Skip to content

Instantly share code, notes, and snippets.

View wrdg's full-sized avatar

Braden Herring wrdg

View GitHub Profile
@twist84
twist84 / e_map_id.hpp
Last active June 20, 2021 22:42
Halo MCC PC map ids
enum class e_map_id
{
_map_id_halo1_pillar_of_autumn = 0,
_map_id_halo1_halo,
_map_id_halo1_truth_and_reconciliation,
_map_id_halo1_silent_cartographer,
_map_id_halo1_assault_on_the_control_room,
_map_id_halo1_343_guilty_spark,
_map_id_halo1_the_library,
_map_id_halo1_two_betrayals,
@Arkensor
Arkensor / AR-ACE-CRED-PostMortem.md
Created October 21, 2022 17:47
Arma Reforger workbench arbitrary code execution and credential leak vulnerability postmortem

Postmortem: Arbitrary code execution and credential theft vulnerability in the AR Workbench

The Arma Reforger Workbench has suffered from two major security problems up until the 0.9.6 patch (released on 20.10.2022) that allowed malicious actors to distribute mods to exploit two separate vulnerabilities to 1. steal BI account login credentials in plain text and 2. execute an arbitrary .exe without the user being able to notice in advance. Both are now fixed! Unfortunately Bohemia Interactive has decided to not inform the general public about this in an appropriate way, so this post aims to let modders know about any potential harm they might have been exposed to.

The game itself and thus "normal players" were not affected. Only modders/content creators that launched the Arma Reforger Tools (Workbench) AND used third party mods/dependencies should double check if they were exposed to them.


Cred