Exploit that allows theft of Marketplace Resource Packs
After connecting to a server that used a resource pack from the Marketplace and downloading the pack, by navigating to C:\Users\user\AppData\Local\Packages\Microsoft.MinecraftUWP_8wekyb3d8bbwe\LocalCache\minecraftpe\premiumcache\resource I had found the same resource pack unencrypted, allowing me to copy and paste the files to my own resource pack. This was tested with the City Texture Pack made by 4J Studios/Minecraft, a paid Marketplace resource pack (that I have purchased but was not downloaded to the device this was tested on). Additionally, by navigating to C:\Users\user\AppData\Local\Packages\Microsoft.MinecraftUWP_8wekyb3d8bbwe\LocalCache\minecraftpe\packcache\resource I was able to locate the resource pack used for the Minecraft Live server, a resource pack unintended to be public, completely unencrypted. These files should be encrypted to prevent the theft of paid Marketplace content along with unreleased content.
2023-10-16, 05:25 PM
2023-12-08, 10:46 AM
2023-12-08, 10:46 AM
0
1
1152065
-