Email or username:

Password:

Forgot your password?
All posts Catalin's posts Post Back to profile
Catalin Cimpanu

Minecraft RANDAR exploit lets you find the in-game location of any player by looking at how pieces of a broken block fall

Write-up: github.com/spawnmason/randar-e

Video: youtube.com/watch?v=maMpMOnIJD
21 April at 0:50 | Open on mastodon.social
9 comments
Simon

@campuscodi Wow. They should assign this vulnerability a CVE. Just in case it needs to be added to the Known Exploited Vulnerabilities Catalog.

What's next? Minecraft Denial of Service using a thousand TNT crates? (Honestly it is impressive that they discovered and verified this)

21 April at 0:55 | Open on infosec.exchange
Catalin Cimpanu

@simontsui Also needs a CSRB report about it. The last Minecraft bug was super entertaining

21 April at 1:02 | Open on mastodon.social
Simon

@campuscodi
CSRB: "Knock knock"
Microsoft: "Not again! Is it about Midnight Blizzard?"
CSRB: "Minecraft"

21 April at 1:03 | Open on infosec.exchange
Habrok

@simontsui @campuscodi
...
CSRB: "No, we're here about Minecraft. But what is it you were mentioning about Midnight Blizzard?"

21 April at 10:46 | Open on chaos.social
Lesley Carhart :unverified:

@campuscodi this is the stuff I really enjoy reading about in exploits

21 April at 10:08 | Open on infosec.exchange
Mark Koek

@hacks4pancakes @campuscodi that’s a really smart exploit, love it πŸ˜€ ; I started out hacking games too, trying to get infinite lives on Metal Gear and things like that, but this is on another level

21 April at 10:54 | Open on mastodon.nl
Florian Neumann :verified:
Armando

@campuscodi this reminds me of tea leaves reading or chicken bones tossing. Really scary actually.

21 April at 10:22 | Open on rollenspiel.social
🌱 Ligniform :donor:​

@campuscodi 2B2T back at it again for helping people find exploits I see

21 April at 10:47 | Open on infosec.exchange
Go Up