[DragonHunter]

Hey folks whats up,

As you might know or not from time to time I'm now looking at how good network security is being done
And for right now it's not looking so good 😵

Well so I was thinking... I play minecraft... why not have a bit of fun in there and see what's up?
I never knew minecraft had their connection encrypted which was fun to know it was

So I went ahead and did a few days of research and having fun with different servers and surprisingly I noticed a few things
At the very end when I had everything decrypted I was at the point of the login HOORAY... or not... appearently minecraft was hashing their ServerId+AES+Public RSA Key...
So yeah... there was where the fun ended for me 😑

What I was able todo:
Change the AES and RSA Key to anything I wanted it to be
Dumping the login information
Dumping the AES/RSA (Modulus + Exponent)
Getting the server protocol version (game version)
Getting the IP Address / Port of where minecraft wants to connect to
Spoofing RSA-1024bit and Spoofing AES-128bit
Re-building the packets
Verifying if spoofs were successfull
Decrypting and processing the data/packets
Cloning myself into a different server (look at image below)
Decrypt and Encrypt again

The connection is encrypted with AES 128bit and RSA 1024bit
I'm having the AES-128bit stealthy spoofed but that did not fix my problem for the RSA-1024bit which I really needed for gathering everything else
I had to spoof the RSA-1024bit otherwise I wouldn't get the AES-128bit key
So in short I'm currently stuck at a small problem... getting a bypass for the RSA-1024bit spoof
If I'm able to get the private key of the public key only thing I would be able to get ingame

Cloning a server example


The MITM and Game which shows "Not authenticated with Minecraft.net"


Minecraft server in Offline-Mode


Modifying encrypted data is possible 😎


Only in Offline-Mode I would be able to be being ingame, Hopefully I will fix the Hash issue soon for the login 🤝
Enjoy 🤝

[LethalNET]

Vouch for DH, He is a HQ & Legit programmer.
Good luck with this project mate looks pretty neat :)

[SIM-1456245]

Dude that is some deep haxor shit man. You are really ep1c ub3r l33t pr0 with this. Amazing. I was looking in this kind of things, but from the other side, making a safe connection, not hacking it.

[DragonHunter]

Dude that is some deep haxor shit man. You are really ep1c ub3r l33t pr0 with this. Amazing. I was looking in this kind of things, but from the other side, making a safe connection, not hacking it.

Thanks :)
You can look into my other project if you feel like you want to look at some security stuff
https://hackforums.net/showthread.php?tid=4004452

[SIM-1456245]

Thanks :)
You can look into my other project if you feel like you want to look at some security stuff
https://hackforums.net/showthread.php?tid=4004452

Cool, but I haven't really followed that one, and that thread is 2.0 of some project, I indeed have seen that thread, but I quickly understood that it is an update of another thread.

[Temploit]

To sum it up, this is just fucking amazing ._. Astonishing job as always!

[NETExplorer]

Vouch for DH, He is a HQ & Legit programmer.
Good luck with this project mate looks pretty neat :)

How can you vouch on this thread?

😧😧😧😧

[Bonfire]

I've seen your other works and they never seem to disappoint. Although I barely understand whats going on here, very nice job man!

[0xBB]

So that's what you were doin on twitch filthy hax0r. Good job as always Dergun. 😁

[DragonHunter]

Right now I'm streaming what I can do with this pretty much :P

[iVision]

Are you using hooks or use your SOCKS5 local proxy attack thingy you showed a while ago? Looks good;)

[MaxX0r]

Nice one dragon, as always. ;) good job

[FacetheBass]

This is brilliant.I wish I had the drive to learn something like this.Excellent job man.

[LethalNET]

How can you vouch on this thread?

😧😧😧😧

Well simply because.... I can 🤣

[Justice.]

Wow, fucking amazing, astonishing work, wtf. :D