4 ms·
Does the luascript interface have a vulnerability for actual remote code execution? Can someone launch calc.exe with the HUD API?
by vortico 8y ago
Does the luascript interface have a vulnerability for actual remote code execution? Can someone launch calc.exe with the HUD API?
- madrox 8y agoWhile this attack does not discuss that particular detail, there have been many documented methods for breaking out of the sandbox (you can google around to see citations). I think for most attackers getting access to the user's WoW API is the goal.
- vbezhenar 8y agoNo, you need to find another vulnerability to break from Lua sandbox.