~/talk

Video Game Security

Talkat OWASP AppSec California 2016 · 2016-01-25..01-27· [security]
links:none on file
slides:none on file

Demo shows unlimited ammo by finding the ammo memory address (30 → 29 when fired), identifying the write instruction and replacing it with a no-op patch, and freezing health by repeatedly writing a value. Tools used include Cheat Engine and a disassembler, plus proxying to spoof network packets. A GitHub cheat table exists for the demo game. Layered defenses, server-side validation and obfuscation are recommended; the live hacks work against an unprotected client.

AI-written summary · about

  1. 0:00Intro
  2. 0:33Agenda
  3. 0:52Who am I
  4. 1:16I love playing video games
  5. 1:40Hacking sidescrollers
  6. 2:00Reverse engineering
  7. 2:20Crossover
  8. 4:42Business Risks
  9. 6:42Technical Risks
  10. 8:13Business Risk
  11. 9:57Platform
  12. 11:06Assets
  13. 12:15Protection
  14. 13:03Attack Defense
  15. 19:31Unlimited Ammo
  16. 27:56Unlimited Health Example
  17. 32:07Network Based Attacks
  18. 35:36Serverside protections
  19. 37:16Other industries
  20. 38:41Summary
  21. 39:16Questions
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.