Minecraft RANDAR exploit lets you find the in-game...

Minecraft RANDAR exploit lets you find the in-game location of any player by looking at how pieces of a broken block fall

Write-up: https://github.com/spawnmason/randar-explanation

Video: https://www.youtube.com/watch?v=maMpMOnIJDE

Like 21 April at 0:50 | Open on mastodon.social

9 comments

Simon

@campuscodi Wow. They should assign this vulnerability a CVE. Just in case it needs to be added to the Known Exploited Vulnerabilities Catalog.

What's next? Minecraft Denial of Service using a thousand TNT crates? (Honestly it is impressive that they discovered and verified this)

21 April at 0:55 | Open on infosec.exchange

Catalin Cimpanu

@simontsui Also needs a CSRB report about it. The last Minecraft bug was super entertaining

21 April at 1:02 | Open on mastodon.social

Simon

@campuscodi
CSRB: "Knock knock"
Microsoft: "Not again! Is it about Midnight Blizzard?"
CSRB: "Minecraft"

21 April at 1:03 | Open on infosec.exchange

Habrok

@simontsui @campuscodi
...
CSRB: "No, we're here about Minecraft. But what is it you were mentioning about Midnight Blizzard?"

21 April at 10:46 | Open on chaos.social

Lesley Carhart :unverified:

@campuscodi this is the stuff I really enjoy reading about in exploits

21 April at 10:08 | Open on infosec.exchange

Mark Koek

@hacks4pancakes @campuscodi that’s a really smart exploit, love it 😀 ; I started out hacking games too, trying to get infinite lives on Metal Gear and things like that, but this is on another level

21 April at 10:54 | Open on mastodon.nl

Florian Neumann :verified:

@campuscodi hah, that's a clever finding!

21 April at 10:08 | Open on infosec.exchange

Armando

@campuscodi this reminds me of tea leaves reading or chicken bones tossing. Really scary actually.

21 April at 10:22 | Open on rollenspiel.social

🌱 Ligniform :donor:

@campuscodi 2B2T back at it again for helping people find exploits I see

21 April at 10:47 | Open on infosec.exchange

Go Up