A PEEK INTO AN IN-GAME AD CLIENT

Summary from the TLDR InfoSec newsletter

Jordan Whitehead delves into reversing the Anzu in-game ad client's usage in the Trackmania racing game. First, Whitehead built a DLL harness to enumerate the functions that Trackmania called from the anzu.dll and iterated on it to uncover further debug information and arguments. He then used mitmproxy to intercept network traffic and was able to utilize this to view the JavaScript functionality that managed targeted ads and replace ad campaigns with his own custom campaigns, serving images from localhost.