Normal view

There are new articles available, click to refresh the page.
Before yesterdayTHALIUM

Achieving Remote Code Execution in Steam: a journey into the Remote Play protocol

4 December 2023 at 08:00

Remote Play Together, developed by Valve, allows sharing local multi-player games with friends over the network through streaming. The associated protocol is elaborate enough to shelter a valuable attack surface that has scarcely been ventured into in the past.

This post covers the reverse engineering of the protocol and client/server implementations inside Steam, before presenting a dedicated fuzzer that unveiled a few critical vulnerabilities.