3 ms·
TLDR: they used a conventional buffer overflow attack on their EULA to install a network hook that downloads and patches their game. This is what security rese
by jnwatson 6y ago
TLDR: they used a conventional buffer overflow attack on their EULA to install a network hook that downloads and patches their game.
This is what security researcher/CNO devs do every day, but without the source code.
- beaconstudios 6y agoincluding the "no NULLs in the buffer" part, which is typical shellcode rewriting. Sometimes I forget that most developers nowadays didn't start out learning to hack, or even learning to program as teenagers. Sucks for them I guess - security contains some of the coolest, most fun programming techniques.