[Preview] Minecraft 1.7.9 - Man In The Middle Attack

DragonHunter · 2014-02-08T20:15:38+00:00

Hey folks whats up, As you might know or not from time to time I'm now looking at how good network security is being done And for right now it's not looking so good Well so I was thinking... I play minecraft... why not have a bit of fun in there and see what's up? I never knew minecraft had their connection encrypted which was fun to know it was So I went ahead and did a few days of research and having fun with different servers and surprisingly I noticed a few things At the very end when I had everything decrypted I was at the point of the login HOORAY... or not... appearently minecraft was hashing their ServerId+AES+Public RSA Key... So yeah... there was where the fun ended for me What I was able todo: Change the AES and RSA Key to anything I wanted it to be Dumping the login information Dumping the AES/RSA (Modulus + Exponent) Getting the server protocol version (game version) Getting the IP Address / Port of where minecraft wants to connect to Spoofing RSA-1024bit and Spoofing AES-

FacetheBass
Guest

Feb 9, 2014 07:29 AM

This is brilliant.I wish I had the drive to learn something like this.Excellent job man.

Next Oldest | Next Newest

New Reply

Possibly Related Threads...
Thread / Author	Replies	Views	Last Post
[.NET] [Sneak Preview] Darkweb 5.0 [Sneak Preview] by TheBlackMarketNov 21, 2016 02:35 AM	23	912	Nov 21, 2016 02:35 AM Last Post: Icoderz
[Python] Intercepting packets using man in the middle attack. by demiurge666Jul 3, 2016 09:57 PM	20	786	Jul 3, 2016 09:57 PM Last Post: TERR
[C#] [OpenSource] ReRoutor - Man-In-The-Middle Helper & Proxy library by DragonHunterJul 12, 2015 10:29 PM	8	544	Jul 12, 2015 10:29 PM Last Post: salmoneus

View a Printable Version
Export as PDF
Subscribe to this thread

Login
Username/Email:
Password:	Lost Password?
	Remember me