Kaboom Wiki - User contributions [en]

DDoS

2026-08-12T05:51:08Z

107.115.17.107:

'''[https://en.wikipedia.org/wiki/Denial-of-service%20attack DDoS]''' attacks are a form of cyberattack exclusively perpetrated by skids who are too stupid to develop Kaboom/Minecraft-specific exploits.

A [https://en.wikipedia.org/wiki/Cybercrime cybercriminal] acquires access to a considerable amount of devices, usually [https://en.wikipedia.org/wiki/Internet_of_things IoT] devices like routers (a [https://en.wikipedia.org/wiki/Botnet botnet]) and then rents those devices out to other cybercriminals to perpetrate denial of service attacks or for use as residential proxies.

Usually, threats of DDoS are entirely hollow. If they do follow through, it's incredibly likely to only be a few devices, if that, and that doesn't really qualify as distributed.

It never<ref>https://www.helpnetsecurity.com/2026/02/05/ddos-poland-suspect-arrested/</ref> ends<ref>https://www.justice.gov/usao-ak/pr/oregon-man-charged-administering-rapper-bot-ddos-hire-botnet</ref> well<ref>https://krebsonsecurity.com/2026/05/alleged-kimwolf-botmaster-dort-arrested-charged-in-u-s-and-canada/</ref>.

==References==

[[Category:Cyberattacks]]
[[Category:Skidding]]

MadelynWith5Ns

2026-08-12T05:50:39Z

107.115.17.107: Level 2 header

{{Bot Developer
| title1=MadelynWith5Ns
| image1=MadelynWith5Ns.png
| caption1=Madelyn's skin
| location=United States<ref>https://namemc.com/profile/MadelynWith5Ns.1</ref>
| notable_projects=[[Starbot]] and [[BotKit]]
| group_affiliation=
| programming_languages=[[Wikipedia:Java|Java]] and [[JavaScript]]
}}
'''MadelynWith5Ns''' (previously known on [[Kaboom]] as '''TFTWPhoenix''') was a Kaboom bot developer who alternated between [[Mineflayer]], [[minecraft-protocol]], and [[MCProtocolLib]] quite frequently. They mainly worked on [[Starbot]].

==References==

[[Category:Players]]
[[Category:Bot devs]]
[[Category:Inactive]]

Bungee-spoofing attack

2026-08-12T05:49:44Z

107.115.17.107: Switch to level 2 and 3 header (== and ===)

{{Technical}}
'''Bungee spoofing''' is an attack against unfirewalled [https://www.spigotmc.org/wiki/about-bungeecord/ Bungeecord] in which a player sends falsified player [https://github.com/SpigotMC/BungeeCord/blob/2e729325be2a4486adc0819cc03779e896ca0108/proxy/src/main/java/net/md_5/bungee/ServerConnector.java#L116 forwarding data] (sent as part of the host field in the [https://minecraft.wiki/w/Java_Edition_protocol/Packets#Handshake Handshake packet]) to the backend server. Common targets for falsification are server owners, staff members and others with special permissions.

==Solutions==

While the following sections discuss possible issues with the following solutions, please note that these are entirely theoretical and have not been tested, and to the author's knowledge, have not been exploited in the wild. All of these theoretical attacks require [[Wikipedia:Sniffing_attack|sniffing attacks]], and as such they are not practical in the majority of cases.

[https://github.com/lucko/BungeeGuard BungeeGuard] is a BungeeCord, [https://spigotmc.org/ Spigot] and [https://spongepowered.org/ Sponge] plugin developed by [https://github.com/lucko/ lucko] which attempts to solve this problem by adding a secret token to the end of the player forwarding data.

This works for most setups, but if the backend and frontend (the proxy) servers communicate over the [[Wikipedia:Internet|Internet]], it can be intercepted with a sniffing attack as the Handshake packet is not [[Wikipedia:Encryption|encrypted]] and the token is sent in plaintext. It may additionally be possible to perform a [[Wikipedia:Timing_attack|timing-based side-channel attack]], as the function responsible for checking the token may not always execute in constant time.

As such, for backend and frontend servers which may only communicate over the Internet, it is recommended that a [[Wikipedia:Firewall_(computing)|firewall]] is configured for every backend server that listens on a public
[[Wikipedia:Virtual_network_interface|network interface]], or communications are done exclusively [[Wikipedia:Virtual_private_network|virtual private network]] providing encryption.

===Velocity===

Another possible solution is to use [https://papermc.io/software/paper/ Velocity]'s modern forwarding, which uses a [[Wikipedia:HMAC|HMAC]] to verify player data sent in a [https://minecraft.wiki/w/Java_Edition_protocol/Packets#Plugin_Message_(clientbound) Login Plugin Message].

It may be vulnerable to a [[Wikipedia:Replay attack|replay attack]] as the Login Plugin Message packet is unencrypted on offline-mode servers, like those behind frontends like Velocity. As HMACs only serve to verify the authenticity of the attached data, the data they verify is not encrypted in any way and can be inspected by a network attacker.

Proxies like Velocity and Bungeecord must have backends configured in offline-mode, otherwise they will not be able to implement features like [https://www.spigotmc.org/wiki/bukkit-bungee-plugin-messaging-channel/ backend <-> frontend plugin messages] and [https://minecraft.wiki/w/Commands commands] running on the frontend.

Even though Velocity's modern forwarding is a considerable improvement over both Bungeecord and Bungeeguard, virtual private networks or local networks remain the most secure solution. Additionally, configuring firewall rules to deny packets to your backend server's port from all [[Wikipedia:IP_address|IP addresses]] that do not belong to your frontend, if you are unable to bind on a local address.

[[Category:Exploits]]

Skids

2026-08-12T05:48:53Z

107.115.17.107: Level 2 header

'''Skids''' are often inexperienced [[Kaboom]] players and developers with an inflated [[Wikipedia:Egoism|ego]]. Someone who uses code from another project without respecting the project's [[Wikipedia:Software_license|license]] is also a skid. Sometimes, they may also suffer from [[Severely fatal autism]], but not all skids suffer from this and not all SFA sufferers are skids.

==Skidbots==

Skidbots are bots developed or co-opted by skids. They usually barely work, or spam chat with commands or messages.

[[Category:Kaboom]]
[[Category:Skidding]]

IP Masking

2026-08-12T05:47:06Z

107.115.17.107: Level 2 header. Level 1 is title

'''IP masking''' refers to the practice of replacing real [[Wikipedia:IP addresses|IP addresses]] with psuedorandom addresses, with the same original address producing the same psuedorandom address. This practice allows for increased player privacy on [[Kaboom]] and [[Kaboom Clones|clones]] while still allowing for the accounts of a single IP address to be identified.

==[[Wikipedia:Network_address_translation#One-to-many_NAT|SNAT]]==
This is the most common method of IP masking, as it is the method employed by [[Kaboom]]. Usually, this is done via [[Wikipedia:iptables|iptables]], but similar programs like [[Wikipedia:nftables|nftables]] are able to achieve similar results.

The script to setup this particular method is [https://github.com/kaboomserver/framework/blob/master/config/iptables available in the kaboomserver/framework repo].

==Other means==

On some clones, due to technical limitations like being behind a proxy, not having administrator access or not having a firewall capable of this, the operators may choose to provide IP masking via [https://github.com/vectrix-space/ignite/ Ignite] mods or server/proxy plugins.

[[Category:Kaboom]]

GilligainIII

2026-08-12T05:45:12Z

107.115.17.107: Level 2 header. Level 1 header are the same size as title, 2 is a bit smaller, and that is only a section

{{Player
| image1=GilligainIII.png
| caption1=GilligainIII's skin
| notable_projects=[[GBot]]
| location=United Kingdom
| group_affiliation=[[ArtieWar]]
| programming_languages=[[Wikipedia:Java_(programming_language)|Java]]
}}
'''GilligainIII''' is the main developer of [[GBot]] (also known as [[GBot|Agent-G]]).

==Severely fatal autism==
{{Humor}}
GilligainIII and ArtieWar cope together as they both have a case of [[Severely fatal autism]], and find out (sometimes once a blue moon by looking at other people's or skidding) new kicks, crashes, bugs and random ideas every other day.

[[Category:Players]]
[[Category:Bot devs]]

JelloBot

2026-08-12T05:43:26Z

107.115.17.107: Level 2 header. I am maddy

{{Stub}}
'''JelloBot''' is a bot developed by [[ArtieWar]].

==POBot==
'''POBot''' was a legacy version of [[JelloBot]]. It barely worked.
JelloBot still contains remnants of POBot, like some package names still containing the legacy moniker.

[[Category:Bots]]