I used to administrate CS 1.6 until a few years ago. I got a question concerning amx_exec. I thought cl_filterstuffcmd basically killed any usage admin slowhacking?
or is it that most nosteam cs 1.6 client have it set to 0 ?
It seems like yes most of the "slowhack" methods have been patched out, but knowing the demographics of the playerbase I wouldn't be suprised if there are some semi-secret 0days.
Honestly I wasn't aware of cl_filterstuffcmd being a thing, though when set to 0 it's still possible to change the settings it protects (motd_write,cl_filterstuffcmd,bind,unbind,unbindall,connect): I expect you could just run a command to create an alias containing one of those, and then run the alias, or include a malicious .cfg in the mod content and exec it remotely.