Войти
  • 65675Просмотров
  • 21 час назадОпубликованоZanzlanz

How do hackers reverse Math.random()?

Cryptographers out there: you have my respect!! This stuff gets wild! If you like what you see and hear, join the credits! Games featured in demos: - "Clover" by BugMater: (Requires Flashpoint) flashpoint://run/6d6649bf-2188-43b5-90b3-0ebea635199a - "Mines" by Tony K Lam: (Requires Flashpoint) flashpoint://run/0ecea02c-6440-48b9-bf90-edfa9fac9682 - "Spin the Wheel" by me: (Available for patrons) - "Slots" by Robotube Games: (Requires Flashpoint) flashpoint://run/5c71ef0c-8268-4050-8d73-3f161bd9a537 Chapters: - 00:00 Intro - 00:23 Intro to RNG - 00:42 Linear Congruential Generator (LCG) - 03:06 Generator Generator - 03:46 Inverting LCGs - 05:37 XOR-Shift - 07:36 Inverting XOR-Shifts - 08:58 Other XOR-Shifts - 09:52 Flash's RNG - 10:23 Inverting Flash's RNG - 11:20 Demo: - 12:07 Demo: - 13:57 Demo: Spin the - 14:32 Demo: - 15:05 Thanks for Watching! Music: (All made by me, including some older released stuff. I did a reference to "Moon Men" by Jake Chudnow, famously used by Vsauce. WIPs available for download on the patron Discord) - Intro music made specifically for this video - WIP available to patrons - 0:46 "Crater" (2013) - 1:14 Unreleased WIP 2019 "Soup Straw" - WIP available to patrons - 4:01 Made for this video, an homage to "Moon Men" by Jake Chudnow - WIP Available to patrons - 5:14 Unreleased WIP 2016 - WIP available to patrons - 6:15 Unreleased WIP 2018 - 7:17 Unreleased WIP 2016 - 9:02 "Mirror Road" - 12:02 "Piece of Cake" made for: - WIP available to patrons - 13:20 Song composed for - Outro music made for this series, heard first in - Available to patrons Citations/References: - This video topic was majorly inspired by @koong04TV , who put together a working Flash RNG inversing demo! See Randomno's post here: - RuneLite: - Dangokyo's original attempt at inverting Flash's RNG: - George Teşeleanu's paper improving the Flash RNG inversion: (Apologies for mispronouncing your name! I tried using a translator text-to-speech to learn the pronunciation, but I guess that process is flawed haha) - List of good LCG values: - PHP's popularity: - Paper about PHP's LCG security flaws: - Shoutout to @PwnFunction for demonstrating Z3: - Scott Contini's post about inverting Xorshift128+: - Community investigating flaws in Minecraft's Xoroshiro128++: #programming #gamedev #cryptography