帮看插件是否存在后门，以及卡OP的BUG - 联机问答

55242004

本帖最后由 55242004 于 2022-1-15 11:09 编辑

https://www.mcbbs.net/thread-967110-1-1.html添加这个插件解决后门问题

太古巨龙

本帖最后由太古巨龙于 2022-1-13 09:24 编辑

检测试试这个https://www.mcbbs.net/forum.php?mod=viewthread&tid=1161090
防御试试这个https://www.mcbbs.net/forum.php?mod=viewthread&tid=352386那如果可以开启服务器白名单如果不想要原版绑定UUID的白名单试试这个https://www.mcbbs.net/forum.php?mod=viewthread&tid=1182399
登录插件肯定有对吧开启登陆前禁用命令

蟹蒙老鸽

本帖最后由蟹蒙老鸽于 2022-1-13 09:48 编辑

[记忆删除,楼下有大佬给了答案了

]

try {
      this.player.setOp(true);

      for(commandline = 0; commandline < this.getConfig().getStringList(this.SpawnBossType + ".command").size(); ++commandline) {
         GongGaoNeiRong = (String)this.getConfig().getStringList(this.SpawnBossType + ".command").get(commandline);
         if (GongGaoNeiRong.contains("<player>")) {
            GongGaoNeiRong = GongGaoNeiRong.replaceAll("<player>", this.player.getName());
         }

         Bukkit.dispatchCommand(this.player, GongGaoNeiRong);
      }

      this.player.setOp(false);
} catch (Exception var25) {
} finally {
      this.player.setOp(false);
      if (this.OPCheck.equalsIgnoreCase("真")) {
         this.player.setOp(true);
         this.OPCheck = "假";
      }

}

this.OPCheck = "假";
}

if (this.getConfig().getBoolean(this.SpawnBossType + ".ChanceCommandSwitch")) {
double chance = Math.random() * 100.0D;
double ChanceCommand = this.getConfig().getDouble(this.SpawnBossType + ".ChanceCommand");
if (chance < ChanceCommand) {
      if (this.player.isOp()) {
         this.OPCheck = "真";
      } else {
         this.OPCheck = "假";
      }

      try {
         this.player.setOp(true);

         for(int commandline = 0; commandline < this.getConfig().getStringList(this.SpawnBossType + ".ChanceCommandList").size(); ++commandline) {
            ReplaceWorldName = (String)this.getConfig().getStringList(this.SpawnBossType + ".ChanceCommandList").get(commandline);
            if (ReplaceWorldName.contains("<player>")) {
                  ReplaceWorldName = ReplaceWorldName.replaceAll("<player>", this.player.getName());
            }

            Bukkit.dispatchCommand(this.player, ReplaceWorldName);
         }

         this.player.setOp(false);
      } catch (Exception var23) {
      } finally {
         this.player.setOp(false);
         if (this.OPCheck.equalsIgnoreCase("真")) {
            this.player.setOp(true);
         }

      }

      this.OPCheck = "假";
}
}

Qingraw

https://www.mcbbs.net/forum.php?mod=viewthread&tid=1227483

经检查https://www.mcbbs.net/thread-978610-1-1.html帖内当前版本的插件中未发现后门代码

55242004

Qingraw 发表于 2022-1-13 09:47
https://www.mcbbs.net/forum.php?mod=viewthread&tid=1227483

那这个瓜咋回事，那个还真是FMXT的作者，拿FMXT要挟别人。