Jump to content

  • Curse Sites
Become a Premium Member! Help
Latest News Article

Force op?


  • Please log in to reply
32 replies to this topic

#1

CaptainGunpowder

Posted 09 September 2013 - 12:13 PM

Ok. Pretty much what this is about is a hacked client that a bunch of my friends coded that has a force op feature. At first i did not believe them, I was like ! But they then told me to join uberminecraft...I joined and then the told me to goto one of the servers they then gave me a sword with lvl 1000 sharpness and tped me to a random player. They then talked in the chat they had no rank just a red name. We then rejoined my server and they forced op on my server and started messing around and giving themselves lots of money on it. Is there a way to disable console or something so they cannot op themselves or use commands via the console?

How did they even manage this? 0.o

P.S. They are screwed when 1.7 comes out 50,000 new lines of coding
My noob signature!

Register or log in to remove.

#2

Dbn404
    Dbn404

    Redstone Miner

  • Members
  • 502 posts

Posted 09 September 2013 - 12:22 PM

.... Unfortunately, just because a large part of the code has been rewritten, does not mean server security was.
We can certainly hope so though.
As for the force op, I've been hearing about that lately.... Still sounds far fetched but since it's only cracked servers that are affected, (At least, I assume, and hope it is) I don't really care too much.
Just play on proper servers. Posted Image

#3

CaptainGunpowder

Posted 09 September 2013 - 12:26 PM

Uberminecraft is not cracked it is a server with a constant 3000+ players. It works on all servers and the hackers said it only doesn't work on a few that buy really good security? (You can buy security for a server?) oh and btw this hack, hacks into your console so they can do what they want e.g. Ban them then they urban themselves
My noob signature!

#4

Shibe
    Shibe

    Diamond Miner

  • Members
  • 870 posts

Posted 09 September 2013 - 03:38 PM

When they can hack into your console without needing to be on the server, I would inform the police (depending on how they deal with that kind of issues where you live). Getting unauthorized access to computers by hacking is illegal.

Buying better security? Explain please, because it sounds like pure BS when you say it like that.
I've quit Minecraft and Minecraft Forums. I will check my PM every once in a while. If you think I will care about your message, feel free to send me one. ____________________________________ __________ - Shibe

#5

Somethingvalid

Posted 10 September 2013 - 04:49 AM

so you were the one that griefed uberminecraft.
Star Trek Forever!

#6

XDGrangerDX

Posted 10 September 2013 - 06:42 AM

Its not possible to force OP trough clientside hacks.

Only case where such things are possible is when the server has a backdoored plugin installed (ex. NoCheat++, note the two +es.) or the PC where the console is on is infected whit a backdoor virus which allows the ''Hacker'' to acces the console.
I frequently edit my posts, to fix misspelled words or rephrase some sentences. I also dive alot in the forum, quote me or i might never see your answer.
Look at this guy:

View PostDeadly_Porcupine, on 02 October 2013 - 10:33 PM, said:

I hate servers that are hosted on computers.

#7

Limitsoflife
  • Location: Lost in the valley of pleasure, lost in the infinite sea
  • Minecraft: LimitsofLife
  • Xbox:Ain't got one.

Posted 10 September 2013 - 09:52 AM

Force-op only exists on a few private backwater hacker networks, it is NOT publicly available. That means that if you find a site offering a free force-op download, it's almost certainly a virus. Don't even bother with it.

I'm not quite sure exactly how force-op works, but I don't see it very often, so I imagine it's difficult to do. It'd be far easier just to manipulate the server owners into op'ing you manually.

There's a similar hack called a "session stealer" that I see quite often. Mostly I see people trick the server owner into joining a fake IP, which somehow allows the hacker to access their account on their server and run commands off of it (if they're opped), but most server owners aren't quite dumb enough to fall for that.

#8

CaptainGunpowder

Posted 10 September 2013 - 10:04 AM

View PostSomethingvalid, on 10 September 2013 - 04:49 AM, said:

so you were the one that griefed uberminecraft.
I was not involved with that...

My noob signature!

#9

xNyaruko
  • Location: Italy
  • Minecraft: xNyaruko

Posted 10 September 2013 - 10:38 PM

Actually I have a friend that makes hacks like this! He has even some client that makes his IP unviewable, so nobody can ban his ip! D:
Posted Image

#10

DukeTidierLeader2
  • Minecraft: Chaimanner

Posted 11 September 2013 - 12:02 AM

I actually never believed in forcibly promoting somebody with the use of hacks. If the server had exploitable plugins, then it makes more sense, but I actually never believed this.
"He who is tired of Weird Al is tired of life." -Homer Simpson
My fan fiction of the game: http://www.minecraft.../#entry24096758

#11

gertrudestein

Posted 11 September 2013 - 02:18 AM

This is why I play singleplayer, aside from the fact that building in multiplayer is kind of a pain. On creative servers anyways.


View PostxNyaruko, on 10 September 2013 - 10:38 PM, said:

Actually I have a friend that makes hacks like this! He has even some client that makes his IP unviewable, so nobody can ban his ip! D:
That's called a proxy.

Posted Image

Unofficial leader of the Minecraft Rollercoaster Building Guild


#12

CaptainGunpowder

Posted 11 September 2013 - 09:20 PM

View PostxNyaruko, on 10 September 2013 - 10:38 PM, said:

Actually I have a friend that makes hacks like this! He has even some client that makes his IP unviewable, so nobody can ban his ip! D:
It's not a hack your friend has its a VPN

View PostDukeTidierLeader2, on 11 September 2013 - 12:02 AM, said:

I actually never believed in forcibly promoting somebody with the use of hacks. If the server had exploitable plugins, then it makes more sense, but I actually never believed this.
It's real, he was showing me it on some random servers. Unfortunately he won't op me on uberminecraft :(
My noob signature!

#13

themlghax
  • Minecraft: mlghax

Posted 11 September 2013 - 11:09 PM

It doesn't make sense that a hacked client hacks into the console..
I don't really believe that.
Posted Image

#14

TheRealAD2011

Posted 11 September 2013 - 11:13 PM

Forceop is fake, either you are lying, your friends were already mods on that server, or they hacked the server's console.
Posted Image
Posted Image
Click them or they will click you

#15

Xenomorph5674

Posted 12 September 2013 - 12:49 AM

Someone once hacked my server with ForseOp so it does exist I am also admin on other servers and 2 of them were also hacked by people with ForseOp. Markus needs to find a way to stop hackers from using nodus and that crap.

#16

XDGrangerDX

Posted 12 September 2013 - 03:25 AM

View PostXenomorph5674, on 12 September 2013 - 12:49 AM, said:

Someone once hacked my server with ForseOp so it does exist I am also admin on other servers and 2 of them were also hacked by people with ForseOp. Markus needs to find a way to stop hackers from using nodus and that crap.

1. You had a backdoored one installed for sure. Never accept plugins from your users, never download plugins from outside of dev.bukkit.com, always check the codes of new plugins before installing. Cant do that? Learn Java before you host a server.
2. Markus ''Notch'' Persson isnt Dev of MC anymore thus he wont do anything.
3. Nodus got discontinued, because its dev didnt like the way people use his client (thats what i heard but i somewhat doubt thats the only reason).
4. Nodus never had force op hacks.
5. Op can not be forced trough client hacks or a hacked client.
I frequently edit my posts, to fix misspelled words or rephrase some sentences. I also dive alot in the forum, quote me or i might never see your answer.
Look at this guy:

View PostDeadly_Porcupine, on 02 October 2013 - 10:33 PM, said:

I hate servers that are hosted on computers.

#17

user_1259045

Posted 12 September 2013 - 04:50 AM

There's no such thing as a client-side force-op
It's simply not possible

Either you have bad moderators or they're bluffing
Completed maps: Sunburn Islands, Nightmare Realm, Uncharted Territory III, Inferno Mines (pending)
Currently playing: Infernal Sky II, The Fire Beneath


Currently playing: Terraria, Spelunky

#18

StormocideMC
  • Location: California
  • Minecraft: Stormocide
  • Xbox:IICrunchyII

Posted 12 September 2013 - 04:53 AM

There is a setting that only allows the /op command to be executed in console only, not in chat

Check Out My Server: RaidersCraft


#19

ooosssososos

Posted 12 September 2013 - 04:56 AM

The only thing that was like that was session stealer, but It it really impossible to force op on a server.

Common forms of getting op:
- Session stealing (was patched I think, not sure)
- Bruteforcing admin passwords
- Backdoor on server machine
- Bruteforcing SSH or FTP (Usually server has measures to prevent this)
- Social Engineering skills

#20

Kovu
    Kovu

    Memory Returned

  • Sectional Moderator
  • Curse Premium
  • 5325 posts
  • Location: California, Shingle Springs
  • Minecraft: Rainfur

Posted 12 September 2013 - 05:00 AM

View PostTheRealAD2011, on 11 September 2013 - 11:13 PM, said:

Forceop is fake, either you are lying, your friends were already mods on that server, or they hacked the server's console.

View PostWaterTipper, on 12 September 2013 - 04:50 AM, said:

There's no such thing as a client-side force-op
It's simply not possible

Either you have bad moderators or they're bluffing

Incorrect. As of a long time, there has been a vulnerability which few people have known about, until about a month ago, when a user released it on a specific forum. The client which has this is public, and anyone can download it. Technically, they are not "Force-Opping", they are spoofing the username of an admin, then op'ing their legitimate account, then logging in with that.

In addition, session stealers do not work as of 1.6.0.

To combat this, bukkit and spigot recently (about a week ago), forced out a patch for their respective servers fixing this issue. However, some servers have not updated, or are not using bukkit.

http://www.minecraft...update-servers/

Download the patched bukkit jar here; no plugins should break.
Posted Image