Nico-Posada
Nico-Posada
You need to have the game open when using the tool. If you have any anti-cheats running in the background, make sure to terminate those too.
That just sets the stat for the number of completed gauntlets when you pull up your stats, it wont actually complete them.
Just tested today (March 19th, 2024) and it works just fine. Are you not updated/not on windows by any chance?
Saving data and loading it will resynchronize your stats with the server, so avoid that. Stars, coins, demons, etc. should all stick upon closing and reopening your game though.
You can get the real reference to the callbacks list with something as simple as this, no need for the evil class I used in the initial report. ```python import...
Yeah, I never intended for it to be labeled as a security bug since you can do much more malicious things with the ability to execute arbitrary python code. The...
You can still trigger a use after free with these changes since the tuple item never gets incref'd which allows you to abuse `__eq__` and `NotImplemented` within evil classes. ```python...
One more UAF needs to be patched out, it's possible to corrupt fut_callback0 then do the NotImplemented trick to use callback0 after it has been freed. Just needs an incref...
Showcase video has been added.