TeamSpeak 3 Client <= 3.0.19.1 Freeze 2017-06-20

[Asphyxia]

Asphyxia submitted a new resource:

TeamSpeak 3 Client <= 3.0.19.1 Freeze - TeamSpeak 3 Client <= 3.0.19.1 Freeze

The download link is right here, for registered users only. Registering is free, so register if interested:

Here is a video demonstration:

All that you need:

1. The EXE file downloaded from above.
2. Access to a server with TCP port 10011 open.
3. The serveradmin username (default: serveradmin) and password.
4. Then just do something like:

[url=ts3server://127.0.0.1]https://www.youtube.com/watch?v=-qFeUHEiPiM[/url]

...

Read more about this resource...

 

[Alligatoras]

Nice it worked fine....but i have a question....what if the server query port is not the default (10011) but it is different?

 

[Asphyxia]

Nice it worked fine....but i have a question....what if the server query port is not the default (10011) but it is different?

Want me to make a new version that supports a custom query port?

 

[Alligatoras]

Want me to make a new version that supports a custom query port?

No sir but thank you for asking!
For me at least i have the default port. It was just a general question because i know people who have changed that!

 

[Asphyxia]

This is a PoC (Proof of Concept) tool, so it uses the default port 10011 and the default virtual server (1).
You are welcome though, if anyone else would like the support of a custom port I may be willing to do that.

 

[GuruGod]

Yes, can you make a custom port? and how do we find there server query port?

 

[Laszl0w]

Hahaha,you are still freaking awsome dude

 

[Harrasan]

Good catch! But actually not very surprising. Since the TS client seems to do all the downloading of images etc in the main thread it's logical that the UI freezes. I'm not sure if TS will actually fix this, but they should. I guess whoever programmed the client is not the brightest candle on the cake. Stuff like this is supposed to be done asynchronous in another thread.

I just hope we won't see this crash out in the wild too often as it makes the entire server pretty much unusable for everyone.

 

[kaidinak]

TL;DR? If i change serverquery port, am i safe?

 

[Derp]

TL;DR? If i change serverquery port, am i safe?

This has nothing to do with the server's serverquery port! This executable file will simply convert YOUR server to a 'freeze server"

Note: It needs permissions to do so! that's why serveradmin data are needed

So basically the full PoC is>

1- Create a server on localhost
2- Run the executable file to "convert" your server to a crash server
3- Try to connect to it... crash
4- Done

The executable file acts as a "query bot". It will establish a connection to your server and it will keep changing the server's banner, thus making your client start downloading all the banners, leading to a client freeze.

-Derp

 

[CreeperTheKing]

Can u make one for client freeze, not server freeze?

 

[Alligatoras]

Can u make one for client freeze, not server freeze?

Maybe this will help you but as i know it works for version 3.0.19.0 ... probably need update to version 3.0.19.1.
What this script does is crashing the Teamspeak Client. https://r4p3.net/threads/r4p3-client-crash-anti-crash-3-0-19-0.1979/

 

[Laszl0w]

It freezes every version of Client it could be 3.0.19-3.0.19.1.

Just take care from unknown links from TeamSpeak and you wont able to freeze.

If you want to fix unsupported character crash please update your client to 3.0.19.1 version or use R4P3 Plugin.

 

[xPRoTeiNN]

Is this crashing clients lower then 3.0.19? For example 3.0.18.2? Did anyone tried it?

 

[Asphyxia]

Is this crashing clients lower then 3.0.19? For example 3.0.18.2? Did anyone tried it?

Yes, sure is.
This is due to image rendering/flooding.

 

[xPRoTeiNN]

İ think it should not crash under 3.0.18.1 because of the way they blocked the rfi exploit

 

[Asphyxia]

İ think it should not crash under 3.0.18.1 because of the way they blocked the rfi exploit

Well, you can try?

 

[Laszl0w]

Im sure if this exploit freeze the 3.0.19.1 then it will freeze 3.0.18.1 for sure.
But give it a try

Its working with PHP too
RIP TeamSpeak.

 

[xPRoTeiNN]

İ will try i thought that making a php version of it if you did it can you share it

 

[Capol]

no one will click the link bro still not good crash