Old School RuneScape Steam version - Finding all things 3D
🗣alcohol_enthusiast_

Awesome series! Regarding part 2, is there any benefit to reimplementing the w2s function rather than calling the function with 3d coordinates directly? Or are you just doing it like this since you're not injected into the game?

Also, are you using Ghidra in the screenshot where you find what references are writing to the text pos arrays?

Thanks for the great content!
👤micaww

Part 3 of my series. It refers back to the older posts a lot so feel free to read them all if you got the time, it's a long series though!
👤alcohol_enthusiast_


🎖@malwr

Analyzing And Micropatching CVE-2021-26897
🗣m2r3t1

would be interesting to know how many users this service has...
👤tansim


🎖@malwr

Exfiltrate files using the DNS
🗣w8rbt

In reality, how would this be protected against? I'm still nub when it comes to the net sec side of this business. Would using a limited private recursive server that prevented lookups for any but a whitelist be the most secure? Not all DNS servers will respond with the complete zone file to allow for the recursive server to do the lookup so that doesn't seem like a viable option.
👤notdedicated

For additional information and practical application, you can refer to the TryHackMe Room - DNS Manipulation

For information on a likely hijacked reddit account, you can refer to w8rbt's profile which was registered 6 years ago yet only started posting 2 months ago, and has posted nothing aside from article promotion.
👤Reelix

So as long as enclave rule sets are defined specifically to only allow the DNS port to appropriate upstream DNS, this would fail.
👤Jon2109


🎖@malwr

FAST FLUX
https://www.blueliv.com/cyber-security-and-cyber-threat-intelligence-blog-blueliv/fast-flux/


ℹ️ Sent from one of our members


🎖@malwr