Project X Forums

Hello everyone! Long time ago i was a PX 0.8.0 tester and i founded a critical 0day bug in Entuser's scripting engine (EAX compiler), i wrote him at the moment his was online, he told that he will fix it, but nothing was done. Few weeks before this post i play some games with PX and remembered that issue. I go to the Entuser editors to a check bug presense and it is in his place.. (sorry my bad english). In few words - bug allows to control players PCs who start game with bad PX script, owner of script(host) can do anything that WA system process can . Now im working on exploit that will demonstrate the power of this bug. I plan to fix compiler and some inner PX problems that allow such bugs. I will upload fix for wkPX.dll here, then i will upload code of exploit next week after this patch.

Hello DUP, thanks for pointing this issue, not many players are active nowadays, we are maybe 20-30 people at max, and no one has ill intents towards each other. But please let us know about your work, looking forward to getting PX even better.

Exploit is ready, i thought make it more powerfull - download some stuff from internet, launch it (it will do some things like copy some valuable files from your computer to zip archive on your desktop, to demonstrate a level of danger of this issue), but i rejected this, because i will publish these sources and i dont want someone will use this "with a light hand" (ready to use and working thing for bad things).

Exploit change your desktop wallpaper to black screen, i think this is enought for demonstration.

I begin work on patch for PX. I don't think it will be included in official bundle (but i hope), I will make it as an extension of wkPX module for now (wormkit module file that will fix problems in PX).

After that work done i will publush exploit code and details about it.

(Busy at work, may delay with the release

stay tuned