Live data from Hacker News

Hacking GTA V RP Servers Using Web Exploitation Techniques

nullpt.rs

1–10 of 40 posts

Re: Hacking GTA V RP Servers Using Web Exploitation Techniques

#3
I miss these kinda posts, so rare now.

I know XSS is dying due to CORS and DLL injection is mooted by ALSR, that API's are usually authenticated and authorized, but damn...

I wish there was a more collective place to showcase modern exploits, they just hit nice in the feelies.

Re: Hacking GTA V RP Servers Using Web Exploitation Techniques

#5
it's nice seeing someone open with telling everyone that GTA V is some of the most poisoned online gameplay with regards to cheating.

I don't agree with the conclusion that it's because it's peer-to-peer. that's not why -- it's because of lazy developer methods and a lower prioritization of security effort.

the biggest genuine effort that Rockstar puts into anti-cheat effort is an occassional memory-structure shuffle to kick sand into cheat-engine users eyes, and the occassional honey-pot that bans a few hundred people -- and these efforts come after begging Rockstar for years to do something, and the most it accomplishes is selling additional copies of the already dirt-cheap game.

These ban cycles and 'enforced ignorance' to the problem nets them more profit than it would otherwise; disenchanted players play less, reducing infrastructure costs -- and banned players buy another 2 dollar copy of the game -- but it kills user experience outside of single player entirely.

They don't care. I get it, but it sucks -- and it's not some GTA6 thing, they never cared.

Re: Hacking GTA V RP Servers Using Web Exploitation Techniques

#6
post #5

it's nice seeing someone open with telling everyone that GTA V is some of the most poisoned online gameplay with regards to cheating. I don't agree with the conclusion that it's because it's peer-to-peer. that's not why -- it's because of lazy developer methods and a lower prioritization of security effort. the biggest genuine effort that Rockstar puts into anti-cheat effort is an occassional memory-structure shuffle…

Rockstar doing something about cheaters on their online experience won't affect a thing for what this post is talking about. The exploit in this post is for FiveM servers, a third-party mod. The interactions on here are not usually peer-to-peer.

Re: Hacking GTA V RP Servers Using Web Exploitation Techniques

#7
post #5

it's nice seeing someone open with telling everyone that GTA V is some of the most poisoned online gameplay with regards to cheating. I don't agree with the conclusion that it's because it's peer-to-peer. that's not why -- it's because of lazy developer methods and a lower prioritization of security effort. the biggest genuine effort that Rockstar puts into anti-cheat effort is an occassional memory-structure shuffle…

Yeah, they absolutely don't care. It cannot be hard to detect griefing and obnoxious cheating by just looking at player behavior. How hard can it be to detect 90000000000 in-game dollars to be added to players, how hard can it be to detect that someone is blowing up everyone in the server, ... They just don't care, and it's a shame because GTA V still holds up as a fantastic game even after all these years.

Re: Hacking GTA V RP Servers Using Web Exploitation Techniques

#8
post #5

it's nice seeing someone open with telling everyone that GTA V is some of the most poisoned online gameplay with regards to cheating. I don't agree with the conclusion that it's because it's peer-to-peer. that's not why -- it's because of lazy developer methods and a lower prioritization of security effort. the biggest genuine effort that Rockstar puts into anti-cheat effort is an occassional memory-structure shuffle…

[deleted]

Re: Hacking GTA V RP Servers Using Web Exploitation Techniques

#9
post #3

I miss these kinda posts, so rare now. I know XSS is dying due to CORS and DLL injection is mooted by ALSR, that API's are usually authenticated and authorized, but damn... I wish there was a more collective place to showcase modern exploits, they just hit nice in the feelies.

ASLR doesn't stop DLL injection.

Re: Hacking GTA V RP Servers Using Web Exploitation Techniques

#10
post #9
post #3

I miss these kinda posts, so rare now. I know XSS is dying due to CORS and DLL injection is mooted by ALSR, that API's are usually authenticated and authorized, but damn... I wish there was a more collective place to showcase modern exploits, they just hit nice in the feelies.

ASLR doesn't stop DLL injection.

I think GP confused DLL injection with return to libc.

I see why; in return to libc, which is prevented by ASLR, you are injecting the control of flow into the middle of a DLL(that DLL is libc). The terminology is a little confusing.

Post reply on HN