AntiCheat Dev here, nowadays this is basically a non-issue as most modern anticheats don’t rely on any spigot events. Most are packet based analyzing every single movement.
Even if you didn't rely on packets, you can just create a task that runs every 1 or so seconds (less performance heavy than listening to everyOnPlayerMoveEvent) and check the player coordinates which cannot be bypassed ever. So in the end just don't use the OnPlayerMoveEvent.
It was super fun to figure out both bypasses. Figuring out the bot movement bypass was simple enough but man it took forever to figure out the worldguard/fabric bypass. I think I had the same eureka moment when I saw that section about not spamming events. I would love to see more challenges like this in the future! Edit: Actually, looking at the comments it sounds like there is a new challenge ;)
@@nullstring1549 I think he covered how to bypass the fly kick in another video. You want to do something along the same lines. Read the conditions in the code for when you get kicked and avoid them.
DarkReaper's story (and the server community) and his skill are amazing. It's showing how the "evil" hackers are not bad, just want some challenge to solve :)
This video is my first exposure to your entire project and server. The entire idea and project is amazing and inspirational. I love the balance of cooperative anarchism here. Subbed and watching more!
These Minecraft videos have a really comfy feel, especially with the first few minutes where you talk about what the community has done on your server. Keep it up, I love this series! Makes me want to learn Java and start messing with Minecraft : ]
When you select the area for a new worldguard region run the //expand vert command after you have selected your two positions. This way you select every y-value between your two selection points and you won't have to build your ruins at build height.
yeah most every protection plugin supports protecting full chunk height, some ONLY that, but even the more flexible ones, like worldguard, would also include that
Wow I never seen a server that prevents griefing by giving everyone hacks, that's such a cool concept! I will definitely join and help protect it when I have time, seems really fun :D
Can't forget how Bleach inovated the original notebot by implementing the whole noteblock raycast thing back in 2017-18. We wouldn't have modern notebot chambers without that.
I didn't know that modding would be such fun !!! I hope that this community would live long enough.. And one day... I will be on that server... Thanks live....
Yep, seems that some plugin or bot is following the player position, and when you move then a tnt spawn, so every players that joins or respawn summon a tnt
wouldnt it be easier to just make your client round your position ? i'd imagine it would look chunky fpr other players but you yourself could play normally
To be clear. It is difficult due to the implementation of the MovePlayerEvent. Sponge (an alternative to Bukkit) triggers its move event for any movement (ender perl, vehicle, etc)
For the area protection thing you could probably target ENTITIES to be forced out of the area as that would prevent both the enderpearl and minecart exploit
It may be convenient to tie the event in during the packet handling process, but that makes the game prone to exploits from packet manipulation. Another approach that could be done is comparing the new position from the player's last position, and if they're different, fire the even manually on the server. However, if you fire the event every time the value changes, then it could easily use a lot of resources and essentially spam the server. To avoid this, only compare the movements once per X amount of ticks, X being dependent on how much you want to prioritize the detections efficiency.
Haha, on your Channel for the first time. Like the Club Mate botttle. Im drinking Club Mate since im 14. I'm 25 today. But, are you from Germany? Your accent sounds a little bit like that
Well, we (devs) can just put BukkitRunnable in enEnable(). That Runnable would be runTastTimer, and this could loop through all online players and check their positions if they are inside some private regions. Well, this should work, but i know that for some bigger servers this could may contribute to the lags. Am i right? Or i have messed something in the video?
Noted. I suppose that's an additional Easter Egg I can implement on my own server(s), should you be willing to have at least your player's head visible. I keep hearing about people giving Command Blocks a lot of flack, but don't get into the "why" without getting fuzzy. I have a working theory, but my practical understanding fails to see how many "resource leaks" there are in that pipeline.
The real issue is the server not correctly taking into consideration the client tps. There should be no more than 20 move packets per second(but also need to keep in mind lag). Keeping that in mind, it wouldn't be an issue to just call the event on every move packet.
My idea: everybody who gets more than 2 Blocks into illegal gets killed or the server does check every 40 ticks if the position is legal if yes it saves it into another variable where the player gets ported back if moving to fast
Its sort of embarrassing that WorldGuard didn't patch this considering "PacketFly" has been a common feature for a whole range of exploits such as phasing, flying, etc in most 1.12.2 clients
I was so close to getting hacker. I had found the problem code, but was fooling around with NaN until I got frustrated by noobbot blocking all the slots.
could you please share your current fabric mod with us? it would provide a great opportunity to analyze code and figure out how to do stuff. Your videos have inspired me to make my own hacks, and i would like to look at your code. :) the end.
The server is a really cool concept. But(i could be really wrong, Sorry if i am.) I feel like if a genuinely experienced grief "team" (team of 3 to 6 players) would join the server. The server would've been pretty much destroyed. Note: I'm assuming the server has no(or close to 0) protection against cheating. And that things like explosions, withers and x dupe method(s) are not disabled or patched
bro in the section around 15:30 is that your desktop rice or is that dark's cause whoevers it is, it is very very clean. also archbtw i now see its his and damn he got some good desktop rice, wonder what de/wm he is using
There has always been a huge imbalance of power between griefers and regular players, you can join a server, dupe some tnt and wreck someones base in less than 30 minutes when it took them months to make it, lava casts are also criminally easy to make and hard to clean up. Anti griefing plugins are cool and all, but that leaves no power to the players and you either wait for an admin to show up and fix it, which may not be perfect or you fix it yourself, its annoying asf to clean up multiple large lava casts, only to have the griefer show up the next day and do it again.
You could also create a lightweight thread with the latest Java Version for every player joining. Every 5 seconds you check if their latest position is theoretically possible. This could also prevent any form of flying if properly implemented
This has become my favorite youtube series. Please keep it going for as long as possible.
Agreed, every time I see a new episode I get excited haha
Dude yes, I learned so much from working on these challenges and watching these videos
Same dude
So sad it’s over 😢😢
@@suitkais7 yeah
It's just so impressive how you manage to break the game every episode and also how you include the community!
hey
AntiCheat Dev here, nowadays this is basically a non-issue as most modern anticheats don’t rely on any spigot events. Most are packet based analyzing every single movement.
What server do you work on?
@@evil_peanut5 oh
@@MargootMC what you should have asked is what anti-cheat plugin he is involved with lol
Maybe LiveOverflow allows hacked clients to be used, but not to the extent as pure anarchy?
Even if you didn't rely on packets, you can just create a task that runs every 1 or so seconds (less performance heavy than listening to everyOnPlayerMoveEvent) and check the player coordinates which cannot be bypassed ever. So in the end just don't use the OnPlayerMoveEvent.
It was super fun to figure out both bypasses. Figuring out the bot movement bypass was simple enough but man it took forever to figure out the worldguard/fabric bypass. I think I had the same eureka moment when I saw that section about not spamming events. I would love to see more challenges like this in the future!
Edit: Actually, looking at the comments it sounds like there is a new challenge ;)
any chance you can offer advice on the worldguard bypass. we keep getting kicked for flying
@@nullstring1549 I think he covered how to bypass the fly kick in another video. You want to do something along the same lines. Read the conditions in the code for when you get kicked and avoid them.
what is the IP adress?
moment
DarkReaper's story (and the server community) and his skill are amazing. It's showing how the "evil" hackers are not bad, just want some challenge to solve :)
Now I want a video of DarkReaper showing he's Linux, nice setup man
I hope the next episode includes a technical breakdown of philipps proxy!
omg its real chillerdragon
omg its real chillerdragon
@@Scrumplex lmao u here the world is so small
dang i found a teeworlds player in the comments
6:08 I welcome you to the world of developing minecraft modifications.
This video is my first exposure to your entire project and server. The entire idea and project is amazing and inspirational. I love the balance of cooperative anarchism here. Subbed and watching more!
These Minecraft videos have a really comfy feel, especially with the first few minutes where you talk about what the community has done on your server. Keep it up, I love this series! Makes me want to learn Java and start messing with Minecraft : ]
When you select the area for a new worldguard region run the //expand vert command after you have selected your two positions. This way you select every y-value between your two selection points and you won't have to build your ruins at build height.
yeah most every protection plugin supports protecting full chunk height, some ONLY that, but even the more flexible ones, like worldguard, would also include that
Wow I never seen a server that prevents griefing by giving everyone hacks, that's such a cool concept! I will definitely join and help protect it when I have time, seems really fun :D
It's wild to see how far notebot has spread since Jordin, me, and Valkyrie wrote it & started doing it on random HCF servers in 2015 (2016?)
Can't forget how Bleach inovated the original notebot by implementing the whole noteblock raycast thing back in 2017-18. We wouldn't have modern notebot chambers without that.
This is just the best Minecraft series on TH-cam. Ever.
Flashing screen warning at 9:02, in case you missed the quick warning message in video. Also a bit later. Keep an eye out of warning screens.
that's a clean arch install, love it
I didn't know that modding would be such fun !!!
I hope that this community would live long enough..
And one day...
I will be on that server...
Thanks live....
i love this series.
it's so enjoyable...
great video as always, enjoying this series
11:48 that's me in the vid yay i made it!!!!
whats the ip
Wow, this is really cool. I definitely have to get more into this sort of stuff! I might look into joining the server at some point in the future.
RIP Server, it was a nice time playing on you.
:( wanted to try worldguard challenge, but was greeted with magically appearing TNT 😭
I just found the IP adress, the server is down ?
@@FyzRDC no it geht's griefed :(
Yep, seems that some plugin or bot is following the player position, and when you move then a tnt spawn, so every players that joins or respawn summon a tnt
If you know how you can bypass the tnt spawn :P
i was more concerened with how amazing darkreaper's linux install looks
I love how you are slowly becoming a minecraft channel without leaving hacking behind hahahah
Legit, you're the first youtube creator that I dare turn on the bell !
end song is Africa by ToTo lol, too me a while to figure out
I love this Series so much.
My favourite video yet. Well done. Such creative exploiting
3:17 wat is that song
wouldnt it be easier to just make your client round your position ? i'd imagine it would look chunky fpr other players but you yourself could play normally
Yes that’s how it works
Lol
@@josephcosta7061 I think they’re saying in contrast to keeping it below the delta and teleporting to reset the count
@@josephcosta7061but why does it not look chunky? ^^
This feels like a peaceful 2b2t
you could just add a lastTeleportPos variable to the move handler so that teleports don't reset the last player movement position
There is actually a jira issues (SPIGOT-745) for this in spigot from March 2015 talking about this. Wanting an extra move event for anticheat plugins.
Hell yeah DarkReaper is a fellow arch user
To be clear. It is difficult due to the implementation of the MovePlayerEvent.
Sponge (an alternative to Bukkit) triggers its move event for any movement (ender perl, vehicle, etc)
For the area protection thing you could probably target ENTITIES to be forced out of the area as that would prevent both the enderpearl and minecart exploit
damn now I'm sad I didn't figure out to teleport :( will you be making any more challenges?
8:51 what vscode theme?
Wouldn't just triggering the onmove event when you get rubberbanded back fix this?
I spent over a month on that sorter, trying to get it to work in newer MC versions, and there are so many problems with it. Very easy to break it.
My favorite minecraft let's play author
CTF but for Minecraft Hackers
Amazing experiment!
I'm going to have to use this when people tell me they think access control is easy!
Man each video of this I watch makes me want to join the server more, time to get a hack client and learn how to make plugins for it I guess
It may be convenient to tie the event in during the packet handling process, but that makes the game prone to exploits from packet manipulation.
Another approach that could be done is comparing the new position from the player's last position, and if they're different, fire the even manually on the server.
However, if you fire the event every time the value changes, then it could easily use a lot of resources and essentially spam the server.
To avoid this, only compare the movements once per X amount of ticks, X being dependent on how much you want to prioritize the detections efficiency.
Haha, on your Channel for the first time. Like the Club Mate botttle. Im drinking Club Mate since im 14. I'm 25 today. But, are you from Germany? Your accent sounds a little bit like that
I love this series!
Well, we (devs) can just put BukkitRunnable in enEnable(). That Runnable would be runTastTimer, and this could loop through all online players and check their positions if they are inside some private regions. Well, this should work, but i know that for some bigger servers this could may contribute to the lags. Am i right? Or i have messed something in the video?
UR INSANEEEEEEEEEE TYYSM ILYYY
Noted. I suppose that's an additional Easter Egg I can implement on my own server(s), should you be willing to have at least your player's head visible.
I keep hearing about people giving Command Blocks a lot of flack, but don't get into the "why" without getting fuzzy. I have a working theory, but my practical understanding fails to see how many "resource leaks" there are in that pipeline.
Damn DarkReaper thats a pretty cool Linux you have there. D:
the delta might not have that much performance on regular play, but a bad actor could easily saturate the network just by sneaking
a bad actor can always just send movement packets larger than delta directly ;)
The real issue is the server not correctly taking into consideration the client tps. There should be no more than 20 move packets per second(but also need to keep in mind lag). Keeping that in mind, it wouldn't be an issue to just call the event on every move packet.
My idea: everybody who gets more than 2 Blocks into illegal gets killed or the server does check every 40 ticks if the position is legal if yes it saves it into another variable where the player gets ported back if moving to fast
What about the strict value thing? did it work at all? you only briefly mentioned it
I’m loving it holy shit
i have a terrible idea
if the velocity is below said value, yet not zero, just null the move packet
This is exactly how packetfly works. Took me quite a while to get it when I was working on my client back then honestly.
Its sort of embarrassing that WorldGuard didn't patch this considering "PacketFly" has been a common feature for a whole range of exploits such as phasing, flying, etc in most 1.12.2 clients
Great video as always thx
I was so close to getting hacker. I had found the problem code, but was fooling around with NaN until I got frustrated by noobbot blocking all the slots.
Is that an Stitch (experiment 626) reference?
Why doesn't it just detect the presence or proximity of the player and teleport him out?
what’s up with the tnt spawning on my head when i join the server
I want to learn how to do something like this but I dont know where to start do you have a tutorial I can watch to get started?
is DarkReaper by any chance Czech? :D I think he has quite Slavic accent
yes, it says "cz" at the bottom right of his screen
@@MisterL2_yt didnt notice lol
He is
could you please share your current fabric mod with us? it would provide a great opportunity to analyze code and figure out how to do stuff. Your videos have inspired me to make my own hacks, and i would like to look at your code. :)
the end.
The server is a really cool concept. But(i could be really wrong, Sorry if i am.) I feel like if a genuinely experienced grief "team" (team of 3 to 6 players) would join the server. The server would've been pretty much destroyed.
Note: I'm assuming the server has no(or close to 0) protection against cheating. And that things like explosions, withers and x dupe method(s) are not disabled or patched
here before premiere!
Rather interesting, sadly i havent found any mention of the server
finally thank god more minecraft content
I've seen someone who placed saplings in protected areas...
bro in the section around 15:30 is that your desktop rice or is that dark's cause whoevers it is, it is very very clean. also archbtw
i now see its his and damn he got some good desktop rice, wonder what de/wm he is using
Is there a discord server for this?
soo...this server relies on users to enforce anti-griefing measures?
Can't wait to find the ip :D
what de (desktop enviroment) does DarkReaper use?
trigger the movement on teleporting? and check the location?
15:20 I really like DarkReapers desktop I see that he is using a tiling window manager, very nice. Also if DarkReaper sees this Ahoj! Jak se máš?
má se dobře určitě
is it possible to like apply here? i would love to join your server
In my opinion, OnPlayerMove should be triggered when a player connects or some alternative to that event should exist
There has always been a huge imbalance of power between griefers and regular players, you can join a server, dupe some tnt and wreck someones base in less than 30 minutes when it took them months to make it, lava casts are also criminally easy to make and hard to clean up. Anti griefing plugins are cool and all, but that leaves no power to the players and you either wait for an admin to show up and fix it, which may not be perfect or you fix it yourself, its annoying asf to clean up multiple large lava casts, only to have the griefer show up the next day and do it again.
This sever is sooo cool, is there anyway I could join it?
shoutout to DarkReaper for their sick linux rice too :D
Hey, is the server still openned and is there a way to find its ip ?
Is it possible to join this server? It looks really fun!!
Bro, why did u do it, now I have to patch it on my server..
You can comment already?
hi
Hey
Nope
its you
@@BlendiGoose It's me
bro, maizuma games is the goat
Will you show us a way to get op using xss ? as you did do it like show us the text instead ?
what even is the IP?
@@TeakLlax you have to find it or hack in
The teleport event is fired for these moves.
I reallz hope someone builds a REWE where zou can buz club mate or mazbe a späti
may i ask why you are using an anti human plugin?
How do you join the server?
I love your videos
Moles LLC / Rodents Ltd. has begun griefing.
Is anyone allowed to join the server or only ppl you allow in?
How does one start doing this? Always loved this hacking stuff
Love this
fun episode
You could also create a lightweight thread with the latest Java Version for every player joining. Every 5 seconds you check if their latest position is theoretically possible. This could also prevent any form of flying if properly implemented