ExploitShield

Fixed UpdateChecker version comparison. Previously, ExploitShield could incorrectly notify administrators about available updates when the installed version was newer than the latest version. The version checking system has been improved to properly detect only actual updates.

Fixed a false positive issue in EQUIP_DUPE detection. Normal Helmet and Offhand shift-click actions are no longer incorrectly flagged as duplication attempts.

Payload protection has been improved with several internal validation updates. Changes: • Added strict UTF-8 decoding for REGISTER and UNREGISTER payloads to reject malformed data. • Added validation for empty payloads. • Added validation for the total length of REGISTER/UNREGISTER channel names. • Added pattern-based validation for plugin channel names. • Replaced repeated REGISTER/UNREGISTER channel comparisons with a cached lookup set. • Reused UTF-8 decoders with ThreadLocal to reduce object allocations. • Refactored payload validation logic to reduce duplicate code. • Minor internal performance and maintainability improvements.

ExploitShield 6.0.3 Update Changes: - Added full Java 17+ compatibility (previously required Java 21+) - Improved Netty crash prevention and packet handling - Fixed potential memory leak issues - Improved listener cleanup and stability - Optimized internal protection systems ExploitShield now works on servers running Java 17, Java 21 and newer versions.

Piston Bug -> Fixed

Critical Packet Listener Fix Fixed a critical issue in the JoinPacketListener where the WrapperPlayClientPluginMessage was being instantiated for every incoming packet instead of only PLUGIN_MESSAGE packets. As a result, when players performed unrelated actions (such as right-clicking, which sends a USE_ITEM_ON packet), ExploitShield attempted to parse those packets as Plugin Messages. This corrupted the packet decoding process and could disconnect players with errors such as: Internal Exception: io.netty.handler.codec.DecoderException: Failed to decode packet 'serverbound/minecraft:use_item_on' The listener now validates the packet type before creating the wrapper, ensuring that only PLUGIN_MESSAGE packets are parsed. This prevents packet stream corruption, eliminates unexpected disconnects, and significantly improves packet handling stability.

Place Fixes

Creative Exploit Supported Bug Fixes

CLICK_WINDOW Limiter Added

Log Fixed

Version 5.7.1 Changelog · Fixed duplicated PlayerDupeListener registration in the main class, which was causing unexpected behavior. · Fixed an issue in TabComplete debug mode that was causing excessive log spam. · Removed TabComplete debug mode to improve stability and prevent unnecessary console logging.

New: BadPackets Detection Expanded (A → Q) A completely new feature has been added! The BadPackets system now supports A to Q checks, significantly expanding exploit detection coverage and improving protection against advanced packet-based attacks. ️ Enhanced Protection Core Stronger, faster, and more reliable detection logic to keep your server safe from modern cheat methods. Inventory Abuse Detection Improvements (Minor Update) Inventory Abuse detection has received minor refinements for better precision and reduced false positives.

️ A minor bug in Toggle Alert has been fixed. A new feature has been added: When players join the server, all their information — including name, client brand, and version — will now be sent to players who have the following permission: exploitshield.joininfo

Fixed notification toggle system Fixed an issue in the duplication detection system

ExploitShield v5.5.0 - Major Update Big stability & security improvements in this release! We’ve pushed a powerful update that significantly improves anti-exploit protection and server stability. ️ What’s New? TAB_COMPLETE_CRASHER FIXED Fully patched a critical crash exploit related to tab completion abuse Improved input validation to prevent malicious packet-based crashes Server is now more stable against command-based exploits DUPLICATION SYSTEM UPGRADE Completely reworked duplication detection engine Improved inventory tracking accuracy Reduced false positives while increasing detection power Better performance under heavy player activity Smarter item signature & snapshot system PERFORMANCE IMPROVEMENTS Optimized chunk tracking system Reduced memory leaks in cleanup tasks Improved async safety handling Faster entity inventory analysis Stability Improvements Better synchronization between inventory events Improved vehicle & entity dupe detection logic Enhanced anti-spam protection system Overall This update makes ExploitShield: · ️ More secure · More stable · More accurate · More optimized Thank you for using ExploitShield! More powerful updates coming soon.

NEW SECURITY UPDATE - TabComplete Protection System ️ Added a completely new TabCompleteGuard module to improve server security against packet exploits and spam attacks. What’s new: Anti-Tab Spam System ➜ Cooldown system prevents rapid tab-complete spam Crash Protection ➜ Blocks oversized tab packets that could be used to crash clients/servers Smart Input Filtering ➜ Detects and blocks control characters and invalid inputs Unicode Spam Protection ➜ Prevents abuse using excessive unicode characters Structure Validation ➜ Detects malformed or suspicious tab payload structures Packet-Level Security Upgrade ➜ Deep integration with PacketEvents for safer packet handling --- ️ This update adds a brand-new protection layer against TabComplete-based exploits, spam, and crash attempts, making your server more stable and secure than ever.

AlertManager Bug Fixed

Plugin version in /es and /exploitshield fixed

· Improved packet validation system. · Added protection against invalid coordinates (NaN, Infinity, and out-of-range values). · Enhanced custom payload filtering for book-related packets. · Improved packet handling stability and null-safety. · Added debug exception logging support. · Fixed several packet filter edge cases and false detections.

PacketRateLimiter Fixed

️ What’s Fixed in This Update Critical Main Class bug fixed We resolved an issue in the core plugin class that could affect stability and initialization in some environments. What’s Changed Version tag removed from config files Old format: # ExploitShield 5.3.1 New clean format: # ExploitShield This makes config files cleaner and more flexible for future updates. Important Note This update contains no new features Only stability + cleanup improvements Recommended update for all servers

Changelog ExploitShield 5.3.0 - Performance & Detection Improvements · Removed a duplicate anti-duplication listener to improve internal efficiency · Improved overall performance and reduced unnecessary processing overhead · Enhanced false-positive reduction in detection system · Improved naming consistency across duplication-related modules · Optimized AlertManager and logging usage for better clarity and control · Refactored the main plugin class to improve code cleanliness and maintainability · Streamlined the core initialization process, enhancing readability and overall architecture structure

Fully rewritten StrictNBTInterceptor Added advanced packet validation system Added chat overflow protection Added illegal character detection Added creative inventory exploit checks Added click window item validation Added lore & display-name overflow checks Added PersistentDataContainer abuse protection Added malformed packet handling Better performance and cleaner packet pipeline This update massively improves exploit detection accuracy and packet security.

Completely rewritten Item NBT validation system Added full protection for enchants, attributes, and item flags Added PersistentDataContainer (PDC) abuse detection Added UTF-8 based overflow detection for all item metadata Improved BookMeta protection (pages, authors, titles, unicode abuse) Added illegal character filtering for all item components Added strict item stack size validation Enhanced lore & display-name overflow protection Improved serialized metadata analysis system Better detection of corrupted or malformed item data Fully rewritten Netty injection logic for safer pipeline ordering Improved crash + packet flood separation layers Higher accuracy with reduced false positives Better performance and cleaner validation pipeline This update significantly strengthens item-level security and improves packet-layer stability through a redesigned Netty injection system and enhanced NBT inspection logic.

After 88 days of offline development during internet restrictions, ExploitShield has received one of the biggest updates in its history. This is not just a normal update. A large part of the plugin has been rewritten, optimized, and heavily improved with new protections, exploit detections, stability upgrades, and smarter packet handling. Highlights: · Massive internal improvements · Better exploit detection system · Improved packet protection · Advanced anti-crash handling · Optimized performance · Improved stability under attacks · Multiple hidden security upgrades · Better compatibility with modern server versions · General cleanup and rewrite across multiple systems A lot changed during these 88 days. Some improvements are intentionally undocumented for security reasons. Thank you for supporting ExploitShield More updates are coming.

ExploitShield v4.9.0 – Update Notes Release Type: Major Packet Handling & Feature Update Previous Version: 4.8.0 Release Date: [Insert Date] Key Improvements & Changes · Enhanced Packet Rate Limiting (Smart Adaptive System) · Reworked PacketRateLimiter with SmartCounter system for adaptive packet limits. · Now dynamically adjusts limits based on player ping to reduce false positives for high-latency users. · Added new packet types to rate limits: FLYING, LOOK, BLOCK_PLACE, and BLOCK_DIG. · Burst tolerance added to allow short spikes of activity without triggering alerts. · Stale counters automatically cleaned after 30 seconds of inactivity to prevent memory leaks. · Anti-Overwrite Bug Fixed · Previous versions risked overwriting configuration values on server restart. · v4.9.0 preserves user-modified config values while still allowing first-run defaults to be loaded. · Command Improvements · /exploitshield profile <PlayerName> command added to easily inspect player profiles and statistics. · Existing /exploitshield command remains fully functional with new subcommand support. · Alerts & Logging Enhancements · Packet flood alerts now clearly indicate the specific packet type causing the rate limit. · Improved console messages for better readability and debugging. Internal / Backend Updates · PacketRateLimiter rewritten to support adaptive, ping-aware rate limits. · SmartCounter system implemented for fine-grained per-packet tracking. · Cleanup routines added to prevent stale data accumulation. · All new logic remains fully compatible with ProtocolLib and PacketEvents integrations. Benefits of v4.9.0 · More reliable anti-flood detection with lower false positives. · Maintains server stability while allowing normal player behavior even under high latency. · Cleaner, safer, and more efficient packet tracking. · Commands and configuration handling are now more user-friendly and robust.

Big improvements and exciting new features! What’s new in v4.8.0: · Per-player Exploit Profiles: Each player now has their own individual exploit profile for better monitoring. Use /exploitshield profile <PlayerName> to view. · ️ Revamped GUI: The plugin’s interface has been redesigned for a cleaner and more intuitive experience. · ️ Removed Metrics from Config: BStats metrics are now fully managed internally. · ️ Punishment Bug Fixed: Fixed issues with player punishments to ensure stability. · Command Crusher Fully Configurable: Customize command limits and responses easily. · Clean Activation & Load Messages: Improved readability and clarity of plugin messages. · Plugin Renamed: EZExploitFixer is now ExploitShield. · Updated Permissions: All permissions now use exploitshield. (e.g., exploitshield.alert) instead of the old ezexploitfixer.. · ️ Inventory Abuse Detection Fixed: Resolved detection issues for exploit attempts. Upgrade notice: This is a major update! Direct upgrade from v4.5.1 → v4.8.0 is recommended to enjoy all new features and fixes.

Bug Fixes

Update Highlights: · The GUI has been completely redesigned — now more detailed and user-friendly. · False positives reduced by 40%, currently less than 10% chance of false positives. · Duplication detection is now more accurate. · Dupes on chests of llamas, donkeys, horses, and any rideable mob with inventory are now fixed. · Update Checker issue has been resolved.

Fixed block update duplication detection configuration — now reads enabled correctly. Updated duplication command/status display to match plug & play config. Improved false-positive handling for block update duplication. Update now to make sure your server reads the new block duplication fix properly, with minimal setup required!

Fixed block update duplication detection configuration — now reads enabled correctly. Improved false-positive handling for block update duplication. Update now to make sure your server reads the new block duplication fix properly, with minimal setup required!

Major Update | 3.7.2 → 4.0.0 EZExploitFixer 4.0.0 introduces two new duplication listeners and a fully optimized plug & play configuration, designed to drastically reduce false positives while keeping your server safe instantly. Newly Covered Exploits: Chunk Teleport Duplication Boat & ArmorStand Duplication Block Update Duplication Container / Furnace / Brewing Stand Duplication Vehicle Duplication (Boat / Minecart) Multi-Player Simultaneous Duplication Detection Update now for stronger anti-duplication protection, smarter defaults, and minimal setup required — safer, smoother, and more reliable than ever!

New Feature: Strict NBT Interceptor This update introduces a new packet-level protection system to enhance server security against malicious or oversized NBT and custom payloads. Key functionalities include: · Player-Specific Alert System · Tracks each player’s suspicious packet activity. · First offense triggers a warning; second offense results in an automatic kick. · Custom Payload Monitoring (CUSTOM_PAYLOAD) · Inspects incoming custom payload packets for suspicious channels (e.g., containing nbt, payload, or book). · Checks payload size against a configurable maximum limit (default: 4096 bytes). · Cancels oversized or suspicious packets and alerts the player. · Creative Slot NBT Protection (SET_CREATIVE_SLOT) · Monitors items placed in creative mode slots. · Checks NBT data size against a maximum threshold (default: 1024 bytes). · Cancels packets with oversized NBT data and alerts/kicks the player accordingly. · Automatic Enforcement · Suspicious packets are automatically cancelled to prevent exploits. · Players exceeding thresholds are kicked to protect server integrity. · Failsafe Mechanism · Any unexpected errors in packet processing result in immediate packet cancellation and player kick to prevent potential exploitation.

Bug Fixed

Behavioral & Packet Analysis (Hamster Engine) · Real-time behavioral monitoring for suspicious player actions · Detects bot-like consistency & unnatural action frequency · Tracks Violation Levels (VL) with automatic decay for normal behavior · Alerts server staff on threshold violations (configurable) Netty Packet Flood Protection · Custom Netty handler injected per player to prevent packet flooding · Detects and blocks burst packets & abnormal rates · Automatic connection closure on extreme violations · Safe cleanup on player quit to prevent memory leaks Packet-Level Monitoring via PacketEvents · Monitors critical client packets: USE_ENTITY, CLICK_WINDOW, FLYING · Behavioral analysis without directly cancelling packets · Cancels packets only when critical thresholds are exceeded Safe Netty Utilities · Retrieves player channels reliably across server versions · Pipeline manipulation without crashes or version conflicts

Updated Checker : Fixed bug with new version detection Console Messages Improved : Cleaner and clearer messages on plugin enable

Command Updated : Tab Compeleter Added

Permission Update : Permission Bug Fixed And All Bypass Permission Removed

BUG FIXES | 3.0.0 ---> 3.0.2 NETHER_ROOF BUG FIXED ANIT_PHASE BUG FIXED

EntitySpam : Bypass Permission Removed

Major Update | 2.6.0 → 3.0.0 - Update checker improvements - New command crash protection system - Enhanced entity spam detection - Significant reduction in false positives - Expanded ProtocolLib-based protections - Improved /ezexploitfixer command functionality - Added protection against chat sabotage and abuse

Grief Bug Fixed GUI Updated (/ezexploitfixer gui)

A major update with extensive duplication protection! Two separate duplication listeners have been added, each designed to cover different types of duplication exploits. 1) DuplicationListener: - Piston Duplication - Sticky TNT Duplication - Slime Block Duplication - Hopper Duplication - Rate & Chain Limit Exploits 2) AdvancedDuplicationListener: - Offline Duplication - Creative Inventory Stack Duplication - Shift-Click Equip Duplication - Minecart / Boat Container Duplication - Chunk Activity Duplication Both systems are fully integrated into the plugin and provide a very high level of protection against duplication exploits. Additionally, an Anti Client-Attack / Anti-Cheat system has been added, making it significantly harder for cheat or attack clients to join the server. In some cases, joining with unauthorized or malicious clients is completely blocked. This update significantly improves server stability and exploit prevention.

Update 2.0.0 – EZExploitFixer EZExploitFixer v2.0.0 is here! This major update brings full Anti-Grief protection, stronger listeners, metrics tracking, GUI, and improved Discord Webhook alerts. Protect your server like never before! Key Updates · Anti-Grief System: Lava placement & flow control, block placement pacing, fully configurable in config.yml · Listener Improvements: All exploit listeners upgraded — performance & detection improved by up to 90% · Metrics & GUI: Track exploit counts live with /ezexploitfixer gui · ️ Enhanced Crash Protection: Teleport, movement, and large coordinate detection with asynchronous logging · Item & Inventory Protection: Item NBT checks on pickup, click, and held slot, plus creative inventory abuse detection · Discord Webhook: Fully configurable alerts for all exploit types including Anti-Grief events · ️ Config Upgrades: Granular control for every exploit, Anti-Grief, punishments, and metrics

EZExploitFixer 1.6.1 is a free, lightweight, and professional plugin for preventing exploits, dupes, crashes, and abuse on your Minecraft server. This version includes: Exploit Fixes: · Piston Duplication protection · Bed Explosion Dupe prevention · Ender Pearl Glitch fix · Nether Roof Glide prevention · Inventory Abuse Detection · Item Salvage Exploit fix Crash Protection: · Position Overflow / Movement Crash protection · Book NBT Crash protection · Sign Crash Payload protection Packet Filter (requires ProtocolLib): · Filters malicious packets: Movement, Book, Sign · Configurable actions: KICK / CANCEL / ALERT Alerts System: · In-game alerts for admins · Discord Webhook support for remote notifications Metrics & GUI: · Tracks all exploits in real-time · Displays stats in a simple GUI · Auto-saves metrics every 5 minutes Other Features: · Strict Mode: Block or adjust suspicious actions · Fully configurable via config.yml · Detailed permission system for fine-grained control · Lightweight & high-performance, suitable for large servers · Compatible with Minecraft 1.17+, Vault, and WorldGuard Notes: · Packet Filter requires ProtocolLib installed. · Version 1.6.1 includes security improvements and better alert/metrics handling.

English : EZ ExploitFixer v1.4.0 is a major update from v1.0.0 with significant improvements and new features: - Added Ender Pearl glitch prevention. - Added Item Salvage exploit protection. - Improved Nether roof glide fix. - Updated piston, hopper, chest, and bed dupe protections. - Strict Mode for full exploit prevention. - Color-coded console logs for easier monitoring. - Enhanced logging of suspicious actions. This version is fully compatible with Spigot/Paper 1.17.1+ and comes with a complete overhaul for better performance and security. Upgrade now to keep your server safe from common exploits! فارسی : EZExploitFixer v1.4.0 یک آپدیت بزرگ از نسخه 1.0.0 است با بهبودهای چشمگیر و ویژگی‌های جدید: - اضافه شدن جلوگیری از Glitch های Ender Pearl. - اضافه شدن محافظت در برابر Item Salvage Exploit. - بهبود رفع مشکل Nether Roof Glide. - بروزرسانی محافظت‌ها برای piston، hopper، chest و bed dupe. - حالت Strict Mode برای جلوگیری کامل از اکسپلویت‌ها. - لاگ‌های رنگی در کنسول برای مانیتورینگ راحت‌تر. - ثبت بهبود یافته حرکات مشکوک بازیکنان. این نسخه با Spigot/Paper 1.17.1+ کاملاً سازگار است و بازنگری کامل برای عملکرد و امنیت بهتر دارد. همین حالا آپدیت کنید تا سرورتان در برابر اکسپلویت‌های رایج محافظت شود!