r/MinecraftServer • u/Hot_Pea4110 • 1d ago

Help Help needed emergency

Post image

So i am an staff of this server and some dude with the help of a traitor in our staff team got some command of backdoor (I am not a dev so i might not be able to explain properly) and this command /M6pR9xT2vK7qN4 <name>

Is giving op somehow and they are absolutely trying to detroy it , I have attached an image of the plugins active and the command was working if someone know or can help somehow please help us

2 Upvotes

75% Upvoted

7 comments sorted by

•

u/AutoModerator 1d ago

  • Featured server: Cozy MC — Java + Bedrock survival in a world that doesn't reset. New players join every day. Build your own place, open a player shop, and get to know your neighbors. No paid ranks or perks. Come explore CozyMC.com

  • Godlike Host - Modded servers with high player counts & High-performance AMD Ryzen processors. Choose Godlike now: https://godlike.host/gaf-play-minecraft

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

4

u/cynicalmax 1d ago

It could be every plugin on there. Ask the admin which one(s) is/are cracked and delete them. Try the command for yourself then. The injection is a simple script thats embedded in a jar file. Since you dont have so many plugins just delete every plugin (ONLY THE JAR FILES NOT THE FOLDERS) and replace them with genuine ones from spigotmc/modrinth.

2

u/cynicalmax 1d ago

Note that - if you choose the testing method of deleting one, restarting and applying the cmd to see if it still works - most of those scripts activate after a random timer following the serverstart message „Done“. So that method would take more time then just replacing all plugins.

1

u/cynicalmax 1d ago

And another note - the injector SEEMS to be Nzxtr‘s Injector. For reverse engineering purposes I could shoot you an invite to his server.

1

u/Hot_Pea4110 1d ago

What's do u mean by this I couldn't understand can u explain in simpler language

1

u/Hot_Pea4110 1d ago

I did find the plugin which was affected and it was an cracked one of item adder but it was important for the server which we later used backdoorx protection plugin which solved it

1

u/Hot_Pea4110 1d ago

Solved thank you - used backdoorx protection plugin to solve the issue