thegame_1980/KeyDive
1
0
Fork 0
mirror of https://github.com/hyugogirubato/KeyDive.git synced 2026-07-15 18:40:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix aggressive memory read

Browse Source
This commit is contained in:
hyugogirubato
2026-04-28 21:09:33 +02:00
parent fa4b80376a
commit 9149c8c67c
1 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
keydive/keydive.js
+7 -7
View File
@@ -1,5 +1,5 @@
/** /**
* Date: 2026-04-26 * Date: 2026-04-28
* Description: DRM key extraction for research and educational purposes. * Description: DRM key extraction for research and educational purposes.
* Source: https://github.com/hyugogirubato/KeyDive * Source: https://github.com/hyugogirubato/KeyDive
*/ */
@@ -826,12 +826,12 @@ function Level3_RewrapDeviceRSAKey30(address, name) {
*/ */
Interceptor.attach(address, { Interceptor.attach(address, {
onEnter: function (args) { onEnter: function (args) {
const bufferPtr = args[5]; try {
const sizePtr = args[6]; const bufferPtr = args[5];
const sizePtr = args[6];
if (!(sizePtr.isNull() || bufferPtr.isNull())) { if (sizePtr.isNull() || bufferPtr.isNull()) return;
// Check if this is a pointer to a buffer if (bufferPtr.compare(ptr(0x10000)) < 0) return;
if (bufferPtr < 0x10000) return;
// Check if the size matches a potential 2048 or 4096-bit RSA private key (range 1190-2350) // Check if the size matches a potential 2048 or 4096-bit RSA private key (range 1190-2350)
const size = sizePtr.toInt32(); const size = sizePtr.toInt32();
@@ -842,7 +842,7 @@ function Level3_RewrapDeviceRSAKey30(address, name) {
print(Level.DEBUG, `[*] Level3_RewrapDeviceRSAKey30: ${name}`); print(Level.DEBUG, `[*] Level3_RewrapDeviceRSAKey30: ${name}`);
send({'private_key': name}, bufferData); send({'private_key': name}, bufferData);
} }
} } catch (e) { /* not a real RewrapDeviceRSAKey30 call */ }
} }
}); });
} }