inxomnyaa inxomnyaa

Exploiting the Blob Cache in Minecraft: Bedrock Edition

...and why it matters.

Preface

You might have seen my HiveCorruptor plugin on Poggit. To be clear, I don't have a vendetta against The Hive or anything like that, the plugin was more so a comedic demonstration of how the blob cache can be exploited to crash clients. The next thing you're probably thinking is "how the hell does this work?" - and this is what this article will go over.

Introduction

I wrote this short tutorial because extending my internal storage using my new micro SD card on my Retroid Pocket 2+ failed all the time. Only setting it up as portable/external worked. However, this instructions should work in any Android 5.0+ device.

So, in case you have problems setting up your SD card on your Android device via graphical interface (setting up storage as extended internal memory or portable), and you get a corrupted SD card or any other error, follow these steps to fix it via adb shell:

Make sure you have adb access to your Android device: Settings > System > About, touch/click on Build number until Developer options are enabled:
Go to Settings > System > Developer options and enable USB debugging.
Assuming you have adb installed on your remote terminal run the following:

adb shell

Bedrock `.mcstructure` files

Saving and Loading

mcstructure files are created by the Export button in a structure block. To load them in game with a load structure block, the files must be placed in a behavior pack. The path determines the structure identifier, which is typed into the structure block to load the structure.

Examples:

The list is moving out!

If you share this list, please use this link instead: https://lambdaurora.dev/optifine_alternatives

It may still be only a redirection link, but it will have a better web display of the list soon. And the list being on GitHub/GitHub pages improves load times.

The gist version of this list will stop being updated.

Why?

This tool is used to generate the data found in BedrockData.

Usage

Place the script in the root of a PocketMine-MP source code repository. Make sure the composer autoloader has been appropriately generated.

php decoder.php input_file.txt

	<?php

	declare(strict_types=1);

	use pocketmine\math\AxisAlignedBB;
	use pocketmine\math\Facing;
	use pocketmine\math\Vector3;
	use pocketmine\math\VoxelRayTrace;
	use pocketmine\player\Player;
	use pocketmine\scheduler\CancelTaskException;

	#!/usr/bin/python3
	# -- coding: utf-8 --

	import frida
	import sys
	import json
	import argparse
	import subprocess
	import base64
	import time

	// File automatically generated by MinecraftSymbols

	// Address : 008da4ed
	extern "C"
	{
	void* _Z10ImFileOpenPKcS0__ptr;
	}

	// Address : 008da169
	extern "C"

	Mute these words in your settings here: https://twitter.com/settings/muted_keywords

	ActivityTweet
	generic_activity_highlights
	generic_activity_momentsbreaking
	RankedOrganicTweet
	suggest_activity
	suggest_activity_feed
	suggest_activity_highlights
	suggest_activity_tweet