Advertisement
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Account jacking

Comments in 'General Discussion' started by DopeteK, Apr 26, 2014.

Thread Status:
Not open for further replies.
  1. DopeteK
    Offline

    DopeteK Active Member

    Joined:
    Aug 24, 2013
    Posts:
    393
    Minecraft User:
    DTeK
    I have banned a few people for logging in with my account. They don't use my password though so how are they able to do this? The last guy I banned was today and was so dumb he typed commands like /give ShaddowStriker money 10000 and /give ShaddowStriker diamonds. His ip was his regular address too and thought I would never know. this shows that he knows nothing about pocketmine yet he was still able to access my account. How?
  2. Darunia18
    Offline

    Darunia18 Staff Member Sectional Moderator

    Joined:
    Aug 23, 2013
    Posts:
    754
    Plugins:
    2
    Minecraft User:
    Darunia18
    If you are using SimpleAuth and are experiencing an issue with it, please report it either to the developer of the plugin (@shogicp) on the plugin's page in the repository or in the Help section. The plugin may have glitched, or they may be able to use commands without typing in your password.

    Just on a side note, this is why Mojang needs to create an official authentication service, or PocketMine needs to find a way to make one so that things like this don't happen.
    Tethered_ and DopeteK like this.
  3. DopeteK
    Offline

    DopeteK Active Member

    Joined:
    Aug 24, 2013
    Posts:
    393
    Minecraft User:
    DTeK
    Thank you I shall contact him now.
  4. Darunia18
    Offline

    Darunia18 Staff Member Sectional Moderator

    Joined:
    Aug 23, 2013
    Posts:
    754
    Plugins:
    2
    Minecraft User:
    Darunia18
    He can usually be found on the IRC, but be respectful of how busy he is and be patient if he doesn't respond right away. :)
    PEMapModder and DopeteK like this.
  5. DopeteK
    Offline

    DopeteK Active Member

    Joined:
    Aug 24, 2013
    Posts:
    393
    Minecraft User:
    DTeK
    Yeah I know and I don't like to bother him there as he is always coding. This is a problem he can't fix right now so I left a comment in the plugin page. If I have not had a response in a few days I'll go bug him. :)

    Thanks again
    Darunia18 likes this.
  6. DA_Swagnemite
    Offline

    DA_Swagnemite Notable Member Plugin Developer

    Joined:
    Nov 17, 2013
    Posts:
    386
    Plugins:
    7
    Minecraft User:
    DA_SWAGNEMITE
    Do you maybe have a conflicting plugin causing this?
  7. DopeteK
    Offline

    DopeteK Active Member

    Joined:
    Aug 24, 2013
    Posts:
    393
    Minecraft User:
    DTeK
    I have no other plugin that allows a user to make an account. I get no errors either.
  8. DA_Swagnemite
    Offline

    DA_Swagnemite Notable Member Plugin Developer

    Joined:
    Nov 17, 2013
    Posts:
    386
    Plugins:
    7
    Minecraft User:
    DA_SWAGNEMITE
    Any plugin that uses the player.connect or player.spawn events might cause some sort of conflict.
    PEMapModder and DopeteK like this.
  9. DopeteK
    Offline

    DopeteK Active Member

    Joined:
    Aug 24, 2013
    Posts:
    393
    Minecraft User:
    DTeK
    Thanks I shall search the php.
  10. DopeteK
    Offline

    DopeteK Active Member

    Joined:
    Aug 24, 2013
    Posts:
    393
    Minecraft User:
    DTeK
    Checked it and only admin can use it. The user didn't run any commands to login.
  11. shoghicp
    Offline

    shoghicp Staff Member PocketMine Team

    Joined:
    Aug 22, 2013
    Posts:
    433
    Plugins:
    14
    Minecraft User:
    shoghicp
    he might have connected but not logged in and typed commands, but no action was done. the commands get displayed on console before it is blocked
    LDX, PEMapModder and Darunia18 like this.
  12. DopeteK
    Offline

    DopeteK Active Member

    Joined:
    Aug 24, 2013
    Posts:
    393
    Minecraft User:
    DTeK
    Very interesting. I checked the log a little harder and that is indeed what happened. He was logged out due to authentication timeout. There was one account that managed to log in as me though without my password and I am going to go look harder at that now.

    Thanks
    Falk likes this.
  13. PEMapModder
    Offline

    PEMapModder Notable Member Plugin Developer

    Joined:
    Oct 9, 2013
    Posts:
    7,294
    Plugins:
    11
    Minecraft User:
    PEMapModder
    I think I hadn't seen any plugins that returns true in a handler. So this won't happen.

    For the console thing... Which plugin did u use? How did it get priority 50+?
  14. Dinokiller
    Offline

    Dinokiller Notable Member

    Joined:
    Sep 22, 2013
    Posts:
    376
    Minecraft User:
    Dinokiller_
    Console thing? You can see commands if you set "debug" to 2 in "server.properties".
  15. PEMapModder
    Offline

    PEMapModder Notable Member Plugin Developer

    Joined:
    Oct 9, 2013
    Posts:
    7,294
    Plugins:
    11
    Minecraft User:
    PEMapModder
    This action is invasive... This views all the passwords.
    In fact, I made my plugin show debug messages with debug 2, partly to discourage people do this. :p
    iJoshuaHD likes this.
Thread Status:
Not open for further replies.

Share This Page

Advertisement