Results of investigating Warden module signing in early versions of WoW

[namreeb]

Hello.

Recently I have been investigating signing my own arbitrary code to stream to Warden clients. I have been targeting WoW 1.12.1, but Blizzard has used the same public key for 1.12.1, 2.4.3 and 3.3.5a.

I have as yet not found any vulnerability in their implementation, which appears to be 2048 bit RSA (along with RC4 encryption of the module and some signatures inserted in the data).

For now I am abandoning this research and have released my results, along with an archive of Warden modules which has previously been released by Neo2003 but not been widely circulated. That code is here:

GitHub - namreeb/WardenSigning: Experimenting with Warden signature cracking

[CreativeXtent]

Thank you!! Checking it out now!

[shahinpb]

Thanks for sharing it.

[Snickers?]

thats helps for bots improvements?