Minecraft Force-OP Exploit!

We investigate how Herobrine got OP on my server and we look back at the network protocol vulnerability I reported in march.

vktec:    / vktec  
Minecraft Protocol Vulnerability:    • Crafting a Minecraft 0day...  
Minecraft:HACKED Playlist:    • I Spent 100 Days Hacking Minecraft  

Episode 11:
00:00 - Let's Play: State of Server
03:56 - Let's Play: Massive Roller Coaster!
06:06 - Brainstorming Force-OP Methods
07:39 - Discovering XSS Payload
09:50 - Debugging Root Cause in JavaScript
11:59 - Scanning for XSS Issues
13:39 - Let's Play: Spawn Griefing Mystery
14:23 - Another Minecraft Protocol 0day!
18:05 - AES/CFB8 Self-Synchronizing
20:26 - Security Research Conclusion

=[ ❤️ Support ]=

→ per Video:   / liveoverflow  
→ per Month:    / @liveoverflow  

=[ 🐕 Social ]=

→ Twitter:   / liveoverflow  
→ Instagram:   / liveoverflow  
→ Blog: https://liveoverflow.com/
→ Subreddit:   / liveoverflow  
→ Facebook:   / liveoverflow