Galactical Bug Hunting: How we discovered new issues in CD Projekt Red’s Gaming Platform
3 years ago by testeronious to c/security
security
@programming.dev
2202
173
93
A community for discussion about cybersecurity, hacking, cybersecurity news, exploits, bounties etc.
Rules :
- All instance-wide rules apply.
- Keep it totally legal.
- Remember the human, be civil.
- Be helpful, don't be rude.
Icon base by Delapouite under CC BY 3.0 with modifications to add a gradient
go to feed...
security
@programming.dev
2202
173
93
A community for discussion about cybersecurity, hacking, cybersecurity news, exploits, bounties etc.
Rules :
- All instance-wide rules apply.
- Keep it totally legal.
- Remember the human, be civil.
- Be helpful, don't be rude.
Icon base by Delapouite under CC BY 3.0 with modifications to add a gradient
go to feed...
As soon as they mentioned
FixDirPrivilegesas a command sent over IPC to a privileges process, I knew it was over. Being able to give read-write access to "Everybody" simply by sending a command is asking for trouble. They might've even taken the long route of creating a DLL that the privileged process loads. Is it no possible to replace the privileged process altogether with any random binary?Anti Commercial AI thingy
CC BY-NC-SA 4.0
save