Tweet
A few community members have recently discovered a new CoD4 exploit, this exploit works on all previous patches of the game... this will need to be fixed for patch 1.7.
What does the exploit do?
Basically allows players to set any command to any value, it will be set on for them only, and will work for one round/map. But what's to stop someone from setting up a bind to keep doing it?
The only way to prevent this is by adding these lines to your pb server config file: (pbsv.cfg found in CoD4/pb folder)
pb_sv_cvar aim_autoaim_debug IN 0
pb_sv_cvar aim_autoaim_enabled IN 0
pb_sv_cvar aim_automelee_debug IN 0
pb_sv_cvar aim_lockon_debug IN 0
pb_sv_cvar aim_slowdown_debug IN 0
pb_sv_cvar bg_shock_lookControl IN 0
pb_sv_cvar bg_shock_lookControl_maxpitchspeed IN 0
pb_sv_cvar bg_shock_lookControl_maxyawspeed IN 0
pb_sv_cvar bg_shock_sound IN 0
pb_sv_cvar cg_airstrikeKillCamNearBlurStart IN 0
pb_sv_cvar cg_constantSizeHeadIcons IN 0
pb_sv_cvar cg_debug_overlay_viewport IN 0
pb_sv_cvar cg_debugevents IN 0
pb_sv_cvar cg_debugposition IN 0
pb_sv_cvar cg_drawHealth IN 0
pb_sv_cvar cg_drawThroughWalls IN 0
pb_sv_cvar cg_gun_move_f IN 0
pb_sv_cvar cg_gun_move_minspeed IN 0
pb_sv_cvar cg_gun_move_r IN 0
pb_sv_cvar cg_gun_move_rate IN 0
pb_sv_cvar cg_gun_move_u IN 0
pb_sv_cvar cg_gun_ofs_f IN 0
pb_sv_cvar cg_gun_ofs_r IN 0
pb_sv_cvar cg_gun_ofs_u IN 0
pb_sv_cvar cg_gun_x IN 0
pb_sv_cvar cg_gun_y IN 0
pb_sv_cvar cg_gun_z IN 0
pb_sv_cvar cg_heliKillCamNearBlurStart IN 0
pb_sv_cvar cg_laserforceon IN 0
pb_sv_cvar cg_thirdperson IN 0
pb_sv_cvar ehDebugServer IN 0
pb_sv_cvar fixedtime IN 0
pb_sv_cvar fx_count IN 0
pb_sv_cvar fx_debugBolt IN 0
pb_sv_cvar fx_freeze IN 0
pb_sv_cvar fx_mark_profile IN 0
pb_sv_cvar fx_profile IN 0
pb_sv_cvar g_compassshowenemies IN 0
pb_sv_cvar g_debugBullets IN 0
pb_sv_cvar g_debugDamage IN 0
pb_sv_cvar g_debugLocDamage IN 0
pb_sv_cvar inertiaAngle IN 0
pb_sv_cvar inertiaDebug IN 0
pb_sv_cvar mantle_debug IN 0
pb_sv_cvar melee_debug IN 0
pb_sv_cvar missileJavClimbCeilingDirect IN 0
pb_sv_cvar pickupPrints IN 0
pb_sv_cvar player_adsExitDelay IN 0
pb_sv_cvar player_breath_fire_delay IN 0
pb_sv_cvar player_dmgtimer_minScale IN 0
pb_sv_cvar player_footstepsThreshhold IN 0
pb_sv_cvar player_move_factor_on_torso IN 0
pb_sv_cvar player_scopeExitOnDamage IN 0
pb_sv_cvar player_sprintRechargePause IN 0
pb_sv_cvar player_sustainAmmo IN 0
pb_sv_cvar player_turnAnims IN 0
pb_sv_cvar r_blur IN 0
pb_sv_cvar r_brightness IN 0
pb_sv_cvar r_dof_tweak IN 0
pb_sv_cvar r_filmUseTweaks IN 0
pb_sv_cvar r_fullbright IN 0
pb_sv_cvar r_glowTweakBloomDesaturation IN 0
pb_sv_cvar r_glowTweakEnable IN 0
pb_sv_cvar r_glowUseTweaks IN 0
pb_sv_cvar r_lockPvs IN 0
pb_sv_cvar r_norefresh IN 0
pb_sv_cvar r_portalWalkLimit IN 0
pb_sv_cvar r_showLightGrid IN 0
pb_sv_cvar r_showMissingLightGrid IN 0
pb_sv_cvar r_showPortals IN 0
pb_sv_cvar r_singleCell IN 0
pb_sv_cvar r_skipPvs IN 0
pb_sv_cvar r_sun_from_dvars IN 0
pb_sv_cvar r_texFilterDisable IN 0
pb_sv_cvar r_texFilterMipBias IN 0
pb_sv_cvar r_zfar IN 0
pb_sv_cvar ragdoll_debug IN 0
pb_sv_cvar sc_showDebug IN 0
pb_sv_cvar sc_showOverlay IN 0
pb_sv_cvar sv_cheats IN 0
pb_sv_cvar ui_allow_classchange IN 0
pb_sv_cvar ui_allow_teamchange IN 0
pb_sv_cvar ui_hud_hardcore IN 0
pb_sv_cvar ui_showList IN 0
pb_sv_cvar ui_uav_allies IN 0
pb_sv_cvar ui_uav_axis IN 0
pb_sv_cvar ui_uav_client IN 0
pb_sv_cvar vehDebugClient IN 0
pb_sv_cvar vehHelicopterInvertUpDown IN 0
pb_sv_cvar vehHelicopterTiltFromFwdAndYaw IN 0
pb_sv_cvar vehTextureScrollScale IN 0
Then restart your server, and you would be protected from this exploit.
I won't post how to do the exploit, because there are SO MANY servers that this exploit will work on, and having sv_cheats set to 0 in your server config does NOT prevent it, it needs to be in your PB config.
//Credits- Merciless Clan
What does the exploit do?
Basically allows players to set any command to any value, it will be set on for them only, and will work for one round/map. But what's to stop someone from setting up a bind to keep doing it?
The only way to prevent this is by adding these lines to your pb server config file: (pbsv.cfg found in CoD4/pb folder)
pb_sv_cvar aim_autoaim_debug IN 0
pb_sv_cvar aim_autoaim_enabled IN 0
pb_sv_cvar aim_automelee_debug IN 0
pb_sv_cvar aim_lockon_debug IN 0
pb_sv_cvar aim_slowdown_debug IN 0
pb_sv_cvar bg_shock_lookControl IN 0
pb_sv_cvar bg_shock_lookControl_maxpitchspeed IN 0
pb_sv_cvar bg_shock_lookControl_maxyawspeed IN 0
pb_sv_cvar bg_shock_sound IN 0
pb_sv_cvar cg_airstrikeKillCamNearBlurStart IN 0
pb_sv_cvar cg_constantSizeHeadIcons IN 0
pb_sv_cvar cg_debug_overlay_viewport IN 0
pb_sv_cvar cg_debugevents IN 0
pb_sv_cvar cg_debugposition IN 0
pb_sv_cvar cg_drawHealth IN 0
pb_sv_cvar cg_drawThroughWalls IN 0
pb_sv_cvar cg_gun_move_f IN 0
pb_sv_cvar cg_gun_move_minspeed IN 0
pb_sv_cvar cg_gun_move_r IN 0
pb_sv_cvar cg_gun_move_rate IN 0
pb_sv_cvar cg_gun_move_u IN 0
pb_sv_cvar cg_gun_ofs_f IN 0
pb_sv_cvar cg_gun_ofs_r IN 0
pb_sv_cvar cg_gun_ofs_u IN 0
pb_sv_cvar cg_gun_x IN 0
pb_sv_cvar cg_gun_y IN 0
pb_sv_cvar cg_gun_z IN 0
pb_sv_cvar cg_heliKillCamNearBlurStart IN 0
pb_sv_cvar cg_laserforceon IN 0
pb_sv_cvar cg_thirdperson IN 0
pb_sv_cvar ehDebugServer IN 0
pb_sv_cvar fixedtime IN 0
pb_sv_cvar fx_count IN 0
pb_sv_cvar fx_debugBolt IN 0
pb_sv_cvar fx_freeze IN 0
pb_sv_cvar fx_mark_profile IN 0
pb_sv_cvar fx_profile IN 0
pb_sv_cvar g_compassshowenemies IN 0
pb_sv_cvar g_debugBullets IN 0
pb_sv_cvar g_debugDamage IN 0
pb_sv_cvar g_debugLocDamage IN 0
pb_sv_cvar inertiaAngle IN 0
pb_sv_cvar inertiaDebug IN 0
pb_sv_cvar mantle_debug IN 0
pb_sv_cvar melee_debug IN 0
pb_sv_cvar missileJavClimbCeilingDirect IN 0
pb_sv_cvar pickupPrints IN 0
pb_sv_cvar player_adsExitDelay IN 0
pb_sv_cvar player_breath_fire_delay IN 0
pb_sv_cvar player_dmgtimer_minScale IN 0
pb_sv_cvar player_footstepsThreshhold IN 0
pb_sv_cvar player_move_factor_on_torso IN 0
pb_sv_cvar player_scopeExitOnDamage IN 0
pb_sv_cvar player_sprintRechargePause IN 0
pb_sv_cvar player_sustainAmmo IN 0
pb_sv_cvar player_turnAnims IN 0
pb_sv_cvar r_blur IN 0
pb_sv_cvar r_brightness IN 0
pb_sv_cvar r_dof_tweak IN 0
pb_sv_cvar r_filmUseTweaks IN 0
pb_sv_cvar r_fullbright IN 0
pb_sv_cvar r_glowTweakBloomDesaturation IN 0
pb_sv_cvar r_glowTweakEnable IN 0
pb_sv_cvar r_glowUseTweaks IN 0
pb_sv_cvar r_lockPvs IN 0
pb_sv_cvar r_norefresh IN 0
pb_sv_cvar r_portalWalkLimit IN 0
pb_sv_cvar r_showLightGrid IN 0
pb_sv_cvar r_showMissingLightGrid IN 0
pb_sv_cvar r_showPortals IN 0
pb_sv_cvar r_singleCell IN 0
pb_sv_cvar r_skipPvs IN 0
pb_sv_cvar r_sun_from_dvars IN 0
pb_sv_cvar r_texFilterDisable IN 0
pb_sv_cvar r_texFilterMipBias IN 0
pb_sv_cvar r_zfar IN 0
pb_sv_cvar ragdoll_debug IN 0
pb_sv_cvar sc_showDebug IN 0
pb_sv_cvar sc_showOverlay IN 0
pb_sv_cvar sv_cheats IN 0
pb_sv_cvar ui_allow_classchange IN 0
pb_sv_cvar ui_allow_teamchange IN 0
pb_sv_cvar ui_hud_hardcore IN 0
pb_sv_cvar ui_showList IN 0
pb_sv_cvar ui_uav_allies IN 0
pb_sv_cvar ui_uav_axis IN 0
pb_sv_cvar ui_uav_client IN 0
pb_sv_cvar vehDebugClient IN 0
pb_sv_cvar vehHelicopterInvertUpDown IN 0
pb_sv_cvar vehHelicopterTiltFromFwdAndYaw IN 0
pb_sv_cvar vehTextureScrollScale IN 0
Then restart your server, and you would be protected from this exploit.
I won't post how to do the exploit, because there are SO MANY servers that this exploit will work on, and having sv_cheats set to 0 in your server config does NOT prevent it, it needs to be in your PB config.
//Credits- Merciless Clan
Comment