your current location:首页 > news>MOD MD O MINECRAFT

MOD MD O MINECRAFT

2024-12-12 09:32:42|Myriagame |source:minecraft skins

Modmdo

A server multi -function MOD.

Some functions require client installation to use.

The current main purpose is white list, but more than this function.

Because the use method has been modified, the following introduces the version of Modmdo V1.0.27.

Modmdo v1.0.27 post

The original whiter list is unsafe to use the user name to not judge UUID's offline servers.

Therefore, Modmdo provides a white list independent of the original version.

The MODMDO whitelist needs to be installed on the client. It only needs to be installed on the client without any other operation.

Use the following command in the game to open:

/modmdo usermodmdowhitelist enable 

Before that, you may need to be used first

/Tempory Whitelist Add 

Come to add a white list for yourself, otherwise you need to add it on the console.

use

/modmdo whitelist remove 

Delete the player's white list.

Genuine compatibility

If you don't want to install Modmdo on the client, but hope to use Modmdo whitening list on the server, it

Then you need to set the online-mode to True in the server-side configuration file, that is, the player must have a genuine Minecraft account.

Then use the command:

/modmdo compatibleonlinemode enable 

Let's turn on the compatibility mode of the online mode and Modmdo whitening (this option is opened by default).

The subsequent whitelist adding operations are no different from the previous introduction, and the temporary whitewashing list is directly added and then connected to the server.

In the same way, changing the enable ENable of the above command to Disable will be compatible with the online mode.

After closing, the player needs to install Modmdo to enter.

accomplish

See the server:

Login implementation -Serverloginnetworkhandlermixin.java

Verification implementation -Serverplaynetworkhandlermixin.java

See the client:

Login implementation -Clientplaynetworkhandlermixin.java

MODMDO modified the server to join the game method,

When joining the game, you will send the marking data to the client, and let the client send the login information to the server.

Moreover, Modmdo requires that it must be logged in inspection when opening a whitening list before allowing the server to join the server.

When opening a whitelist, players will send the information to the server for a while.

If the server does not receive information from the client after exceeding the specified time, the player’s connection will be disconnected.

And if you receive the wrong information, you will not wait for so long, and you will directly disconnect the connection.

If there is no problem with the information, the player will be released, and game interaction data (block, player, entity, etc.) will start at this time.

1.0.27 Before

The previous version of Modmdo V1.0.27 is called the old version here.

The method of inspection used in the old version is to send a token when landing,

To generate token from the server, and then the server management distributes this to the player,

Players need to fill in the "Token" option of the "Add server" page of the game,

Or manually write to the configuration file (in config/modmdo/configs/specified_token.mHf).

The new version is no longer compatible with this method.

When using the old version of MODMDO to log in to the use of the new version of the MODMDO server,

Will prompt "Obsolete Login Type" and disconnect.

Management function

Banner

This command can be used from V1.0.35.

Banning players need to enable MODMOD white lists to use, otherwise, please use the original /ban command.

use

/Tempory Ban add  

To ban the player for a period of time, replacing ADD with Reduce can reduce the time of players' ban.

use

/Tempory Ban adD  -1 
to ban the player without life.

use

/Tempory Ban Remove 

Open the player.

When a player has been banned for a period of time, at this time, the banning order will automatically ban the player.

But this order is meaningless to players who are not in the future.

invite

use

/Tempory Invite Add  

To add an invitation, replacing ADD with Reduce can reduce the effective time of invitation.

use

/Tempory Invite Remove

To cancel the invitation.

When a player has been invited, at this time, the invitation order will automatically invite the player.

Note: Invitation cannot be used as a whitelist, all invitations will be invalid when the server is closed.

Security function

Independent ID

(Applicable scenarios of this function: leaked ID in the A server, and the B server cannot be used)

Since V1.0.37, it supports independent IDs or uses unannounced local key encryption IDs. This function does not require server support.

Modify the configuration file Config/Modmdo/Secure_level.modmdo to set the required method.

Support UNEQUAL_ID, Unqual_Key, NO_Secure.

They are independent ID, local key encryption, and use of original ID.

Independent ID is the safest, but it is also the biggest to occupy the hard disk.

The local key is only 16 bits (from V1.0.39 as 32 -bit), using AES256 encryption original ID. Note that this encryption is reversible, so when your ID is leaked, you can decrypt 16^91 (or 32^91)After this calculation and inspection, you must successfully solve your original ID, which is easier to crack than independent ID, but it is almost impossible.

ID authenticity

(This function is applicable to the scenario: the ID leaked at the ID of a server, but it cannot be used)

Since V1.0.39, it supports the use of non -preserved keys to verify the authenticity of ID. This function requires the server and client support at the same time.

When logging in, the player will send the ID of this server, and a encrypted data, and

This data was originally a serialized data, and the data can be extracted through certain algorithms in the data.

At this time, the player will also have a key that will use it to decrypt this data, but it will not save it.

Only when the ID is successful and extracted from the original ID can the player be recognized.

Therefore, it is impossible to directly join the server without getting a player ID. This function is equivalent to forcing the use of violence to crack this extremely inefficient way to attack the account.

Extended storage

Starting from V1.0.42, the identifier stored in the server is processed by SHA3-512.

When logging in, the server will process the original identifier to compare with the storage, which makes it useless to leak the database and the player's keys.

In view of the difficulty of the SHA3-512, it can be said that it has almost completely achieved it.

Plan

Middleman attack

It is planning to take measures to attack intermediaries.

The principle of intermediate people attack is to connect the client to the false server, and to deceive the player to send information through false data packets.

There is currently no test method for testing, but theoretically, the current MODMDO can be attacked by this method.

Only log in

MODMDO provides a jar that is separated from the login function,

This JAR is a client MOD with only login function, and the server installation is invalid.

Warehouse: CAO-AWA/Modmdo at Auth (github.com)

Published: Modmdoauth · Releases · Cao-AWA/Modmdo (github.com)

other

Do not run in a lower version by modifying the Fabric.mod.json version.

Because the version difference is too large, this will not succeed.

But you can try to modify the Mixin in the source code to put Modmdo on a lower version.

And, this module has temporarily stopped updating, the following exceptions:

There is a loophole

Game version update

What is the use of a better way to have a better way (