Yeah you would definitely have to find some kind of exploit, which is pretty hard to do. As stated before clientside and shared files are both sent to your game (LZMA compressed with a few added bytes of random data, which can be uncompressed), but server files you can't access directly.