Simon Scannell, Niklas Breitfeld and Carl Smith

Counter-Strike: Global Offsets - A journey into exploiting the Source Engine


In this talk, we share our journey into Valve's Source Engine, which powers some of the most popular multiplayer games that attract millions of monthly players. We layout how to find, validate and exploit bugs and share details of a 100% reliable, wormable 1-click RCE chain.


Simon is a self-taught Vulnerability Researcher at SonarSource who is passionate about playing CTF, traveling, and sports. He has come up with ways to find 0days in some of the most popular web applications such as WordPress, MyBB, and Magento2. He has also developed exploits for the Linux Kernel and Counter-Strike: Global Offensive.