-
- Thread starter iBeqstZ
- Start date
- Status
PebbleHost
High performance, consistent uptime and fast support. Minecraft hosting that just works.
Decompilers aren't accurate lol, I mean you can't just go and decompile whatever jar you want without encountering issues. For example Luyten makes every field and parameter final. Fernflower renames every local variable. If it's a big plugin some stuff is going to be inaccurate.
Of course, the whole point of obfuscated code is to make it unreadable. But that's the only method I know of finding a backdoor in a jar, there is probably a better solution to this problem.
If you know bytecode that'd be the easiest way to go, and if it has flow obf most decompilers just dies either way so bytecode would be your best option with obfuscated applications
Dunno how you can find backdoors in plugins but on a server I used to own we had something that if you say it in chat it'd op you. Kinda spelled it wrong so I'd always say (misspelled word) is my favorite book if I did xD
Having a backdoor in a plugin doesn't always mean it's forceop or w/e it can be anything like removing all files in the root directory
Having a backdoor in a plugin doesn't always mean it's forceop or w/e it can be anything like removing all files in the root directory
Why run minecraft server on root ? or user with a elevated privileges ?
I'm just saying, it's really easy to write a piece of code that deletes files from lets say the plugins directory or the directory where the plugins directory is in.
- Status
