Skip to content

PSO DC Hunter License bypass via spoofed server certificate #753

Description

@patapancakes

Is your feature request related to a problem? Please describe.
PSO DC US v2 and both JP versions validate the user's hunter license over HTTPS which requires patches to work around.

Describe the solution you'd like
I've discovered a flaw in the SSL implementation that allows for signing new certificates that are treated as valid by PSO. A basic SSLv3 implementation is needed as well as a handler for the HTTP request the game makes.

Game version(s) (choose one or more of the following):
DC v1 (JP), DC v2 (JP and US)

Additional context
See here for my description of the SSL flaw.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions