RCE exploit for DS3 (Remote Code Execution)

[nullpo]

UPDATE
https://steamcommunity.com/app/374320/discussions/0/3194742149943182775/
There is a patch from blue sentinel that fix the vulnerability, us it if you want. Also as sparhawk says it's still a vulnerability found by a non malicious person that might be spread to a malicious individual. No known victim yet and if there is one I will put it up here. I personally still recommend not playing online or pvp privately with friends tho.

https://twitter.com/DarkSoulsGame/status/1485210967009071108
They are fixing the issue as we speak

A video explaining the situation
https://youtu.be/GrVn7hD5Y2Y

To know more about RCE
https://www.comparitech.com/blog/information-security/remote-code-execution-attacks/

Just got this from vaati discord server, I'll just copy paste it here.

Hey everyone, it's come to our attention that a Remote Code Execution (also known as RCE) exploit has emerged for Dark Souls III on PC. This means that potentially malicious players connected to your game may be able to execute code by sending information to your game that directly affects aspects of your operating system. This can lead to sensitive information leaks, including but not limited to: installation of malicious programs such as keyloggers or viruses, theft of account information or login tokens, and access to other sensitive information such as banking info or other things that may be stored on your computer.

We've referenced the program Blue Sentinel, a community-made program that serves as a third-party anti-cheat in the past for issues like this; however, it has apparently been made known that RCE can bypass Blue Sentinel. For this reason, it is recommended that if you play Dark Souls III on PC, you may want to stay offline until a further development is made against this exploit. If you still really want to play online, know that there is still a risk of the aforementioned effects, and it would still be recommended to do some research in to the Blue Sentinel mod to see if it can help with anti-cheat effects.

[psheue]

RIP DS3.

[nullpo]

The part that makes me worry is that the exploit comes so close to elden ring release, and if this kind of exploit works there too with the influx of new player flooding then that's going to be a huge problem

[Omastar]

Originally posted by nullpo:

Just got this from vaati discord server, I'll just copy paste it here.

Hey everyone, it's come to our attention that a Remote Code Execution (also known as RCE) exploit has emerged for Dark Souls III on PC. This means that potentially malicious players connected to your game may be able to execute code by sending information to your game that directly affects aspects of your operating system. This can lead to sensitive information leaks, including but not limited to: installation of malicious programs such as keyloggers or viruses, theft of account information or login tokens, and access to other sensitive information such as banking info or other things that may be stored on your computer.

We've referenced the program Blue Sentinel, a community-made program that serves as a third-party anti-cheat in the past for issues like this; however, it has apparently been made known that RCE can bypass Blue Sentinel. For this reason, it is recommended that if you play Dark Souls III on PC, you may want to stay offline until a further development is made against this exploit. If you still really want to play online, know that there is still a risk of the aforementioned effects, and it would still be recommended to do some research in to the Blue Sentinel mod to see if it can help with anti-cheat effects.

Just in case the last cheat wasn't fun enough already... heh...

[psheue]

Originally posted by nullpo:

The part that makes me worry is that the exploit comes so close to elden ring release, and if this kind of exploit works there too with the influx of new player flooding then that's going to be a huge problem

We're gonna need a lot of popcorn for ER's release.

[Pinyaps]

Something similar was threatening Team Fortress 2 a while back as well but nothing really came of it. Would this also be the case? I'm clueless to how any of it works.

[.]

Shoutout to Bandai and From for keeping the servers of their games running for this long while completely ignoring the save ruining exploits being discovered, and now pc bricking expoits

[Ermitaum]

It was good while it lasted.

[Sparhawk 58]

https://www.comparitech.com/blog/information-security/remote-code-execution-attacks/

[76561199028016947]

Dag nabbit, now I can't even just say "Oh well, time to play Champion's Ashes". This is truly the final cry for Dark Souls 3.

[Ao Bai Gaming]

Big F, rest in spaghet, never forget

[Sparhawk 58]

Read the information i have posted about this kind of attack its enlightening

[nullpo]

Originally posted by Sparhawk 56:

Read the information i have posted about this kind of attack its enlightening

I'll mark it as answer first so everyone can read it. If there's someone who want to make the simplified version of that article here I'll mark it as answer later.

[night]

I know this day would come, no software is absolutely perfect. Now let's see if Bandai Namco would fix this mess.

[Berry]

Originally posted by psheue:

Originally posted by nullpo:

The part that makes me worry is that the exploit comes so close to elden ring release, and if this kind of exploit works there too with the influx of new player flooding then that's going to be a huge problem

We're gonna need a lot of popcorn for ER's release.

They literally can't ignore this ♥♥♥♥ if it's prevalent in Elden Ring, that close to launch as well. If for some reason they still do then that's just a shame. Hopefully they take all the feedback from the CNT and actually FIX all the DS3 glitches that are in there.

[Gman]

This is getting ridiculous, From needs to start putting the smack-down on this stuff we can't be having Hackers rendering games unplayable. Will From actually implement a system to combat this in Elden Ring?