2014 17:56:48:016] GRACEFUL (by admin)
[05.01.2014 21:29:37:992] GRACEFUL (by admin)
[12.02.2014 18:35:37:030] GRACEFUL (by admin)
[12.02.2014 18:51:05:513] GRACEFUL (by admin)
[16.02.2014 23:12:51:054] GRACEFUL (by admin)

The date this stopped updating "shutdown.txt" agrees with the date I updated VC GUARD to version V10.1. I have since updated to v10.2 on March 6, 2014 and that particular file is still not updating.

Our Server is Running Windows 7.

Following is the data recorded in the second Crash I had mentioned and when compared to your findings in the "address" looks slightly different (0x0088C249 vs. 0x006AC249) except for the last four digits which are common. Can you review this crash (below) and see if it was also the "downlist" command. Please note that the first crash (above) and the second crash (below) appears to be on the same map as well.

Ptero-Engine-II Exception
Code: EXCEPTION_ACCESS_VIOLATION
Date: 03-19-2014
Time: 21:42:31
Computer/User: JAWSERVER / Admin
MP version: 198
Ticks: 13756250
excp_vars:
740088 [0.00000000]
0 [0.00000000]
174 [0.00000000]
1 [0.00000000]
1 [0.00000000]
0 [0.00000000]
240 [0.00000000]
6543067 [0.00000000]
0 [0.00000000]
13721933 [0.00000000]

COM_EXCP_txt:
0) AmmoboxCTF1
1)
2)
3) levels\train\3sf-roulette.sco
4) SC_MP_FpvMapSign_Set(unsignedlong,*s_SC_FpvMapSignVCoid - END
5) EXECUTING SCRIPT: ini\multiplayer\scripts\ctf_u.scr




Unhandeled Exception
======================



- Caused in ----------------------
Module base: 0x00720000
Address: 0x0088C249
Sym system failed
Address: 0x0088C249
Unrecognized function

- type -----------
Access Violation

- reason ---------
Read: 0x00000000

- Called from (maybe) ------------
Unrecognized function

- Registers ----------------------

EAX=00000000 CS=0000001b EIP=0088c249 EFL=00010217
EBX=0000014b SS=00000023 ESP=0012e0ac EBP=0012e0d8
ECX=0c22e218 DS=00000023 ESI=00000000 FS=0000003b
EDX=00000002 ES=00000023 EDI=00000000 GS=00000000

----------------------------------



************************************ Stack ************************************
ESP+00 00000099 0.0000
ESP+01 00000000 0.0000
ESP+02 00ECD4C4 0.0000
ESP+03 0000014B 0.0000
ESP+04 C183792E -16.4342
ESP+05 0012E0B0 0.0000
ESP+06 000003E7 0.0000
ESP+07 0012F72C 0.0000
ESP+08 008F741C 0.0000
ESP+09 00909140 0.0000
ESP+10 00000000 0.0000
ESP+11 00000000 0.0000
ESP+12 00863CEE 0.0000
ESP+13 0012E15C 0.0000
ESP+14 00000039 0.0000
ESP+15 0000003A 0.0000
ESP+16 0000014B 0.0000
ESP+17 0012EBD8 0.0000
ESP+18 00000000 0.0000
ESP+19 C1840997 -16.5047
ESP+20 C18B79A6 -17.4344
ESP+21 3EF22C75 0.4730
ESP+22 3F800000 1.0000
ESP+23 3D65E05F 0.0561
ESP+24 3F6136ED 0.8797
ESP+25 BEF1BA1E -0.4721
ESP+26 00000000 0.0000
ESP+27 3F557283 0.8338
ESP+28 3E60155E 0.2188
ESP+29 3F01C2D0 0.5069
ESP+30 00000000 0.0000
ESP+31 3F0C9AF0 0.5492
**********************************

##############################################################################
TEST CRASH!!!!!!!
Your Crash command posted this (below) to the pt_excp.txt file but not the shutdown.txt file:

==========================================================
Ptero-Engine-II Exception
Code: EXCEPTION_ACCESS_VIOLATION
Date: 03-25-2014
Time: 15:09:06
Computer/User: JAWSERVER / Admin
MP version: 198
Ticks: 68932213
excp_vars:
99889988 [0.00000000]
0 [0.00000000]
107 [0.00000000]
1 [0.00000000]
38 [0.00000000]
0 [0.00000000]
240 [0.00000000]
6543041 [0.00000000]
0 [0.00000000]
11931118 [0.00000000]

COM_EXCP_txt:
0) AmmoboxCTF1
1)
2)
3) levels\club69\3sf-city.sco
4) SC_DOBJ_CameraLooksAtCollision(*void,float)float - END
5) EXECUTING SCRIPT: Ini\Multiplayer\scripts\addammo_dobj.scr




Unhandeled Exception
======================



- Caused in ----------------------
Module base: 0x00720000
Address: 0x00865B51
Sym system failed
Address: 0x00865B51
Unrecognized function

- type -----------
Access Violation

- reason ---------
Write: 0x00000000

- Called from (maybe) ------------
Unrecognized function

- Registers ----------------------

EAX=00000000 CS=0000001b EIP=00865b51 EFL=00010206
EBX=0951f80c SS=00000023 ESP=0951f1d8 EBP=0951f868
ECX=05f43344 DS=00000023 ESI=764fad60 FS=0000003b
EDX=0000002b ES=00000023 EDI=0951fb7c GS=00000000

----------------------------------



************************************ Stack ************************************
ESP+00 00000000 0.0000
ESP+01 CD010A43 -135308336.0000
ESP+02 09FFAF30 0.0000
ESP+03 0951F1F4 0.0000
ESP+04 7422577B 51448144884164369000000000000000.0000
ESP+05 09FFAF30 0.0000
ESP+06 09FFAF30 0.0000
ESP+07 0951F260 0.0000
ESP+08 74225E1D 51456355908331192000000000000000.0000
ESP+09 09FFAF30 0.0000
ESP+10 0951F32C 0.0000
ESP+11 09FFAF30 0.0000
ESP+12 74225E34 51456467129506596000000000000000.0000
ESP+13 FFFFFFFF -1.#QNB
ESP+14 00000018 0.0000
ESP+15 110106DA 0.0000
ESP+16 00000000 0.0000
ESP+17 00000000 0.0000
ESP+18 00000000 0.0000
ESP+19 00000000 0.0000
ESP+20 00000000 0.0000
ESP+21 FFFFFFFF -1.#QNB
ESP+22 FFFFFFFF -1.#QNB
ESP+23 01EB87C0 0.0000
ESP+24 0951F260 0.0000
ESP+25 74225EF2 51457385913129503000000000000000.0000
ESP+26 0272C628 0.0000
ESP+27 CD010A43 -135308336.0000
ESP+28 76505CF8 1056526735198323900000000000000000.0000
ESP+29 76505BEE 1056506154445170700000000000000000.0000
ESP+30 000101EE 0.0000
ESP+31 0000C019 0.0000


Please be advised that it is not critical for the Shutdown.txt file, either by Exception, or by Graceful shutdown by admin, to update. It is merely a convenient and fast way to see these over time and trends. Again, thank you for your immediate response to these questions. DR^ GiggLez. Smile
 
https://www.facebook.com/groups/147630708642766/
Brchi
I think you are looking at the wrong shutdown.txt. Logs are now saved to the logs\ subdirectory, so have a look at logs\shutdown.txt.

That second crash is the same. You have to subtract the module base from the address to get the offset. 6AC249 - 540000 = 16C249, 88C249 - 720000 = 16C249.
  x 1
 
http://www.myCong.net
dRgiGGLeZ
Brchi, Yes, I was unaware that the "SHUTDOWN.txt" had been moved to the "LOGS" folder and should have noticed it when I accessed the "banlog" and the "connections" logs which I created shortcuts for easy access. It is updating as it should.

Let me say again that I really appreciate your help and time as I was somewhat concerned that the server was being intentionally crashed--which has happened in past years on other servers as a member of several clans. I feel much better that this was not the case. Again, thanks! APPLAUSE DR^ GiggLez.
 
https://www.facebook.com/groups/147630708642766/
NightHawk
Does anyone know what cheat #31 is? I have never cheated in the 10 years off and on I have been playing vietcong but for some reason was auto killed because I was apparently cheating with cheat 31

Any ideas???
 
Silent Bob
Cheat #31: Weapons cheat. It can cause with datadisc Red Dawn and Rising Sun when you choose weapon from datadisc Fist Alpha (M14, machette...). Detected also on servers without HradBa.
  x 1
 
www.vietcong.info
NightHawk
Ok good to know. Thanks for the fast reply!
 
Nosek
Ah, it's this code. This restriction is pretty much pointless now... Maybe Brchi can disable this in the VCComHub?
Edited by Nosek on 07-02-2015 23:11
  x 1
 
www.clan-delta.websnadno.cz
Jump to Forum:
Similar Threads
Thread Forum Replies Last Post
Pterodon caught us all off guard with this one General Discussion 1 01-04-2024 04:33
Windows 10 Issues - VC GUARD 10.3 General Discussion 11 05-04-2017 16:56
Vc Guard General Discussion 81 04-02-2016 21:06
VC GUARD ANTI-CHEAT ISSUES General Discussion 2 07-02-2015 01:12
VC GUARD SERVER STATISTICS General Discussion 6 02-05-2014 02:14
Login
Username

Password



Not a member yet?
Click here to register.

Forgotten your password?
Request a new one here.
Render time: 0.38 seconds - 75 Queries 5,472,144 unique visits