Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bypass: Ping Spoof Bypass #378

Open
Scot-Survivor opened this issue Apr 28, 2023 · 1 comment
Open

Bypass: Ping Spoof Bypass #378

Scot-Survivor opened this issue Apr 28, 2023 · 1 comment
Assignees
Labels
bug Something isn't working bypass Bypass of detection

Comments

@Scot-Survivor
Copy link

Which platform are you using ?

Spigot

Versions of Negativity and of the server

Negativity v2.6.1 Paper: v1_19:R3

What were you doing while finding bypass ?

Full ping spoof bypass, FDP client, enabled it with settings to range from a minimum of 500ms & max of about 2460ms.

This allows for full movement bypass in my testing, I was able to vanilla fly without any flags.

If the anti-cheat implemented checks via packets, then it shouldn't be possible for ping to affect many checks at all.
this is because the TCP stack ensures that packets arrive, not only that, that they arrive in order.

Vulcan is aware of this and implements it correctly if proof of implementation is needed.
For more information refer to a quick networking class / Wikipedia page on the TCP stack.

Minecraft Java uses TCP which makes server-sided anti-cheat development easier.
image
Attached is an image of exact settings used

Which client with which mode ?

FDP Client

@Scot-Survivor Scot-Survivor added the bypass Bypass of detection label Apr 28, 2023
@Elikill58
Copy link
Owner

Related to this part https://github.com/Elikill58/Negativity/blob/v2/common/src/com/elikill58/negativity/api/packets/nms/VersionAdapter.java#L52-L62 which is disabled because of bungeecord issue when sending packet

@Elikill58 Elikill58 added the bug Something isn't working label Apr 28, 2023
@Elikill58 Elikill58 added this to the Version 2.7 milestone Jul 25, 2023
@Elikill58 Elikill58 removed this from the Version 2.7 milestone Sep 19, 2023
@dave9123 dave9123 moved this to Todo in Negativity Nov 25, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working bypass Bypass of detection
Projects
None yet
Development

No branches or pull requests

2 participants