Minecraft Beaten in 0:00.050 Using Log4j Exploit

I used an unpatched version of 1.8.9 Minecraft along with the Log4j exploit to beat Minecraft in one tick.

I injected my own code into Minecraft using the Log4j exploit. By naming the world a text payload, Minecraft loaded my code and ran it to beat the game.

[keeteeh]

I set the world name to be a Log4shell payload. Then, I remove focus from the Minecraft window so that it pauses immediately. When Minecraft pauses it saves the world. Here's where the exploit comes in. When Minecraft saves the world it logs it into the console. This will run my payload as a URL, download my L.class file, and then run the code inside with full access to Minecraft's internals.

[gamecuber]

congrats you got the wr tool assisted speedrun lol. this is actually super cool so gg

[zerando]

love to see people mixing pen test with speed run

[_Gamr]

0.051 seconds faster and you will ascend the space time continuum into new realms

[EllaCaron]

i love how this exploit was definitely only used for minecraft speedrunning and nothing else

[그냥사람-ef]

Minecraft cheat developers discovering a god tier remote code execution exploit that affects like 90% of the fortune 100 companies only to use it to dox people on 2b2t:

[AlexRanza]

Friend: ok i spawned where are you?
Me: in the end?

[zzqart]

Best player in the world congrats on the world record

[mz]

This is literally the closest thing to Arbitrary code exec a "modern" video game will ever have. Best use of the exploit i could have ever imagined too 😂

[hikariwuff]

You’ve ascended past time and space to beat the game instantly. Congratulations! Now turn off your computer and go outside.

[kahlikohkat]

And all those speed runners gave all that effort too bad for them D:

[jngb]

Nether in 0;00.022
End in 0;00.041
xD

[patziger]

I like how he managed to gather the ender perls

[hipies]

i think this is the only use where log4j isn’t used to hack everyone

[williamthesloth]

Doctor: You have 0:00.050s to live.
Me: Hold my beer.

[rogo]

if exclude loads, you've beaten minecraft without even playing it.

[szymon]

log4j is actually my minecraft nick, wtf

[Finnyan]

I would have a little question about if this would technically count, because even though the game is vanilla without any modifications, you are still using an external tool to skip to credits. Isn't it kinda the same as using like a GameShark to beat a game? The game itself is not modified, but the modification comes from an external tool that causes the game to skip to credits.

I wouldn't consider this as a TAS, as it's not about playing back controller inputs, but rather just uses a tool to inject code to the game that forces credits. You cannot share a replay file of this, without including all the tools with it.

It's a cool showcase, none the less! 💙 But I wouldn't really say that the game wasn't modified here, since it does use an injection to execute code in-game. Yes, you didn't physically change any files or code in the game, but you used an external tool to kinda "hi-jack" the code and ran your own payload which causes credits to happen! I don't think it would be fair to allow that as a TAS speedrun, since otherwise people would just use external tools to hi-jack the code in any games and have a record of 0:00.050. I know it's probably not as easy to just inject and hi-jack a code in every game, but at that point, I believe we are just discussing, where the limit goes. I mean, GameShark isn't changing the code, it's just forcing the game to run with certain values that you can preset. But if you reload the game without GameShark, it's still completely unmodified.

But yeah, it's impressive that you found an exploit like this! 💜 And it does give you the bragging rights that you did beat Minecraft it 0:00.050s 😆 Even if it was done using an external tool! 💙

[SuadoCowboy]

I just finished hunter hunter and now I read neferupitou on your terminal 0_0 (she's one of my favorites when talking about character design)

[MinusNC]

[TAS] Minecraft: Java Edition “Remote Code Execution” in 00:00:00.050