Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Suggestion] Add Bungee bypass/UUID spoof #98

Closed
PilaCiu opened this issue Jan 14, 2022 · 5 comments · Fixed by #281
Closed

[Suggestion] Add Bungee bypass/UUID spoof #98

PilaCiu opened this issue Jan 14, 2022 · 5 comments · Fixed by #281
Labels
enhancement New feature or request

Comments

@PilaCiu
Copy link

PilaCiu commented Jan 14, 2022

Describe the feature

I think it would be pretty cool for messing with smaller servers.

@PilaCiu PilaCiu added the enhancement New feature or request label Jan 14, 2022
@explasion
Copy link

I'm just gonna come out and say... I don't think this is possible. the auth servers use the UUID along with the password to generate the session stuff that lets you log in. I don't think it's possible to lie to even vanilla modern MC servers about your UUID without finding a very niche SHA-256 cryptographic exploit of some sort....

@explasion
Copy link

and it'd have to find it each time.... it's just not very feasible.

@nrliii
Copy link

nrliii commented Nov 15, 2022

I don't think this is possible. the auth servers use the UUID along with the password to generate the session stuff that lets you log in.

But what about the online-mode=false servers?

@nrliii
Copy link

nrliii commented Nov 15, 2022

Bro how can you be that dumb

I see you dont know about bungee griefing by spoofing uuid back few years. By spoofing uuid after logging in to gain operator permissions.

@RacoonDog
Copy link
Contributor

Bro how can you be that dumb

I see you dont know about bungee griefing by spoofing uuid back few years. By spoofing uuid after logging in to gain operator permissions.

So its patched?

hexadecimal233 added a commit to hexadecimal233/meteor-rejects that referenced this issue Aug 5, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

5 participants
@explasion @RacoonDog @nrliii @PilaCiu and others