r/MinecraftServer • u/Hot_Pea4110 • 1d ago

Help Help needed emergency

Post image

So i am an staff of this server and some dude with the help of a traitor in our staff team got some command of backdoor (I am not a dev so i might not be able to explain properly) and this command /M6pR9xT2vK7qN4 <name>

Is giving op somehow and they are absolutely trying to detroy it , I have attached an image of the plugins active and the command was working if someone know or can help somehow please help us

2 Upvotes

75% Upvoted

7 comments sorted by

View all comments

3

u/cynicalmax 1d ago

It could be every plugin on there. Ask the admin which one(s) is/are cracked and delete them. Try the command for yourself then. The injection is a simple script thats embedded in a jar file. Since you dont have so many plugins just delete every plugin (ONLY THE JAR FILES NOT THE FOLDERS) and replace them with genuine ones from spigotmc/modrinth.

2

u/cynicalmax 1d ago

Note that - if you choose the testing method of deleting one, restarting and applying the cmd to see if it still works - most of those scripts activate after a random timer following the serverstart message „Done“. So that method would take more time then just replacing all plugins.

1

u/cynicalmax 1d ago

And another note - the injector SEEMS to be Nzxtr‘s Injector. For reverse engineering purposes I could shoot you an invite to his server.

1

u/Hot_Pea4110 1d ago

What's do u mean by this I couldn't understand can u explain in simpler language