This House is Haunted:
A decade-old bug in the AION client’s housing system let Lua scripts trigger RCE.
A dive into game scripting, sandboxes, and forgotten exploits.

| https://twitter.com/0xakuma | |
| verified | https://twittodon.com/share.php?t=0xakuma&[email protected] |
| Blog | https://appsec.space |
This House is Haunted:
A decade-old bug in the AION client’s housing system let Lua scripts trigger RCE.
A dive into game scripting, sandboxes, and forgotten exploits.
WTF? So handles on hive are not unique, what could go wrong.