DarkReaper's story (and the server community) and his skill are amazing. It's showing how the "evil" hackers are not bad, just want some challenge to solve :)
AntiCheat Dev here, nowadays this is basically a non-issue as most modern anticheats don’t rely on any spigot events. Most are packet based analyzing every single movement.
Even if you didn't rely on packets, you can just create a task that runs every 1 or so seconds (less performance heavy than listening to everyOnPlayerMoveEvent) and check the player coordinates which cannot be bypassed ever. So in the end just don't use the OnPlayerMoveEvent.
It was super fun to figure out both bypasses. Figuring out the bot movement bypass was simple enough but man it took forever to figure out the worldguard/fabric bypass. I think I had the same eureka moment when I saw that section about not spamming events. I would love to see more challenges like this in the future! Edit: Actually, looking at the comments it sounds like there is a new challenge ;)
@@nullstring1549 I think he covered how to bypass the fly kick in another video. You want to do something along the same lines. Read the conditions in the code for when you get kicked and avoid them.
Wow I never seen a server that prevents griefing by giving everyone hacks, that's such a cool concept! I will definitely join and help protect it when I have time, seems really fun :D
When you select the area for a new worldguard region run the //expand vert command after you have selected your two positions. This way you select every y-value between your two selection points and you won't have to build your ruins at build height.
yeah most every protection plugin supports protecting full chunk height, some ONLY that, but even the more flexible ones, like worldguard, would also include that
This video is my first exposure to your entire project and server. The entire idea and project is amazing and inspirational. I love the balance of cooperative anarchism here. Subbed and watching more!
These Minecraft videos have a really comfy feel, especially with the first few minutes where you talk about what the community has done on your server. Keep it up, I love this series! Makes me want to learn Java and start messing with Minecraft : ]
I didn't know that modding would be such fun !!! I hope that this community would live long enough.. And one day... I will be on that server... Thanks live....
Can't forget how Bleach inovated the original notebot by implementing the whole noteblock raycast thing back in 2017-18. We wouldn't have modern notebot chambers without that.
Yep, seems that some plugin or bot is following the player position, and when you move then a tnt spawn, so every players that joins or respawn summon a tnt
For the area protection thing you could probably target ENTITIES to be forced out of the area as that would prevent both the enderpearl and minecart exploit
To be clear. It is difficult due to the implementation of the MovePlayerEvent. Sponge (an alternative to Bukkit) triggers its move event for any movement (ender perl, vehicle, etc)
Haha, on your Channel for the first time. Like the Club Mate botttle. Im drinking Club Mate since im 14. I'm 25 today. But, are you from Germany? Your accent sounds a little bit like that
It may be convenient to tie the event in during the packet handling process, but that makes the game prone to exploits from packet manipulation. Another approach that could be done is comparing the new position from the player's last position, and if they're different, fire the even manually on the server. However, if you fire the event every time the value changes, then it could easily use a lot of resources and essentially spam the server. To avoid this, only compare the movements once per X amount of ticks, X being dependent on how much you want to prioritize the detections efficiency.
wouldnt it be easier to just make your client round your position ? i'd imagine it would look chunky fpr other players but you yourself could play normally
My idea: everybody who gets more than 2 Blocks into illegal gets killed or the server does check every 40 ticks if the position is legal if yes it saves it into another variable where the player gets ported back if moving to fast
Its sort of embarrassing that WorldGuard didn't patch this considering "PacketFly" has been a common feature for a whole range of exploits such as phasing, flying, etc in most 1.12.2 clients
The real issue is the server not correctly taking into consideration the client tps. There should be no more than 20 move packets per second(but also need to keep in mind lag). Keeping that in mind, it wouldn't be an issue to just call the event on every move packet.
Noted. I suppose that's an additional Easter Egg I can implement on my own server(s), should you be willing to have at least your player's head visible. I keep hearing about people giving Command Blocks a lot of flack, but don't get into the "why" without getting fuzzy. I have a working theory, but my practical understanding fails to see how many "resource leaks" there are in that pipeline.
The server is a really cool concept. But(i could be really wrong, Sorry if i am.) I feel like if a genuinely experienced grief "team" (team of 3 to 6 players) would join the server. The server would've been pretty much destroyed. Note: I'm assuming the server has no(or close to 0) protection against cheating. And that things like explosions, withers and x dupe method(s) are not disabled or patched
Well, we (devs) can just put BukkitRunnable in enEnable(). That Runnable would be runTastTimer, and this could loop through all online players and check their positions if they are inside some private regions. Well, this should work, but i know that for some bigger servers this could may contribute to the lags. Am i right? Or i have messed something in the video?
I was so close to getting hacker. I had found the problem code, but was fooling around with NaN until I got frustrated by noobbot blocking all the slots.
There has always been a huge imbalance of power between griefers and regular players, you can join a server, dupe some tnt and wreck someones base in less than 30 minutes when it took them months to make it, lava casts are also criminally easy to make and hard to clean up. Anti griefing plugins are cool and all, but that leaves no power to the players and you either wait for an admin to show up and fix it, which may not be perfect or you fix it yourself, its annoying asf to clean up multiple large lava casts, only to have the griefer show up the next day and do it again.
could you please share your current fabric mod with us? it would provide a great opportunity to analyze code and figure out how to do stuff. Your videos have inspired me to make my own hacks, and i would like to look at your code. :) the end.
i can already see how that works. Bcs the player is near that chuck it will recieve the package of a block being broken at that location. Allowing the user to use that and send it to chat and discord. Very ez to do if u do the research on how to
You could also create a lightweight thread with the latest Java Version for every player joining. Every 5 seconds you check if their latest position is theoretically possible. This could also prevent any form of flying if properly implemented
This has become my favorite youtube series. Please keep it going for as long as possible.
Agreed, every time I see a new episode I get excited haha
Dude yes, I learned so much from working on these challenges and watching these videos
Same dude
So sad it’s over 😢😢
@@suitkais7 yeah
It's just so impressive how you manage to break the game every episode and also how you include the community!
hey
DarkReaper's story (and the server community) and his skill are amazing. It's showing how the "evil" hackers are not bad, just want some challenge to solve :)
AntiCheat Dev here, nowadays this is basically a non-issue as most modern anticheats don’t rely on any spigot events. Most are packet based analyzing every single movement.
What server do you work on?
@@evil_peanut5 oh
@@MargootMC what you should have asked is what anti-cheat plugin he is involved with lol
Maybe LiveOverflow allows hacked clients to be used, but not to the extent as pure anarchy?
Even if you didn't rely on packets, you can just create a task that runs every 1 or so seconds (less performance heavy than listening to everyOnPlayerMoveEvent) and check the player coordinates which cannot be bypassed ever. So in the end just don't use the OnPlayerMoveEvent.
It was super fun to figure out both bypasses. Figuring out the bot movement bypass was simple enough but man it took forever to figure out the worldguard/fabric bypass. I think I had the same eureka moment when I saw that section about not spamming events. I would love to see more challenges like this in the future!
Edit: Actually, looking at the comments it sounds like there is a new challenge ;)
any chance you can offer advice on the worldguard bypass. we keep getting kicked for flying
@@nullstring1549 I think he covered how to bypass the fly kick in another video. You want to do something along the same lines. Read the conditions in the code for when you get kicked and avoid them.
what is the IP adress?
moment
Now I want a video of DarkReaper showing he's Linux, nice setup man
Wow I never seen a server that prevents griefing by giving everyone hacks, that's such a cool concept! I will definitely join and help protect it when I have time, seems really fun :D
When you select the area for a new worldguard region run the //expand vert command after you have selected your two positions. This way you select every y-value between your two selection points and you won't have to build your ruins at build height.
yeah most every protection plugin supports protecting full chunk height, some ONLY that, but even the more flexible ones, like worldguard, would also include that
I hope the next episode includes a technical breakdown of philipps proxy!
omg its real chillerdragon
omg its real chillerdragon
@@Scrumplex lmao u here the world is so small
dang i found a teeworlds player in the comments
This video is my first exposure to your entire project and server. The entire idea and project is amazing and inspirational. I love the balance of cooperative anarchism here. Subbed and watching more!
These Minecraft videos have a really comfy feel, especially with the first few minutes where you talk about what the community has done on your server. Keep it up, I love this series! Makes me want to learn Java and start messing with Minecraft : ]
6:08 I welcome you to the world of developing minecraft modifications.
This is just the best Minecraft series on RUclips. Ever.
I didn't know that modding would be such fun !!!
I hope that this community would live long enough..
And one day...
I will be on that server...
Thanks live....
It's wild to see how far notebot has spread since Jordin, me, and Valkyrie wrote it & started doing it on random HCF servers in 2015 (2016?)
Can't forget how Bleach inovated the original notebot by implementing the whole noteblock raycast thing back in 2017-18. We wouldn't have modern notebot chambers without that.
that's a clean arch install, love it
i love this series.
it's so enjoyable...
i was more concerened with how amazing darkreaper's linux install looks
I love how you are slowly becoming a minecraft channel without leaving hacking behind hahahah
Legit, you're the first youtube creator that I dare turn on the bell !
Flashing screen warning at 9:02, in case you missed the quick warning message in video. Also a bit later. Keep an eye out of warning screens.
great video as always, enjoying this series
Wow, this is really cool. I definitely have to get more into this sort of stuff! I might look into joining the server at some point in the future.
RIP Server, it was a nice time playing on you.
:( wanted to try worldguard challenge, but was greeted with magically appearing TNT 😭
I just found the IP adress, the server is down ?
@@FyzRDC no it geht's griefed :(
Yep, seems that some plugin or bot is following the player position, and when you move then a tnt spawn, so every players that joins or respawn summon a tnt
If you know how you can bypass the tnt spawn :P
11:48 that's me in the vid yay i made it!!!!
whats the ip
I love this Series so much.
Hell yeah DarkReaper is a fellow arch user
end song is Africa by ToTo lol, too me a while to figure out
This feels like a peaceful 2b2t
you could just add a lastTeleportPos variable to the move handler so that teleports don't reset the last player movement position
My favorite minecraft let's play author
I’m loving it holy shit
For the area protection thing you could probably target ENTITIES to be forced out of the area as that would prevent both the enderpearl and minecart exploit
CTF but for Minecraft Hackers
Amazing experiment!
To be clear. It is difficult due to the implementation of the MovePlayerEvent.
Sponge (an alternative to Bukkit) triggers its move event for any movement (ender perl, vehicle, etc)
Haha, on your Channel for the first time. Like the Club Mate botttle. Im drinking Club Mate since im 14. I'm 25 today. But, are you from Germany? Your accent sounds a little bit like that
My favourite video yet. Well done. Such creative exploiting
This is exactly how packetfly works. Took me quite a while to get it when I was working on my client back then honestly.
I'm going to have to use this when people tell me they think access control is easy!
UR INSANEEEEEEEEEE TYYSM ILYYY
It may be convenient to tie the event in during the packet handling process, but that makes the game prone to exploits from packet manipulation.
Another approach that could be done is comparing the new position from the player's last position, and if they're different, fire the even manually on the server.
However, if you fire the event every time the value changes, then it could easily use a lot of resources and essentially spam the server.
To avoid this, only compare the movements once per X amount of ticks, X being dependent on how much you want to prioritize the detections efficiency.
I love this series!
finally thank god more minecraft content
wouldnt it be easier to just make your client round your position ? i'd imagine it would look chunky fpr other players but you yourself could play normally
Yes that’s how it works
Lol
@@josephcosta7061 I think they’re saying in contrast to keeping it below the delta and teleporting to reset the count
@@josephcosta7061but why does it not look chunky? ^^
Man each video of this I watch makes me want to join the server more, time to get a hack client and learn how to make plugins for it I guess
I spent over a month on that sorter, trying to get it to work in newer MC versions, and there are so many problems with it. Very easy to break it.
There is actually a jira issues (SPIGOT-745) for this in spigot from March 2015 talking about this. Wanting an extra move event for anticheat plugins.
Damn DarkReaper thats a pretty cool Linux you have there. D:
here before premiere!
damn now I'm sad I didn't figure out to teleport :( will you be making any more challenges?
Love this
My idea: everybody who gets more than 2 Blocks into illegal gets killed or the server does check every 40 ticks if the position is legal if yes it saves it into another variable where the player gets ported back if moving to fast
bro, maizuma games is the goat
Great video as always thx
Its sort of embarrassing that WorldGuard didn't patch this considering "PacketFly" has been a common feature for a whole range of exploits such as phasing, flying, etc in most 1.12.2 clients
fun episode
Wouldn't just triggering the onmove event when you get rubberbanded back fix this?
shoutout to DarkReaper for their sick linux rice too :D
the delta might not have that much performance on regular play, but a bad actor could easily saturate the network just by sneaking
a bad actor can always just send movement packets larger than delta directly ;)
The real issue is the server not correctly taking into consideration the client tps. There should be no more than 20 move packets per second(but also need to keep in mind lag). Keeping that in mind, it wouldn't be an issue to just call the event on every move packet.
Noted. I suppose that's an additional Easter Egg I can implement on my own server(s), should you be willing to have at least your player's head visible.
I keep hearing about people giving Command Blocks a lot of flack, but don't get into the "why" without getting fuzzy. I have a working theory, but my practical understanding fails to see how many "resource leaks" there are in that pipeline.
Can't wait to find the ip :D
I love your videos
ty
U BEST!!!
Noice
The server is a really cool concept. But(i could be really wrong, Sorry if i am.) I feel like if a genuinely experienced grief "team" (team of 3 to 6 players) would join the server. The server would've been pretty much destroyed.
Note: I'm assuming the server has no(or close to 0) protection against cheating. And that things like explosions, withers and x dupe method(s) are not disabled or patched
Well, we (devs) can just put BukkitRunnable in enEnable(). That Runnable would be runTastTimer, and this could loop through all online players and check their positions if they are inside some private regions. Well, this should work, but i know that for some bigger servers this could may contribute to the lags. Am i right? Or i have messed something in the video?
The teleport event is fired for these moves.
I was so close to getting hacker. I had found the problem code, but was fooling around with NaN until I got frustrated by noobbot blocking all the slots.
Moles LLC / Rodents Ltd. has begun griefing.
There has always been a huge imbalance of power between griefers and regular players, you can join a server, dupe some tnt and wreck someones base in less than 30 minutes when it took them months to make it, lava casts are also criminally easy to make and hard to clean up. Anti griefing plugins are cool and all, but that leaves no power to the players and you either wait for an admin to show up and fix it, which may not be perfect or you fix it yourself, its annoying asf to clean up multiple large lava casts, only to have the griefer show up the next day and do it again.
Rather interesting, sadly i havent found any mention of the server
What about the strict value thing? did it work at all? you only briefly mentioned it
Nicce
😂
:O Meteor client!!!
In my opinion, OnPlayerMove should be triggered when a player connects or some alternative to that event should exist
3:17 wat is that song
Why doesn't it just detect the presence or proximity of the player and teleport him out?
could you please share your current fabric mod with us? it would provide a great opportunity to analyze code and figure out how to do stuff. Your videos have inspired me to make my own hacks, and i would like to look at your code. :)
the end.
I've seen someone who placed saplings in protected areas...
is DarkReaper by any chance Czech? :D I think he has quite Slavic accent
yes, it says "cz" at the bottom right of his screen
@@MisterL2_yt didnt notice lol
He is
i have a terrible idea
if the velocity is below said value, yet not zero, just null the move packet
I want to learn how to do something like this but I dont know where to start do you have a tutorial I can watch to get started?
i can already see how that works. Bcs the player is near that chuck it will recieve the package of a block being broken at that location. Allowing the user to use that and send it to chat and discord. Very ez to do if u do the research on how to
I was here
Is that an Stitch (experiment 626) reference?
Im pretty sure i figured the world guard bypass out in my head. Just make all movement packets use whole numbers like that
then it could be bypassed with decimals like .05 for example.
15:20 I really like DarkReapers desktop I see that he is using a tiling window manager, very nice. Also if DarkReaper sees this Ahoj! Jak se máš?
má se dobře určitě
trigger the movement on teleporting? and check the location?
lag = worldguard/any plugin bypass, proved by the man ashswag himself
Is it possible to join this server? It looks really fun!!
You can comment already?
hi
Hey
Nope
its you
@@BlendiGoose It's me
This sever is sooo cool, is there anyway I could join it?
what’s up with the tnt spawning on my head when i join the server
what de (desktop enviroment) does DarkReaper use?
8:51 what vscode theme?
Will you show us a way to get op using xss ? as you did do it like show us the text instead ?
what even is the IP?
@@TeakLlax you have to find it or hack in
You could also create a lightweight thread with the latest Java Version for every player joining. Every 5 seconds you check if their latest position is theoretically possible. This could also prevent any form of flying if properly implemented
I reallz hope someone builds a REWE where zou can buz club mate or mazbe a späti
soo...this server relies on users to enforce anti-griefing measures?