-
-
Notifications
You must be signed in to change notification settings - Fork 1.4k
Description
Describe the bug
I have seen that all bug reports on this have been closed for whatever reason so I'm here to provide more info.
I'm Bright6f I'm a Minecraft exploiter and an admin on Autism Inc the largest Minecraft exploiting discord server many of our mods run using meteor and we have countless publicly available meteor addons. Many in our community use these addons primarily on 1.21.4 and 1.21.8. Recently a way was found for servers to detect meteor using an old method patched by most client's bug report to wurst eg (https://wurst.wiki/sign_translation_vulnerability). Wurst updated along with many other clients and the bug was later fixed by Mojang however a new way has been found to do it (this issue was fixed by Aurick a Dupers United member in his mod (OpSec) (https://modrinth.com/mod/opsec).
The mod itself fixes...
[Translation Exploit - Protect against key resolution mod detection
[Meteor Fix - Disable Meteor Client's broken translation protection
[Mod Whitelist - Exempt specific mods from channel spoofing and translation protection
As of 12h ago (server name of a big streamer I can't say or this will get closed 🍩) Pushed an update allowing them to detect meteor and other clients that have the translation venerability.
Randomly when you teleport, they sometimes force you into a sign gui to detect if your using a blacklisted client SS provided below (note someone sent me this and I cannot verify if it is (that server i cant say 🍩) or not)
This is how the exploit is explained by Aurick creator of (OpSec)
When the server sends a sign with {"translate":"key.meteor-client.open-gui", "fallback":"⟦FALLBACK⟧"}:
Meteor intercepts during AbstractSignEditScreen constructor
Detects "meteor-client" in the key
REPLACES the TranslatableTextContent with PlainTextContent.Literal("key.meteor-client.open-gui") to prevent Minecraft from resolving it to key bind values
Please don't ignore this issue because other servers will implement this if it isnt fixed we would also request that the fix is pushed to all 1.21+ versions even though you don't always fix things in older versions if anything 1.21.4 and 1.21.8.
Thank you for your time
Steps to reproduce
You can replicate this issue by joining a Minecraft server with this detection and then RTPing until a randomized check occurs
Meteor Version
all versions till 1.21.11
Minecraft Version
all versions till 1.21.11
Operating System
Windows
Before submitting a bug report
-
This bug wasn't already reported (I have searched bug reports on GitHub).
-
This is a valid bug (I am able to reproduce this on the latest dev build).