Login

u/Cev-API

r/mcservers r/AmIOverreacting r/MinecraftGameChannel r/MinecraftServer r/MinecraftAnarchy r/ChatGPT r/MinecraftServerFinder r/MinecraftPlugins r/ApexConsole r/minecraftclients r/MinecraftServerShare
▲ 20 r/minecraftclients

Just another video of me breaking blocks, nothing special.

Not OP. Not Creative. Survival. Wurst7-CevAPI

u/Cev-API — 11 days ago
▲ 5 r/minecraftclients

Just a video of me breaking blocks, nothing special.

Not OP. Not Creative. Survival. Wurst7-CevAPI.

u/Cev-API — 11 days ago
▲ 2 r/mcservers

Blockgame.lol [Anarchy] {Australia} {Two Servers} {Vanilla} {Modded} {18+}

Server One: blockgame.lol

  • Modded - Ecomony, Casinos, Datapacks, Resource Packs.
  • Paper 26.2 (Back+Forwards Compatible)

Details

  • No rules do whatever you want I guess!
  • No chat reports to prevent snitching
  • Anti-Xray is enabled to not break the economy
  • Anti-Flight is enabled as is tradition (no other anti-cheat)
  • ViaVersion & ViaBackwards - join the server with whatever version of Minecraft you want!
  • Lockable chests using named ominous trial keys, or temporarily using named normal trial keys. One key per chest.
  • Pickable chests using crafted lockpicks. Unlock using a lockpicking minigame!
  • Improved Grindstone you can now extract enchantments from items or transfer across material types
  • Improved StoneCutter you can now cut logs in the stonecutter
  • 80+ Forbidden Enchants/Potions that can be found throughout chests in the world. This is in addition to Vanillabean.
  • TPA, RTP, Home and Spawn commands, run /tphelp in game to find out more. Costs money to use!
  • Villager Resets allows you to cycle/reset villager trades as well as employ villagers into jobs.
  • Auction House, Economy & Casinos - buy, sell, gamble and auction items.
  • Data/Resource Packs: Vanillabean, Terralith, Incendium, NetherExpanse, NullScape

Server Two: vanilla.blockgame.lol

  • Totally Vanilla
  • Fabric 26.2 (Back+Forwards Compatible)

Details

  • No rules do whatever you want I guess!
  • No chat reports to prevent snitching
  • Anti-Flight is enabled as is tradition (no other anti-cheat)
  • Player Heads are dropped during PvP
  • ViaVersion & ViaBackwards - join the server with whatever version of Minecraft you want!
reddit.com
u/Cev-API — 15 days ago
▲ 5 r/minecraftclients

Vapor

Would anybody be interested in an open source version of Vape that ISNT injectable and runs like any other client? So a .jar file. It also has all of the Vape online crap removed and runs just as well as the original.

OpenGL only at this time. All injection crap is gone which also removes easier Vulkan.

Because if people are interested... I may just have something

Note OpenVapeCN (on github) exists. This is similar :)

reddit.com
u/Cev-API — 2 months ago
▲ 3 r/minecraftclients

Questions for the community as the developer of Wurst7-CevAPI

I make the Wurst7-CevAPI fork right, it currently supports 26.2 but I do make (and will publish today) a 1.21.11 version. I don't like to do that as its time consuming however its the most popular. My question to you guys is why?

Final question: I am planning on adding ghost modules within its own category within Wurst7-CevAPI so it will function like Vape or any other hack designed to work in servers with anti-cheat. Will that be popular? Especially given my client is primarily for anarchy servers.

^(Note: My client does have some features where it) ^(disables) ^(detectable hacks automatically already so if you can't move etc you enable it and you can etc, but until I add those modules nothing is explicitly designed to work with anti-cheats.)

Final final question: When it comes to paying for clients would you rather pay once and forget or would you prefer a subscription and free updates?

Final final question v2: Is there anything you would want to see added to my client?

reddit.com
u/Cev-API — 2 months ago
🔥 Hot ▲ 9.1k r/minecraftclients+2 crossposts

aio for getting the ick because a guy cheats at video games?

i (f21) have been talking to this guy (m21) for a couple days. today we're texting and he mentions playing apex. im excited bc that's my game, i love apex.

as u can see in the texts, he said he was gonna sit in the firing range and "fix his cheats." and im like there's no way he cheats on video games like what so im confused. i call him and he mansplains what a xim is and blah blah blah. im already not feeling it bc the entire phone call he's tryna justify cheating because it's fun. im not arguing with him on the phone im just like ok, cool but at the end of the day it's still cheating? that's weird to me but ok.

from what he explains ur tricking ur console into thinking you're still using a controller but you're actually on mouse and keyboard but able to have no recoil and better aim assist. he literally goes into the HISTORY of xims and how his isn't even that bad.

i don't like cheaters in any capacity so this weirds me out. i just think it's odd to go out of your way to cheat on a videogame. maybe im wrong for caring so much but it's literally just a video game. why cheat? so i get off the phone with him and text him like 15 minutes after the phone call with that message and i guess he really wants to argue. i should've just blocked him immediately after that message but i didn't. wish i did.

my way of thinking was probably extreme but if you can cheat on a game, what else can you cheat on? obviously he took offense to that. again, should've just blocked him instead of going back and forth. he obviously just wanted to argue and get under my skin bc i didn't wanna talk to him anymore.

then be brings up my ex and OUCHHH that hurt.

backstory to that: we were on the phone a couple days ago and we talked about our past relationships. i opened up to him about my ex discovering his sexuality and exploring with other people. he told me about his ex girlfriend being (tw) >!abusive towards him, using him for money and cheating on him.!< it turned into a venting session but i didn't mind.

maybe i was wrong for caring so much that he cheats at a video game, but also... why cheat? i should've just blocked him immediately after the phone call and been a loser that ghosts people.

edit 30mins after posting: yes this is real. yes ive been cheated on before (by a gamer nonetheless), no im not karma farming, yes im in therapy and on medication, yes i know the comparison was extreme which i mentioned in my post. y'all are funny as hell. yes i have his in game username, yes i will report him. he plays overwatch and apex with the xim as far as i know. cracking up reading these comments and no longer crying because what he said did really hurt me LOL.

u/BubbleMira — 2 months ago
▲ 109 r/minecraftclients

No nether roof, no worries!

Releasing this soon as a supplement to a private method my colleagues and I have to traverse the nether roof on some servers that block it.

This isn't baritone and is simply a part of Wurst.

u/Cev-API — 3 months ago
▲ 19 r/minecraftclients

How do they have so many totems?

Vanilla survival, 26.2, no server mods/plugins, Fabric. Not OP. 60+ totems?

Oh right, Wurst 7 CevAPI :)

u/Cev-API — 3 months ago
▲ 8 r/minecraftclients

Lots of malware on this subreddit. Getting kinda stupid.

https://preview.redd.it/yy4b10x3zibh1.png?width=1367&format=png&auto=webp&s=5754a8c2622f81023e6fc536bbdc3ea5c530ab25

https://pastebin.com/NgpSYU1g

https://pastebin.com/UEkRFDtZ

Both malware, the same malware.

- CONFIRMED FINDINGS (only behavior with direct evidence):

- Minecraft session token access: The class com/github/sxxxLnjpVycd reads the access token, username, and UUID via Minecraft’s method_1674/1676/44717 and constructs a JSON string containing these fields.

- JSON payload assembly: The same class builds a JSON object with keys "mcInfo", "prefireId", "userId", "tag", "domain", "gameDir", "mcUsername", "mcUuid", "env", and includes the access token.

- C2 domain resolved from blockchain: Using Polygon RPC calls, the mod resolved the domain "thisisafalsepositive.st" from a smart contract. This domain is used to construct exfiltration endpoints.

- Exfiltration endpoints: The code assembles URLs to POST to /shard/prefireMc (beacon) and /shard/submitMinecraftLog (log exfil), and GET from /cdn/e/3b8f6d2a9c1e (stage-2 payload).

- Process execution: Multiple classes use ProcessBuilder to spawn system processes, including running PowerShell to read Spotify window titles, and executing a self-extracted Python runtime.

- AES decryption pipeline: Method qavzPggg in com/github/hnzqWRzYq performs full AES decryption with KeySpec+IV+doFinal, used to decode downloaded stage-2 content.

- Insecure TLS: Class a2wQfg7RP$xMcRQno implements a trust-all X509TrustManager that accepts any certificate, disabling TLS validation.

- Self-locating JAR + process spawn: Two classes resolve their own JAR path and spawn child processes (Dropper pattern).

- XOR+Base64 string obfuscation: Multiple methods combine XOR byte manipulation with Base64 encoding/decoding to hide strings at runtime.

- Silent exception swallowing: 23 methods catch Throwable with empty handlers, concealing error evidence.

Scanned with: https://github.com/cev-api/Java-Triage

Note: I have updated the scanner beyond that of github and even that report, it better handles fake apps that have features but still is malicious.

reddit.com
u/Cev-API — 3 months ago
▲ 21 r/minecraftclients

IS (insert random client name) A RAT? Well lets figure it out!

Hello! I made a tool called Java-Triage for checking sketchy Java jars and its designed especially for Minecraft mods.

Most people who get sent a client only have a .jar file and no idea what to do with it, so the basic flow is:

  1. Download CFR, which decompiles the jar back into readable-ish Java.
  2. Download my Python script.
  3. Install Python if you do not already have it (v3.10).
  4. Run the script with the jar in the same folder.
  5. Read the report and look for webhooks, token stealing, payload downloads, weird obfuscation, Discord/Telegram exfil, persistence, etc.

Repo:
https://github.com/cev-api/Java-Triage

It can output JSON and HTML reports with all the evidence for or against it being malware. The JSON report you can upload to an AI to parse/give back meaningful/clearer information if you don't understand the HTML report.

It is a Python script instead of an exe on purpose. I would rather people can actually read what it does instead of downloading yet another random binary while trying to check if another random binary is malware. You could compile it with PyInstaller if you really wanted an exe, but I am not shipping it that way.

For Minecraft Java malware specifically, this is built above and beyond any other available scanners. It is made for actual Minecraft mod malware, obfuscation, token stealing patterns, dropped payloads, and the kind of dumb garbage that gets passed around modding communities.

Note that Virus Total is **NOT** for Java malware or anything to do with minecraft token/session theft. It will likely **NOT** find anything no matter how fucking obviously malicious it is.

Note that this will not work perfectly on every jar, some people use HEAVY obfuscation that my app isn't designed to bypass. Basically if its that obfuscated, I wouldn't be trusting it anyways.

Also made Token Protector:
https://github.com/cev-api/Token-Protector

That one is a Fabric mod that protects your Minecraft session token from malicious mods. It gives fake token data to mods trying to read it while still letting multiplayer, skins, and Realms work normally.

I tested it against every practical Minecraft mod-side token stealing method I could throw at it, including getters, reflection, Unsafe, MethodHandles, authlib hooks, header probing, and classloader bypass attempts. They got fake tokens.

It should be on Modrinth soon, just waiting on approval.

u/Cev-API — 4 months ago
▲ 24 r/minecraftclients

Need help finding the name of this client?

Hey guys I found this client screenshot and I really want to know what it is? CAN NE 1 HELP MI?

u/Cev-API — 4 months ago
▲ 3 r/minecraftclients

Personal opinion on Wurst7-CevAPI (A Wurst Fork)

AMAZING

WOW NOSTALGIA!

WHATS THIS?

WOW GREAT!

I think its amazing personally, the developer seems like a great down to earth kinda guy and he's always developing and maintaining the fork almost daily! Wow! He adds things based on request too, like he recently added Backtrack and an NBT size counter for helping with duping. Amazing! Wow!!

I also hear he's very handsome. I have tried 100 other clients and I rank this one #1 with the original Wurst a close 3rd.

The only problem with this hack is that its not 100% undetected by Grim so I can't fly around, I also can't get a million roblux on DONUTSMP. Very disappointing, I think Meteor can do this but I am not sure as I have not really used any other clients before today.

(This is satire, I am sick of people posting about shit they've 'discovered' when they're clearly the developer)

OH BUT WHY USE WURST ITS SHIT WAAAAAAAAH SHOULDA MADE A METEOR PLUGIN WAAAAAAAH!

I like Wurst, why don't you make a plugin for it instead of meteor for once? https://github.com/cev-api/Wurst-Addon-Template

❤️

I also develop the following:
https://github.com/cev-api/VoxelMap-x-SeedMapper (Voxel map with chunk trails and seed mapping)
https://github.com/cev-api/SeedMapper-CevAPI (SeedMapper but better)
https://github.com/cev-api/UI-Utils-26x-CevAPI (UI Utils but with auto duping, macros and other wacky features)
https://github.com/cev-api/LootProbe (Generate an entire servers chests and loot on your own PC for recon)
https://github.com/cev-api/Java-Triage (Scan Minecraft clients for malware)
https://github.com/cev-api/MineGames (Gambling plugin for paper)

ANYWAYS USE MY HACK ITS FREE AND OPEN SOURCE THANKS HERES THE WIKI LINKS:

reddit.com
u/Cev-API — 5 months ago