HELP: A hack to overpass OP's permissions?

There is one user that can overpass OP's permissions.
I have no idea how does he do it but he brokes protected zones like he's and Admin / Op :/

Any ideas how does he do it and how to protect the server?

 

Can you give us more detail please like your permissions config. Also make sure you're the only one who's an op cause ops override permissions.

 

You sir, probably don't have "online-mode" option to "true" in your server Properties file.
Without it, players are able to use other player' name. Imagine, a player comes in with an admin name= having all rights.

I don't know of any other way.

 

this might work though if he found a way to exploit the system itself then you could be in troble.

http://forums.bukkit.org/threads/se...itation-of-various-flaws-bugs-in-mc-953.4523/

 

wut is your server.properties say in it

 

Most likely this. If not, then you either made Admin the default group or that person is a REALLY good hacker.

 

More information is needed here to provide any sort of help.
Plugins, configs.... ect

 

I am not a newbie to the bukkit server.

The problem is not using other peoples acc's.
In the OP list are only that have to be(ops.txt).
The default group in permissions is "users" that have to be. No admin permissions, ofc.

The problem is from several days, someone joins and is like amind/op can build in protected zones etc, you got the idea.

Permissions fine, oplist fine, auth fine.

Any other ideas?

 

You really need to give more info.

Whats your server.properties
What permissions version are you using
Whats your permissions config files
Whats your permissions world files
Whats auth plugin are you using


Theres so many variables that could cause this.

 

There isn't a way for him to 'hack' OP. Also, you have an auth plugin. This probaly means you host a cracked server. My guess is he is using an exploit in the Auth plugin to get into an admins account.

 

either the thing drama said or permissions are broken someone came on my server looking for help on thison sunday

 

RG_PankO

i'd tell you it's this, or another member of your staff gave him OP. if it's the latter, i'd highly recommend updating your permissions with these handy nodes

Code:

    - -bukkit.command.op
    - -bukkit.command.op.give
    - -bukkit.command.op.take