1. The forums will be archived and moved to a read only mode in about 2 weeks (mid march).

Solved Hack op

Discussion in 'Plugin Help' started by KHAV, Nov 24, 2016.

  1. KHAV

    KHAV Baby Zombie

    Messages:
    152
    GitHub:
    xkhhv
    Hello

    In my server there are some players op and i don't give anyone op and when i ban them they back how them do this?
     
    MyNET likes this.
  2. Thunder33345

    Thunder33345 Moderator Staff Member

    Messages:
    2,137
    GitHub:
    Thunder33345
    firstly do you have an auth plugin?
    have you checked op.txt?
    i honestly dont know but maybe some staff did it
     
  3. KHAV

    KHAV Baby Zombie

    Messages:
    152
    GitHub:
    xkhhv
    I have serverauth plugin
     
  4. MyNET

    MyNET Silverfish

    Messages:
    24
    1. Try to install any auth plugin such as simpleauth , serverauth !
    2. Make sure to check out "op.txt" (its will be easy to deop any unknown players)
    3. Also deop all staff if that problem still happen! (Op them after the problem is fixed lol )
    4. Other maybe check out your server plugins that have op cmd!
    5. Good luck lol! ;)
     
  5. Bamuel

    Bamuel Silverfish

    Messages:
    16
    GitHub:
    bamuel
    By any chance do you have PurePerms installed
     
  6. Kenner

    Kenner Spider Jockey

    Messages:
    25
    GitHub:
    Enzoomet
    Hey,

    Methods to prevent unwanted users from joining:
    1. If you have PurePerms installed, remove the OP permission:
    /unsetuperm PLAYERNAME pocketmine.command.op
    2. If the above method doesn't work, review your logs and ban the user by their client-ID.
    /bancidbyname USERNAME
    3. If the above method doesn't work, ban the user by their IP address:
    /ban-ip USERNAME/IP
    4. If none of those methods worked, ask us for help! BUT, don't ask to ask, just ask! ;)
     
  7. Thunder33345

    Thunder33345 Moderator Staff Member

    Messages:
    2,137
    GitHub:
    Thunder33345
    OR set all the groups to have "-pocketmine.command.op"
     
  8. robske_110 (Tim)

    robske_110 (Tim) Wither Skeleton Poggit Reviewer

    Messages:
    1,342
    GitHub:
    robske110
    bancidbyname ? Please tell us what plugin that is
     
  9. archie426

    archie426 Baby Zombie

    Messages:
    130
    GitHub:
    archie426
    This is pobably because anticheat has been stripped from the core, but they haven't got rid of OP yet. Do the steps that the others said
     
  10. Thunder33345

    Thunder33345 Moderator Staff Member

    Messages:
    2,137
    GitHub:
    Thunder33345
    i dont think just because anti cheat is strip it means player can get OP
    i think the OP is handle by logic not anti cheat so does item cloning
    like fly which was guarded by anti cheat
     
  11. archie426

    archie426 Baby Zombie

    Messages:
    130
    GitHub:
    archie426
    Oh, sorry
     
  12. SOFe

    SOFe Administrator Staff Member PMMP Team Poggit Admin

    Messages:
    1,968
    GitHub:
    sof3
    Anticheat is related to flying, item forgery, etc. It has nothing to do with manipulation of core permissions like ops.
     
    HimbeersaftLP likes this.
  13. archie426

    archie426 Baby Zombie

    Messages:
    130
    GitHub:
    archie426
    Oh, oops, my mistake
     
  14. reidq7

    reidq7 Spider

    Messages:
    11
    GitHub:
    reidq7
    Your problem is probably PurePerms. A player or maybe a few players have access to the op command or other commands that will allow them to bring back the op command no matter what you do. After one person gets access, it's like a virus that you can't control. One way I handle this (because I have hundreds of player files) is by going into my PurePerms/players folder, and running: (I'm using linux, find a text searching tool if you're not)

    for i in `grep -l pocketmine *`; do rm $i; done

    This will automatically remove any player folder with a pocketmine perm attached to it. I'd also replace "pocketmine" with "command", as this will remove any other command perms, and many people also use '*' as a perm to use every command so remove that too.

    Hope this helped, good luck with your server!
     
    Thunder33345 likes this.
  15. Thunder33345

    Thunder33345 Moderator Staff Member

    Messages:
    2,137
    GitHub:
    Thunder33345
    right back on topic any more issues you are encountering OP?
     
  16. Matthew

    Matthew Baby Zombie

    Messages:
    167
    GitHub:
    matthww
    Why don't you check the server.log ?? It should say 'X has opped Y' Or something similiar :p
     
  17. Tolo

    Tolo Silverfish

    Messages:
    15
    GitHub:
    Tolo0
    If your using plugin TapToDo. then that could be the issue. I had random players getting op becos of this. dont use
    %op
    use instead
    %pow
     
  18. Aviv

    Aviv Baby Zombie

    Messages:
    156
    maybe someone got you password? change you password and ask your staff that has op to change it too, you can also disable /op so only console can use it? i know some hacks that get passwords, be aware of that.
     
  19. Thunder33345

    Thunder33345 Moderator Staff Member

    Messages:
    2,137
    GitHub:
    Thunder33345
    try use this and add op to the blocked command
    it should generate a log if anyone uses /op
    https://github.com/ThunderDoesPlugins/CommandBlocker
    that should give you insight to know where to look for more things
    but it could be caused by miss plugin configuration too
     
    HimbeersaftLP likes this.
  20. Kenner

    Kenner Spider Jockey

    Messages:
    25
    GitHub:
    Enzoomet
    That command is built into some spoons of PocketMine. I reviewed the PocketMine GitHub repository and found that command is not built in.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.