Help.

Discussion in 'Spigot Help' started by TomasARGNT, May 16, 2017.

  1. (I do not speak English)
    Since some hours somebody is entering the sub-lobby of my netwrok and is giving "OP" ... I only found this in the log:
    [20:53:40] [Server thread/INFO]: TheKiller1 issued server command: /op EvalPro
    [20:53:40] [Server thread/DEBUG]: Opening connection to https://api.mojang.com/profiles/minecraft
    [20:53:40] [Server thread/DEBUG]: Writing POST data to https://api.mojang.com/profiles/minecraft: ["evalpro"]
    [20:53:40] [Server thread/DEBUG]: Reading data from https://api.mojang.com/profiles/minecraft
    [20:53:40] [Server thread/DEBUG]: Successful read, server response was 200
    [20:53:40] [Server thread/DEBUG]: Response: []
    [20:53:40] [Server thread/DEBUG]: Page 0 returned 0 results, parsing
    [20:53:40] [Server thread/DEBUG]: Couldn't find profile evalpro
    [20:53:40] [Server thread/INFO]: [TheKiller1: Opped EvalPro]

    I hope you can help me :(
     
  2. Gaxan

    Supporter

    What version of spigot are you using? Their was an exploit in some older versions that this was possible in.
     
  3. I use 1.8 ... Is it really old?
     
    #3 TomasARGNT, May 16, 2017
    Last edited: May 16, 2017
  4. Gaxan

    Supporter

    Which 1.8? You should be using 1.8.9

    List your plugins also, check to see who has access to your console, check your ops.json file /deop anyone who has op that shouldn't.

    No one should have op except the owner unless you really trust them, all other access should be done via permissions.
     
    #4 Gaxan, May 16, 2017
    Last edited: May 16, 2017
  5. I have version 1.8... Nobody had OP, just me.
    It is impossible that they have entered with my account because I have the plugin fastlogin and I have activated the "/PREMIUM" function.
     
  6. Gaxan

    Supporter

    Start up your server and post me the console log.
     
  7. Check you haven't downloaded any malicious plugins, or any staff that perhaps gave themselves permissions to run certain commands, if you've ever opped someone before, or gave them permissions to use any commands with * permission

    Also as Gaxan, a Console Log would be greatly useful, to check for any malicious plugins, or something that doesn't belong.

    Can you also perhaps include a permissions.txt for your groups?
     
  8. Gaxan

    Supporter

    I would like to know if he actually looked in ops.json
     
  9. 15.05 22:55:46 [Multicraft] Received start command 15.05 22:55:46 [Multicraft] Loading server properties 15.05 22:55:46 [Multicraft] Starting server! 15.05 22:55:46 [Multicraft] Loaded config for "Mod: We Recomend 100% using -> Spigot 1.8 (ACCEPT EULA.txt)" 15.05 22:55:46 [Multicraft] Updating eula.txt file 15.05 22:55:46 [Server] INFO Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=128M; support was removed in 8.0 15.05 22:55:46 [Server] INFO Loading libraries, please wait... 15.05 22:55:50 [Server] INFO Starting minecraft server version 1.8.3 15.05 22:55:50 [Server] INFO Loading properties 15.05 22:55:50 [Server] INFO Default game type: ADVENTURE 15.05 22:55:50 [Server] INFO This server is running CraftBukkit version git-Spigot-dbe012b-61ef214 (MC: 1.8.3) (Implementing API version 1.8.3-R0.1-SNAPSHOT) 15.05 22:55:50 [Server] INFO Server Ping Player Sample Count: 12 15.05 22:55:50 [Server] INFO Using 4 threads for Netty based IO 15.05 22:55:50 [Server] INFO Debug logging is enabled 15.05 22:55:50 [Server] INFO Generating keypair 15.05 22:55:51 [Server] INFO Starting Minecraft server on 104.149.238.226:25615 15.05 22:55:51 [Server] INFO Using epoll channel type 15.05 22:55:51 [Server] INFO Set PluginClassLoader as parallel capable 15.05 22:55:51 [Server] ERROR Could not load 'plugins/CanelaAnti-PluginSteal.jar' in folder 'plugins' 15.05 22:55:51 [Server] INFO org.bukkit.plugin.InvalidPluginException: java.lang.NoClassDefFoundError: net/md_5/bungee/api/plugin/Plugin 15.05 22:55:51 [Server] INFO at org.bukkit.plugin.java.JavaPluginLoader.loadPlugin(JavaPluginLoader.java:135) ~[spigot1.8.jar:git-Spigot-dbe012b-61ef214] 15.05 22:55:51 [Server] INFO at org.bukkit.plugin.SimplePluginManager.loadPlugin(SimplePluginManager.java:329) ~[spigot1.8.jar:git-Spigot-dbe012b-61ef214] 15.05 22:55:51 [Server] INFO at org.bukkit.plugin.SimplePluginManager.loadPlugins(SimplePluginManager.java:251) [spigot1.8.jar:git-Spigot-dbe012b-61ef214] 15.05 22:55:51 [Server] INFO at org.bukkit.craftbukkit.v1_8_R2.CraftServer.loadPlugins(CraftServer.java:291) [spigot1.8.jar:git-Spigot-dbe012b-61ef214] 15.05 22:55:51 [Server] INFO at net.minecraft.server.v1_8_R2.DedicatedServer.init(DedicatedServer.java:199) [spigot1.8.jar:git-Spigot-dbe012b-61ef214] 15.05 22:55:51 [Server] INFO at net.minecraft.server.v1_8_R2.MinecraftServer.run(MinecraftServer.java:522) [spigot1.8.jar:git-Spigot-dbe012b-61ef214] 15.05 22:55:51 [Server] INFO at java.lang.Thread.run(Thread.java:745) [?:1.8.0_111] 15.05 22:55:51 [Server] INFO Caused by: java.lang.NoClassDefFoundError: net/md_5/bungee/api/plugin/Plugin 15.05 22:55:51 [Server] INFO at java.lang.ClassLoader.defineClass1(Native Method) ~[?:1.8.0_111] 15.05 22:55:51 [Server] INFO at java.lang.ClassLoader.defineClass(ClassLoader.java:763) ~[?:1.8.0_111] 15.05 22:55:51 [Server] INFO at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:142) ~[?:1.8.0_111] 15.05 22:55:51 [Server] INFO at java.net.URLClassLoader.defineClass(URLClassLoader.java:467) ~[?:1.8.0_111] 15.05 22:55:51 [Server] INFO at java.net.URLClassLoader.access$100(URLClassLoader.java:73) ~[?:1.8.0_111] 15.05 22:55:51 [Server] INFO at java.net.URLClassLoader$1.run(URLClassLoader.java:368) ~[?:1.8.0_111] 15.05 22:55:51 [Server] INFO at java.net.URLClassLoader$1.run(URLClassLoader.java:362) ~[?:1.8.0_111] 15.05 22:55:51 [Server] INFO at java.security.AccessController.doPrivileged(Native Method) ~[?:1.8.0_111] 15.05 22:55:51 [Server] INFO at java.net.URLClassLoader.findClass(URLClassLoader.java:361) ~[?:1.8.0_111] 15.05 22:55:51 [Multicraft] Skipped 54 lines due to rate limit (30/s) 15.05 22:55:51 [Server] INFO Loading eZProtector v4.1.5 15.05 22:55:51 [Server] INFO Loading MessageFilter v0.3.2 15.05 22:55:51 [Server] INFO Loading FastLogin v1.9 15.05 22:55:51 [Server] INFO Loading AntiStealer v1.0 15.05 22:55:51 [Server] INFO Loading AuthMe v5.2-SNAPSHOT-b1384 15.05 22:55:51 [Server] INFO Loading HolographicDisplays v2.1.10 15.05 22:55:51 [Server] INFO Loading AuthMeBridge v1.6.2 15.05 22:55:51 [Server] INFO Enabling Vault v1.4.1-b436 15.05 22:55:51 [Server] INFO [Economy] Essentials Economy found: Waiting 15.05 22:55:51 [Server] INFO [Permission] SuperPermissions loaded as backup permission system. 15.05 22:55:51 [Server] INFO Enabled Version 1.4.1-b436 15.05 22:55:51 [Server] INFO Enabling ProtocolLib v4.1.0 15.05 22:55:51 [Server] INFO Started structure compiler thread. 15.05 22:55:51 [Server] INFO Enabling FastLogin v1.9 15.05 22:55:51 [Server] WARN Could not save messages.yml to plugins/FastLogin/messages.yml because messages.yml already exists. 15.05 22:55:51 [Server] WARN **** SERVER IS RUNNING IN OFFLINE/INSECURE MODE! 15.05 22:55:51 [Server] WARN The server will make no attempt to authenticate usernames. Beware. 15.05 22:55:51 [Server] WARN While this makes the game possible to play without internet access, it also opens up the ability for hackers to connect with any username they choose. 15.05 22:55:51 [Server] WARN To change this, set "online-mode" to "true" in the server.properties file. 15.05 22:55:51 [Server] INFO **** Beginning UUID conversion, this may take A LONG time **** 15.05 22:55:52 [Server] INFO Preparing level "world" 15.05 22:55:52 [Server] INFO -------- World Settings For [world] -------- 15.05 22:55:52 [Server] INFO Nerfing mobs spawned from spawners: false 15.05 22:55:52 [Server] INFO Anti X-Ray: true 15.05 22:55:52 [Server] INFO Engine Mode: 1 15.05 22:55:52 [Server] INFO Hidden Blocks: [14, 15, 16, 21, 48, 49, 54, 56, 73, 74, 82, 129, 130] 15.05 22:55:52 [Server] INFO Replace Blocks: [1, 5] 15.05 22:55:52 [Server] INFO Mob Spawn Range: 4 15.05 22:55:52 [Server] INFO Entity Activation Range: An 32 / Mo 32 / Mi 16 15.05 22:55:52 [Server] INFO Entity Tracking Range: Pl 48 / An 48 / Mo 48 / Mi 32 / Other 64 15.05 22:55:53 [Multicraft] Skipped 91 lines due to rate limit (30/s) 15.05 22:55:53 [Server] INFO Preparing start region for level 1 (Seed: 5789561264896772405) 15.05 22:55:53 [Server] INFO Preparing start region for level 2 (Seed: 5789561264896772405) 15.05 22:55:53 [Server] INFO Enabling WorldEdit v6.1.3;7a097ca 15.05 22:55:54 [Server] INFO WEPIF: Using the Bukkit Permissions API. 15.05 22:55:54 [Server] INFO Using com.sk89q.worldedit.bukkit.adapter.impl.Spigot_v1_8_R2 as the Bukkit adapter 15.05 22:55:54 [Server] INFO Enabling Essentials vTeamCity 15.05 22:55:54 [Server] INFO Bukkit version format changed. Version not checked. 15.05 22:55:54 [Server] INFO git-Spigot-dbe012b-61ef214 (MC: 1.8.3) 15.05 22:55:54 [Server] INFO 1.8.3-R0.1-SNAPSHOT 15.05 22:55:54 [Server] INFO Using locale es 15.05 22:55:54 [Server] INFO Using locale es 15.05 22:55:54 [Server] INFO [Vault][Economy] Essentials Economy hooked. 15.05 22:55:54 [Server] INFO Essentials: Using config file enhanced permissions. 15.05 22:55:54 [Server] INFO Permissions listed in as player-commands will be given to all users. 15.05 22:55:54 [Server] INFO Enabling cBlocked v1.1.3 15.05 22:55:54 [Server] INFO Enabling DisableJoinMessage v1.0 15.05 22:55:54 [Server] INFO =================================== 15.05 22:55:54 [Server] INFO =================================== 15.05 22:55:54 [Server] INFO Check out my other Plugins! 15.05 22:55:54 [Server] INFO I also sell a BedWars Plugin! 15.05 22:55:54 [Server] INFO =================================== 15.05 22:55:54 [Server] INFO =================================== 15.05 22:55:54 [Server] INFO Enabling tpLogin v1.5.1 15.05 22:55:54 [Server] INFO tpLogin v1.5.1 has been enabled! 15.05 22:55:54 [Server] INFO Enabling Multiverse-Core v2.5-b717 15.05 22:55:54 [Server] WARN WorldManager: Can't load this world because the folder was deleted/moved: sublobby 15.05 22:55:54 [Server] WARN Use '/mv remove' to remove it from the config! 15.05 22:55:54 [Server] INFO -------- World Settings For [plano] -------- 15.05 22:55:54 [Server] INFO Nerfing mobs spawned from spawners: false 15.05 22:55:54 [Server] INFO Anti X-Ray: true 15.05 22:55:54 [Server] INFO Engine Mode: 1 15.05 22:55:54 [Server] INFO Hidden Blocks: [14, 15, 16, 21, 48, 49, 54, 56, 73, 74, 82, 129, 130] 15.05 22:55:55 [Multicraft] Skipped 30 lines due to rate limit (30/s) 15.05 22:55:55 [Server] INFO Version 2.5-b717 (API v20) Enabled - By Rigby, fernferret, lithium3141 and main-- 15.05 22:55:55 [Server] INFO Enabling WorldGuard v6.1.2;e38d98d 15.05 22:55:55 [Server] INFO (world) TNT ignition is PERMITTED. 15.05 22:55:55 [Server] INFO (world) Lighters are PERMITTED. 15.05 22:55:55 [Server] INFO (world) Lava fire is blocked. 15.05 22:55:55 [Server] INFO (world) Fire spread is UNRESTRICTED. 15.05 22:55:55 [Server] INFO Loaded configuration for world 'world' 15.05 22:55:55 [Server] INFO (world_nether) TNT ignition is PERMITTED. 15.05 22:55:55 [Server] INFO (world_nether) Lighters are PERMITTED. 15.05 22:55:55 [Server] INFO (world_nether) Lava fire is blocked. 15.05 22:55:55 [Server] INFO (world_nether) Fire spread is UNRESTRICTED. 15.05 22:55:55 [Server] INFO Loaded configuration for world 'world_nether' 15.05 22:55:55 [Server] INFO (world_the_end) TNT ignition is PERMITTED. 15.05 22:55:55 [Server] INFO (world_the_end) Lighters are PERMITTED. 15.05 22:55:55 [Server] INFO (world_the_end) Lava fire is blocked. 15.05 22:55:55 [Server] INFO (world_the_end) Fire spread is UNRESTRICTED. 15.05 22:55:55 [Server] INFO Loaded configuration for world 'world_the_end' 15.05 22:55:55 [Server] INFO (plano) TNT ignition is PERMITTED. 15.05 22:55:55 [Server] INFO (plano) Lighters are PERMITTED. 15.05 22:55:55 [Server] INFO (plano) Lava fire is blocked. 15.05 22:55:55 [Server] INFO (plano) Fire spread is UNRESTRICTED. 15.05 22:55:55 [Server] INFO Loaded configuration for world 'plano' 15.05 22:55:55 [Server] INFO Loading region data... 15.05 22:55:55 [Server] INFO Enabling BungeePortals v1.1 15.05 22:55:55 [Server] INFO Metrics initiated! 15.05 22:55:55 [Server] INFO Commands registered! 15.05 22:55:55 [Server] INFO Events registered! 15.05 22:55:55 [Server] INFO Plugin channel registered! 15.05 22:55:55 [Server] INFO Configuration file config.yml loaded! 15.05 22:55:55 [Server] INFO Configuration file portals.yml loaded! 15.05 22:55:56 [Multicraft] Skipped 31 lines due to rate limit (30/s) 15.05 22:55:56 [Server] INFO Loaded 1984 of the 4836 placholders 15.05 22:55:56 [Server] INFO Loading Event hooks ... 15.05 22:55:56 [Server] INFO Loading event hook: Vanilla Death hook ... 15.05 22:55:56 [Server] INFO Loading event hook: Vanilla Block break hook ... 15.05 22:55:56 [Server] INFO Loading event hook: Vanilla Block place hook ... 15.05 22:55:56 [Server] INFO Loading event hook: Vanilla Create portal hook ... 15.05 22:55:56 [Server] INFO Loading event hook: Vanilla player join ... 15.05 22:55:56 [Server] INFO Loading event hook: Vanilla player rejoin ... 15.05 22:55:56 [Server] INFO Loading event hook: Vanilla player first join ... 15.05 22:55:56 [Server] INFO Loading event hook: Vanilla Combat hook ... 15.05 22:55:56 [Server] INFO Creating new custom effect: warning 15.05 22:55:56 [Server] INFO Lines: 2 15.05 22:55:56 [Server] INFO Arguments: 1 15.05 22:55:57 [Server] INFO Adding scoreboard group 'default' ... 15.05 22:55:57 [Server] INFO Adding scoreboard group 'combat-scoreboard-example' ... 15.05 22:55:57 [Server] INFO Adding scoreboard group 'mcmmo-levelup' ... 15.05 22:55:57 [Server] INFO Adding scoreboard group 'towny-town-example' ... 15.05 22:55:57 [Server] INFO Loading messages ... 15.05 22:55:57 [Server] INFO Loading language file: lang_en 15.05 22:55:57 [Server] INFO A new update for FeatherBoard is available for download on Spigot! 15.05 22:55:57 [Server] INFO WARNING: Please update the plugin ASAP. Possible startup crash with alternative clients. 15.05 22:55:57 [Server] INFO Toggle persistence is disabled! 15.05 22:55:57 [Server] INFO Adding command 'featherboard' 15.05 22:55:57 [Server] INFO Enabling SharcticLog v1.0 15.05 22:55:57 [Server] INFO SharcticLogVersion 1.0 has been enabled! 15.05 22:55:57 [Server] INFO Enabling BookExploitFix v0.6 15.05 22:55:57 [Server] INFO Detected supported server version v1_8_R2 15.05 22:55:57 [Server] INFO BookExploitFix vers. 0.6 by minoneer activated 15.05 22:55:57 [Server] INFO Enabling ViaVersion v1.0.4 15.05 22:55:57 [Server] INFO Enabling EssentialsSpawn vTeamCity 15.05 22:55:57 [Server] INFO Enabling eZProtector v4.1.5 15.05 22:55:57 [Server] INFO Reloading config... 15.05 22:55:57 [Server] INFO Your server version is compatible with eZProtector. 15.05 22:55:57 [Server] INFO The plugin has enabled successfully. Version: 4.1.5 15.05 22:55:57 [Server] INFO Enabling MessageFilter v0.3.2 15.05 22:55:57 [Server] INFO ProtocolLib found and connected! 15.05 22:55:57 [Server] INFO Enabling AntiStealer v1.0 15.05 22:55:57 [Server] INFO Cargando lista de palabras prohibidas... 15.05 22:55:57 [Server] INFO Lista cargada exitosamente! 15.05 22:55:57 [Server] INFO Enabling AuthMe v5.2-SNAPSHOT-b1384 15.05 22:55:57 [Server] INFO SQLite driver loaded 15.05 22:55:57 [Server] INFO SQLite Setup finished 15.05 22:55:57 [Server] INFO Hooked into Vault! 15.05 22:55:57 [Server] INFO [LICENSE] This product uses data from the GeoLite API created by MaxMind, available at http://www.maxmind.com 15.05 22:55:57 [Server] INFO Hooked successfully into Essentials 15.05 22:55:57 [Server] INFO Hooked successfully into Multiverse-Core 15.05 22:55:58 [Server] INFO Development builds are available on our jenkins, thanks to f14stelt. 15.05 22:55:58 [Server] INFO Do you want a good game server? Look at our sponsor GameHosting.it leader in Italy as Game Server Provider! 15.05 22:55:58 [Server] INFO AuthMe 5.2-SNAPSHOT build n.1384 correctly enabled! 15.05 22:55:58 [Server] Startup Done (6.206s)! For help, type "help" or "?" 15.05 22:55:58 [Multicraft] Skipped 16 lines due to rate limit (30/s) 15.05 22:55:58 [Server] INFO WARNING: Please update the plugin ASAP. Possible startup crash with alternative clients. 15.05 22:55:59 [Server] INFO Checking update... 15.05 22:55:59 [Server] INFO eZProtector is up to date.
     
  10. It does not have any permissions plugin, because it is an "Authlobby"
     
  11. [
    {
    "uuid": "b7e54287-70b1-329b-91e4-6ae4faf411c2",
    "name": "Lewt_",
    "level": 4
    }
    ]
     
  12. Gaxan

    Supporter

    Could you put the console log in https://pastebin.com/ and paste the link or at least paste it into [ code ] [/ code ]

    I see you are running 1.8.3, update it to 1.8.9
     
  13. Please place your log inside a pastebin, and please provide a picture of /pl, or a list of your plugins
     
  14. Darn it, you got your reply just before mine! x)
     
  15. TheJavaHacker

    Supporter

    You're using cracked plugins -.- That's more than likely a factor of your original error -.-
     
    • Agree Agree x 2
    • Winner Winner x 1
  16. (Just to mention, i came across this thread while looking at activity of user @TomasARGNT ... )

    So yeah... you are using FastLogin... There are some clients that abuse exploits using UUID faking. If a user knows your username and that you are marked as "premium" they can just use a function and the client will fake the UUID and some other data and somehow manage to fake your premium account.
    Kind regards.
     
    • Informative Informative x 1
  17. Thanks, I fixed it to the problem :)
     
  18. sorry?
    You mean "i fixed that problem" ? If so, good.
     
  19. I will say it for him, well done chief
     
    • Winner Winner x 2