Hack/Exploit of TS Server

[Bebe S]

We had a user last night log on to our TS server but he was invisible, so we were unable to kick him off the server. He also was able to somehow either speak globally to all the channels/sub channels at one time, or direct which channels he wanted to talk to passworded or not. I don't believe he was able to hear what was said in the passworded channels but he was still being obnoxious by talking and playing his music very loudly. He was also able to send global txt messages without the server knowing who sent them. He was spamming these after everyone had muted their microphones and speakers. I do not believe he had server admin rights since he never kicked people or moved them from one channel to the other, and stuff like that, things that only people with those rights can do. One of our memebers briefly chatted with the guy and he didn't know who we were or even what game that we use the server for was, so I believe it was just a random hack...

If you have any advice or ways to prevent this from happening again please let me know. There is no password to log on to our TS server but besides putting one up is there anything else we can do to prevent this again?

[Poo Gas]

yea on my server i have the same problem. I did nottice that if you disconnect from your server and reconnect, you will be able to see him again and then you can bann him. That worked fine up till today when someone was doing the exploit thing very fast so when i would re connect, he would have it done before i can bann him.

I just put a password on my TS and now i dont have that problem.

Altho, i would like to know how they are doing that. They get on, make a unregesterd channel, go into it and then when they leave the channel there invisable :eek: :eek: :eek: And one time i was in the channel with one of the guys, and i was invisable and stuff. its cool!

but yea pain in the bottom exit port hole.

[Bebe S]

thanks for the tip. I'll try this method if he decides to come bother us again. Hopefully I can be quick about it and ban his IP ;)

Ok here's another link with people who had the same problem that I did and it answered most of my questions. I did do a search before my original post but i must have missed this one...

http://forum.goteamspeak.com/showthread.php?t=27428&highlight=hack

[razorcmw]

well i think you've hit the nail on the ehad there m8 - remove the permissions to create channel for unreg users ...... I have ;-)

[Glenn Snedden]

I too got this problem user last night. He started making channels and saying profane things, however he also started logging on and off and I was able to get his info. I manual added his IP to the ban list. I also disabled Guest creation of new channels to avoid this problem. I hoping that will alleviate the problem as suggest by other users. Their is definite a problem when a invisible user get on. I don't know if the user is accurately invisible when he logs on but as the individual logs on and off they are susceptible to identification info if you can catch them real quick. I suspect they are using a script of some kind to enable the invisibility.

[Zechariah]

I know this is like reviving a dead thread, but I'm doing this for the sake of others who might search the forum for a solution to the invisibility hack.

I have stumbled upon these hacks, and while I have informed the devs about it, in the meantime, I will tell you.

How it works: There is no script. It's a custom (or modified?) TeamSpeak Client.

Since it doesn't work with standard TS Clients, I go on...

How it's done: User joins server (with custom client), creates a channel with any name, creates another channel with the topic & description of the system msg for the previous channel. He now becomes invisible.

While removing (U) rights to create a channel will decrease this from happening, it won't stop it. This "hack" works for any class, U, R, even SA. There is no way of preventing this short of removing rights to create unregistered channels. I just tested this hack with registered channels instead of unregistered, and it didn't work. If they can't create an unregistered channel, they can't become invisible.

Also, as others have said above, there's only one way to get rid of an active invisible hacker. Rejoin server. When you rejoin, you'll have a few seconds before he vanishes again. Ban him during this time.

Hope this helps you folks.

PS: Mods: if you feel the 'how it's done' is inappropriate please feel free to remove it. It requires a custom client, so I didn't see the harm of explaining it.

[..SK8..]

if u updated your server and client u cant server 2.0.21.0 and client 2.0.32.60 version are the only versions they work on :) O and it doesnt have to be a custom client ;)