1 Attachment(s)
(TimeAttack)Nexon's Cert with revoke list(Valid until 6/9/11)
To be honest all of the key's to nexon's castle *should* have been found AGES ago,But i guess all the the injector/dll Hack's delayed the interest in something like this.
Btw just to let you all know,there's also a nice little buffer overflow in the wild for more than 1 nexon game ATM.(Has to do with NXMESSENGER VULNERABILITIES APPARENTLY)
So here i am announcing the start of a new project ill be working on,kicking it off with (The release of the file attached) ,not finished yet,And for any one wishing to have a pwn off,here is the only rule to this contest, you have to defeat the encryption itself(Not PWN it with an Overflow/Exploit/Bypass).
You have all of 14 day's to obtain all of the proper Signing Key's/Info .If someone does this successfully They can sign there own REVOKE LIST, allowing the whitelisting/de-whitelisting of even Nexon's own key pair to stop them from running there arb. code at login,so we can be sure no ban's will result from this.If we find the trusted key's before they are revoked we can sign are own revoke list, the nexon TRUSTED CONTENT system will be BROKEN FOREVER when this happen's(AKA:NO EASY SOLUTION FOR NEXON THIS TIME)
The valid cert is attached to this thread for those wishing to download it.
In order to even have a chance at using this you'll need the Nexon Algorithm's,that is posted in my threadhttps://www.mpgh.net/forum/207-combat...blic-keys.html
//Some Important key's regarding the CRYPTO/ALGO of content(Used in the cert system)
KeyID=97 d0 6b a8 26 70 c8 a1 3f 94 1f 08 2d c4 35 9b a4 a1 1e f2
Signature Algo=sha1RSA
Signature Hash Algo=sha1
This cert is only active for another 14 day's,but go ahead and have a look around anyway.Provide's the revoke list for C.A. So now you can check if it's revoked.The new cert will likely be issued on or after September 6th,the last day the cert i posted is valid.It will expire on September 6 4:00:02 AM.
https://www.virustotal.com/file-scan/...c63-1314121093
If anyone has any question's feel free to contact me Via Pm/This Thread.
