hey.
we are a group of security researchers and hackers in the minecraft space.
we find vulnerabilties, sometimes abuse them, and then make a writeup disclosing
them. you probably know us from a vulnerability in a minecraft plugin such
as TradeSystem, or similar.
check out some of our writeups below:
• advancedportals: teleport vulnerability - plugin messaging abuse again leads to a vulnerabiltiy in AdvancedPortals, a really popular minecraft plugin. (2024-07-28)
• tradesystem: arbitrary item give vulnerability - plugin messaging abuse leads to a catastrophic vulnerabiltiy in TradeSystem, a really popular minecraft plugin. (2024-07-07)