BCS server issue

[onyx anchor]

apparently older versions are suspected to crash.. vishal found commit in official ballistica repository which fixed the specdata issue which is suspected to cause the restarting problem.. so it's going all good

[warm sigil]

we thought it was only bcs but then stratex said his servers are crashing too

[mild hazel]

"suspected", hopefully someone confirms this

Else we cooked

[white arch]

for now all good

[warm sigil]

"servers arent crashing"

[reef apex]

ahh dazz a bummer... n here i was thinkin only my servers survivin dis sheet

[onyx anchor]

The guy behind finding this exploit must be a genius

[warm sigil]

but for some reason i am getting 6k ping

[jade mountain]

maybe it someone who we know 😭

[mild hazel]

Btw who is this new Fang guy

[slow wave]

im doing too

[white arch]

big hand than smoothy may b

[reef apex]

new

[warm sigil]

ikr

no body knows u ig

[reef apex]

i literally retired in 2021

[slow wave]

not to underrate , but its something actually simple...

[onyx anchor]

He recently reincarnated

[white arch]

then i never know u

[mild hazel]

I'm seeing u first time, so I'd definitely ask that

[wispy socket]

worked only once, it didn't replicate the repeated crashing

[slow wave]

its Bombsquad that doesnt have proper protection from this simple atttacks..

[reef apex]

ooh lemme introduce meself... am fang; a watermelon :>

[floral wind]

Hey guys
If u can figure out the ip
Maybe with arp -a on multiple servers and check for common ip
Then u can ip ban that guy with sudo iptables -A INPUT -s [IP_ADDRESS] -j DROP

[mild hazel]

Cool, gimme some new mods right this second

[white arch]

this dont seem ddos attack

[warm sigil]

yep

[white arch]

wait lemme check the traffic i didnt checked yet

[mild hazel]

blud came too late for a solution

[floral wind]

I am in a wedding

[mild hazel]

Pics/vids send

[onyx anchor]

you sound like... You like bombsquad.. aims gun to head list all mods

[white arch]

[reef apex]

umm... currently i just got a kewl tag array ig

[floral wind]

No

[reef apex]

i just started makin api9 scripts last month

[white arch]

need to check wen the attack happns for now no issues

[floral wind]

Did you guys already solve it?

[reef apex]

https://github.com/HeyFang/bombsquad-modded-server-scripts
here u can chek it out

tho am wonderin if i should keep it opensource since crezy ppl be findin loopholes

[onyx anchor]

no but recent sus is promising

[reef apex]

its prolly the thingy snowie mentioned since am usin latest server version n it seemed immune to da atks

[warm sigil]

@reef apex btw your "boxing" still have bombs

[white arch]

wen will smoothly wake up

[reef apex]

i added em agn

[white arch]

hahaha so it was his

[reef apex]

i can disable it... just turn bomb bool to false

[warm sigil]

so you made a round with default boxing gloves

[onyx anchor]

You guys should go to general.. people trying to find solutions here

[warm sigil]

yes

mb

[flint shale]

Me too u watarmaloon I'm maskmaloon

[warm sigil]

vishu is trying that empty Playerspec

[onyx anchor]

how to do it.. can you explain

[warm sigil]

@white arch

[white arch]

?

[mild hazel]

Nig##, aren't you bored with the same repetitive s###

I left just because of that, I'm hoping someone else makes cool mods for ME to play now.

Not me making new mods

[warm sigil]

are you getting this

[floral wind]

"sus" What?

[warm sigil]

VerifyClientAddr() found mismatch for client 128.

[white arch]

no but this

Calling getAttr for player attr 'activityplayer' without data set.

[slow wave]

arp 💀 is for LAN

[onyx anchor]

@floral wind

[flint shale]

It's normal

[mild hazel]

cough

Looks juicy ngl

[warm sigil]

oh ok

[onyx anchor]

recently there are so many updates and new mods.. you should have just asked that.. you should visit official server

[slow wave]

sending udp packets simultaneously with bs (using bs as proxy...)

[floral wind]

No...

[slow wave]

arp is for linking
mac with ip

layer 2

n 3

[wispy socket]

hmm, the empty playerspec worked a bit because it crashed the server... didn't replicate the repeated crashing

[flint shale]

I once crashed a server just by spamming buttons 😂😂

[mild hazel]

Tell / list them

[onyx anchor]

they can send empty playerspec with some delay using a script

[slow wave]

i tried actually and

[white arch]

drinkingUwU

[mild hazel]

Someone is trying to fit into the convo

Press F to pay respects

[wispy socket]

still not empty, from what i heard, it should be None, like EMPTY

[slow wave]

i tried None

but like nothing happens

[reef apex]

yee dats da plan... make kewl mods n just pley wid frnds, nomore stupid stuff
altho m gettin bored of codin basic funtionalities >.<

[slow wave]

lemme try again

[flint shale]

I've been there since the beginning 😀

[wispy socket]

it worked on bcs # teams

[onyx anchor]

game has v2 accounts, api is rapidly changing, new currency in the game, new chest system.. online mods repository.. asset packages online..

[flint shale]

Me and yoyo raised the issue and gathered info

[reef apex]

[wispy socket]

@slow wave which server do you want me to do the empty playerspec attack, tell one of your server

[onyx anchor]

tell me too.. I'll try it

[warm sigil]

do it in Mahol Epic Teams

[onyx anchor]

what to do

[slow wave]

ill give u ip n port in dm

wait

we already testing

[white arch]

no u not with me see who started the post

only yoyo

so change bcs to ycs

[mild hazel]

• v2 has been there for decades now
• api is changing only UI, else nothing
• new Tokens, I'll say it's ok
• chest system, better than I thought, high rewards, so that's good

• online mods repos, WHAT?????
• asset packages, WHEN WHERE????

[floral wind]

Hmm your are right probably

[wispy socket]

i am asking a friend to do it, i am surprised that he agreed

[onyx anchor]

like v2 accounts.. you can upload/edit plugins

[mild hazel]

Can you talk normally?

[floral wind]

The router will have the ip of clients from internet ig

[onyx anchor]

like what exactly to do.. open terminal type what

[reef apex]

nuh uh

[wispy socket]

was it affected before?

[mild hazel]

What's your age?

[warm sigil]

yes

[reef apex]

[floral wind]

Wait no nvm

[wispy socket]

no idea, i told him to do it and he is doing it

[warm sigil]

i was sharing that server's ss only

[onyx anchor]

ask him

[floral wind]

If any of u can run the server with gdb then it will tell you exactly where it broke
So next time this happened try that

[slow wave]

ion think so

[heavy fern]

.

[slow wave]

i mean

[floral wind]

Yeah

It won't

[slow wave]

depends on what u mean

[warm sigil]

@onyx anchor @wispy socket there is one more weird thing happening with our servers i need help with

[copper pewter]

indxpiyush has been warned

Reason: Mass mention

[flint shale]

Best modder joined the chat

[onyx anchor]

yes pls tell

[warm sigil]

its litreally 2 mentions

[wispy socket]

?

[warm sigil]

there is a guy named AamirMac

[mild hazel]

only fans, wtf?

[warm sigil]

we banned him like 8-10 times

still that guy not only joins

but spam abuses in the server

[floral wind]

I was wrong in my head
Imagine I studied networking as subject for 3 months 😭

[warm sigil]

bypassing the chat filter

[wispy socket]

ip ban him

[flint shale]

Same ID?

[warm sigil]

already did it

[warm sigil]

same id

same pb id

[slow wave]

who

[wispy socket]

id ban him

[warm sigil]

same ip and device id

[flint shale]

Ban device id

[slow wave]

who are u talkin about?

[flint shale]

Demn

[warm sigil]

AamirMac

[slow wave]

oh

ok

[strange loom]

KINGUS

Id: pb-IF4LU04EHw==
Name: KINGUS
Accounts: IronPilot7
Created: 2 years 2 months 5 days ago
Possible Discord Ids:

[flint shale]

Muting works

[slow wave]

i did for like 3 years, but yeah thats basic first things they teach

[warm sigil]

nope

[slow wave]

u use cisco packet tracer?

[heavy fern]

It will get solved in 2-3 days dw

[flint shale]

Why joined so late

We needed ur help

Now giv solution

[reef apex]

u are freaky inded

[flint shale]

The best modder

[heavy fern]

Try switch off switch on

[flint shale]

😂🤣🤣🤣

[heavy fern]

[floral wind]

Yeah I did
When I had networking as subject

[white arch]

#💬general💬

[onyx anchor]

that's the problem.. we can't try.. it's already doing it on its own

[floral wind]

Maybe use netstat with UDP filter

[warm sigil]

real

[reef apex]

abandon bcs n use feng's scripts...

[onyx anchor]

🤏 🐒

[reef apex]

[past coral]

🎉 | Fang leveled up!

[reef apex]

am bored... @onyx anchor coop?

we lost multiple yesterday :/

its not fun to pley next ones widout completin previous lvls >.<

[flint shale]

No

Use watermelon script instead of vanilla

[warm sigil]

😂

[flint shale]

Btw where do u play nowadays haven't played for long with u

[warm sigil]

add bs-dc bridge

and ill use it

[white arch]

alr my dear boiz gn tc i have school tomorrow

@warm sigil @flint shale @reef apex

[copper pewter]

yoyo2410 has been warned

Reason: Mass mention

[warm sigil]

[white arch]

@floral wind

[warm sigil]

werent you in college

[white arch]

@wispy socket

[flint shale]

Liar

Gn

[white arch]

i was in school

[warm sigil]

gn

[white arch]

jk lol am graduated

[reef apex]

cyklons... almost daily, we ping da role before pleyin

[flint shale]

Oow

Ookk

[reef apex]

oyasumi :>

[flint shale]

😩😭💔

I don't have another pc or laptop

[slow wave]

tcpdump

[flint shale]

I called someone let's see if he comes or not

[wispy socket]

the crashes are going past bombsquad

damn

[slow wave]

lol

[white arch]

checked tht as well

no issues

[slow wave]

wdym no issues lol

[white arch]

i dont see any kinda of abnormal incoming traffic

[flint shale]

🤣😭😂😂

[slow wave]

u have to see when event happens

[reef apex]

ahh dats not fun at all... ima ask nk n yuzu to do doz annoyin stuff n work on kewl mods myself

[white arch]

yup i didnt check at tht time

[floral wind]

But it would give TCP data right?

[white arch]

ye

[warm sigil]

fine ill make it myself

[reef apex]

yee... plz do, ill fr appreciate it

[warm sigil]

[slow wave]

no

i mean

mainly yes

but not only ofc ☠️

tcp is useless for bs

except for cycle https reqs

[rotund minnow]

At the end of the day, someone crashed all the bcs servers and vanished

[reef apex]

@flint shale we pleyin atm... join if u would like, cyklons epic ffa

[flint shale]

It's bad they didn't reward me for collecting infos , i literally told them about RomaNpc and stuff 😢

[flint shale]

Ok

[warm sigil]

[onyx anchor]

people are trying the specdata thing

[rotund minnow]

@warm sigil is this useful for AamirMac situation?

[warm sigil]

maybe

we havent discussed about him yet

[onyx anchor]

no idea but hope so

[warm sigil]

yea

need to find a solution about this romanpc first

i like how the name patterns are same

Aamir Mac

Roman Pc

lol

[heavy fern]

Guys servers should be back check

[warm sigil]

hail lord hikaru

[slate arch]

Do you know what causes this error message?

Mr.Fool always Good

[Reply to:](#1336983474141270048 message) no idea but hope so

𝕐𝕆𝕐𝕆乛

Jump

[Go to message!](#1336983474141270048 message)

[white arch]

@onyx anchor @wispy socket again

[copper pewter]

yoyo2410 has been warned

Reason: Mass mention

[rotund minnow]

again??

[white arch]

just now i got

see msg time

in tht

[rotund minnow]

need to check server status then

[white arch]

now need to reset again

[warm sigil]

lol this is because the servers are logging in discord every time server restart

[wispy socket]

[warm sigil]

considering you have atleast 5 servers

[rotund minnow]

still 1000 times means atleast 200 times per server

[warm sigil]

@rotund minnow you might get that message too

[rotund minnow]

I didnt want to get it reset again so didnt enable till now. Now I thought since the attack has stopped, I would enable it back. Just to see this getting reset for Bazinga

[warm sigil]

[rotund minnow]

Do you know what exactly causes this error @reef apex ?

[white arch]

they need ycs

alr am sleepy i will go now

i have to lead the mrng prayer in my school

[reef apex]

if it iz happenin coz of some guy joinin the servers then i cant really say until i see it ig

[white arch]

gn tc

[rotund minnow]

gn bro

[white arch]

see video

i sent

[rotund minnow]

theres a video of it above

[white arch]

wait

@reef apex

[reef apex]

use the latest scripts... 1.7.37 version seems immune to it

[rotund minnow]

@warm sigil strange how BCS id is just before that

[rotund minnow]

yeh but I wonder what exactly they are exploiting though. These bots should not be allowed to join server

[strange loom]

<:bs_v2account:982402470070341662>BCS

Id: pb-IF4iU0QaEw==
Name: BCS
Accounts: BCS
Created: 2 years 4 months 4 days ago
Possible Discord Ids:

[warm sigil]

RomaNpc is causing that

the crash*

[warm sigil]

Empty Playerspec

according to Vishu

which is fixed by eric in recents updates

[wispy socket]

okay now, let me get my dinner and set up some stuff and let's test shit

[reef apex]

their joinin servers is passin some request to api which is not satisfyin the defined headers n conditions... i did encounter few of doz "precondition errors" while dealin wid threadin code but still cant say for certain wot excatly iz causin this

[warm sigil]

Precondition failed : obj_in

[reef apex]

yee i saw dat.. but if its actually frm bombsquad_headless file, there really isnt much we can do bout it ig

[warm sigil]

ye

[floral wind]

@white arch i am taking 1 server process down for a moment

[white arch]

alr

use tht smash itself ok

[floral wind]

okk

[median gorge]

did you get it or you want it still?

[floral wind]

bruh did no one send traceback in text

[wispy socket]

[median gorge]

uh

[floral wind]

0x5e02288a27cd

@white arch dont stop the smash tmux session

[warm sigil]

Found smth?

[floral wind]

no i ran the server in gdb

[warm sigil]

And?

[floral wind]

hopefully if it happens again then we will see some useful info

[warm sigil]

oh

ok

I wonder if that dude comeback again

He clearly stopped because of idk the creator of that tool or what

[floral wind]

FATAL ERROR: Unable to bind to requested udp port 61325 (ipv4)
STACK-TRACE-BEGIN:
./bombsquad_headless(+0x1f37cd) [0x651ddd0257cd]
./bombsquad_headless(+0x11efba) [0x651ddcf50fba]
./bombsquad_headless(+0x11ccc2) [0x651ddcf4ecc2]
./bombsquad_headless(+0x1eacf5) [0x651ddd01ccf5]
./bombsquad_headless(+0x1eb084) [0x651ddd01d084]
./bombsquad_headless(+0x1ee04f) [0x651ddd02004f]
/lib/x86_64-linux-gnu/libstdc++.so.6(+0xdc253) [0x7ae4da2dc253]
/lib/x86_64-linux-gnu/libc.so.6(+0x94ac3) [0x7ae4d9e94ac3]
/lib/x86_64-linux-gnu/libc.so.6(+0x126850) [0x7ae4d9f26850]
STACK-TRACE-END
Server subprocess exited with code 1.

[rotund minnow]

What did u do

[floral wind]

nothing

idk the python wrapper is making it impossible to debug

Traceback (most recent call last):
  File "/usr/lib/python3.10/threading.py", line 1016, in _bootstrap_inner
Exception in thread Thread-6 (_populateQueue):
Traceback (most recent call last):
  File "/usr/lib/python3.10/threading.py", line 1016, in _bootstrap_inner
    self.run()
  File "/usr/lib/python3.10/threading.py", line 953, in run
    self.run()
  File "/usr/lib/python3.10/threading.py", line 953, in run
    self._target(*self._args, **self._kwargs)
  File "/home/ubuntu/smash/nbstreamreader.py", line 25, in _populateQueue
    self._target(*self._args, **self._kwargs)
    raise UnexpectedEndOfStream
nbstreamreader.UnexpectedEndOfStream
  File "/home/ubuntu/smash/nbstreamreader.py", line 25, in _populateQueue

[warm sigil]

Unable to bind port

[floral wind]

that shouldn't cause error
it should just throw a warning right

[warm sigil]

No it happens

[floral wind]

also it randomly fails to bind

[warm sigil]

when you ctrl z ./bombsquad_server

I usually kill tmux session

And launch again

And it get fixed

[floral wind]

no i didnt backgraound it

[warm sigil]

then

[floral wind]

idk

[warm sigil]

Did u added the -s?

[floral wind]

do i need to specify port when creating new tmux session?

[warm sigil]

tmux new -s 43210

[warm sigil]

Yes

[warm sigil]

Try creating like this.

did it worked?

earlier it used to work without -s

[floral wind]

guys who are here
can you set ERROR_LOGGING=True in bombsquad_server file

well anyways whatever it was i didnt see it

[median gorge]

hey

he was just on a min ago

[white arch]

Port is not important

U can use anything in the place of port

I use the server name

Like fumi

Smash

Like tht

[white arch]

Yah

Ig it works still for single session

But i run 3-4 sessions in same instance

[white arch]

Actually dont do tht

U will get tht headless session if u use tht method

It stops the session but it won't kill the session if u do in tht way always kill the session and start new one

[white arch]

Use tmux ls

To see running sessions

I will give some session cmds

[copper pewter]

yoyo2410 has been warned

Reason: Duplicated text

[white arch]

@warm sigil

[white arch]

@floral wind @wispy socket

[copper pewter]

yoyo2410 has been warned

Reason: Mass mention

[white arch]

upgrading the package didnt work yesterday ig

it was the reboot

[warm sigil]

ik them

[wispy socket]

?

[flint shale]

That's just name

[flint shale]

You set the port range too far

Or idk

[floral wind]

Nahh the upper limit is 65535

So we still in the valid range

An unsigned 16 bit integer is used to store it
That's where the limit comes from

[reef apex]

so at the end dat bot was just sending some garbage value(invalid profile name or smtg iirc) for which scripts dint hav proper input validation... n eric fixed it in newer versions? or did i miss smtg

[white arch]

ik i just said him

[wispy socket]

not sure

[reef apex]

nah its just to label the session

use screen instead of tmux... its much simpler

[white arch]

the guy stopped, by knowing tht vishnu vishal will not accept his defeat, so he got scared and left

[reef apex]

it seems so... precondition failed in object_input (am assumin invalid profile but can be smtg else)... unhandled exception; lack of dat input validation... erics fix accordin to that commit: person sends garbage value -> yeet him

[floral wind]

yeah i figured

[wispy socket]

hmm

[flint shale]

Oo

[jade mountain]

can anyone tell me what is going on now😭

[wispy socket]

uh everything normal for now?

and if the attacker thinks of attacking, then he will

[jade mountain]

bro who is this guy

[wispy socket]

bruh

[jade mountain]

wot

[slate arch]

@earnest sand

𝑽𝑰𝑺𝑯𝑼𝑼𝑼

GUYS
https://github.com/efroemling/ballistica/commit/b4ba0cbffce9160e358d14d0953b1b5275314ac3
this is a fix for servers to not crash if empty playerSpec was passed
it was done on december, and bcs scripts last update was 3 months ago, before december

Jump

[Go to message!](#1336983474141270048 message)

hardening playerspec type checking · efroemling/ballistica@b4ba0cb

[jade mountain]

so all bs servers are on the mercy of one guy rn? 😭

[earnest sand]

Version ?

[rotund minnow]

He's using 1.7.19 but 1.7.20 also facing same issue

Apparantly not in api 9

[earnest sand]

Some other chat group saying this error happening even on Vanilla server

And is due to some type of spam

[wispy socket]

huh

[wispy socket]

tbh, not sure what causes the problem

but ik that this empty playerspec is a threat for crashing bcs servers

because... tested, so yeah

[onyx anchor]

even if it's not relevant I want to share it.. people can just change into my id on the server.

[wispy socket]

dude no....

[onyx anchor]

?

[wispy socket]

well kinda but not really...

[wispy socket]

nothing nvm, just wanted to say you didn't have to mention it but okay

[earnest sand]

Intersting , bs cryptography issue
Eric aware of this ?

[onyx anchor]

no, but the guy mentioned he wants to tell this to eric

[white arch]

api 7

[earnest sand]

Anyways back to topic

[white arch]

we already spoke abt this issue 2 years ago

[wispy socket]

no, servers doesn't check the info passed to it by the user, hence fooling the server

[white arch]

now its not happening idk how it is stopped

[wispy socket]

not really cryptography side

[white arch]

last time also it was stopped after some days

like almost it took 2 - 3 days

[earnest sand]

Client send token to server ,
Server send this to master server to confirm the identity..master server returns pbid and account I'd then game use that pb id and confirm account I'd

Server get pb-id only from master server.
If some one able to use someone else pb-id then he really have that account credentials

[wispy socket]

need more security with this

[earnest sand]

About above error you shared ?

[white arch]

yah a guy who joins and crash the server

[reef apex]

deja vu
did u have similar convo in one of the coffee with eric streams?

[earnest sand]

No, and nothing to discuss on this it slike this form benning and no issue in that

[slow wave]

exactly

so stupid exploit...

like there is not certificate during initial exchange

....

i already said this to Eric some weeks ago

but i dont think he got time to do something abt it

[white arch]

@wispy socket

i got this issue

again

today

@reef apex

[earnest sand]

Is it something with new exploit that's fixe din 1.7.41 ?

Error message might be a bit different

[reef apex]

eric alrdy fixed it ig, update ur scripts to latest version

[white arch]

Oh ok thx

[white arch]

ig it is happening coz im still using api 7 , alr time to shift to latest version as fang said

[white arch]

happening in all servers

[onyx anchor]

Update to latest version

[white arch]

it is also happening in vanilla server ig

check

it is happening in vanilla as well

happening when bcs joins

@earnest sand

[earnest sand]

it's a issue in game engine itself , so obviously it will happen in vanilla as well

[earnest sand]

Bcs iterates public party list,
And that exploit bot also iterate public party list.
That's the only relation between bcs and server crash.

Exploit is about invalid player spec when joining the server , so that player account won't be visible in party window

[white arch]

@earnest sand

attack stopped

i mean i enabled ufw rule

for my port

[floral wind]

Booooooo
Ufw is for noobs

[white arch]

lol ik it is somewhat low thing but it stopped it for now

coz ima upgrade my script

[floral wind]

Wdym low thing?

[white arch]

did someone rm my bs owner role

[white arch]

it can't handle if the attack is more

[floral wind]

I was jk, ufw is good

[floral wind]

It's nothing like that
It's just a wrapper for iptables

[white arch]

ikik but i have tested it earlier as well, it can drop ips , but if it is frm more ips it becomes hard for it

[white arch]

@floral wind