Cat Coordinate Exploit 1.19.2

[@rikschaaf]

That end was really abrupt...

That was pretty clearly a mistake. The subtitles continue a bit longer.

[@FlafyDev]

same. do you know where i can find that video explaning how he found the location?

[@IndraKurniawan]

I recall previous video told the server's world seed. By using online service biome finder by seed, then shimming down by cloud line, you can actually get the coordinates by finding similar biomes as shown in video. Edit: block rotation and bedrock structure aren't the only things should be proofed.

[@chillen]

It is really nice how it can aid, though.

[@w花b]

Yeah...very shocking

[@RaysWorks]

Such a cool series! keep it up

[@plighting_clips]

Hey rays!

[@Noxedwin]

Tying an adorable creature to a boat and using the direction of its gaze to locate and pursue its master is *literally* the end of the plot of _How to Train Your Dragon._

[@kgaming7599]

Why did you italicize HTTYD?

[@Noxedwin]

@@kgaming7599 Because it's the title of something. What are you, a calligraphy cop?

[@studybuddy7060]

@@kgaming7599 italicization is done to tell the reader the interpret the italicized part as a proper noun and not as any other part of the sentence. For example, I came to tell you about how to train your dragon in good faith. I came to tell you about _how to train your dragon_ in good faith. I know the sentence doesn't really make sense but I hope my point goes through.

[@kgaming7599]

@@studybuddy7060 🤣

[@Dominik-K]

The MC hacked series is amazing 🧡 Learning a lot about MC and hacking in general

[@jacksonofsun]

Small thing but the 144 block distance check in FollowOwnerGoal is actually squared! So it is really if you are 12 blocks away, not 144. They just use 144 and distanceToSqr to avoid an unnecessary sqrt function.

[@MaximusMuleti]

I really wish my networking and programming classes had involved minecraft as a way to better analyze and understand the code we were using.

[@princedoge4586]

MC uses Java and C++ for bedrock, so I agree it would be cool having an interactive way to do coding projects instead of common cookie cutter tools, but did your class not require coding lab sessions?

[@jan_harald]

@@princedoge4586 using an environment like minecraft gives you a lot more real feedback about things working or not working, like, you can SEE the cats teleport away, you don't have to go looking through your model figuring out if, where, and what happens, etc much easier to SEE your reach hack work, rather than just write code that uses similar tactics, but is just dry code with very little feedback about what's happening it's not to say it's always better, but it is more *INTERESTING*, and it gives more *CONTEXT* to work with, instead of a ton of abstract words, you can think in more "real" terms, instead of random variable names, you can think of "if cat is in boat, then check where cat looks", not "get object Something, use the handler LowActivity, then get the object's property Yaw"

[@spreen_co]

sethbling's item filter is the best. solves all issues you mentioned

[@Onni-]

Was the ending a mistake? Seems like an editing error or something

[@mauriciobpimenta]

Wow. Loved this. So cool! Awesome to see the challenge worked and people really found a very interesting and different way to find u, by exploiting an unknown "bug". It's not really a bug, but I loved to see how u studied the game's code and were able to determine a way to exploit the AI to find the location of the player. Really cool stuff. Congrats!

[@madsrishoj]

Odd cutoff at the end. Luckily you can read the last bit with the subtitles.

[@DaniDipp]

Thanks for pointing out the subtitles 👍

[@ItIsJan]

3:34 this has actually been used on the anarchy server 2b2t. One of the biggest groups on the servers had "dupe stashes" that big, that they used a bot, that sorts the shulker boxes in the right chests and puts them out (we are talking about hundres, if not thousands of double chests) dont call me a fitfag please

[@ES-cf4ph]

There is no shame in knowing that. Because it IS really cool.

[@angeloid_]

i was boutta call you a fitfag. but you told me not to, so i won't.

[@ItIsJan]

@@angeloid_ great

[@blitzbrian]

i love the Hacked Series

[@homebrew07]

8:58 There's a common hack that usually comes with most clients that disable some screen effects (including the blindness.) You should probably implement this into your client

[@arjix8738]

a shader can probably do the same thing

[@JessiBear]

The pet/horse exploit has been a known bug since 1.12.2 and is often used to coordinate exploit locations. They have modules to do the math and give you exact coordinates. You can achieve this with a single pet by dumping a water bucket on top of it forcing a teleport no matter the distance.

[@null384]

iirc there is no real math behind that, server just sends teleport packet with coordinates to client

[@JessiBear]

@@null384 Wait until he discovers the coordinate exploit using XP orbs 😂

[@Capiosus]

*gonna add that most of the coordinate exploits are found on 2b2t

[@gameboyv1790]

@@JessiBear how?

[@ItIsJan]

@@gameboyv1790 its probaply something along the lines of "blablabla exp orb goes into direction of player"

[@popbob4780]

There was a bug from like a few years ago to 1.18.2 that if you send a huge amount if tiny back and forth movements the game would think your moving super fast and the if you shot an arrow that would be able to one hit almost everything because if the velocity. That bug however got fixed, i dont know tho if it was just the arrow damage part or the speed part so that might still work (i havent tried)

[@widecat1404]

It's still possible, at least in vanilla

[@じゅげむ-s6b]

i almost thought you were the real popbob. wait, are you...?

[@VintageToiletsRock]

Minecraft's most notorious hacker... POPBOB!1

[@monekysaint1217]

We actually used a creeper farm at spawn to do it. The first cats that appeared were the ones in our creeper farm (you broke it)

[@imjustgonnawingit2711]

2

[@therealatliss]

Hey bud. How'd you find the server?

[@ChrispyChris3]

Super cool video and this is exactly why I still watch this series even as someone that doesn't play Minecraft. The stuff that comes out from playing around with different things is just awesome in computer science. Keep up the good work!

[@yazzindev]

I am really appreciating all of your Videos in Minecraft LiveOverflow! I started programming in Minecraft and so I do have many connections with it. I hope this series will go on^^

[@paulwesley3862]

at 24:06 it abruptly ends. is this an editing mistake?

[@miroslavmajer5155]

I don't think so. He will probably explain it in the next video.

[@Kynatosh]

@@miroslavmajer5155 subtitles gp on a bit further so I think it's a mistake

[@miroslavmajer5155]

@@Kynatosh yeah, true. It might be actually a mistake

[@kirdow]

For the java code shown at 5:34, you don't have to convert an array to a list in order to use streams, the same Arrays class that you used for Arrays.asList should also contain Arrays.stream which takes in a generic T[]. That way you can use the stream directly on the array rather than having to convert it to a List first. ^^ Additionally when doing ìnstanceof, you can also do ``if (value instanceof Container container) { /* use container here */ }`` which saves you from having to cast it or run the chaining code twice (in this case event.getInventory().getHolder() ). This also works for inverted checks, doing ``if (!(value instanceof Container container)) return;`` will let you use "container" outside of the if statement

[@Meletion1]

Do you have the plug-in in, I need it!!!!

[@mu11668B]

Thanks for the tips that extended reach is possible! I just made it work in vanilla in 10 mins. Never thought about it since most anarchy servers still have anti-cheat plug-ins just to make the game not too unbalanced and to reduce the server load. The position packet exploit certainly doesn't work with server-side anti-cheat present.

[@fitmotheyap]

Well most of his vids have these things prevented, however they can probably help with other type of mods, he has mentioned automated sorting, in my case it's related to some servers having custom plants so normal cheat clients don't work

[@mu11668B]

@@fitmotheyap His server has no active anti-cheat plug-ins installed as far as I know. On popular anarchy servers, you cannot just spam position packets and move 5+ blocks per position update packet.

[@fitmotheyap]

@@mu11668B well yeah, he literally allows inf reach which even a newbie can learn how to prevent using just spigot, he should add an anti cheat as a challenge imo

[@fireyblackdragon]

Your server plugin inspired me to write my own version that operates in roughly the same way! But then feature-creeped to where it is now. And I'm still noticing a few cases I want to fix. I added support for regex, enchantment checking, block tags (shockingly the hardest part to compare from a text input), checking renamed items vs the actual item name, having the wildcard anywhere in the name, and support for AND-ing the filters instead of just OR Just a little bit of feature creep. but it all works with just renaming the hopper, so no chance of loss of data due to my plugin I want to add custom groups (tools, weapons, armor, fish), damage checking, and some others.

[@jackssrt]

lol you cut the video off early in the end 24:04

[@h4ktbtw]

Great idea & implementation of a sorting plugin However you should really try to use guard statements in your code, that will make it much more cleaner and readable

[@Meletion1]

Where’s the plug-in?????

[@h4ktbtw]

@@Meletion1 He did not release it, however if there is a need I can code one and make it public on github and something like spigotmc

[@Meletion1]

@@h4ktbtw if you do lmk!

[@vresod]

With the hopper plugin, would it be easy to implement item tags? i.e search #logs_that_burn in the creative inventory

[@Zedoy]

Is there an editing mistake for the end???

[@31redorange08]

Why does the video end at 24:07?

[@supalupallama]

turn on subtitles

[@31redorange08]

@@supalupallama And then?

[@ari_archer]

i stopped playing minecraft years ago, but this is very interesting, love to see you explore minecarft, would be interesting to see you explore command blocks, I used to make large command block builds, i guess my programming hobby bled into minecraft lol, so nice that this combines programming and minecraft too B) Might get into it again, just not with command blocks, but with mods lol

[@DavidRockin1]

Once again I LOVE THESE SERIES!!! I really love the neat trick for hoppers, it's just so simple & elegant. Although the code at 4:45 I'm curious how performant it is? It's been a while since I've dabbled with Bukkit's API, but do those events get fired every tick for all items to pickup? And i dont recall, but does it do it for the entire item stack or just individual items? I'm curious how intensive the filter logic is? Like if I created 1,000 hoppers each with a name with 200+ commas, it might cause just enough of a TPS degradation that you could use the lag to do other exploits. Doesn't make sense to constantly split it every time, could just have a custom object in memory, with a list of applicable items to capture cached, and then a little hashmap pointing the block's location to said custom object. Then save that permanently in some file, or have this generate whenever the chunk loads (and if the hopper is activated.) and just delete it when the chunk unloads, and some extra events to check if the object is destroyed (explosion, blockbreakevent, piston if hoppers can be moved?) Maybe a little filtering to remove invalid entries & anything that doesn't match anything (like if i accidentally type cbbolestnoe*) and drop it or send a message to the player which is invalid so they don't spend hours trying to figure out why an item sorter doesn't work. Might even be able to just save it into the block's actual NBT data, and then it's just saved in the world's region files. ....But i'm probably just over thinking this just a *bit*. :P

[@NikitaCartes]

It indeed will be interesting to test and optimize this but one thing: max name length is only 50 characters

[@vectoralphaSec]

Im not at all familiar with Java, but this series is really good. Whenever this series ends, it would be cool if you did another eventually that is written in C++ instead of Java.

[@Furetto126]

I don't know if there is another game that would be suitable for something like this that isn't Minecraft. Aren't C++ and java very similar tho?

[@vectoralphaSec]

@@Furetto126 no they are pretty different.

[@Furetto126]

@@vectoralphaSec I'm currently studying C++ and coming from Java it wasn't hard to understand

[@fitmotheyap]

Bedrock minecraft

[@MarcoTacoMan]

@@Furetto126 syntactically they have similarities, but "hacking" (whether that's exploitation, modding etc) is a whole different story

[@a0fefd]

I love these videos, also I am wondering what is that schematic mod?

[@jan_harald]

how it can aid- *sudden cut to credits* lol, I love how subtitles end the sentence that the real video never said also really awesome series

[@jfb-]

So you blurred out your logs containing your coords rather than blocking them out even though you've previously demonstrated that blurring text is insecure. Interesting.

[@solcloud]

These hackers motivation challenges are really cool! Good job and I respect time amount you spend on it!

[@yanuu_9834]

How do you pass elements from one hopper to another? let’s say a hopper with the name cobblestone somehow received a different item, does it just get stuck there or have you implemented something to make it move to a different hopper? I’d love if you elaborated more on this :)

[@Gramini]

I think it's a regular hopper circle that just passes around items in a loop. Then underneath each hopper is another hopper that only pulls items out if they match. At least that's my theory.

[@joemama-hn6mx]

@LiveOverflow I'm confused. How do you breed a cat/dog that's tied to a player?

[@lightning_11]

24:05 Did you mean to cut off mid-sentence here?

[@btarg1]

This reminds me of the kind of exploits from 2b2t, you really fostered an intelligent community here

[@Meletion1]

Is there a plugin link or plugin file anyware?

[@ravijol1]

im working on it

[@stinkytoby]

Did the ending of the video get hacked

[@lior_haddad]

How it can aid.

[@supalupallama]

turn on subtitles

[@nikonosurname1823]

This series is amazing and makes me want to get into this kind of stuff

[@Cornbread2100]

What’s with the video cutting out mid-sentence at the end? Was there no more explanation?

[@anon_y_mousse]

These videos are making me want to play MineCraft.

[@itsmylifr8230]

Pls make a video on Google project zero. Answer these questions - what is it? Tell what they work on? Which skills one needs to have to get into it? How to achieve that depth in knowledge? Make some videos on bugs found by this project Another video needed - how to learn it security and computer concepts and knowledge in "depth" There are courses available for basic things but how to advance them at a next level So just i mean make a video on a guide to learn about it security in depth Also we are bored with the minecraft series Pls start some other series where you explain bugs and cve in detail ie. Liveoverflow style.

[@D--ParmarMalay]

@LiveOverflow

[@paczekzbiedronki9546]

What mod/hack was used to show all of this terrain in 15:09 is it seed based or dynamic map based I want it.

[@gardenofava]

Looks like Distant horizons

[@ycty]

love the series keep them coming

[@kevinblech6308]

You have a download for the compiled sorter plugin?

[@じゅげむ-s6b]

it's pretty simple. you can just request for it on r/minecraftplugins with this video for reference (and for the love of god, include the timestamp, I hate it when people don't) and someone will probably make it for you for free

[@kubakakauko]

Favourite series on KZbin

[@MrJack-420]

can you pls share your code for item sorting hopper :)

[@DarkChaosMC]

I do believe that 2B2T players have been using the cat bug for a while to find bases

[@sectorrrrr]

i know people got in by you accidentally leaking the ip, but is there any other way of getting into that server? o,o

[@MisterQuacker]

This whole series reminds me of when minecraft released on xbox and someone made a PCXbox360 savegame adapter.

[@loganjoy-koer5936]

Programming a solution for your problems is not cheating, it's another way to use your knowledge to solve things.

[@staCats]

I can be completely trusted. I don't know what you're talking about.

[@ChakaHamilton]

Do you have anything against turtles they can be programmed and do exactly what you want as for sorting.

[@guestguest8278]

In the part where you are clearing out the mountain there is a semicolom in the transcriptions

[@fab_5356]

How do you get the minecraft code?

[@DefinitivNichtTim]

Next exploit: Find the complete ending to the video

[@-.-._]

this is the best minecraft serie of youtube !

[@melkileo]

As a Minecraft hack developper for a long time, i would love hacking on your challenges, but don't have the time to search for the ip, what a shame :(

[@PartyManCZ]

ye neither sadly

[@melkileo]

Btw, when I say I'm a hack developer, I mean I love hacking with the protocol and stuff, never doing things for multi-player use, and even release

[@PartyManCZ]

@@melkileo Cool! Yeah I am more into clients! I made PartyClient2000 for 2b2t back in 2020 lol!

[@ratstam5428]

Love the video cuttinhg out at the end lol

[@RexXxMC]

That hopper filter reminds me of the Pypes plugin 😄

[@Pixel_b0t]

How do you run your server ?

[@angeloid_]

It's funny that he glosses over the fact that Moles LLC griefed the hell out of spawn. We did the same to his base, so it'll be interesting to see how he tackles that next video. Also, it's not a "reach" hack it's actually just a teleport exploit that is so fast that you can't see it. (~76 blocks instantly, can teleport further when charged up). The way it hits "through walls" is because minecraft doesn't actually stop you from teleporting THROUGH blocks on the Y-axis, so you teleport above, teleport down, hit your target, teleport above, teleport back. all that happens in a quarter of a second at most. Different implementations of this are used to make combat auras, including the Moles LLC "GlueAura" which is... usable.

[@monekysaint1217]

Yeah, "usable" if thats what you want to call that

[@angeloid_]

@@monekysaint1217 Still better than using meteor client :joy:

[@angeloid_]

@Sebastian Moser Twofold. First, because there's no fun for me in a game without conflict, and griefing is a way to create conflict. The second motivation is that LiveOverflow is trying to make the claim that, when you get a ton of smart people together, you won't have any bad actors. He's claiming that all toxic players are idiots. I want to prove that wrong. Our hacks might not be as good as the people at Server Scanning inc., but we're *anything* but "skript kiddies".

[@nanopi]

wonder if anyone was recording the network packets when the cat teleported

[@じゅげむ-s6b]

does the packet include the destination of the cat? I thought there's only a "cat disappears" packet

[@thebestcelep6358]

Holly shit this is soo awasome and cool I wish I can be like you guys .This is sooooooo cool

[@BurzowySzczurek]

Love this, keep going.

[@christopherdaane2538]

Can't you just have a negative velocity so when it tries to subtract it the number gets bigger instead

[@Elec-citrus]

Next time, he is going to implement an anti cloud coordinate tracking stuff into his hacked client!

[@konradw360]

Easiest way would be to create a custom cloud map

[@Veilure]

Could you do a tutorial on how to "start" making clients for Minecraft like you do? Or even how to CTF? I'm sure lots of people (me included) would love to learn how to do stuff like this.

[@efeyzee]

Join the server and try solving the challenges!

[@AllenKll]

start reading. EVERYTHING about what you want to do. just start reading.

[@Veilure]

@@AllenKll Umm... could you be a little more specific? What do I read?

[@efeyzee]

@@Veilure for learning how to make Minecraft mods/cheat clients, if you already have programming knowledge, look into how fabric works and what you can do with it. (Specifically mixins are very useful.) Also watch LO's "Modding is Hacking" video for a brief introduction. Look at the vanilla source but also the paper and bukkit sources. As for a more general intro, check out LO's how to learn hacking video (I think it's called "the step by step guide on how to learn hacking")

[@Bl4n]

@@efeyzee how do you even join the server? ive look for a while for a way to join

[@sWi5s]

Is the ending missing ?

[@jurkodev]

Am the guy that maintained the sorter at the your spawn base when I find the base I'll 100% build a better sorter

[@angeloid_]

too late, i am the guy who griefed the sorter at spawn and i have already griefed liveoverflow's new base.

[@brawlfan]

the plural of sheep is actually shoop your tweet is incorrect plz fix

[@ironnoriboi]

i'm fairly certain you get the target coords of any entity teleporting away from your view :)

[@wagyourtai1]

Aristois has had a version of super reach for quite a while... it might not work for the challenge depends on how LO detects it

[@AllenKll]

This video just sort of cuts off... huh.

[@benniking3333]

do you have a discors erver?

[@vnc.t]

when will the next episode come out? also does the reach thing still work?

[@angeloid_]

reach thing very much still works, but it's not a "reach" hack it's actually just a teleport exploit that is so fast that you can't see it. (~76 blocks instantly, can teleport further when charged up)

[@somethingcoolgoeshere]

This series has me wanting to learn java an write my own minecraft mod

[@Shad0wWarr10r]

wonder if superchargning a snowball is possible like with arrows, or just a billion TnT into unloaded chunks

[@velho6298]

How can it aid?

[@MinePossu]

others finding your base clip mostlikely dont have the grass pattern altered 🤔

[@MinePossu]

@Sebastian Moser i.. dont really know. It was more of like a click aha moment. I was going through a mental list of what he had done to keep his coordinates a secret.

[@1.0]

All of us know that texture rotations leak it. Maybe there is one or two screenshots with unaltered texture rotations but generally screenshots/videos are taken with texture scramblers

[@MinePossu]

@@1.0 18:03 this is the clip that might have the unaltered rotations. But tbh im too lazy to check

[@1.0]

@@MinePossu it has scrambled coords ;)

[@evilgibson]

@liveoverflow: the idea of having a bot to sort items was done to the nth degree on 2b2t where they have millions of resources stored in shulker boxes in chests and wrote bots to deliver specifically what a user requested. it used a web frontend so the user can find the exact shulker they wanted. kzbin.info/www/bejne/in6leYNve6mkfqs

[@erenkarakal]

The new protections are useless as most existing clients already have a packet canceller, so you can just not recieve that worldborder packet with a few clicks.

[@Comutemute]

would this work in 1.20.1?

[@Code12x]

I would never trust a cat...

[@finn_9999]

and how it can aid........

[@RepublikSivizien]

Are you in the fediverse?

[@_bt1831]

Would be cool if you would build your own minecraft red stone pc and do some "hacking" on it. Maybe show off a buffer overflow.

[@nodnarb]

People could use terrain exploits to find your base.

[@wildtom]

Are you using Linux?

[@HauntedDev]

He’s using kali linux, a distro made for hacking

[@RomanianProductions]

Bruh, “regular expression hopper”

[@okasan129]

Dont use whitelist?

[@TheTroll2001]

Didn't credit me for finding the exploit, wasn't even mentioned, and creditted the wrong people. You didn't do your research at all.

[@maze7474]

Can't you become a cat? As you showed cats do teleport if they are too far away from their owners. 2 challenges: (a) shape shifter, i.e. how can you become a different creature (and back) and (b) find an "owner" close to where you want to teleport to.

[@HAV0X_]

you cant become another entity

[@1993MAZDAMIATA]

whats the ip

[@ItzSkyReed]

Ok now I will wait bees

[@670839245]

Unrelated to Minecraft, but me and another person were trying to hack a Chinese game. I fiddled for quite some time before I found the encryption key used by the game, but in hindsight it would have been a quite obvious place to look, if you know about how the engine worked. That other person, who was actually more experienced with tech than me, later came to ask me how I found the keys, and was like "I looked in the assemblies for a whole afternoon and found nothing"

[@adrianbonski1849]

that reach hack is same as tp aura used 6 years before, this is nothing new or revolutionary, just sending c04 packets with position before/after attack, only works with servers that dont have any anticheat, there is no bypass for NCP / AAC for this that i know of, that would be of any use