GeyserMC / Geyser

A bridge/proxy allowing you to connect to Minecraft: Java Edition servers with Minecraft: Bedrock Edition.
https://geysermc.org
MIT License
4.7k stars 673 forks source link

Abuse with the Horion mod #4599

Closed Press22300 closed 4 months ago

Press22300 commented 4 months ago

Describe the bug

Greetings, Some players of my server use the mod Horion to abuse, like get creative gamemode, get unlimited fly, give experience and repair their items.

Here you have the link of the mod: https://horion.download/

Could you patch these abuses to avoid cheat on BE client please ?

Thanks a lot

To Reproduce

1 Install Horion 2 Connect on a GeyserMC server 3 Type all of your commands

Expected behaviour

No abuse possible.

Screenshots / Videos

image https://cdn.discordapp.com/attachments/1016396994018820266/1230595413011071016/RPReplay_Final1713466709.mov?ex=6633e449&is=66216f49&hm=cf3dd9739cf132d079f54474231fa463f20dac30dee5c77c1889e080d6749496&

Server Version and Plugins

2.2.3-SNAPSHOT (git-master-16385a4) (velocity version)

Geyser Dump

No response

Geyser Version

2.2.3-SNAPSHOT (git-master-16385a4)

Minecraft: Bedrock Edition Device/Version

Windows 10 Edition

Additional Context

No response

Kas-tle commented 4 months ago

If a hacked client can get creative mode on your server, then that is an issue with the underlying Java server. We do not access server internals, meaning we do not, for example, have the ability to directly set a client's game mode. We translate packets from the Bedrock player and forward them to the Java server. As far as the Java server is concerned, a player connected to Geyser is just another Java player.