endernon/wynntils-crafted-exploit-priv
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
An exploit demo that allows you to create fake wynntils crafteds with newlines in name. Credit to zatzou for it
2 commits 1 branch 0 tags 33 KiB
Rust 100%
Find a file
endernon a3ede9d5ad nerf poco
2024-09-19 21:24:48 +01:00
src nerf poco 2024-09-19 21:24:48 +01:00
.gitignore first commit 2024-09-19 21:17:36 +01:00
Cargo.lock first commit 2024-09-19 21:17:36 +01:00
Cargo.toml first commit 2024-09-19 21:17:36 +01:00
README.md nerf poco 2024-09-19 21:24:48 +01:00

README.md

What is this?

This thing is an example to exploit an issue in Wynntils

How does it work?

With the new Wynntils encoding, Wynntils DOES NOT validate crafted names for special characters like newlines. This can be exploited.
Credit to zatzou for finding this. Shits crazy, nerf poco