Tutorials: Counter-Strike 1.6 "Exploit Watch"

• autobuy.txt exploit
Vulnerable: 47/48 protocol servers. (NONSTEAM/STEAM).
Consequences: By joining into game with the changed file, player can cause DoS attack and crush the server. It can't be detected in logs.
Solution: Install Fix AutoBuy bug plugin.

• hlds_fuck (see for more info)
Vulnerable: 47/48 protocol servers. (NONSTEAM/STEAM) It affects to all servers with authorization STEAM3 (GoldSource, Source 2007, Source 2007 U1).
Consequences: Server crushes with following error "The Instruction at 0x####### referenced memory at 0x#######. The memory could not be 'read". Can't be detected in logs coz server crushes immediately and doesn't have a time to log crush information.
Solution: Install dproto v0.4.1 or higher.

• hlds_vcrash (see for more info)
Vulnerable: 47/48 protocol servers. (NONSTEAM/STEAM).
Consequences: Server crushes with following error "FATAL ERROR (shutting down): Host_Error: SV_ParseVoiceData: invalid incoming packet".
Solution: Patched server binaries.

• failds.exe

It is a modification of exploits described above. It also has some various modifications made by another Russian coders, which adds a convenient interface and some features which make it more destructive.
Vulnerable: 47/48 protocol servers. (NONSTEAM/STEAM).
Consequences: Player with some stupid name connects to server and then server crushes.
Solution: Install dproto v0.8.68 or higher.

• fake players
This program was created by young Russian coder (if believe to my friend, he is 14 years old).
Vulnerable: 47/48 protocol servers. (NONSTEAM/STEAM).
Consequences: It fills the server with fake players, they all have the same names. Seems like not big deal isn't it? But the problem is that there are no way to kick or ban them. This is a perfect spambot.
Solution: Install dproto v0.8.68 or higher.

• rcon brute exploit
Vulnerable: 47/48 protocol servers. (NONSTEAM/STEAM).
Consequences: Rcon password from your server can be captured by the malefactor and he will start to sow chaos there, beginning from adding himself (or anyone else) to admin list and finishing with changing the server name, or setting password on it, or shutting server down.
Solution: To set difficult long rcon password, which consist of letters, numerals and symbols.