
Research
/Security News
Contagious Interview Campaign Escalates With 67 Malicious npm Packages and New Malware Loader
North Korean threat actors deploy 67 malicious npm packages using the newly discovered XORIndex malware loader.
Download/Backup Saves on Steam Cloud
[!IMPORTANT] A critical security issue has been patched in v0.0.83. Please make sure you have updated to this version or later. Also, make sure to delete
session.sb
and re-generate (re-auth) it.
For supported games, Steam will automatically upload game saves to the cloud. This is intended for seamless playing across multiple devices but NOT as a form of backup. Assume your game save is corrupted by the game itself or you perform something cannot be undone. Once you close the game Steam will automatically uploads newest(corrupted) game saves to the cloud. That is basically game over if you haven't backup your save or unplug your Internet cord before you close the game. This is when steamCloudSaveDownloader(abbreviated as scsd) come to the rescue.
You can view and download your save files stored on Steam cloud here. This program automatically crawls the webpages and download if the files are outdated. A number of copies are kept locally in case something goes wrong. You can rollback your saves whenever anything goes wrong.
This program is available on PyPI. All you have to do is install Python and run.
pip install scsd
Linux and Windows executable can also be found on the release page
Simply run scsd -a <username>
to login to Steam. Then run scsd
to start downloading saves. The saves for each game will be stored within the data
directory with the corresponding AppID. If rotation is specified the old version of the file will have suffix .scsd_<version_num>
to the corresponding file name.
Please refer to Scheduled Run if you want to run scsd automatically at given time.
For more detail usages please reference Command Arguments and Config File
By running scsd -a <username>
scsd save a session file with NO password within. This session last approximately about a month if your IP has not been changed. Once expired scsd will notify you if the notification options are given.
Right now scsd supports the following notification system whenever scsd finishes the download process or encountered error. Please refer to Config File for setting options
The saves will be download and saved locally only if you execute scsd. scsd relies on external scheduler to run automatically.
Even though this program does not use Steam API directly. This program still complies to Steam maximum API calls limit (100,000) per day. This program will limit itself to 85% of the usage (which is 85,000). Once exceed the aforementioned limit, the program will stop sending requests to Steam.
In addition to that, the program will wait for a random amount of time (a few seconds) between each request. This will significantly lower chance for the program to be identified as DDoS attack and potentially ban your account. As a trade off, it might took awhile for all your cloud saves to be downloaded.
Docker image is available at Docker Hub. It has built in scheduler and will run scsd automatically at given time (At minute 39 past every 2nd hour).
Below is the minimal example for running within docker. This will bind mount the data
directory and run the authentication process.
mkdir data
docker run -d --name scsd -v ./data:/data -v /etc/localtime:/etc/localtime:ro hhhhojeihsu/scsd:latest
docker exec -it scsd scsd_auth <username>
/data
: Where the save files and program related files are located/config
: Where the configuration file is stored.
scsd.conf
within this directory and take it as config file.scsd.conf.default
. Which takes precedence after scsd.conf
, if co-exist.Name | Purpose | Default |
---|---|---|
PUID | Effective UID for scsd to run with | 1000 |
PGID | Effective GID for scsd to run with | 1000 |
CRON_VAR | Cron syntax for scheduled run | 39 */2 * * * |
AUTO_UPDATE | Set to true to enable scsd auto update | false |
FAQs
Steam Cloud Save Downloader
We found that scsd demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
North Korean threat actors deploy 67 malicious npm packages using the newly discovered XORIndex malware loader.
Security News
Meet Socket at Black Hat & DEF CON 2025 for 1:1s, insider security talks at Allegiant Stadium, and a private dinner with top minds in software supply chain security.
Security News
CAI is a new open source AI framework that automates penetration testing tasks like scanning and exploitation up to 3,600× faster than humans.