How exactly is this person hacking?

Not sure if this is the right place to post this, but...

I'm playing on a 1.21.11 Minecraft server on play.hosting, meaning it's a paper server, yet a player has found a way to cheat without anything showing up in the logs. They can summon any item they want into their inventory (usually stacks). There is no way they've found a duplication glitch/ got them ethically because their stats don't match up.

The weird part is they don't have op, we have anti-cheat and anti-x-ray enabled. Originally, we believed it was a client-side inventory editor, but the server validates every packet; you can't just "tell" the server you have a stack of something, or they would need access to the console(which I am quite sure they don't have). There is currently no known force op exploits unless they have somehow discovered one. None of their logs shows suspicious activity/ 3rd party mods either.

My dilemma is that to ban this player, we need concrete proof to overthrow the 'duplication glitch' narrative. Is there any way to check how this person is cheating/hacking?

submitted by /u/Lapiz_Lazooli
[link] [comments]

from hacking: security in practice https://ift.tt/UZBlTWX