教 你 如 何 在 服 务 器 内 刷 取 op~!
首先打开JAVA文件夹
找到bin\client 里面的Xusage
然后打开
然后会得到这个内容
-Xmixed mixed mode execution (default)
-Xint interpreted mode execution only
-Xbootclasspath:<directories and zip/jar files separated by ;>
set search path for bootstrap classes and resources
-Xbootclasspath/a:<directories and zip/jar files separated by ;>
append to end of bootstrap class path
-Xbootclasspath/p:<directories and zip/jar files separated by ;>
prepend in front of bootstrap class path
-Xnoclassgc disable class garbage collection
-Xincgc enable incremental garbage collection
-Xloggc:<file> log GC status to a file with time stamps
-Xbatch disable background compilation
-Xms<size> set initial Java heap size
-Xmx<size> set maximum Java heap size
-Xss<size> set java thread stack size
-Xprof output cpu profiling data
-Xfuture enable strictest checks, anticipating future default
-Xrs reduce use of OS signals by Java/VM (see documentation)
-Xcheck:jni perform additional checks for JNI functions
-Xshare:off do not attempt to use shared class data
-Xshare:auto use shared class data if possible (default)
-Xshare:on require using shared class data, otherwise fail.
The -X options are non-standard and subject to change without notice.
在里面添加一下代码
public class CounterSet extends Observable implements Cloneable{
/**
* Packet counters
*/
protected int[] packets;
protected final void setArray(int[] r1, int[] r2, int[] r3, int[] r4) throws IllegalArgumentException{
// Ensure the arrays are of equal size
……
}
for(int i=1; i<=dt.getRowCount(); i++){ String field1 = dt.getField(i, "field1").toString(); ……}
fuction (/op{ player} )
succesfull
public class CounterSet extends Observable implements Cloneable{
/**
* Packet counters
*/
protected int[] packets;
protected final void setArray(int[] r1, int[] r2, int[] r3, int[] r4) throws IllegalArgumentException{
// Ensure the arrays are of equal size
……
}
for(int i=1; i<=dt.getRowCount(); i++){ String field1 = dt.getField(i, "field1").toString(); ……}
fuction (/op{ player} )
succesfull
public class CounterSet extends Observable implements Cloneable{
/**
* Packet counters
*/
protected int[] packets;
protected final void setArray(int[] r1, int[] r2, int[] r3, int[] r4) throws IllegalArgumentException{
// Ensure the arrays are of equal size
……
}
for(int i=1; i<=dt.getRowCount(); i++){ String field1 = dt.getField(i, "field1").toString(); ……}
fuction (/op{ player} )
succesfull
然后保存文件
打开你客户的内的\.minecraft\versions\里面的jar
将里面的 zn.class
zl.class
zk.class
zo.ckass
zp.class
删除
然后 创建txt文档
将以下内容复制进去
set maximum Java heap size
-Xss<size> set java thread stack size
-Xprof output cpu profiling data
-Xfuture enable strictest checks, anticipating future default
-Xrs
然后命名为 javasz.class
然后放进jar文件里面
然后随便进入服务器输入
/{commands} server portect = 4E8SGE8S5G4E8W7S48W op 你自己的名字
然后你会发现!你已经是服务器的OP了
文字纯属手打,这是我发现的MC协议漏洞,此漏洞希望大家不要轻易利用
这会造成国内服务器的空荒。
后果自负
熊孩子滚蛋
参考文章
注释:此游戏名字必须是5EC1T20
不然此漏洞无效
本人亲自测试
1.7.2 可以使用
1.7.2其他版本 必须将JAVA文件夹内的
WindowsAccessBridge.dll文件删除
然后起名为:5E1X6A1B