Serious issue. Hacked client able to crash any server by sending specific command

Here is a snipped containing what they were able to send and subsequently crash the server with

[19:56:23] [Server thread/INFO]: TransRights lost connection: Internal Exception: io.netty.handler.codec.DecoderException: net.minecraft.server.v1_16_R3.ResourceKeyInvalidException: Non [a-z0-9/._-] character in path of location: minecraft:円ᆆᆿ忿ᇎᆿ忘ᆿᆿ忿ᆾᆿ応ᆿᆿ忿ᆷᆿ忑ᆿᆿ忿ᇠᆿ冺ᆿᆿ忿ᇇᆿ忟ᆿᆿ忿ᆺᆿ忳ᆿᆿ忿ᅳᆿ忣ᆿᆿ忿ᇯᆿ忇ᆿᆿ忿ᇅᆿ忙ᆿᆿ忿ᆼᆿ忇ᆃᆿ忿ᅶᆿ忲ᆿᆿ忿ᇃᆿ忚ᆿᆿ忿ᆫᆿ忱ᆿᆿ忿ᆅᆿ念ᆿᆿ忿ᇐᆿ忺ᆿᆿ忿ᆆᆿ忡ᆿᆿ忿ᆀᆿ忀ᆿᆿ忿ᇳᆿ凿ᆿᆿ忿ᇨᆿ忄ᆿᆿ冁ᆿᆿ忿ᇛᆿ忿ᇁᆿ冿ᆿᆿ忷ᆿᆿ必ᆿᆿ忿ᇾᆿ徆ᆿᆿ忿ᇕᆿ念ᆆᆿ忿ᅿᆿ冿ᆆᆿ忿ᆃᆿ忬ᆿᆿ忿ᆔᆿ忩ᆿᆿ冥ᆿᆿ忿ᆰᆿ忿ᆮᆿ心ᆿᆿ忿ᅱᆿ忼ᆿᆿ忿ᆠᆿ忻ᆿᆿ忿ᆙᆿ忳ᆆᆿ忿ᆂᆿ忌ᆿᆿ忿ᇔᆿ忺ᆾᆿ忿ᇲᆿ忀ᆤᆿ忿ᆄᆿ徿ᆿᆿ忿ᆉᆿ忿ᆞᆿ忿ᆎᆿ忘ᆶᆿ冊ᆿᆿ志ᆿᆿ忿ᆯᆿ忆ᆿᆿ忿ᇤᆿ忬ᆠᆿ忆ᆃᆿ忄ᆻᆿ冸ᆿᆿ忯ᆿᆿ冽ᆿᆿ忏ᆿᆿ忿ᆇᆿ忿ᆬᆿ忿ᇱᆿ快ᆿᆿ忿ᇞᆿ忿ᆜᆿ忀ᆠᆿ忯ᆞᆿ忿ᆨᆿ忹ᆿᆿ忿ᆪᆿ冴ᆿᆿ忿ᆐᆿ忿ᇰᆿ忿ᅼᆿ忖ᆿᆿ忿ᇻᆿ心ᆩᆿ忿ᇧᆿ忠ᆿᆿ忿ᇈᆿ忔ᆿᆿ忺ᆐᆿ忝ᆿᆿ忿ᇺᆿ忴ᆿᆿ忿ᆕᆿ忿ᆵᆿ忿ᇶᆿ忎ᆿᆿ忿ᅾᆿ忷ᆆᆿ忿ᆖᆿ忛ᆿᆿ忿ᇉᆿ忞ᆿᆿ忿ᇷᆿ忭ᆿᆿ冤ᆿᆿ忿ᆍᆿ忿ᇭᆿ忿ᇖᆿ冰ᆿᆿ忢ᆿᆿ忱ᆾᆿ忦ᆿᆿ忿ᆒᆿ忸ᆿᆿ冿ᆯᆿ忿ᆏᆿ忌ᆯᆿ忪ᆿᆿ忿ᇿᆿ忇ᆙᆿ忸ᆔᆿ徿ᆆᆿ忿ᆘᆿ忩ᆅᆿ忿ᇄᆿ忿ᇏᆿ忿ᆭᆿ忌ᆸᆿ忿ᆛᆿ忹ᆆᆿ忿ᅲᆿ忄ᆺᆿ忿ᇩᆿ忬ᆦᆿ忸ᆉᆿ忁ᆿᆿ忿ᆱᆿ凿ᆆᆿ忿ᇦᆿ忿ᆢᆿ忇ᆾᆿ忰ᆿᆿ忿ᆣᆿ忺ᆆᆿ忷ᆭᆿ忺ᆉᆿ忿ᆶᆿ忠ᆱᆿ忿ᇼᆿ忘ᆼᆿ忎ᆉᆿ忚ᆛᆿ忥ᆿᆿ忤ᆿᆿ忣ᆉᆿ忡ᆁᆿ忇ᆼᆿ念ᆐᆿ忿ᆿᆿ徽ᆿᆿ冿ᆐᆿ忿ᇒᆿ忿ᆧᆿ忒ᆿᆿ忿ᇜᆿ忨ᆿᆿ忿ᆦᆿ忿ᇙᆿ忿ᆈᆿ忸ᆆᆿ忿ᆲᆿ忡ᆉᆿ忿ᇘᆿ忥ᆆᆿ忿ᇥᆿ忊ᆿᆿ心ᆼᆿ忠ᆐᆿ忿ᆳᆿ忄ᆠᆿ忿ᆁᆿ志ᆱᆿ忿ᇆᆿ忤ᆆᆿ忴ᆶᆿ忿ᆓᆿ忿ᆸᆿ忳ᆻᆿ忿ᇸᆿ忮ᆿᆿ忿ᆤᆿ忰ᆎᆿ忻ᆲᆿ忇ᆞᆿ忇ᆱᆿ忋ᆿᆿ忺ᆅᆿ忴ᆆᆿ忿ᆥᆿ忇ᆄᆿ忿ᆹᆿ忧ᆿᆿ応ᆠᆿ忿ᅻᆿ忿ᆩᆿ忰ᆇᆿ忲ᆄᆿ忕ᆿᆿ応ᆕᆿ忿ᇹᆿ忿ᆊᆿ忌ᆇᆿ忿ᇊᆿ忣ᆃᆿ忆ᆱᆿ忻ᆆᆿ忿ᆚᆿ忰ᆱᆿ忿ᆌᆿ忶ᆿᆿ忿ᆻᆿ忿ᆑᆿ忞ᆳᆿ忶ᆆᆿ冇ᆿᆿ忽ᆿᆿ忿ᆟᆿ志ᆼᆿ忿ᇮᆿ忨ᆇᆿ円ᆿᆿ忿ᅰᆿ忇ᆇᆿ忤ᆯ忿ᆿ

[19:56:23] [Server console handler/ERROR]: Caught previously unhandled exception :

I dont see a way to prevent this as it happens from the client side. its literally overloading the server by simply sending the request regardless of whether or not it is an actual command.

(this is a LGBT friendly server by the way so might want to investigate this account, i believe it was an attack made deliberately because of that fact)

Source: https://www.reddit.com/r/Minecraft/comments/li8csu/serious_issue_hacked_client_able_to_crash_any/

leave a comment

Your email address will not be published. Required fields are marked *