DaisukeDaisuke

Exploiting the Blob Cache in Minecraft: Bedrock Edition

...and why it matters.

Preface

You might have seen my HiveCorruptor plugin on Poggit. To be clear, I don't have a vendetta against The Hive or anything like that, the plugin was more so a comedic demonstration of how the blob cache can be exploited to crash clients. The next thing you're probably thinking is "how the hell does this work?" - and this is what this article will go over.

Introduction

Available	Release	Architecture	Version	URI
TRUE	2022	x64	14.32.31332.0	https://aka.ms/vs/17/release/VC_redist.x64.exe
TRUE	2022	x86	14.32.31332.0	https://aka.ms/vs/17/release/VC_redist.x86.exe
TRUE	2019	x64	14.29.30139.0	https://aka.ms/vs/16/release/VC_redist.x64.exe
TRUE	2019	x86	14.29.30139.0	https://aka.ms/vs/16/release/VC_redist.x86.exe
TRUE	2017	x64	14.16.27033.0	https://aka.ms/vs/15/release/vc_redist.x64.exe
TRUE	2017	x86	14.16.27033.0	https://aka.ms/vs/15/release/vc_redist.x86.exe
TRUE	2015	x64	14.0.24215.1	https://download.microsoft.com/download/6/A/A/6AA4EDFF-645B-48C5-81CC-ED5963AEAD48/vc_redist.x64.exe
TRUE	2015	x86	14.0.24215.1	https://download.microsoft.com/download/6/A/A/6AA4EDFF-645B-48C5-81CC-ED5963AEAD48/vc_redist.x86.exe

色つきのメッセージ:

Discordは現在自由に色がつけられるコードブロックをロールアルトしています。ANSIカラーコードを使っているため、ターミナルに色つき文字を出力しようとしたことがある人は簡単にできるでしょう。

色つきのメッセージを送るには、コードブロックの言語をansiにしてこのようなプレフィックスを前につける必要があります：

\u001b[{設定}m

{設定}には変更する{スタイル}、{文字色}、{背景色}を;区切りで指定できます。例：

A guide to ANSI on Discord

Discord is now slowly rolling out the ability to send colored messages within code blocks. It uses the ANSI color codes, so if you've tried to print colored text in your terminal or console with Python or other languages then it will be easy for you.

Quick Explanation

To be able to send a colored text, you need to use the ansi language for your code block and provide a prefix of this format before writing your text:

\u001b[{format};{color}m

Discord Timestamps

Discord timestamps can be useful for specifying a date/time across multiple users time zones. They work with the Unix Timestamp format and can be posted by regular users as well as bots and applications.

The Epoch Unix Time Stamp Converter is a good way to quickly generate a timestamp. For the examples below I will be using the Time Stamp of 1543392060, which represents November 28th, 2018 at 09:01:00 hours for my local time zone (GMT+0100 Central European Standard Time).

Formatting

Style	Input	Output (12-hour clock)	Output (24-hour clock)
Default	`<t:1543392060>`	November 28, 2018 9:01 AM	28 November 2018 09:01

	function high32:init


	data modify storage _ a set value -1145395493543608220L
	# (0xf01abcde00000064)

	function high32:get {source: "storage _ a"}
	# Function high32:get returned -266683170
	# (0xf01abcde)

	#define ｴｽﾃｨｰﾃﾞｨｰ std
	#define ｱｲｵｰｽﾄﾘｰﾑ <iostream>
	#define ﾕｰｼﾞﾝｸﾞ using
	#define ｲﾌ if
	#define ｲﾝｸﾙｰﾄﾞ #include
	#define ｲﾝﾄ int
	#define ｼｰｱｳﾄ cout
	#define ｼｰｲﾝ cin
	#define ﾈｰﾑｽﾍﾟｰｽ namespace
	#define ﾌﾞｰﾙ bool

	#!/bin/bash

	# Change the date under CUTOFF_DATE to change how far back you want to delete
	# Install the GitHub CLI tool by following the instructions in the official documentation: https://cli.github.com/manual/installation
	# Make sure you auth first to github with 'gh auth login'

	REPO_OWNER="OWNER"
	REPO_NAME="REPO_NAME"
	CUTOFF_DATE=$(date --date='30 days ago' +'%Y-%m-%dT%H:%M:%SZ')
	PAGE=1

	<?php

	namespace DavyCraft648\UninitializedSyncedPropertiesFix;

	use pocketmine\event\EventPriority;
	use pocketmine\event\server\DataPacketSendEvent;
	use pocketmine\network\mcpe\protocol\AddActorPacket;
	use pocketmine\network\mcpe\protocol\AddPlayerPacket;
	use pocketmine\network\mcpe\protocol\SetActorDataPacket;
	use pocketmine\network\mcpe\protocol\types\entity\PropertySyncData;

	www.google.com###before-appbar + #lb[style="visibility: visible;"]:has([role="dialog"] update-location)
	www.google.com##html.TaoyYc:style(overflow: auto !important; position: static !important;)