{"action":"created","issue":{"url":"https://api.github.com/repos/tgstation/tgstation/issues/36491","repository_url":"https://api.github.com/repos/tgstation/tgstation","labels_url":"https://api.github.com/repos/tgstation/tgstation/issues/36491/labels{/name}","comments_url":"https://api.github.com/repos/tgstation/tgstation/issues/36491/comments","events_url":"https://api.github.com/repos/tgstation/tgstation/issues/36491/events","html_url":"https://github.com/tgstation/tgstation/issues/36491","id":306200380,"number":36491,"title":"How to abuse ICs using known-plaintext vulnerability. FEATURE!!!!","user":{"login":"DingleFlop","id":24946273,"avatar_url":"https://avatars1.githubusercontent.com/u/24946273?v=4","gravatar_id":"","url":"https://api.github.com/users/DingleFlop","html_url":"https://github.com/DingleFlop","followers_url":"https://api.github.com/users/DingleFlop/followers","following_url":"https://api.github.com/users/DingleFlop/following{/other_user}","gists_url":"https://api.github.com/users/DingleFlop/gists{/gist_id}","starred_url":"https://api.github.com/users/DingleFlop/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/DingleFlop/subscriptions","organizations_url":"https://api.github.com/users/DingleFlop/orgs","repos_url":"https://api.github.com/users/DingleFlop/repos","events_url":"https://api.github.com/users/DingleFlop/events{/privacy}","received_events_url":"https://api.github.com/users/DingleFlop/received_events","type":"User","site_admin":false},"labels":[{"id":181676257,"url":"https://api.github.com/repos/tgstation/tgstation/labels/FUCK","name":"FUCK","color":"000000","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":78,"created_at":"2018-03-17T23:53:38Z","updated_at":"2018-03-23T16:33:02Z","closed_at":null,"author_association":"NONE","body":"https://github.com/tgstation/tgstation/blob/master/code/modules/integrated_electronics/subtypes/access.dm\r\n\r\n`var/passkey = strtohex(XorEncrypt(json_encode(access), SScircuit.cipherkey))`\r\n\r\nThis implementation allows for a partial key to be leaked using a known-plaintext attack.\r\n\r\nThe partial key can then be used to forge access using NTNet to control doors.\r\n\r\nI can provide examples and help if needed. I wrote a small .dmb to help demonstrate this vulnerability."},"comment":{"url":"https://api.github.com/repos/tgstation/tgstation/issues/comments/375724441","html_url":"https://github.com/tgstation/tgstation/issues/36491#issuecomment-375724441","issue_url":"https://api.github.com/repos/tgstation/tgstation/issues/36491","id":375724441,"user":{"login":"Poojawa","id":6293118,"avatar_url":"https://avatars1.githubusercontent.com/u/6293118?v=4","gravatar_id":"","url":"https://api.github.com/users/Poojawa","html_url":"https://github.com/Poojawa","followers_url":"https://api.github.com/users/Poojawa/followers","following_url":"https://api.github.com/users/Poojawa/following{/other_user}","gists_url":"https://api.github.com/users/Poojawa/gists{/gist_id}","starred_url":"https://api.github.com/users/Poojawa/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Poojawa/subscriptions","organizations_url":"https://api.github.com/users/Poojawa/orgs","repos_url":"https://api.github.com/users/Poojawa/repos","events_url":"https://api.github.com/users/Poojawa/events{/privacy}","received_events_url":"https://api.github.com/users/Poojawa/received_events","type":"User","site_admin":false},"created_at":"2018-03-23T16:33:02Z","updated_at":"2018-03-23T16:33:02Z","author_association":"CONTRIBUTOR","body":"https://www.youtube.com/watch?v=3cfQKxUffqA\r\n\r\nassistant.avi"}}
{"actor":{"display_login":"Poojawa"}}