Make sure to subscribe, and check out my patreon for exclusive content! www.patreon.com/TheMisterEpic
@mineabdo25155 ай бұрын
Can you talk about pojav lancher in mobile 📱 and its java edition and if you buyed the game you can play in hypixel and for mods you need to put them in tge mods folder and you can download directly forge or fabric in any version
@DRPURGE-nh1oh5 ай бұрын
Amazing video man ❤ thank you for taking the time outa your day to make this for us you don't get enough credit
@DRPURGE-nh1oh5 ай бұрын
Also take a break you need it dude
@ultraalex205 ай бұрын
@TheMisterEpic
@Ofuka8805 ай бұрын
do you know authmebridge exploit?
@doufmech43235 ай бұрын
This is not just Minecraft's most powerful vulnerabilities, it is one of THE worlds most powerful vulnerability (CVSS of 9.8). A remote attacker can execute arbitrary code via the log4j component, and since it is an exploit in the logger, no one would be able to see if an atracker had gained entry.
@maritoguionyo5 ай бұрын
not a direct Minecraft exploit
@bennyl92283 ай бұрын
I wonder if it is possible to use renamed chests to access other GUIs, like P2W crate rewards.
@infered53655 ай бұрын
The Log4j exploit (called Log4shell) was given a 10.0 severity rating on the CVE scale. The Log4J exploit ranked among the most severe vulnerabilities in software in the history of software. It sits on the throne alongside EternalBlue (which spawned Ransomware as we know it), Remote Code Execution in email servers for governments, and why the protocol FTP isn't even used anymore. It spawned a furious hellfire of system administrators patching their environments at a speed and urgency not even paced by Y2K.
@CZghost5 ай бұрын
Yeah, it was pretty much the most severe vulnerability, and that was given the sheer scale of the library. Scale of the library isn't defined just by its program size, but also the usage. And it was EVERYWHERE. This vulnerability quite literally affected the whole Internet. That's why there was such a big fuss about it.
@vitulus_5 ай бұрын
I remember hearing that later versions of Java aren't susceptible to the RCE part of the exploit.
@unknownname37035 ай бұрын
and itsonly the XZ backdoor that is the other 10.0 CVE i know of. log4j was crazy
@unknownname37035 ай бұрын
and itsonly the XZ backdoor that is the other 10.0 CVE i know of. log4j was crazy
@jamesr7365 ай бұрын
Wait, we don't use FTP anymore?
@raihanvarghese85535 ай бұрын
Minecraft has more vulnerabilities than I have chromosomes
@LandrewLeng5 ай бұрын
bro 💀
@TheMisterEpic5 ай бұрын
Lol
@erubus52315 ай бұрын
more than one?
@Nightcaat5 ай бұрын
7
@duckny83165 ай бұрын
Lol@@TheMisterEpic
@blikthepro9725 ай бұрын
i love how the reddit post asking about the handshake exploit has a troll comment and a reply getting mad at them
@alex47035 ай бұрын
It should be noted that server seeker going public makes cracked servers super vulnerable to forceop. When owners create these servers, they're unaware that anybody can join the server and log in with operator permissions
@Theunicorn20125 ай бұрын
It should be noted that server seeker going public makes cracked servers super vulnerable to forceop. When owners create these servers, they're unaware that anybody can join the server and log in with operator permissions
@xelabrat25 ай бұрын
@@Theunicorn2012 It should be noted that server seeker going public makes cracked servers super vulnerable to forceop. When owners create these servers, they're unaware that anybody can join the server and log in with operator permissions
@apoloqy9545 ай бұрын
It should be noted that server seeker going public makes cracked servers super vulnerable to forceop. When owners create these servers, they're unaware that anybody can join the server and log in with operator permissions
@xelabrat25 ай бұрын
@@BloodravenRivers way to break the comment chain loser
@sethviets51205 ай бұрын
@@BloodravenRiversIt should be noted that the people here were doing something called a chain, and you just broke that said chain.
@Jackpkmn5 ай бұрын
Using log4j to op yourself is up there with using a flamethrower to light a campfire.
@_WarrantyVoid5 ай бұрын
More like on the tier of using the Tsar bomba to light a match. With Log4Shell one can directly take over the user account the Java application runs on, if that account has admin / root priviliges or there is a viable privilige escalation exploit available then the computer is basically fucked, especially if stuff like bios level advanced persistent threat is used (if the computer is not a VM that is). If the computer has credentials then even more can be compromised. Automate that process and you got a self-replicating botnet. Remote Code Execution exploits are no joke.
@DenLedeTomat5 ай бұрын
I can't believe that they used that fkin enormous power to gain only the coords and tokens oof
@fwfy_5 ай бұрын
Hello. I'm from PlanetMinecraft. Can I please become moderator on your KZbin channel to test some permissions?
@Idk-992jd5 ай бұрын
Obv
@MrBelles1045 ай бұрын
I'm so glad the handshake exploit was finally explained, I was always curious about Minecraft change logs and that reddit thread never got anywhere.
@DonutMT5 ай бұрын
grabbing some popcorn, anyone want some?
@Nightcaat5 ай бұрын
I’ll take some 🍿
@ReimBuch5 ай бұрын
Sure, some tasty popcorn would be nice rn
@DonutMT5 ай бұрын
@@ReimBuch here ya go!
@WFly1015 ай бұрын
blackwater park is the new minecraft hacked client featuring guest member steve von from Asperger's co. It's very shï sàh lō
@TCMCGMB5 ай бұрын
thx for reminding me
@CZghost5 ай бұрын
The Log4j vulnerability was actually FAR WORSE than just being a technique to gain an OP on a server. The vulnerability is dubbed Log4shell, and it is what it is. Being it that the library is widely used across the Internet in many popular Java apps and in many industry environments, the vulnerability that gives you an ability to remotely execute any arbitrary code (it is an RCE vulnerability), exploiting it is far more dangerous than just a silly Minecraft hack. Hackers were able to penetrate powerplants for example with this simple exploit. It's actually really scary that this vulnerability was found, and we still have no idea how much and how long it was exploited in the wild. Because the vulnerability was there for quite some time before it was discovered. It is patched now, but god knows how many machines were not only exposed with this vulnerability, but also actively exploited and penetrated. It's not just a silly Minecraft hack, that was a VERY serious deal.
@azuree.nekowo5 ай бұрын
8:52 quick correction: BungeeCord is a proxy/server software, not a standalone plugin.
@flipflops995 ай бұрын
blud really said "erm actually... 🤓☝"
@WFly1015 ай бұрын
@@flipflops99blud really said "I'm 12 and project my insecurities online"
@flooploops45895 ай бұрын
UHGMMMM ACHUTTTTTTLLLYYYY 🤓🤓🤓🤓
@azuree.nekowo5 ай бұрын
@@flooploops4589 honestly I'm laughing at how insecure and immature you are.
@tbrickman5 ай бұрын
Eeerm ACKtuallY ☝🏻🤓
@Bluebird_YT5 ай бұрын
I accidentally leaked my session id from a crash report for a sodium bug in 2023. So apparently Mojang didn’t fix the crash reports having the session ids.
@felixbemme72575 ай бұрын
Sharing sensible files with outside people isnt something they need to fix. Just dont share files like that with randoms
@Theunicorn20125 ай бұрын
I accidentally leaked my session id from a crash report for a sodium bug in 2024. So apparently Mojang didn’t fix the crash reports having the session ids.
@felixbemme72575 ай бұрын
@@Theunicorn2012 Because thats not an mistake. Crash reports are supposed to have this kind of data. You are just not supposed to share files and logs without checking what they do/contain with randoms on the web.
@afraid2letgo5 ай бұрын
Don't the session IDs expire when you exit the client?
@Bluebird_YT5 ай бұрын
@@afraid2letgo they expire after 2 weeks
@flipflops995 ай бұрын
I love how he is subscribed to Team Avo 6:06
@hedireal5 ай бұрын
i used to grief servers with the bungeecord exploit, me and a group of friends wrote a plugin that would act as the "hub" that would allow us to join the affected sub-server directly from the game with a command, change the name/ip that we were joining with, and a couple other things that i've forgotten now we were probably the first or second group of people to use it, fun times :)
@Gildfesh5 ай бұрын
That Gildfesh guy seems pretty cool
@WFly1015 ай бұрын
Godflesh is good band
@tutwastaken695 ай бұрын
hmmm
@Ninjalette6665 ай бұрын
im surprised the 'i work for planetminecraft' line ever worked. no admin from another website ever deserves admin on ur server. its that simple.
@Alex-qj9yu5 ай бұрын
It’s why people are the weakest link in security
@LimitlessJayson5 ай бұрын
but considering none of us were cybersecurity nerds all they were thinking is.. "maybe if i give him op he will recommend my server more!!"
@Ninjalette6665 ай бұрын
@@LimitlessJayson you dont need to be a cybersecurity nerd to understand that you dont give operator status to a random.... do u hand your password over to anyone that asks for it? braincells people.... use them?
@Ninjalette6665 ай бұрын
@@LimitlessJayson also no one is going to recommend servers for you, that costs money and its something people dont realise. you either struggle up the normie voting lists or your server gets spread by word of mouth or reddit or planetminecraft. there is no easy quick way to get your server to 'make it'
@LimitlessJayson5 ай бұрын
@@Ninjalette666 this was 10 years ago that this stuff happened why are you speaking to me like I'm retarded
@blackstone125 ай бұрын
A lot of new servers use velocity as bungecord is outdated and unsafe
@sneezing_panda5 ай бұрын
Ah Scetch and Nodus. Was good times running around with him. That Session ID exploit was wild times.
@Theunicorn20125 ай бұрын
Ah Scetch and Nodus. Was good times running around with him. That Session ID exploit was wild times.
@RoyD_S5 ай бұрын
@@Theunicorn2012 bad bot
@ItsCre3per5 ай бұрын
2b2t players being traumatized by the string on the thumbnail
@Stormie215 ай бұрын
Why
@nikolaideianov50925 ай бұрын
@@Stormie21i think is goddamn log4j
@Stormie215 ай бұрын
@@nikolaideianov5092 oh
@Bluebird_YT5 ай бұрын
I wouldn’t be surprised if there is a new forceop method with the new components replacing nbt data in 1.20.5+.
@lisiasty6885 ай бұрын
There is always at least one exploit but not discovered yet. Sometimes it takes a lot of time and some programs or Minecraft versions are just not worth it. I mean you can find something in 1.2.5 but I wouldn't be worth it if that's only that version because something was removed for example... Creating non-vulnerable data is almost impossible to do task
@Bluebird_YT5 ай бұрын
@@lisiasty688 I mean the new snapshots for 1.20.5 and 1.21 not the old version 1.2.5
@bakubaku43335 ай бұрын
back then, I believed someone was actually Notch on a server because they were able to appear as his account. Things were just different back then.
@theschnozzler5 ай бұрын
Did he drop an apple when killed?
@rubiitoxic5 ай бұрын
@@theschnozzler probably
@ThePaperKhan5 ай бұрын
Maybe he was Notch.
@larry_toast26425 ай бұрын
I'm the kinda guy to watch 17min videos before going to work in 5 minutes
@vanry68395 ай бұрын
your videos are always my go to night watch content
@flameflyer77985 ай бұрын
The biggest exploit is having KZbin rank on hypixel... ...talking about you, no lag back
@unnamed74305 ай бұрын
esp the second one, you can just climb up walls to escape from mobs and other players.
@WFly1015 ай бұрын
Bagels are kinda hard
@CitriTea5 ай бұрын
mods can't even ban you for this overpowered exploit smh
@youboring5 ай бұрын
lf yt rank no wd routes
@StarKayC5 ай бұрын
The Handshake exploit brought back some memories. I remember seeing it posted and taking the risk of downloading it as people thought it was a login stealer. You could literally join any server with any username without any problem. Assumed it was more known.
@epicgamer133705 ай бұрын
8:18 this segment sounds like you spitting bars lmao
@kirbykraftgames5 ай бұрын
I feel like I’ve watched this before… I don’t know why, but I feel like I’ve watched this before
@NikoTheAndroid5 ай бұрын
Same lol.
@WFly1015 ай бұрын
J cole comes out as a trans billy eilish
@WFly1015 ай бұрын
Lōl
@MD-df7if5 ай бұрын
Removed?
@WFly1015 ай бұрын
@@MD-df7ifno it was bungee corded into outer millenials are soacey hahaha Tool reference
@Samin2207_5 ай бұрын
How are you making videos so fast!?! Love your videos ♥, its great that you've been getting much more active recently!!! I know I've already said this but , I like the vibe that your videos give me , high quality , nice and relaxing videos. Also , what do you use to edit your videos? 🤔
@Elian5045 ай бұрын
In 2013 I was the co-owner/admin for a server of a friend. There was another admin that had way too many permissions but I couldn't do anything about it because it was the owners decision, that admin fell for the planetminecraft scam. When I saw it happening in the console I deopped both the admin and the griefer and rolled everything back with coreprotect. Teached the admin a lesson through server broadcast lmao
@creeptitan4 ай бұрын
The Sign ForceOP was actually stolen by the Wurst Client developer, he was not the one to discover it. A youtuber who i forgot the name of even made a video exposing the Wurst Client developer for blatantly copying his method, but i have never seen anybody talk about this or credit the original finder.
@Kuid5 ай бұрын
3:00 I remember writing that over 8 years ago
@susimogus5 ай бұрын
LOL
@supericeg59135 ай бұрын
From experience from writing my own game, race conditions (talked about at 12:32) probably took away 2 months of debugging, they're a nightmare to debug.
@endurofurry5 ай бұрын
ironicly the only one of these i have heard of was the log4j and the handshake I had no idea there is little info about it
@that_guy12115 ай бұрын
i've made a couple of force ops for fun, the type that is a spawn egg that just summons and runs a armor stand that has /op {my_name} on it, ofc, it doesn't work if command blocks are off, but they're quite fun to make
@notreallyNat5 ай бұрын
“x views in y seconds bro fell off” 🤓🤓
@AttsRealm5 ай бұрын
I think we need more info on that last Java security vulnerability… it sounded wild and very interesting
@Gildfesh5 ай бұрын
There is actually a lot of information online if you look up "Log4Shell", a lot of videos covering it even use Minecraft as the example. I really suggest looking it up if you are even slightly interested because it was insane. Simply put, the tool that Minecraft uses to log things (such as crash reports) had a vulnerability in it which would allow someone to run any code they wanted if they could get a specific string of text into the logs of an affected program. Minecraft makes it easy to do this just by sending a chat message which meant that you could run any code you wanted on the computer of any connected player or even the server itself. The exploit being in the most commonly used logging library meant lots of websites, servers and random programs were vulnerable to the exploit, it just happened that Minecraft was one of the things impacted.
@gem37635 ай бұрын
You can find plenty of info about it online, as it was a huge security issue and had lots of real-world ramifications
@Ryzen4070_SUPER5 ай бұрын
I literally had the book method done to my server last year, great vid
@uncheck5 ай бұрын
FINALLY the op login to any acc released. I've been wondering how it was done
@vf8vo315 ай бұрын
If you joined like hypixel with the handshake exploit, wuldnt you be invincible from the bans?
@chandlercrockett213Ай бұрын
I remember learning to port forward at 12 years old just to use the nodus session stealer… good times man
@Dullahan005 ай бұрын
I remember back on my brother's first attempt at running a server for his friends someone came in and destroyed the world with this exploit, Ender Dragons and Withers left and right. On his way out he turned on the whitelist as a parting gift and show my brother how to stop someone else from coming in to grief the world again.
@CDZ13095 ай бұрын
This was posted 7 minutes ago, gonna watch it now
@railworksamerica5 ай бұрын
7 days ago now
@kremsnita4465 ай бұрын
when its sunday and you remember you have to go to school tomorrow but misterepic uploads
@yc21745 ай бұрын
cuz u found this you dont have to milk it out along 3 vids.
@TheSultan14705 ай бұрын
TheMisterMilkMan
@ThenamesC5 ай бұрын
(on the oldest anarchy server in Minecraft....)
@WFly1015 ай бұрын
Just call my name
@WFly1015 ай бұрын
Ωμ×∞∆››
@juanitoalcachofa34855 ай бұрын
Let’s gooo, the mister epic upload ! 🐐
@cowshu5 ай бұрын
i think the most substantial exploits arent the ones limited to the game but the ones taht give you privelages on the server backend or user machines
@akurasubject96175 ай бұрын
Yet minecraft still want to stick to java...
@RayTraces5 ай бұрын
I force opped once into a big minecraft event, i got perm banned but it was crazy
@beastaadigamer64155 ай бұрын
Yo what is the music you used in the timestamp 9:05 its so cool, i'd like to know the name of it. Please ??
@arcane_spark5 ай бұрын
I commented about this in the last video so thanks for mentioning it
@synkstar99215 ай бұрын
Ive seen someones server get messed up by the bungee method because they didn't have the backends firewalled off. I had a good laugh from that.
@FriendlyAC130Online4 күн бұрын
iCHG and Avo era was amazing to see in real time
@Tantalium15 ай бұрын
The history of ratting in Hypixel skyblock is insane
@Cakeytoo4 ай бұрын
This guy needs to make a movie of minecraft news would be so good 😂
@SanMaster175 ай бұрын
Force OPPA GANGNAM STYLE
@Jacktherippa845 ай бұрын
At least use the full version of Space Valk 3 if all you're going to do is get B-roll of it. The incomplete version from years ago makes me sad : (
@LittlemacPlayer5 ай бұрын
Space valk 3 is so hard to fully load
@Jacktherippa845 ай бұрын
@@LittlemacPlayer He can clearly do it, and you can fully load stuff easily and render it silky smooth if you use replay mod.
@TheMessi20144 ай бұрын
First plaied Minecraft somewhere near before beds where introduced, but not too long they where. I was like who should i suppose to fight all these monsters?
@TheDarkKillerGR5 ай бұрын
wait its been almost 3 years since log4j?? dam
@Bedic-Mag5 ай бұрын
What the fuck? You're joking right? That all felt like it was a few months ago. Wtf happened to my time perception...
@nikolaideianov50925 ай бұрын
@@Bedic-Magcovid fucked it
@avi5 ай бұрын
wait i just watched this video earlier today why reupload
@Sodisna5 ай бұрын
Felt like this was talked about before.
@dispersegg5 ай бұрын
Perfect timing, bedtime 👍🏻
@lukasplaycs24 ай бұрын
Btw that not all force ops , u forgot about aka - plugin called backdoor:)
@steyok5 ай бұрын
Its a good day when a new duping video lands on the internet
@codycallaway90574 ай бұрын
This might give me nightmares, thanks
@user-jw4gx6dc9i5 ай бұрын
@TheMisterEpic Hm? I watched LifestealSMP some time before, and didn't spoke use the Handshake method to get OP on the server? Or was it just a similar glitch?
@Rakesh371875 ай бұрын
Man i remember using Session Stealer. I was shocked when it worked
@polarace4205 ай бұрын
day 1 of asking TheMisterEpic to oil up
@thechef76335 ай бұрын
I liked my own like
@WFly1015 ай бұрын
I commented on your own comment
@thechef76335 ай бұрын
@@WFly101 i liked your comment on my own comment
@WFly1015 ай бұрын
@@thechef7633 I ate your dumpster
@nikolaideianov50925 ай бұрын
2649
@Katninja9565 ай бұрын
15 sec ago hello is anyone here? Just me? Ok (refreshes) never mind i guess
@ncsr96755 ай бұрын
14:04 i would love a video about creative plot worlds and their history/what happened Its rare to find any of these servers today. i used to play alot in a brazilian server called SkyCraft, it was the most fun i had with multplayer
@CoolDonkey695 ай бұрын
It feels like this is reupload
@kauri_chrАй бұрын
bro what is with the bg music, why is it so creepy when the video is abt some kids trynna be online gangsters
@AOOA9265 ай бұрын
Minecraft has more vulnerabilities than I have braincells 💀
@inconsistenttutorialuploader5 ай бұрын
stolen
@agentkodeh24763 ай бұрын
I was actualy friends with Diedae The owner of the server at 2:40 After that Grief he had a Mental breakdown and Changed his name and Stopped talking to all his original friends Because he thought that we got bought out by The griefers
@phantom_sy5 ай бұрын
Anarchy players abusing vulnerabilities that could pose as a national threat, so they can steal someone’s base coords:
@Idk-u1k5 ай бұрын
No idea what this is but I'll watch you never the less :)
@ButterFromDiscord5 ай бұрын
How do you make the enchantment glint look like that please I need it
@railworksamerica5 ай бұрын
9:37 how would I do this? Investigating this to fix my setup
@kryzethx5 ай бұрын
Is this a reupload? I could have sworn that this video was already posted...
@oliverandtoadfan895 ай бұрын
I swear, Minecraft is one of the most vulnerabile games in terms of its security
@sleepycCh5 ай бұрын
Not only was nodus the biggest hacked client of all time, it was so big it was synonymous with hacking
@drrockstar40405 ай бұрын
So how is your first youtube video a patreon exclusive?
@Kellysg1265 ай бұрын
Oh man i remember that icanhasgrief video like yesterday!
@tipicaljd5 ай бұрын
You have miniature testing ???
@syedismail-co1wq5 ай бұрын
What’s good nice video .
@BloodravenRivers5 ай бұрын
hold up now, u sped thru that last lil bit there about the command u could type that would give u op and control of a persons computer. idk i think it was log4j ik its probably very limited info on that particular method n probably less you could actually speak of on here, but of all the methods u described in these videos that very last one was very obscure, ive never heard about that one in it peaked my interest because something with that level of control to exert would be very dangerous exploit indeed, not just for servers, alot of these hacks and exploits most pertain to in game control, but one like that, just imagine u know we got old people running our countries u know their grandkids play minecraft how long before some anarchy player gets into REAL trouble for getting into the wrong computer
@Elmer5455 ай бұрын
isnt this a re-upload? i swear i've seen this video already
@remiliascarletface86225 ай бұрын
but is this stronger than "imfromplanetminecraft exploit" tho
@MATOMTU5 ай бұрын
I love the part where the mister epic force opped all over the place
@GamingCeo4205 ай бұрын
The most recent force op exploit was fumbled by people who didn’t know the potential
@so_s_5 ай бұрын
I remember ForceOP, destroyed one of my favourite servers
@GabeDoGames5 ай бұрын
One hour gang
@0qerq155 ай бұрын
wait is this is a re-upload??
@entropy-cat5 ай бұрын
"I'm from PlanetMinecraft" would convince people to op you? Wut. Why would a rando with a PlanetMinecraft account get opped? People wouldn't even have to lie about it if they just made an account first.
@BWGamer-l7z6 күн бұрын
I will try that
@Juniperfoxx5 ай бұрын
0 hour gang?
@aerobiesizer39685 ай бұрын
14:59 hmmm that link looks familiar
@YouTubeName-hw1uk5 ай бұрын
On Minecraft Wii U it's basically the average day to get someone to force op themselves.