PDA

View Full Version : Fight against cheating has reached a new step!


MadWoffen
26th Nov 2001, 07:35 PM
From the Infiltration main page. A way to fight the new bots there is around. Check my sig for a direct link.


Security Takes a Step Forward
November 26, 2001 @ 16:13 Warren


Here is a small contribution to the Unreal Tournament community to help deal with some of the security issues that can be detrimental to gameplay. Though most of this will be geared towards server admins, part of the community's responsibility will be to put pressure on those admins to make the necessary changes so their servers can remain as cheat-free as possible.

Removal of the 'ServerSideOnly' backdoor within Unreal Tournament

Disclaimer:
We do not contend that performing the steps listed below will protect your server 100% against any kind of client-hack, AimBot, or cheat currently available, or those that will be available in the future. Nor do we believe that cheats and hacks are something evil that have to be fought against. This explanation merely describes one solution for "fixing" the most common security holes used by cheats at the moment. Cheats and helpers are welcomed by a wide range of the community. However, the usage of cheats online on open servers or even in clan matches can destroy the whole gaming experience for most players out there.

This information will provide server admins with an opportunity to close one of the largest security holes that Unreal Tournament currently has, and will give mod authors the chance to close another one using some simple script changes.

This fix will work with any standard Unreal Tournament server and every mod, such as Infiltration, Tactical Ops or Strike Force, just to name a few.

Here are two common ways that are used for getting an AimBot and other cheats working online:

a) Using one's own console and editing their INI file to use it instead of the original Unreal Tournament or another mod's console.
b) Using a changed version of an original Unreal Tournament .U package file that is flagged as 'ServerSideOnly'

Point a) is typically not a problem because the console can be checked directly within the code that functions on the server. Standard Unreal Tournament and mods that allow the use of the Client Side Hack Protection (CSHP) modification are normally all you need. Modifications that cannot use CSHP due to various other reasons or incapability normally use their own console class that is then checked within their own packages. Combining the use of a project's console class within their package and including this package in the server's ServerPackages= section listed in the server's INI file would normally fill this security hole. If a mod team needs help in integrating these checks, than feel free to contact us.

Point b) is even easier to fix. Server admins should read the following instructions carefully, because it takes only about 5 minutes to change. Common AimBots are using a changed version of the UTMenu.u file. This package is already listed in the ServerPackages= list, however it is flagged as 'ServerSideOnly' due to backwards compatibility issues of former versions of Unreal Tournament. Well, today all servers and clients out there have version 436 installed, and so the need of backwards compatibility is no longer an issue. The 'ServerSideOnly' flag is responsible for not allowing the check between client and server that normally takes place for all packages within the ServerPackages= list. So, different versions of these files slip between the cracks, and AimBots and other cheats can be used without anyone knowing any better. Removing the 'ServerSideOnly' flag is very easy to achieve and thankfully, the package integrity remains the same. This means that the package is still the "same" for the Unreal Tournament engine and a client-server check will not result in a "file mismatch" warning as some might come to expect. So servers can use files with the 'ServerSideOnly' flag removed and clients do not need to download a changed package or do anything else for that matter.

The following describes one possible way to change this flag. It basically describes the correct usage of the ucc.exe file for removing the flag, and how to setup the server's INI file correctly so that the new file(s) are checked. It should be said that the UTMenu.u file is not the only one that can be modified for cheating, so the procedure should be performed on a group of files that are listed below.

How to remove the ServerSideOnly flag from the UTMenu.u package:

open a command.com or cmd.exe (also known as DOS box or window)
change the path to your UnrealTournament\System folder
type in the following and hit enter (case sensitive if needed
ucc packageflag UTMenu.u UTMenu2.u -ServerSideOnly
wait until ucc has saved the new UTMenu2.u file
make a new folder .... i.e. UnrealTournament\ServerFiles
copy the new UTMenu2.u file into this folder
rename it back to UTMenu.u
open the server's ini file (ie. UnrealTournament.ini or the one from the mod you are hosting)
search for [Core.System]
below you will see the Paths= list entries, such as Paths=../System/*.u
add the folder you just created at the top of the list like this:
Paths=../ServerFiles/*.u
... then the original ones should follow

search for [Engine.GameEngine]
below you will see the ServerPackages= list entries, such as ServerPackages=Botpack
make sure that ServerPackages=UTMenu is listed there as well. If not, simply add it
That's it! Now clients using a modified version of the UTMenu.u file will automatically be rejected by your server.

Here's a list of common packages that are using the ServerSideOnly flag and can be abused:

UBrowser.u
UTBrowser.u
UWindow.u
UMenu.u
UTMenu.u (like described above)
Remove the ServerSideOnly flag for these packages as well, copy them to your new "ServerFiles" folder, and add them to your ServerPackages= list, if not already included.

Feel free to let us know if you have additional questions or comments.

Special thanks to Beppo for doing all the investigative work.

DeRailer
26th Nov 2001, 11:50 PM
look at all those Fight Against Cheating thread.
propaganda?

Raden
27th Nov 2001, 12:24 AM
no, it's called spreading the word so that server admins can get off their asses and spend 5 minutes to make a cheat-free UT.

MadWoffen
27th Nov 2001, 05:15 AM
Originally posted by DeRailer
propaganda?

Me :stick: Derailer

Jesus, because of your comment, you make me agree with Nemephosis, the realist mod basher! :D

Raden
27th Nov 2001, 11:44 AM
Originally posted by MadWoffen


Me :stick: Derailer

Jesus, because of your comment, you make me agree with Nemephosis, the realist mod basher! :D

BUT I'M NOT A..... GRRRRRAAAAARRRRRRRRRGGGGHHHHH!!

;)

modsquad
29th Nov 2001, 07:46 AM
Well at least people are taking the initiative to stop cheaters.

MadWoffen
30th Nov 2001, 11:12 AM
Tests are being made for Mac and Linux users. A little manipulation will be necessary to make UT works online for these users. More later.

2COOL4-U
30th Nov 2001, 11:49 AM
It won't stop the cheaters, it takes more than that...

Phyre
30th Nov 2001, 01:03 PM
Elfbot works on CSHP4+ now... So servers are better off not running CSHP on there servers because 99% of aimbots are anti-CSHP and only work on CSHP servers.

2COOL4-U
30th Nov 2001, 01:37 PM
That's not true! Only some aimbots can get pass CSHP's protection. Most of 'em can only pass older versions

2COOL4-U
30th Nov 2001, 01:37 PM
pass = past

MadWoffen
30th Nov 2001, 01:41 PM
Originally posted by 2COOL4-U
pass = past

Never tried the http://forums.beyondunreal.com/images/edit.gif button ? :p

usaar33
30th Nov 2001, 08:04 PM
Originally posted by Nemephosis
no, it's called spreading the word so that server admins can get off their asses and spend 5 minutes to make a cheat-free UT.

no, it is called a bad idea that harms mac and linux players.

Raden
30th Nov 2001, 09:21 PM
Yeah, I heard of that after I posted that. Oops.

All of a sudden it ain't such a great idea.

2COOL4-U
2nd Dec 2001, 05:09 AM
Originally posted by MadWoffen


Never tried the http://forums.beyondunreal.com/images/edit.gif button ? :p

Ofcourse I did, but I need to get more posts :)

Raden
2nd Dec 2001, 12:13 PM
Originally posted by 2COOL4-U


Ofcourse I did, but I need to get more posts :)

um, no. Please don't even start being concerned with your post count, there's already too many people at Beyondunreal overly concerned with it as it is. If all you're doing is trying to drive up your post count, I'll have to get someone to either reset it or hide it, but post count spamming just to drive it higher is not accepted at BuF.

Please, if you have an edit to make, use the edit button. Thanks :)

Snarf
2nd Dec 2001, 01:20 PM
I think it was a joke :rolleyes:

Raden
2nd Dec 2001, 02:20 PM
Joke or not, spammers are unlikely to stay around, cause they get removed.... if you get my drift.

No, I can't remove them, but I can let people know what's going on anyway...

if it was a joke, then it was my mistake. God knows it wouldn't be the first time :D

some people wouldn't take it as a joke cause there's people that legitimately care about their post counts. These are the people that cause everyone so much grief.

If you had said that in BuF's OT section you would have been called a spammer, and some not-so-wonderful things cause of whats happened in the past. Just letting you know is all :)

2COOL4-U
2nd Dec 2001, 02:36 PM
I was only joking dude! Relax ;)