I haven't done this, but I've heard how it is done and have had proof that it works.
You need your own server and on said server you must have the /login plugin + CCLogger (which logs all commands).
1. Get the suspect to join your server.
2. Tell him to register, say it's a cracked server and you must have
'/login' just in case someone logs in with your name.
3. Once he is registered go into your server files.
4. Look for the
'commands.log' file and search for the suspect typing
'/login', it should show what he typed.
5. Once you have found it, wait for him to go offline.
6. Login on a cracked launcher with his account name and use /login [PASSWORD].
7. ???????
8. PROFIT!
---

Originally Posted by
Electro Beat
Change username to the owners name
turn on a spammer that spams /op yourname
Connect to the server should make it send the command before you get the /login thing
Idk if it works
Patched with latest Bukkit.