Bungee Exploit.

[Akmed]

I've heard of this a little while back is this still a thing?

If so what are the best ways to counter it and to fix the exploit?

 

[TehSteel]

i never found a exploit in bungeecord exploit

 

[casket]

What about this, is this a question like is there one or looking for a guide?

 

[casket]

He's asking about the bugs in bungeecord that allow players to manipulate the server

Oh in that case yea there is one

 

[Akmed]

Oh in that case yea there is one

Is there known ways to fix it?

 

[casket]

Is there known ways to fix it?

I belive there is but I just dont know how to fix it

 

[S8E]

Is there known ways to fix it?

You can fix it by forcing players to enter from the proxy.

Example:

Bungeecord: IP 1.2.3.4 Port: 25565
Lobby: IP 1.2.3.4 Port: 25577
Factions: IP 1.2.3.4 Port: 25588

You have to make sure that people can only enter from 1.2.3.4:25565
There are different ways to do this: plugins, firewalls, etc.

 

[croissant222]

Bing bing bing, there's the answer

Isnt this intended behavior?

 

[Kieraaaan]

Or just block all the ports except for 25565 safest option

Then u can’t access other servers tho?