AeonLucid

Reverses and programs random things. Discord @AeonLucid.

[AeonLucid @AeonLucid]

The Marvel Rivals RCE exploit we found has been fixed with the latest update. They have now added a signature to the hotfixes to validate they come from a trusted origin.

[AeonLucid @AeonLucid]

@Angelsixtwofive Yeah basically, or lan party / with a vpn.

[AeonLucid @AeonLucid]

We discovered a zero-click RCE on Marvel Rivals.

Only requirement is being in the same network. Packet encryption is easily broken which allows injecting code into the game's dynamic hotfixing system.

[AeonLucid @AeonLucid]

Write up / technical details will follow once it has been patched. For more info see https://t.co/PAjbU5a5pw.

[AeonLucid @AeonLucid]

@Ludoonus179033 Can't help you with it.

[AeonLucid @AeonLucid]

Had some fun on @TheCycleGame today and wrote a blogpost https://t.co/AznLns52Bj about spawning items (for others) by exploiting CloudScript. I hope other issues are taken more seriously next time. #thecyclefrontier

[AeonLucid @AeonLucid]

@velddev @usernames I hate it

[AeonLucid @AeonLucid]

@velddev Time to write your own syntax which generates proto files, np.

[AeonLucid @AeonLucid]

@Reversity There is a solution.

[AeonLucid @AeonLucid]

@velddev Progress!

[AeonLucid @AeonLucid]

@OmidLive @ZChumYT

[AeonLucid @AeonLucid]

@iGio90

[AeonLucid @AeonLucid]

@ethanarbuckIe Like 4 years late, but did you get anywhere with this?

[AeonLucid @AeonLucid]

@yeahright516 ?

[AeonLucid @AeonLucid]

@rh0main @fridadotre @LIEF_project Awesome stuff! I had most of these things as well but this is way more professional. Makes my planned blog post useless though. Learned from it nonetheless, thank you.

[AeonLucid @AeonLucid]

@sundhaug92 @rh0main @fridadotre It was not unexpected but that does not make it any easier.

[AeonLucid @AeonLucid]

@rh0main @fridadotre Did you also notice that the detection happens in different orders (or some not at all) based on the stack pointer?

[AeonLucid @AeonLucid]

@rh0main @fridadotre Looking good. Does it also not kick you after a while when in game? I've attempted bypassing PokemonGO as well with emulation and writing a tweak with my findings. However after patching all integrity checks during initialization, I found out there was more and got blocked.

[AeonLucid @AeonLucid]

@jamiebishop123 They send some info to the server that can be used to identify if the app was sideloaded, but I don't know if they act on it.

[AeonLucid @AeonLucid]

@iGio90 Congrats friend😁