Cross Site Scripting in CS2

Cross Site Scripting (XSS) in CS2 merry Christmas everybody!! you can XSS in CS2 by setting your name on steam to any HTML (32 characters or under), going into a match, then calling a vote to kick yourself. if you don't know how to kick yourself, have a friend set his name to your HTML and vote to kick him. in this example i got a friend to set his username to an IP logger. below are the screenshots of name we used in game as well as the IP logger panel showing the XSS worked and got the IPs of our teammates This image has been resized. Click this bar to view the full image. The original image is sized 958x752.

На скриншоте форумный пост о том, как вставить HTML-тег в имя пользователя Steam в Counter-Strike 2 и через голосование за кик отобразить вредоносный контент. Автор утверждает, что использовал имя с IP-логгером и получил IP-адреса товарищей по команде, поэтому шутка построена на абсурдном и сомнительном праздничном «подарке» игрокам. EN: The screenshot shows a forum post explaining how to insert an HTML tag into a Steam username in Counter-Strike 2 and display malicious content through a kick vote. The author claims to have used a name containing an IP logger and obtained teammates' IP addresses, making the joke an absurd and dubious holiday “gift” to the players.

• @infosecmemes / 896 2023-12-11
• @ithueti / 11183 2023-12-11