endernon/wynntils-crafted-exploit-priv
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
An exploit demo that allows you to create fake wynntils crafteds with newlines in name. Credit to zatzou for it
3 commits 1 branch 0 tags 33 KiB
Rust 100%
Find a file
endernon 49c0009691 Update README.md
2024-09-20 16:36:50 +00:00
src nerf poco 2024-09-19 21:24:48 +01:00
.gitignore first commit 2024-09-19 21:17:36 +01:00
Cargo.lock first commit 2024-09-19 21:17:36 +01:00
Cargo.toml first commit 2024-09-19 21:17:36 +01:00
README.md Update README.md 2024-09-20 16:36:50 +00:00

README.md

IT DOES NOT WORK ANYMORE. Wynntils pushed a fix.

What is this?

This thing is an example to exploit an issue in Wynntils

How does it work?

With the new Wynntils encoding, Wynntils DOES NOT validate crafted names for special characters like newlines. This can be exploited.
Credit to zatzou for finding this. Shits crazy, nerf poco