Launcher Proof - Easily Faked

ZDraws · May 30, 2015

Maybe MCM adds something were you login to the Minecraft account here on a small program, then you can validate that it's yours. idk.

ZDraws · May 30, 2015

The99thWarrior said:
ey, I don't scam M9, not just yet... >[DOUBLEPOST=1433009905,1433009869][/DOUBLEPOST]
lol the evil verringer and jack could steal ALL our accounts kek

lmao

Blowns · May 30, 2015

How to not get scammed:

Ask the owner to get on a server of your choice?

Not very hard..

Jack · May 31, 2015

xkmankidx said:
^
how is this shit faked in the first place

Sly Cooper · May 31, 2015

zTonesterz™ said:
Maybe MCM adds something were you login to the Minecraft account here on a small program, then you can validate that it's yours. idk.

This. Like badlion does. Except it doesnt create a forums account, just validates that you own the account, you then connect that account to your forum profile.

OG · May 31, 2015

Remember mineplex's plugins and stuff were leaked way back, so...

Skionz · May 31, 2015

xkmankidx said:
^
how is this shit faked in the first place

The launcher can easily be decompiled and recompiled. Its 'PlayerInfoPanel' class contains a method called 'checkState' which seems to change the name that appears at the bottom of the launcher.

Code:

if ((auth == null) || (!auth.isLoggedIn()))
      this.welcomeText.setText("Welcome, guest! Please log in.");
else if (auth.getSelectedProfile() == null)
      this.welcomeText.setText("<html>Welcome, player!</html>");
else {
      this.welcomeText.setText("<html>Welcome, <b>" + auth.getSelectedProfile().getName() + "</b></html>");
}

The last part is what you really need to look at. Clearly, this is returning a String, specifically the name of your 'profile.'

Code:

auth.getSelectedProfile().getName()

It can easily be swapped out for any other String.

Jack · May 31, 2015

Skionz said:
The launcher can easily be decompiled and recompiled. Its 'PlayerInfoPanel' class contains a method called 'checkState' which seems to change the name that appears at the bottom of the launcher.

Code:

if ((auth == null) || (!auth.isLoggedIn())) this.welcomeText.setText("Welcome, guest! Please log in."); else if (auth.getSelectedProfile() == null) this.welcomeText.setText("<html>Welcome, player!</html>"); else { this.welcomeText.setText("<html>Welcome, <b>" + auth.getSelectedProfile().getName() + "</b></html>"); }

The last part is what you really need to look at. Clearly, this is returning a String, specifically the name of your 'profile.'

Code:

auth.getSelectedProfile().getName()

It can easily be swapped out for any other String.

Was much simpler than that.

Biasome said:
No, what you do is change the name under the launcher_profiles, find one with a logged in name, and just change it. When you try to log into a server though, it fails to get the username.

This ^

MattBenson1 · May 31, 2015

Anything can be "faked", i thought this was already known?

Jack · May 31, 2015

MattBenson1 said:
Anything can be "faked", i thought this was already known?

However, this does not require Photoshop.

Launcher Proof - Easily Faked

ZDraws

ZDraws

Blowns

Jack

Retired Moderator

Sly Cooper

Where's my cane?!

OG

Skionz

ogminecraft.com

Jack

Retired Moderator

MattBenson1

Jack

Retired Moderator