NOIR MLBB — Intelligence & Meta Studio

Hero Dex & Counter Matrix

Katalog lengkap 134 hero dengan relasi counter, sinergi tim, dan statistik detail Moonton.

Total Hero: 134

Memuat data hero dari repository...

Tier List & Winrate Dashboard

Peringkat meta kompetitif Moonton berdasarkan win rate, ban rate, dan tingkat pemilihan (Mythic / All Rank).

TOP WIN RATE

-

MOST BANNED

-

MOST PICKED

-

S+ TIER COUNT

-

Picks Prioritas

Draft Pick AI & Counter Engine

Simulasi draft 5v5 dengan algoritma optimasi pemilihan hero berbasis counter matrix dan sinergi tim.

TIM BIRU (ALLY) Avg WR: 50.0%

VS

BANNED HEROES

TIM MERAH (ENEMY) Avg WR: 50.0%

🤖 Rekomendasi Pick AI

Role yang Dibutuhkan:

Moonton Enigma Cryptographic Signer

Reverse-engineering sistem otentikasi client Moonton GMS menggunakan kunci publik Enigma dan HMAC-SHA1.

Kunci Enigma Server

CURRENT ACTIVE ENIGMA KEY:

d70391ab690e8e59d925a93a4c1d1798

Moonton mengembalikan nilai server.enigma pada endpoint GET /api/act/basev4. Browser client menggunakannya untuk menandatangani semua payload HTTP privat.

Signature = Base64(HMAC-SHA1(Payload, enigma))
Payload   = METHOD + "\n" + PATH + "\n" + QUERY_STRING + "\n" + BODY_JSON

Live Request Signer

HTTP Method:

Endpoint Path:

Query String (Opsional):

Request Body (JSON):

String to Sign (Canonical Payload):

Generated Authorization Header (Base64):

-

AWS S3 Metadata Leak & Recon

Audit keamanan infrastruktur CDN Akamai Moonton yang membocorkan kredensial IAM AWS S3 secara publik.

Rincian Aset yang Bocor

CWE-209: INFO LEAK

AWS Account ID: 392608220175

IAM User ARN: arn:aws:iam::392608220175:user/moonton-web

S3 Target Bucket: arn:aws:s3:::moonton-web

CDN Proxy Layer: Akamai Edge Cloud (`akmweb.youngjoygame.com`)

Root Cause: Akamai Origin Forwarding tanpa masking error page standar XML S3

Bukti Error XML Mentah (Proof of Concept)

<?xml version="1.0" encoding="UTF-8"?>
<Error>
  <Code>AccessDenied</Code>
  <Message>User: arn:aws:iam::392608220175:user/moonton-web is not authorized to perform: s3:ListBucket on resource: "arn:aws:s3:::moonton-web" because no identity-based policy allows the s3:ListBucket action</Message>
  <RequestId>46GNR4CH8A4RSEWA</RequestId>
  <HostId>il2B9iyEyJxxpuknmjcsOTifQAAIdyQ5AhJmwitnqzKU30JZvDwdL8EgmmA0Nw87ViaFsOZHj749HFLTfMx8FEGcZrUlrTQ0</HostId>
</Error>

Dipicu saat browser merequest path direktori atau file yang belum di-cache pada S3 origin.

Asset Path Predictor (SVN & GMS Storage Pattern)

Hero Database: https://akmweb.youngjoygame.com/web/svnres/mlbb/homepage_2_1_41/latest/{lang}_hero_list.json

Skill Icon Assets: https://akmweb.youngjoygame.com/web/svnres/img/mlbb/homepage/100_{hash}.png

Square Head Avatars: https://akmweb.youngjoygame.com/web/svnres/file/mlbb/homepage/100_{hash}.jpg

GMS Activity Schemas: https://akmweb.youngjoygame.com/web/gms/act_{actId}_{hash}.json

Moonton BI Big Data Feeds

Katalog endpoint data analitik Moonton Business Intelligence (`share.bi.moonton.net`) yang beroperasi tanpa autentikasi.