Russian hackers announce Steam vulnerabilities: free access to any game CD Key

Russian hacker Moskowsky discovered a serious vulnerability on the Steam platform and was able to get the CD-Key for any game for free.

Specifically, by adding specific parameters to and ending with /partnercdkeys/assignkeys/, a valid Steam account will get the CD-Key of the game in question. Where appid represents the name of the game, keyid represents the CD Key, and keycount represents the number of keys.

For the first time, the author got the 36 activation codes for Portal 2 and found that all games were able to do so.

Moskowsky worked at the security organization HackerOne and had a sense of justice. He reported the bug to VALVE on August 7th, which repaired the vulnerability and rewarded him for $20,000 in four days.

After Moskowsky’s fight, Valve allowed the vulnerability to be made public in the near future (partial disclosure form). Imagine if Moskowsky is “incorrect”.

Zorain Zubair
Zorain Zubair
Zorain is co-founder of TechLapse. Based in Pakistan, Zorain is currently studying Business Management and aims to achieve the title of Chartered Accountant. Zorain loves writing about various technology news. He can be reached at: [email protected]

Recent News

Google releases the new version of Android Automotive emulator

Thanks to the collaboration with partners Volvo and General Motors, the progress of Android Automotive, the open source platform dedicated to infotainment systems for...