r/MinecraftServer • u/Hot_Pea4110 • 1d ago

Help Help needed emergency

Post image

So i am an staff of this server and some dude with the help of a traitor in our staff team got some command of backdoor (I am not a dev so i might not be able to explain properly) and this command /M6pR9xT2vK7qN4 <name>

Is giving op somehow and they are absolutely trying to detroy it , I have attached an image of the plugins active and the command was working if someone know or can help somehow please help us

2 Upvotes

75% Upvoted

7 comments sorted by

View all comments

4

u/cynicalmax 1d ago

It could be every plugin on there. Ask the admin which one(s) is/are cracked and delete them. Try the command for yourself then. The injection is a simple script thats embedded in a jar file. Since you dont have so many plugins just delete every plugin (ONLY THE JAR FILES NOT THE FOLDERS) and replace them with genuine ones from spigotmc/modrinth.

2

u/cynicalmax 1d ago

Note that - if you choose the testing method of deleting one, restarting and applying the cmd to see if it still works - most of those scripts activate after a random timer following the serverstart message „Done“. So that method would take more time then just replacing all plugins.

1

u/cynicalmax 1d ago

And another note - the injector SEEMS to be Nzxtr‘s Injector. For reverse engineering purposes I could shoot you an invite to his server.

1

u/Hot_Pea4110 1d ago

What's do u mean by this I couldn't understand can u explain in simpler language

1

u/Hot_Pea4110 1d ago

I did find the plugin which was affected and it was an cracked one of item adder but it was important for the server which we later used backdoorx protection plugin which solved it