Hero Dex & Counter Matrix

Katalog lengkap 134 hero dengan relasi counter, sinergi tim, dan statistik detail Moonton.

Total Hero: 134
🔍
Memuat data hero dari repository...

Tier List & Winrate Dashboard

Peringkat meta kompetitif Moonton berdasarkan win rate, ban rate, dan tingkat pemilihan (Mythic / All Rank).

TOP WIN RATE
-
-
MOST BANNED
-
-
MOST PICKED
-
-
S+ TIER COUNT
-
Picks Prioritas

Draft Pick AI & Counter Engine

Simulasi draft 5v5 dengan algoritma optimasi pemilihan hero berbasis counter matrix, sinergi tim, dan jatah ban per tier rank.

TIM BIRU (ALLY) Avg WR: 50.0%
Jatah Ban Ally:
VS
10 BANS (5 ALLY / 5 ENEMY)
TIM MERAH (ENEMY) Avg WR: 50.0%
Jatah Ban Enemy:

🤖 Rekomendasi Pick AI

Moonton Enigma Cryptographic Signer

Reverse-engineering sistem otentikasi client Moonton GMS menggunakan kunci publik Enigma dan HMAC-SHA1.

Kunci Enigma Server

CURRENT ACTIVE ENIGMA KEY:
d70391ab690e8e59d925a93a4c1d1798

Moonton mengembalikan nilai server.enigma pada endpoint GET /api/act/basev4. Browser client menggunakannya untuk menandatangani semua payload HTTP privat.

Signature = Base64(HMAC-SHA1(Payload, enigma))
Payload   = METHOD + "\n" + PATH + "\n" + QUERY_STRING + "\n" + BODY_JSON

Live Request Signer

-
-

AWS S3 Metadata Leak & Recon

Audit keamanan infrastruktur CDN Akamai Moonton yang membocorkan kredensial IAM AWS S3 secara publik.

Rincian Aset yang Bocor

CWE-209: INFO LEAK
AWS Account ID: 392608220175
IAM User ARN: arn:aws:iam::392608220175:user/moonton-web
S3 Target Bucket: arn:aws:s3:::moonton-web
CDN Proxy Layer: Akamai Edge Cloud (`akmweb.youngjoygame.com`)
Root Cause: Akamai Origin Forwarding tanpa masking error page standar XML S3

Bukti Error XML Mentah (Proof of Concept)

<?xml version="1.0" encoding="UTF-8"?>
<Error>
  <Code>AccessDenied</Code>
  <Message>User: arn:aws:iam::392608220175:user/moonton-web is not authorized to perform: s3:ListBucket on resource: "arn:aws:s3:::moonton-web" because no identity-based policy allows the s3:ListBucket action</Message>
  <RequestId>46GNR4CH8A4RSEWA</RequestId>
  <HostId>il2B9iyEyJxxpuknmjcsOTifQAAIdyQ5AhJmwitnqzKU30JZvDwdL8EgmmA0Nw87ViaFsOZHj749HFLTfMx8FEGcZrUlrTQ0</HostId>
</Error>

Dipicu saat browser merequest path direktori atau file yang belum di-cache pada S3 origin.

Asset Path Predictor (SVN & GMS Storage Pattern)

Hero Database: https://akmweb.youngjoygame.com/web/svnres/mlbb/homepage_2_1_41/latest/{lang}_hero_list.json
Skill Icon Assets: https://akmweb.youngjoygame.com/web/svnres/img/mlbb/homepage/100_{hash}.png
Square Head Avatars: https://akmweb.youngjoygame.com/web/svnres/file/mlbb/homepage/100_{hash}.jpg
GMS Activity Schemas: https://akmweb.youngjoygame.com/web/gms/act_{actId}_{hash}.json

Moonton BI Big Data Feeds

Katalog endpoint data analitik Moonton Business Intelligence (`share.bi.moonton.net`) yang beroperasi tanpa autentikasi.