+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [.NET] [Preview] Minecraft 1.7.9 - Man In The Middle Attack (/showthread.php?tid=4048467)
Pages: Pages
1
2
[Preview] Minecraft 1.7.9 - Man In The Middle Attack - DragonHunter - Feb 8, 2014
Hey folks whats up,
As you might know or not from time to time I'm now looking at how good network security is being done
And for right now it's not looking so good 😵
Well so I was thinking... I play minecraft... why not have a bit of fun in there and see what's up?
I never knew minecraft had their connection encrypted which was fun to know it was
So I went ahead and did a few days of research and having fun with different servers and surprisingly I noticed a few things
At the very end when I had everything decrypted I was at the point of the login HOORAY... or not... appearently minecraft was hashing their ServerId+AES+Public RSA Key...
So yeah... there was where the fun ended for me 😑
What I was able todo:
Change the AES and RSA Key to anything I wanted it to be
Dumping the login information
Dumping the AES/RSA (Modulus + Exponent)
Getting the server protocol version (game version)
Getting the IP Address / Port of where minecraft wants to connect to
Spoofing RSA-1024bit and Spoofing AES-128bit
Re-building the packets
Verifying if spoofs were successfull
Decrypting and processing the data/packets
Cloning myself into a different server (look at image below)
Decrypt and Encrypt again
The connection is encrypted with AES 128bit and RSA 1024bit
I'm having the AES-128bit stealthy spoofed but that did not fix my problem for the RSA-1024bit which I really needed for gathering everything else
I had to spoof the RSA-1024bit otherwise I wouldn't get the AES-128bit key
So in short I'm currently stuck at a small problem... getting a bypass for the RSA-1024bit spoof
If I'm able to get the private key of the public key only thing I would be able to get ingame
Cloning a server example
![[Image: 6OHKb.png]](https://puu.sh/6OHKb.png)
The MITM and Game which shows "Not authenticated with Minecraft.net"
![[Image: 6OHNB.png]](https://puu.sh/6OHNB.png)
Minecraft server in Offline-Mode
![[Image: 6OI6R.jpg]](https://puu.sh/6OI6R.jpg)
Modifying encrypted data is possible 😎
![[Image: 6OJHG.png]](https://puu.sh/6OJHG.png)
Only in Offline-Mode I would be able to be being ingame, Hopefully I will fix the Hash issue soon for the login 🤝
Enjoy 🤝
* - LethalNET - Feb 8, 2014
Vouch for DH, He is a HQ & Legit programmer.
Good luck with this project mate looks pretty neat :)
* - SIM-1456245 - Feb 8, 2014
Dude that is some deep haxor shit man. You are really ep1c ub3r l33t pr0 with this. Amazing. I was looking in this kind of things, but from the other side, making a safe connection, not hacking it.
* - DragonHunter - Feb 8, 2014
(Feb 8, 2014 01:26 PM)Electroalek Wrote: Dude that is some deep haxor shit man. You are really ep1c ub3r l33t pr0 with this. Amazing. I was looking in this kind of things, but from the other side, making a safe connection, not hacking it.Thanks :)
You can look into my other project if you feel like you want to look at some security stuff
https://hackforums.net/showthread.php?tid=4004452
* - SIM-1456245 - Feb 8, 2014
(Feb 8, 2014 02:06 PM)DragonHunter Wrote: Thanks :)
You can look into my other project if you feel like you want to look at some security stuff
https://hackforums.net/showthread.php?tid=4004452
Cool, but I haven't really followed that one, and that thread is 2.0 of some project, I indeed have seen that thread, but I quickly understood that it is an update of another thread.
* - Temploit - Feb 8, 2014
To sum it up, this is just fucking amazing ._. Astonishing job as always!
* - NETExplorer - Feb 8, 2014
(Feb 8, 2014 01:22 PM)LethalNET Wrote: Vouch for DH, He is a HQ & Legit programmer.
Good luck with this project mate looks pretty neat :)
How can you vouch on this thread?
😧😧😧😧
* - Bonfire - Feb 8, 2014
I've seen your other works and they never seem to disappoint. Although I barely understand whats going on here, very nice job man!
* - 0xBB - Feb 8, 2014
So that's what you were doin on twitch filthy hax0r. Good job as always Dergun. 😁
* - DragonHunter - Feb 9, 2014
Right now I'm streaming what I can do with this pretty much :P
* - iVision - Feb 9, 2014
Are you using hooks or use your SOCKS5 local proxy attack thingy you showed a while ago? Looks good;)
* - MaxX0r - Feb 9, 2014
Nice one dragon, as always. ;) good job
* - FacetheBass - Feb 9, 2014
This is brilliant.I wish I had the drive to learn something like this.Excellent job man.
* - LethalNET - Feb 9, 2014
(Feb 8, 2014 03:28 PM)PatPositron Wrote: How can you vouch on this thread?
😧😧😧😧
Well simply because.... I can 🤣
* - Justice. - Feb 9, 2014
Wow, fucking amazing, astonishing work, wtf. :D