FOUND:Kroxigor 2.0 - SwampPuppy Edit

[Munterz]

@masterofspace Yippee! Lmk if you get it working!

[AkkoTheFish]

cool

[Polished_Death]

Imma be so real, the anims page is such a mess. Its so bad to the point where I had to make a new folder to organize everything. But THIS?
Is just absolutely terrible to see.

[bassboostedbit]

@Polished_Death what the hell is that mess?!

[masterofspace]

@Munterz i did get it working but there are still a few pink materials on the package so imma fix it rq before i drop her!

[masterofspace]

hueshift for quest

[masterofspace]

alt body for quest on the same avi

[dimwit]

Bump!

[masterofspace]

!update!
im just starting over for a bit because

1: i couldnt get some animations to work for me on quest

2: there was a lot of other stuff that i could add on the avatar like different jean colors and other things for the clothes

3: i can add more body stuff texture wise on the body so here is my progress atm since i started over

[masterofspace]

AND I DIDNT MEAN TO SEND A PHOTO TWICE

[masterofspace]

body hue is on the same slider for the main one

[masterofspace]

jeans material done now onto the animations

[masterofspace]

first batch of the updated version, im making a quest version too

[register or login to view this hidden content]

[masterofspace]

ALSO YOU MIGHT HAVE TO HAVE THE SWAMPPUPPY KROX IN YOUR PROJECT BEFORE IMPORTING THIS SINCE IT MIGHT RELOAD THE SCENE

[masterofspace]

okay so this one didnt export the animations wait a sec

[masterofspace]

yes i am still doing the quest version btw because some of the animations are being weird

[Munterz]

@masterofspace You got this! Thanks so much!

[ClaptasticFrag]

ive been putting files thru my scan tool for a while now and
i have to genuinely ask why is there a polyglot payload attached to a single, random png texture in the files- does anyone know what it is before i even think about opening up the original edit in a project. the rest of the issues are simply alerts about unlit_wf info but this one has no actual info attached..

ETA: i scanned the one by @masterofspace to see if the polyglot thing was still in that one as well since they were working with the original and

so what the hell is this supposed payload the original one has that masterofspace removed

Took one more look at the original versus Space's and space took out two of the textures

Is it the mapping information for the smoothness/roughness map that is a polyglot?

[Trident707]

@claptasticfrag So, I've looked into the files and dissected its inner workings. It appears to be a false positive due to a funny lil math coincidence.

The .png appears to be compressed using zlib, to shrink its size. However, doing so generated a ton of random bytes, which out of chance generated a string that spells out something in the lines of "PK...." which is what being triggered as a zip. There's also a ton of other false positives.

It is highly unlikely for this file to contain any malicious payload. There is no central directory anywhere, CRC valid, no trailing garbage (no signs of tampering), consistent structure with images rather than something fishy.

If you recompress the .png it might not even be flagged again.

Obviously it is always natural and good to be wary of these kinds of things, which is why you should never blindly trust scripts.
Went a step further and did some deeper analysis, still no signs of a payload BUT it doesn't rule out a decoder-level exploit. But that would need to target a known vulnerability...

[masterofspace]

@ClaptasticFrag so idk what a polygot is, but im guessing its a virus of some sorts.