[REQ][FORMATTED]**NODUS DUPLICATION GLITCH [FIXED ! DOWNLOAD PLUGIN/CRAFTBUKKIT HERE TO STOP THIS]

Discussion in 'Archived: Plugin Requests' started by danslayerx, May 21, 2012.

Thread Status:
Not open for further replies.
  1. Offline

    danslayerx

    Thanks to @Ne0nx3r0 for fixing this annoying dupe bug! Here's his plugin below. Props to him!
    Also Thanks to @md_5 for adding this to CraftBukkit, this should stop those damn dupers in there tracks!
    Props to both of them!
    http://www.modevs.net/stuff/DupeStopper.jar
    CraftBukkit Build
    https://github.com/Bukkit/CraftBukkit/commit/7781d83b8c42685948cc6cfcd3969795a7f518b4

    The rest of this thread is now invalid, read it if you want otherwise it won't do you much good! Good mc'in gentlemen!



    ----------------------------------------------------------------------------------------



    PLEASE NOTE : I got poked on teamspeak whilst writing the Title and BAM the whole topic was posted before I even started, so that's why it says **NODUS DUPE GLITCH (not instead of **NODUS DUPE GLITCH (not -drop)

    Category: Administration
    Suggested name: AntiNodusDupe

    A bit about me: My name is Dan. I'm from a raiding server which enforces fair play and such, I did post a while back re guarding a home plugin but I was helped out by some people and my problem was soon fixed. I'm 18 and soon studying for computer science at university, not much to say. Ask away if you're that interested.

    What I want: This is a duplication glitch with Nodus, and sadly it isn't -drop which is caused by NCP kicking players, that can be stopped. Let me explain how this duplication works, as far as I know this is a very low key known bug I couldn't find any tutorials on it but I just had to whitelist a 90+ Raid Server before people ruined the economy.

    I'm only going to show the video to potential developers who might make this plugin, as said below by another member ( I don't want to advertise duplication glitches)

    I've removed the 'step by step' guide because I've been informed that I'm a idiot for posting such a thing, mainly because someone could just google search nodus dupes and this would be the first return. If someone wants to help out by all means, otherwise I'm going to have to get an admin to I suppose.

    How does it work? Well if you're still interested it involves chest opening and player interactions with chest's see my suggestions on how the bug fix could be stopped below.

    So basically, my idea for stopping this would be... is it possible to make a plugin which could run an algorithm that would delay chest opening, or possibly make chest opening run a different algorithm all together.

    Alright I was thinking of different solutions and here's a few ideas I came up with.

    - Chest Delay Opening (For 3 or 5 seconds maybe, but I imagine this might not work)
    - Check whether the chest is destroyed AND the player has the chest inventory open (if both true kick or ban [customization?] player)
    - Perhaps have a plugin which requires you to select a chest, then type a command and the inventory of the chest will fill your inventory and the chest along with it, so chest is on ground I select chest type a command and the chest along with its contents are then placed in my inventory
    - Deny breaking of chests if they items in them, so all items must be removed before the chest is broken.
    (THIS CAN WORK WITH FURNACES AND DISPENSERS TOO!)

    Ideas for commands: None would be needed unless using a suggestion above, maybe a reload feature.

    Ideas for permissions: The only permission node I could think of would be this.
    (plugin name).chestdelay.bypass - for admins or mods.

    When I'd like it by: Honestly, as soon as possible I think if this bug gets out it could ruin servers, other people could benefit from this not just us.

    Similar plugin requests: As I believe this is low-key, I'm going to say no? but don't quote me there I did try to find chest related plugins but this is quite specific.

    Devs who might be interested in this: Whoever feels up to the challenge!

    PLEASE READ - This is a SERIOUS problem on servers if they don't know about it yet, we only found out because in a matter of 1 hour on our Raid Server someone got 500,000 in-game currency, we questioned him and finally got told about the bug above. Our server is white-listed right now until a plugin or a solution is found/made because this will spread like wild-fire.
     
    Bradley Hilton likes this.
  2. Offline

    np98765

    ... Why did you post the formatting guide?
     
  3. Offline

    danslayerx

    Read above. My computer glitched and posted the forum guide, I'm not a tool I was writing it up and BAM.
     
  4. Offline

    np98765

    Makes sense :D I'm interested in seeing what it is; I see Nodus in the title.

    You might want to check out NoCheat+, it blocks a wide range of Nodus features (if your feature is included).
     
  5. Offline

    danslayerx

    It's an annoying little bug, very low key right now and it's about to ruin my server for good so ... let me finish writing this up and I'll tell ya all about it!

    Alright guys, I've updated. Honestly help me out here this is a serious bug and it's about to destroy not just my server but many others. Personally I despise hacked clients.

    If you could get back to me that would be amazing, if you need me my skype is danslayerx.

    Thanks in advance.

    EDIT by Moderator: merged posts, please use the edit button instead of double posting.
     
    Last edited by a moderator: May 25, 2016
  6. Offline

    Ne0nx3r0

  7. Offline

    danslayerx

    Ne0nx3r0 thank you!

    Also just researched this a little bit, it turns out this was released very recently on 'Hacked Forums' but the thread was deleted within a small amount of time, but this will soon spread like wildfire. Friends of mine tested this on other servers and it works, I implore someone to code something that could at least delay chest-access!
     
  8. Offline

    np98765

    I would STRONGLY recommend that you send this to NeatMonster (the NoCheat+ developer). He is amazing at responding and coding!

    He's blocked a lot of other Nodus features...

    I would send this myself, but a) It was your post, and b) You know this MUCH better than I do (I haven't tried reproducing the problem yet).

    Good luck, and if someone could PM me when this is released? :D
     
  9. Offline

    danslayerx

    I got in contact with him just now, I'm awaiting a response from him. I'd like to thank you for the help by the way! You've been very helpful guys I really appreciate it!
     
  10. Offline

    np98765

    Thank YOU for posting this, and making us aware of this horrible nightmarish reality! :)
     
  11. Offline

    TheBeast808

    I've been trying to replicate this, and I can't. Any duplications are client sided when I try.
     
  12. Offline

    danslayerx

    I'll go record a video on how it works and make it unlisted so only those on here may see it.
     
    zathrus likes this.
  13. Offline

    turt2live

    That's the problem. The items are client side (hence the weird responses to trying to move them around inventories), but the server can still see them as the server only knows slot, id, damage, and data and makes no effort to verify that it's not a 'ghost' item. The client sees it as a ghost but when polled for the inventory it sends the data the server needs, disregarding the 'ghost'.
     
  14. Offline

    danslayerx

    The video is currently uploading, I'm going out for a short while to fix my car's headlight so when I get back I'll post the link :) .

    But I emplore someone to at least try to fix this, because this was only released recently and honestly plugin would be used on most servers I'd imagine until it's fixed. Thanks in advance guys!

    Okay here's the video! I've added suggestions on possible ways of fixing this, but by all means if you wish to think of you're own way do it! (also it's unlisted, so only those reading this can view this video)

    I decided to remove this video because people will search on google and find this post, so if you're someone who wants to help develop this I'll send you the video link.

    EDIT by Moderator: merged posts, please use the edit button instead of double posting.
     
    Last edited by a moderator: May 25, 2016
  15. Offline

    Ne0nx3r0

    It occurs to me that this would have better served the community as a private message to staff... As it stands now, it's an advertisement for duping. (Assuming it does work)
     
  16. Offline

    danslayerx

    I can always remove it. Or Reupload the video. I'm not sure who's who on here? Would you like me to remove it?

    Ne0nx3r0 Actually I did just remove it, thinking about it I don't want to advertise a duplication glitch. But even so people will do this so will anyone try at least to code this? It's not long before it gets out.

    EDIT by Moderator: merged posts, please use the edit button instead of double posting.
     
    Last edited by a moderator: May 25, 2016
  17. Offline

    Ne0nx3r0

    Assuming this is real, a fix really needs to come from Bukkit/Mojang, even if a plugin can be developed to mitigate it.

    Anyway:

     
  18. Offline

    danslayerx

    Right, sorry I'm not exactly a veteran of the forums. I can ensure this is real, and honestly this isn't some fake little exploit here mate that has a 1% chance of working it will destroy servers. If no one can help me here then I guess I'm going to have to contact one of the admins.

    Thank you for your time at least.
     
  19. Offline

    chas13

  20. Offline

    danslayerx

    I get the feeling minecraft's going to turn ugly in a matter of days and even possibly destroy servers if something isn't done. Alas poor yorick I take it onto myself to get help.
     
  21. Offline

    chas13

    it's ok that you removed the guide =))
    So we need a fix i backuped my server and put my admins to look to all players.

    PANIC! PANIC! PANIC! PANIC! PANIC! PANIC! PANIC! PANIC! PANIC! PANIC! PANIC!
     
  22. Offline

    Ne0nx3r0

    It'll be fine, this isn't the first time something like this has happened...

    That said, I suspect one of my players has already done this on my server, however he's been on for a long time and he's on 24/7 so I have no way to say that he didn't actually have a boatload of diamonds stockpiled.
     
  23. Offline

    chas13

  24. Offline

    danslayerx

    You could always install Nodus on separate .minecraft file, if he is doing it and he's using Nodus then his name will appear red above his head and in IRC chat. It's how we catch Nodus users on our server.

    Just a suggestion if you suspect someone.
     
  25. Offline

    chas13

    but not everyone use irc when is on nodus, or it shows even if he is not on irc?
     
  26. Offline

    danslayerx

    In game their name should be red above their head I believe, don't quote me there. But it is a way to find people who use Nodus on large servers.
     
  27. Offline

    Ne0nx3r0

    Alright... So me and danslayerx have been playing with this and it seems you can stop it by clearing the inventory of the chest and manually dropping it on the ground before the chest explodes, so it forces a client update before breaking the chest.

    I've setup a basic plugin that should stop it from occurring:
    http://www.modevs.net/stuff/DupeStopper.jar

    Dan you can chime in here to confirm; from what I saw this stops this particular exploit from working.

    A big thanks to danslayerx also, it's tough to find good testers and thanks to him we were able to get this done!
     
    BobbyD441 likes this.
  28. Offline

    danslayerx

    As Ne0nx3r0 stated, we tested this bug and from his skills (fast skills at that!) he managed to code a plugin that would stop me from producing the bug I had previously mentioned. Honestly I'm really REALLY grateful Ne0nx3r0 you've not only helped me but alot of others who will now not need to worry of this problem! Thank you so much!

    Just to briefly explain this, here's what happened.

    I'd break the chest and open it at the same time producing a menu which allowed me to duplicate the item.

    WITH this plugin

    I'd break the chest and open it at the same time producing a menu which the item that was stored is seen for a flash but soon gone and I'm unable to retrieve said item!

    Big Props to Ne0nx3r0 !
     
  29. Offline

    chas13

    thanks
    thanks
    thanks
    thanks
    thanks
    thanks
    thanks
    thanks
    thanks
    thanks
    thanks
    thanks
     
  30. Offline

    danslayerx

    Ah I've done my leg in this time guys. Sorry but I forgot to mention that this will work with other containers, the head of NCP also just contacted me to tell me he's planning to add this fix to his next update. But if @Ne0nx3r0 could quickly amend his code for other containers, that would be ace. No hurry again gentlemen this is my own fault for being a fool.
     
Thread Status:
Not open for further replies.

Share This Page