Fuzzing Modern UDP Game Protocols with Snapshot-Based Fuzzers
1–10 of 18 posts
Re: Fuzzing Modern UDP Game Protocols with Snapshot-Based Fuzzers
#2Slightly off-topic and throwaway for legal reasons.
While reverse engineering the network protocol for Genshin Impact, I found at least a couple ways to cause memory access violations. It's really a pity most PC games aren't well sandboxed.
Re: Fuzzing Modern UDP Game Protocols with Snapshot-Based Fuzzers
#3Slightly off-topic and throwaway for legal reasons. While reverse engineering the network protocol for Genshin Impact , I found at least a couple ways to cause memory access violations. It's really a pity most PC games aren't well sandboxed.
Its a stolen game engine, not much in the way of confidence towards anything they do.
Re: Fuzzing Modern UDP Game Protocols with Snapshot-Based Fuzzers
#4Slightly off-topic and throwaway for legal reasons. While reverse engineering the network protocol for Genshin Impact , I found at least a couple ways to cause memory access violations. It's really a pity most PC games aren't well sandboxed.
And then you have people claiming that security/safety in game engine code is not important, therefore Rust has no benefits over C++ for games. Nonsense!
Re: Fuzzing Modern UDP Game Protocols with Snapshot-Based Fuzzers
#5The unchecked bounds example was just sad - I mean how hard is it to use common sense? Assume the entire packet is always tainted because it comes from an external source!
Re: Fuzzing Modern UDP Game Protocols with Snapshot-Based Fuzzers
#6Slightly off-topic and throwaway for legal reasons. While reverse engineering the network protocol for Genshin Impact , I found at least a couple ways to cause memory access violations. It's really a pity most PC games aren't well sandboxed.
And then you have people claiming that security/safety in game engine code is not important, therefore Rust has no benefits over C++ for games. Nonsense!
Reminds me when Morrowind caused file corruption issues.
Re: Fuzzing Modern UDP Game Protocols with Snapshot-Based Fuzzers
#7This reminds me of a pair of episodes on Darknet Diaries - Manfred[1] - ep. 7/8. Opened my eyes to how insecure games actually are (were?) and how the economy of virtual item trading moved from E-Bay to in-game transactions:
Re: Fuzzing Modern UDP Game Protocols with Snapshot-Based Fuzzers
#8Earlier quoted context omitted.
And then you have people claiming that security/safety in game engine code is not important, therefore Rust has no benefits over C++ for games. Nonsense!
Reminds me when Morrowind caused file corruption issues.
Reminds me when EVE Online deleted boot.ini and bricked player computers.
Re: Fuzzing Modern UDP Game Protocols with Snapshot-Based Fuzzers
#9Even the big games suffer from network-related vulnerabilities. One such example is GTA V. Exploits designed to crash people's games are widely used and accessible to pretty much anyone, and I wouldn't be surprised if one such exploit could have lead to a RCE in the past.
Re: Fuzzing Modern UDP Game Protocols with Snapshot-Based Fuzzers
#10Even the big games suffer from network-related vulnerabilities. One such example is GTA V. Exploits designed to crash people's games are widely used and accessible to pretty much anyone, and I wouldn't be surprised if one such exploit could have lead to a RCE in the past.
In GTA's case it may be even worse, as the p2p nature of the network may make it wormable.