This small update adds the <name> placeholder to commands. For now the only placeholder supported was <player> (the other placeholders only being resolved for messages). This update adds this feature as requested by
@LucidAPs
I was also reported a bug on velocity with alert being triggered for users that don't have the hackedserver.alert permission. If you are using Velocity with users that don't have this permission, and you have or don't have this issue, please contact me. I couldn't reproduce the bug and I am trying to identify what caused it.
In this update the listener system was completely written on Velocity to use PacketEvents. This means the checks should be much more reliable on Velocity. This has no impact if you are using the plugin on Spigot or Bungee. PacketEvents plugin can be downloaded and installed as a dependency here:
https://github.com/retrooper/packetevents/wiki/Depending-on-pre‐built-PacketEvents
This update adds hardlogging feature back (enable debug in the settings to receive logs when user connects so you can easily add your own checks). It also fixes CustomPayload detections for unproxied connections (spigot without bungee). Velocity support is back but experimental, let me know if you find any bugs.
This small update fixes a bug reported on servers using a proxy like Bungeecord where the packet detection would cause an error in console and fail on 1.21.3. It also introduces a new check for recent Optifine versions that can now be detected.
Features - Added support for Minecraft 1.21.3
- Added list command support for BungeeCord and Velocity platforms
- Updated Command API implementation
- Improved commands help messages with better formatting
Bug Fixes - Fixed build system issues
- Corrected references from 'oraxen' to 'hackedserver'
- Fixed list command implementation
Technical - Unified command handling across all platforms (Spigot, BungeeCord, Velocity)
- Standardized player listing functionality
My apologies for the long delay in updates. As the original author, I'm back and will be more diligent about maintaining this plugin going forward. Thank you for your patience and support.
Here is a new update from Boy:
- Added bypass permission
* This will still show the alert but skip all actions - Fixed message being sent to players it should not send to
This update introduces a really early build of HackedServer 3.0.0. It only support actions for generic checks. Please keep the stable build on a production server. If you are on a test server I would appreciate if you could tell me if this build of HackedServer alpha works. It runs on spigot 1.17 and requires protocollib (HackedCore is not required). In the future you should be able to use it on bungee and velocity without installing it on every spigot server.
This update removes some debug messages with the plugin HackedServer. It also improves some parts of the code.
I'm thinking more and more about working on a rewrite of the plugin to offer you a more modern architecture and a more complete plugin.
I'm back from my vacations and ready to work on my spigot plugins. I was reported a lot of bugs recently with bungeecord: it seems that HackedServer blocks some packets and cause malfunctions in some plugins using custom payload to bridge bungee and spigot. I have a lot of trouble to reproduce the bug in local so I work blindly. I tweaked a few things and fixed some real bugs in this update but this might not fix the bridge bug. If it doesn't for you, please contact me with your setup and your configs so I can reproduce the it, perform some tests and fix it.
Thank you for the reports. This version is still intended for 1.17 only. I'll bring back support for previous versions in a future update, if you are not using 1.17 please stay on 2.80.0 build for now.
Thanks for reporting me the issue. This build of HackedServer should be more stable for 1.17 support. It still doesn't support older version. I might continue to update two separate plugins : one for 1.17+ and one for 1.16.5-.
Please use
2.80.0 if you are not using spigot 1.17. This build brings experimental support for spigot 1.17.0 and drop support for legacy FakeForgeHandshake v1. It might have some bugs, don't hesitate to contact me if you notice some.
This update is a preparation for the 1.17 update. It might not work on servers older than 1.13 (I'll work on a fix). HackedServer now requires ProtocolLib.
Please report me any bug!
This update improves messages when the forge modlist of a forge user couldn't be retrieved! You need to reset messages.yml or add this new entry:
Code (Text):
Check:
NotUsingForge:
- "%Prefix%&aThe specified player does not use forge!"
UsingForgeButNoModlist:
- "%Prefix%&aThe specified player seems to be using forge, but its forge modlist was not detected!"
This update improves the inventories algorithm and fixes bugs when there are more than 45 players detected as chocolate players. If it works well, this fix will be added to the forge inventory too.
This update introduces support for more recent versions of forge (1.13, 1.14, 1.15, 1.16) and spigot 1.16.2. This is experimental, please report me any bugs!
This is a little update in preparation of a much bigger one. Please update your settings.yml now. Some users reported me an error with FastLogin, I'll try to contact the developer to fix the issue. Thanks for your help everybody, soon this plugin will be 3 years old!
Recently HackedServer introduced an experimental feature: a specific fake forge handshake sent to newer forge versions (1.13+) that are not supposed to have their modlist detectable. It worked ...for some versions. Unfortunately this is buggy with a few 1.15.2 forge builds (users get kicked with a "Illegal packet received" error). If you have too many problems with this feature, you can now disable it from the config. I didn't want to remove it because it is something that can be useful to a lot of people anyway.
You'll need to reset your settings.yml. If you don't want to (I know that some of you have big configurations and don't want to lose time to redo everything), you can just add this line:
I'm really happy to introduce to you this experimental version which should bring back forge mods detection to HackedServer with 1.13+ versions of Forge (without breaking compatibility with other version. Mods detection is something a lot of you have been waiting for and I hope you'll like this update (despite some of some functionalities such as mod version detection that are not working: you'll see "mousetweak" instead of "mousetweak vX" for example) !
I'm sorry with all these recent errors. It has been quite difficult for me to work on the project, but these errors are now over. I want to say thank you to
@xiko46 who helped me to test this version!
I'm not the only one to have work on this update. Another developer (antoineJt) helped me a lot. We have not been able to try everything, but this update received a good code improvement. I need you to try it and report me any issue you got. Don't hesitate to join the discord.
I've decided to improve a little bit old parts of the code. I'll try to do some refactors this week. I also removed the sources from the upload (some people didn't understand they had to extract the zip). Don't hesitate to pm me if you need them.
I improved Events code a little bit.
I wasn't at home during a few days. If you asked me something this week, don't hesitate to send me another message to remember it to me.
As you know, I was forced by the new spigot rules to unobfuscate my plugin. Unfortunately the plugin was even faster than I thought and a more or less understandable version of its bytecode is now available online on crack sites. There's not much I can do about that and I just keep hoping that it won't allow more mods to develop solutions to bypass HackedServer. There's no longer reason for me to keep the source code private, that's why you'll find in the zip, the plugin and a hackedserver-master.zip file that will contain the code of the whole plugin.
In order to comply with the new spigot rules I removed my private obfuscation. I hope this won't speed up the development of bypasses for HackedServer.
A new version of bstats was just released, this update introduces it. I'll work on reintroducing forge mods detection in higher versions of Minecraft. I'm currently checking if this is possible (they seem to have fixed a few things).
Thanks to AntoineJT, code quality of HackedServer got improved. It should make it easier to maintain, however I need tests to be sure everything is still working (it was working with me but I need your help because they are so much different setups). You don't need to regenerate the configuration.
Now using more java 8 streams.
You don't need to update if it is already working, but if you do don't hesitate to tell me if you have any bug. You don't need to reset the config.
Adds a new check to detect liteloader wdl under specific conditions, thanks to
@mamireimu and his friends for reporting me the issue and helping me to fix it!
I'll be working with the configuration these days. If you are already proud of yours, no need to update: I'm just trying to improve the default one. Don't hesitate to pm me with any suggestions and tell me what you think about this idea of improving the default configuration.
I started by adding betterfoliage to the whitelisted modlist because this is clearly not a mod used for bypass/hack/cheating.
I just added XaeroMinimap detection to the default config. Don't hesitate to contact me if you have any problems! I'll be unable to update HackedServer (or it will be difficult) because I'll go to a school trip for a week.
I've rewritten parts of the system, don't hesitate to tell me if you have any issues with that. You don't need to update the config. Only update if you want to help my to test it (if you need a safe version, stay on the 2.23.0).
Thank you for all your feedback, I regret to announce that there will be no automatic detection for all mods fabrics, at least for the moment. Nevertheless if a possibility arises I will do my best to add it. The test code has been removed and this version should be cleaner.
I must also tell you that I'm sorry I can't be as active as usual for adding new features right now: I have a lot of work with the school, but the holidays will be coming soon!
This error was really hard to fix because I wasn't able to reproduce it on my own servers, if it is fixed it is thanks to tamellen who tried dozens of versions of HackedServer in order to find out when the bug appeared. He is a nice guy, don't hesitate to thank him.
Hello! I'm back from my vacations ...but I'm going back to school tomorrow. x')
In the meantime I have been working on a new feature to detect some of the Fabric mods (be careful, this is only a small part, unlike forge detection). For now it's in beta and you can only see the log in the console and type /hs fabric check <Player>
Tell me if it works for you and if you want me to redesign an inventory visualization system like with forge.
Fabric detection seems to be working again (I was able to test it when I got back from holidays but don't hesitate to contact me if there are still any problems):
For the other questions you asked me this week, don't be afraid to spam me by sending me another message to make sure I don't forget you haha. Finally this quick fix should avoid ArrayIndexOutOutOfBoundsException in the future (keep me informed).
Bug spotted by @
tamellen, theoretically this update should fixes it (not tested). I'll go on holiday in Malta with my girlfriend all next week and I will not be able to update HackedServer during this tile (I will still be available on discord but I will be less reactive). Have a good holiday!
If the detected mods were not the right try to update with this version. Thanks to
@Sengoku54 , a really nice java developer who takes plugins orders (if someone is interested, here is his discord tag: Sen#0141
)
Libraries are now included in a separated plugin (it will not have impacts on performances but I know that it will take a little more time install as you'll have to drag and drop two jars, I'm sorry for that) because I wasn't able to upload big files on spigot.
https://www.spigotmc.org/resources/hackedcore-hackedserver-library.68979/
This is a fix in case forge mods detection is not working on bungeecord so player don't get kicked (and you don't need to edit every configurations: it is now automatic).
Useless debug removed from the console logs. Some have reported me errors in the console since the last update. I'm working on it, do not hesitate to join the discord to bring me additional information.
As you know I recently published an update to detect Aristois, unfortunately the bug was fixed and it no longer works with new versions (so I updated the configuration to clarify).
Hi everyone, I think this update will please you!
This afternoon I managed to spot a packet sent on a strange channel since Aristois client (the most used cheat and one of the only available in 1.14). I had the opportunity to chat with one of the administrators of the cheat and as a result of our conversation I deduced that this channel was related to EMC (a kind of api to create custom clients) so even if almost all of the users of an EMC-based client use Aristois or at least one hacked client this is not a guarantee but it should put you on the chip.
I also fixed a little error with Labymod detection in the config.
I said that I will write a thread to explain how to add your own check with hackedServer, this is an opportunity to do it!
I'm sorry if I was not very active yesterday or today, in fact I passed an important exam (the French baccalaureate in science). I hope everything went well.
Tell me what you think of the new design thread I made with the help of my friend fx (very talented with Photoshop).
- Configuration improved: ExampleSection removed (now available on the
doc)
- API improved (doc is coming)
- OOP improved (you probably don't care about it)
Unfortunately there is still an error when a players tries to connect on server startup because of TinyProtocol, this is not a big issue but I'll try to find an idea in order to fix it.
Bugfixes:
- Forge mods detection for handshake v2 (forge users < to 1.13) on servers with handshake v3 (1.13+ servers) fixed (and errors patched)
Others:
- Library loading on runtime removed
- To successfully build the jar correctly I am now forced to unzip it manually and make some corrections. I did not find how to automate it with gradle so I'll probably write a little ruby script to finalize the builds and regain productivity.
- Since a few weeks I use more and more discord to help hackedserver users, so I may create a support server, what do you think about it?
You no longer need to restart the server in order to see the logs (they are updated one minute after player's connection if he is still connected), you should also no longer get errors.
I was reported some problems with the bungeecord version, here are some improvements that will allow me to get enough information to try to fix the bug. You can also use the configuration to change the prefix haha.
This small update brings some improvements in the performance of the plugin (although already negligible) and small fixes and improvements for code security
The patch for using HackedServer neatly on a bungeecord server is now available (but it is still in the test phase).
How to use it ? -> Install hackedserver-spigot-2.14.1.jar on every spigot server (you no longer need to disable fake forge handshake in the config)
-> Install hackedserver-bungee-1.0.0.jar on your bungee server
How does it work? This patch running on the proxy will intercept the packet containing the list of mods of the player to its connection then clone it and keep it in memory. When the server returns a handshake, it will block it to prevent the client from crashing and emulating a response based on the intercepted packet clone.
dynamic loading libraries does not seem to work, as scala is no longer used I can afford to redo a fatjar in order to fix the bug while looking for a more elegant solution.
Hello everyone ! I found some time tonight to be able to try some tips for detecting 1.13.2 forge mods. I'm not sure it works (unfortunately I did not have time to test because I wasn't using my own pc and I did not have Minecraft on it). Please tell me if it is working for you!
I saw that we had reached 100 updates and 400 downloads. Thank you very much for everything, I love you!
This update took me a lot of time and I hope you enjoy it (I tried to add the most things that I was asked recently):
- The system of forge mod categories had been rewritten, it means that you can create your own category with a special color code, special mods and decide the priority in the displays (should it be displayed after or before whitelisted mods, etc). It is also compatible with the inventory display, etc.
- Hard Mod Logging moved directly to the CustomPayload handler: it means that you should be able to listen to every packets PlayOutCustomPayload even if you don't add them to your config (and find channels in order to detect new clients).
- Code improved (I've rewritten some old parts of the plugin in order to keep it easier to update). I've also decided to use a github private repository for the same purpose.
- I started writing the system to detect players using the new version of forge (1.13.2), and it should work even on a server with a lower version but using viaversion. Unfortunately, I don't have some information that I need about the exact handshake and the name of its MinecraftKey so it does not work yet but I hope to get it working properly soon.
I partially tested these additions but it may be that I left some bugs, do not hesitate to contact me if you find some of them!
Since some versions now (some of you have experimented <3) I have tried to restore compatibility between HackedServer and bungeecord via various means. It seems now functional enough to be able to be announced. To take advantage of this, be sure to use the latest version of bungeecord (download it
here), you may have to regenerate the bungeecord configuration. This is highly experimental (that's why the detection of forge mods from bungeecord is still not checked on the description) so do not hesitate to contact me if you have problems/bugs or even just to confirm that it is working fine, I need you!
You can contact me through spigot or discord (Uxon#9999), have a nice day!
A friend showed me how to exploit a backdoor hidden in some cracked versions of vape in order to detect them. This feature is now implemented in HackedServer and enabled by default (but you disable it in the config).
A new feature is available in beta: You can directly analyze packets from player in order to create your own checks!
Tell me if it is working fine with you and if you have any suggestions.
the packets management system has been rewritten in a slightly more elegant way (java 8 <3). I might add a feature similar to PluginMessagingListener directly in HackedServer soon.
Just a little update to offer you a French translation of the plugin here:
https://hastebin.com/neresasedo.pl I reread the code managing compatibilities so normally the plugin should work in 1.13.2 (I still have some tests to do & check version detection before considering its support as stable).
I'm finally on vacation and I took the opportunity to correct this bug that you have reported to me several times. Sorry for the time I took but I was really busy with my studies but strangely I do not have a lot of homework during the holidays.
Since forge is still not released in 1.13 I will start to focus on Rift mod loader as suggested by
@Art_NRG (I do not know at all what is possible to do)
If you like the plugin do not hesitate to put a review (I would like to have your opinion on the new version now that you've experienced it for a few months/weeks)!
- Servers compatibility:
HackedServer 1.x used the spigot vanilla system to communicate with the mods, now it uses the native minecraft server code which should make it version dependant. However thanks to some reflection tricks and runtime bytecode generation HackedServer should stay compatible from 1.8 to newer version (even 1.14 without you having to update it)
- Clients Compatibility:Hacked Server now overrides the native minecraft code (Minecraft Key) to work around limitations and support servers that use ViaVersion or ProtocolSupport to support players of different versions
- Big thanks to
Gogume1er (UHCfr lead dev), Shevchik (ProtocolSupport owner), Xharos (islands-wars owner), and 52x44z (mcp & forge developer) who helped me to implement cross version server support (servers with Viaversion or ProtocolSupport) or to understand exactly what was causing compatibility issues with bungeecord (a patch may be possible)
As you know, the 1.13 asked me a lot of work to update. The new communication system brought by the 1.13 was not very complicated to implement, support the old servers and the new ones at the same time asked me a little courage but it was feasible, but what was the most difficult for me was definitely supporting the cross version servers. I am pleased to announce that I managed yesterday thanks to the help of a few friends to detect the mods of a player connected in 1.12 on a 1.13 server with ProtocolSupport and a prototype of HackedServer installed.
I should have posted the update today but I had some unforeseen: in fact I use my own system for registering commands dynamically and it does not seem to be compatible with the 1.13. I was also delayed by the release of 1.13.1 (but compatibility should be quick to do this time). Sorry for taking time, I hope you do not mind me too much and you will enjoy v2.0 soon!
This update does not bring any features but I need to know if you have any bugs. I touched some sensitive things and even if I tried to do all possible tests on my server there may be some errors in the console: do not hesitate to contact me if it is the case.
- New multi version system:
HackedServer has a new architecture that allows it to exploit the power of reflection while keeping a clean code through Interfaces.
Concretely HackedServer can use different codes to be compatible with different server versions but does not need to rewrite a different system for each supported version. 1.8, 1.9, 1.10, 1.11 and 1.12, for example, use the same communication system with the client while 1.13 uses the new system (unknown versions too).
New features already available:
Partial support of 1.13 is already available. The 1.13 modified the packet used for communication between mods and clients. Thanks to its new architecture HackedServer is able to use it, nevertheless the code of the previous version having been removed from the code of minecraft (the famous NMS packages) it will be necessary that I redevelop them entirely so that a server 1.13 can detect mods 1.12 players connected (via ProtocolSupport for example).
If you have errors in the console do not hesitate to contact me!
- New packet system:
HackedServer 1.x used the spigot vanilla system to communicate with the mods, unfortunately it could pose big compatibility problems with the 1.13 so I tried to use ProtocolLib in the previous snapshot. Not being completely satisfied I decided to write my own system for sending / receiving packets.
- Compatibility: Servers in 1.7.10 (about 1% of HackedServer users) will no longer be supported by 2.x versions (but will still be able to use the latest 1.x release without any problems).
- Dependencies: Since I use my own system you will not need ProtocolLib.
- New Features ?
With this new system we can expect a way to see mods / server communications without having to register the channel in the settings!
I will look for the umpteenth time on the problem of bungeecord compatibility hoping to find a new idea!
This version should be compatible with older configurations and work exactly the same (compatibility with 1.13 is not complete). You will however need Protocollib.
Contact me if you have any bugs, the 2.0.0 (compatible with the 1.13) should arrive soon (I still have some bugs to fix)!
Patch :
Some users had errors randomly. They should now be fixed (nevertheless if you continue to see them in your console, do not hesitate to contact me).
Notes :
The 1.13 seems to have changed the system of pluginmessages used by HackedServer, so it will be difficult to maintain compatibility with older versions while supporting 1.13. I will try to rewrite my own system to no longer depend on spigot.
- Patch : Bypass permission
The previous update added a way to perform commands when a player is detected with any mods but the bypass permission was not working with this feature. This is now fixed !
- Wurst (forge mod version) detection added
Wurst is a well-known hack for Minecraft. This is probably one of the most complete and used. Recently a forged version of this client was released and HackedServer exploits a flaw in this version to detect it.
It's not me who discovered this and all the credit goes to one of the users of HackedServer.
- McSpam protection removed from the plugin :
This feature is no longer in accordance with the rules of spigot, it will no longer be part of the plugin, but servers that are already protected will remain so (even when updating the plugin).
- New ide :I just switched from eclipse Oxygen to intellij Idea community edition, I'm getting used to it and I find it really cool (it should not impact the plugin enormously but rather my comfort to work on it).
- Proguard Bytecode optimization : I do not think it changes much but it's cool. xD
Improvements: - /hs reload command added (use it instead of plugman to avoid freezes and resets of HackedServer data) - Commands are now performed by an operator player instead of the console ! - Code and obfuscation optimized : the weight of the plugin is much lower, however I do not think it will improve server performance (the code was already relatively clean and without unnecessary tasks, and HackedServer is really not a resource seeker xD).
Bugfixes: - Some little mistakes have been fixed in messages.yml
Note: You will need to reset your configs. I also want to thank you because we are more and more numerous in the adventure (our growth curve is the same as that of bitcoin xD): https://bstats.org/plugin/bukkit/HackedServer
I'm sorry to do a little less update than usual because right now I'm really busy with high school, however I have not forgotten you and I try to give you my support to the maximum so that we continue the great adventure that is HackedServer!
In this update I change the log system to something much cleaner and complete. As you may know this is one of the few features that has not changed since I created HackedServer so it was really a good idea from
@mrfloris !
In this regard I want to thank him because it is thanks to people like him who give their opinions and ideas that the plugin is improving!
In any case I await
YOUR opinion on this new feature!
This update tries (as the name implies) to fix an incompatibility with the Fiona plugin. I unfortunately could not test. Can you tell me if it works well? xD
(I also updated the description to be more clear about mcspam)
I promised you a big feature to start the year 2018. ... Well, that's the case! I do not know if you have heard of mcspam.org? This is a website that sends packets to your server to make it believe that he receives thousands of players per seconds (more than 7k bots per seconds sometimes).
It's a friend who told me about it. Sometimes his server was attacked with deathbot : the most well-known bot program (created by the same author as mcspam), but it was enough to activate the whitelist for a few minutes to solve the problem. However he recently received attacks via mcspam. And unfortunately his server stopped responding instantly and crashed in a few tens of seconds. After a player told him he was using mcspam.com, he contacted me to find out if I had a solution.
And I found one: I entered into a partnership with the mcspam developer. From now on you my dear users will be protected against mcspam.
Specifications : If your players connect trough a proxy like bungeecord your server will not be protected automatically. In this case don't hesitate to contact me and send me your ip adress I'll do that manually.
I hope you enjoy the improvements I make to HackedServer to better protect you! Thomas.
This day is quite special, because at the same time we entered the year 2018, HackedServer exceeded 100 sales! So I decided to prepare a special update : I started to work on a big feature that you will discover soon, I also began a bstats integration (which will help me know what your favorite features are and which I will work on) and added a security to HackedServer : now you need a permission (hackedserver.knowexistence) in order to know that HackedServer exists using /hs (else you would see something like that : "Unknown command. Type "/help" for help."). This was an idea from @mrfloris.
I'm happy to announce that Hacked Server should now be able to detect all so-called undetectable versions downloaded here !
I tested this feature for a few days on my own server and it seems to work perfectly. However if you have false positives or wdl users who can still connect, do not hesitate to pm me!
Thanks to @PrankAlien and all of you for your incredible support !