- Apr 26, 2015
- 1,029
- 896
- 216
I don't think anyone knows it but here we go. The Teamspeak client automatically reports cracked servers (servers with a high MaximumClients) that it connects to.
The domain in question is reportpiracy-env.elasticbeanstalk.com.
Let's say I try to connect to http://r4p3.net/forum/exploits/47/strange-teamspeak-server-much-1337-h4x111-o/1024/.
The client will send a POST request to http://reportpiracy-env.elasticbeanstalk.com/ReportPiracy.
This POST request will contain a json object.
Here it is for that server :
Code:
{ "serverPort" : 9988, "serverIP" : "192.158.30.154", "serverDNS" : "192.158.30.154", "serverVersion" : "18446744073709551615", "license" : 0, "slotCount" : 1337, "violationType": 1 }It that case it won't do much because the serverVersion is not a valid Long value.
So in the end add reportpiracy-env.elasticbeanstalk.com to your host file
(clientside of course)Here is some additional work on it :
Code:
enum LicenseViolationType {
NO_VIOLATION = 0,
SLOT_VIOLATION,
SLOT_SUSPICION
};
Code:
#!/bin/bash
json='{ "serverPort" : 9988, "serverIP" : "192.158.30.154", "serverDNS" : "192.158.30.154", "serverVersion" : "18446744073709551615", "license" : 0, "slotCount" : 1337, "violationType": 1 }'
#serverport : signed int, no port restriction
#serverip : string
#serverdns : string
#serverversion : signed long int, no restriction
#licence : signed int, no restriction 0 : No licence ; 1 : Licenced Hosting Provider ; 2 : Offline license ; 3 : NPL
#slotCount : signed int, no restriction
#violationType : signed int, no restriction
#uses jackson https://github.com/FasterXML/jackson/blob/master/README.md
curl -v 'http://reportpiracy-env.elasticbeanstalk.com/ReportPiracy' -H 'Accept-Language: en-US,*' -H 'Connection: keep-alive' -H 'Host: reportpiracy-env.elasticbeanstalk.com' -H 'User-Agent: Mozilla/5.0' -H 'Content-Type: application/json' --data "$json"
Code:
com.teamspeak.reportpiracy.ReportPiracy.doPost(ReportPiracy.java)
com.teamspeak.reportpiracy.filter.ReportPiracyFilter.doFilter(ReportPiracyFilter.java)
com.teamspeak.reportpiracy.json.JSON_newReport
Apache Tomcat/7.0.27
org.codehaus.jackson
javax.servlet.http.HttpServlet.service
org.apache.logging.log4j.core.web.Log4jServletFilter.doFilter
Last edited:
