Redit Posted November 2 Share Posted November 2 What is the exploit? In CPythonLauncher::RunMemoryTextFile a string is used to compile c_pcFileData, so the exploit starts here: "exec(compile(" Hackers can easily search for the string in memory & compile scripts using the memory adress of c_pcFileData This looks like an intentional backdoor left by one of the game devs or maybe even the leaker of the files "Rain" Why? It's hard to believe anyone would trouble to concatenate so many strings instead of just using Py_CompileString If you pay attention the rest of the code is fine and uses the python api instead of some weird shells Seems like there are still many exploits in m2 Hope you learned something new today, now here is the fix you paid for: //ScriptLib/PythonLauncher.cpp search for: This is the hidden content, please Sign In or Sign Up //replace with this: This is the hidden content, please Sign In or Sign Up 2 1 Quote Link to comment Share on other sites More sharing options...
Premium xrhstos000 Posted November 2 Premium Share Posted November 2 hmmm Quote Link to comment Share on other sites More sharing options...
muczor Posted November 2 Share Posted November 2 ty Quote Link to comment Share on other sites More sharing options...
hesap123a Posted November 3 Share Posted November 3 thy Quote Link to comment Share on other sites More sharing options...
testo Posted November 3 Share Posted November 3 ty Quote Link to comment Share on other sites More sharing options...
Riot0x0 Posted November 5 Share Posted November 5 ty Quote Link to comment Share on other sites More sharing options...
Andrew Posted November 12 Share Posted November 12 ty Quote Link to comment Share on other sites More sharing options...
STH Posted Saturday at 05:52 PM Share Posted Saturday at 05:52 PM ty Quote Link to comment Share on other sites More sharing options...
AlexG Posted Tuesday at 05:18 AM Share Posted Tuesday at 05:18 AM ty Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.