Hawk Anticheat (MC 1.7.10 & 1.8.8)

This update allows users to use ProtocolLib if they wish to handle both 1.7 and 1.8 clients. It is a soft dependency, so ProtocolLib is not required unless you are running a server which allows both 1.7 and 1.8 clients to join. Slight changes have occurred between these versions which cause the anticheat to false flag. Using ProtocolLib is recommended so that Hawk can easily detect the player's protocol version and apply the appropriate changes to avoid false flags. Happy holidays! NOTE: Improve inventory handling NOTE: Improved InventoryActions NOTE: Improved Tickrate check NOTE: Slightly improved Speed and Phase NOTE: Rewritten FightMulti check NOTE: Interaction checks false less while riding vehicles NOTE: Improved FabricatedMove NOTE: Changed flag messages for EntityInteractReach and EntityInteractDirection checks FIXED: Item use desync when dropping item FIXED: Fixed ItemUseSpeed false when dropping and using items rapidly FIXED: Command permission issue FIXED: Some Speed false-positives with bows and consumables caused by lag FIXED: Cocoa block falses on 1.8 bukkit FIXED: Carpet movement false flags FIXED: MultiAction falses FIXED: Drinking water bottle throws error in console

NOTE: Rewritten most of the Speed check. NOTE: Improved error messages. NOTE: FightSpeedConsistency is now disabled by default. NOTE: FightHitbox check (disabled by default) can no longer cancel. The direction used for comparison is now retrieved from the move after the attack, thus it is not possible to cancel the attack. This has been done to improve checking accuracy. NOTE: Renamed FightDirectionApprox to EntityInteractDirection NOTE: Renamed FightReachApprox to EntityInteractReach FIXED: Getting permanently stuck when teleported into a block or if a block's AABBs update within the player's bounding box. FIXED: Sprint-jumping on ice causes Speed false flags. ADDED: InventoryActions check.

NOTE: Improved teleportation handling. NOTE: Improved Strafe check. (This is still disabled by default) NOTE: Rewrote SprintDirection check. NOTE: Improved Fly false flags with cobwebs. Now that I'm in college, development will be slower. I'm working hard to rewrite a few movement checks; hang on there!

FIXED: SyntheticMove false flags while in vehicle

REMOVED: BlockBreakHitbox REMOVED: BlockInteractHitbox ADDED: BlockBreakDirection ADDED: BlockBreakReach ADDED: BlockInteractDirection ADDED: BlockInteractReach ADDED: Strafe check. Disabled by default (will trash yet another handful of killauras and aimbots) ADDED: SyntheticMove check (Thanks, Havesta) ADDED: SyntheticBlockInteract check (Thanks again, Havesta) ADDED: AimbotConvergence check FIXED: Fixed some client/server desync issues when rolling back cancelled block interactions NOTE: Renamed BlockBreakSpeed to BlockBreakSpeedSurvival NOTE: Renamed AutoPotion check to ItemSwitchSpeed NOTE: Renamed ImpossiblePlacement to InvalidPlacement NOTE: BlockBreakSpeedSurvival has been rewritten NOTE: AimbotHeuristic check is now disabled by default NOTE: Extended creative reach in FightReachApprox from 4 to 5 blocks NOTE: Improved FightDirectionApprox accuracy by rewriting the hit validation algorithm

FIXED: Usage msg for punish argument: <list> should be <'list'> and <info> should be <'info'> NOTE: Slightly reduced movement false-positives in PvP under certain conditions ADDED: More options for the LagCompensator FIXED: An NPE thrown while debugging LagCompensator ADDED: FightMulti check REMOVED: "cancelSameTick" option in FightSpeed check NOTE: Hawk will now prevent entity/world interaction for a player while they are teleporting ADDED: "/hawk force <player>" command to force checking on a player FIXED: AntiVelocity (basic) false-positives when launching player against steppable block FIXED: An IAE thrown in FightAccuracy when players are in different worlds NOTE: ClickDuration check now disabled by default ADDED: "/hawk unfilteredflags" command for easier debugging NOTE: Reduced Inertia false-positives when jumping against a fence or wall at an angle

This update patches a CRITICAL crash exploit in Hawk that exists in versions 1902 to 1906. Please update your installation of Hawk for continued security for your server. FIXED: an exploit in Hawk which could crash the network thread. FIXED: some speed false positives in flowing water.

ADDED: PunishmentScheduler (a.k.a. a JudgementDay) module. Documentation coming soon and will be posted on the GitHub wiki. ADDED: FightSynchronized check again NOTE: Improved Inertia check NOTE: Renamed AntiVelocity check to AntiVelocityBasic ADDED: AntiVelocityJump check NOTE: LagCompensator module will now lag compensate more entity types FIXED: Index Out of Bounds Exception in Fly check NOTE: AimbotHeuristic is now disabled by default. It will be improved soon. ADDED: New configuration option for command cooldowns. Prevents Hawk from executing the same command from the same check for the same player in a short period of time. NOTE: Slightly modified behavior of the "vl" argument for the /hawk command. Without providing a check argument, it will list the player's top 5 violated checks with their VL. ADDED: New command argument: "exempt"

WARNING: This update introduces a new "checks.yml" file for the checks' configurations. To preserve your configurations, you must copy/paste everything under "checks" from your "config.yml" to a new file named "checks.yml". Otherwise, your checks' configurations will be reset. NOTE: Configuration of checks have been moved to "checks.yml" NOTE: Made Phase check slightly more strict FIXED: Fly rubberbanding back to previous location right after teleportation ADDED: ItemUseSpeed check FIXED: Possible critical bugs in PacketListener NOTE: Improved compatibility with custom Spigot JARs FIXED: A possible NPE when processing dig packets NOTE: Added debug config option for LagCompensator

ADDED: Ability to communicate with BungeeCord networks. You'll need HawkAlertsBungee for this, which is located at https://github.com/HawkAnticheat/HawkAlertsBungee and will soon be uploaded to this site. NOTE: Better support for slimeblocks FIXED: A SwimVertical false positive in flowing water and lava NOTE: Reduced SwimVertical false positives when exiting water ADDED: ClickDuration check FIXED: IOException on first start ADDED: FightSpeedConsistency check NOTE: Redesigned the aimbot check; not a full rewrite ADDED: "characterEncoding" option in sql configuration NOTE: Renamed Aimbot check to AimbotHeuristic ADDED: AimbotPrecision check NOTE: Redesigned FightReachApproximate so that it now computes the shortest distance to the AABB. Default reach is now 3.1, default reach for creative is now 4.9 NOTE: Disabled FightHitbox by default NOTE: Default port for the SQL module has been changed from 3389 to 3306 NOTE: FightHitbox and Phase check now gets the player's hitbox/collisionbox from NMS NOTE: Slightly modified Tickrate check

These past updates had left liquid movement almost completely ignored. Allowing cheating to occur under water/lava. This update introduces checking while being submerged in liquids. Be aware that this update introduces some false positives in flowing liquids. I will be working hard to fix that by the next update. Besides that, it's just improvements everywhere else. FIXED: Speed false positive when sprinting right after teleportation. ADDED: Boolean configuration option "ignoreItemUse" under Speed check. Enable this to prevent false positives due to desync issue between client and server. FIXED: Speed check data not clearing for player on disconnect. FIXED: A jesus/water-walk bypass. FIXED: Movement false positive when knocked back while inside water. REMOVED: LiquidExit check. It is unnecessary since the framework now supports liquid/swimming mechanics. NOTE: Speed check now checks players in liquids. NOTE: Slighty modified Speed check so that it will always flag when the discrepancy exceeds the threshold. ADDED: Boolean configuration option "resetDiscrepancyOnFail" under Speed check. ADDED: SwimVertical check. FIXED: Speed false positive when sneaking and using item. NOTE: Slightly adjusted hitbox for FightHitbox check to better represent the true client-side hitbox. FIXED: Movement false positives while sleeping in bed. REMOVED: Check IDs. NOTE: Changed rubberbanding behavior of TickRate check.

NOTE: Improved VL system for Speed check NOTE: Slightly improved TickRate check NOTE: Renamed TickRate config option "rubberbandOnFail" to "rubberband" NOTE: Added Speed config option "vlFailDiscrepancyFactor"

FIXED: Configuration values for "tickrate" should not be listed under "clockspeed" ADDED: SprintDirection check FIXED: Yet another knockback false-positive FIXED: Small thread management issue with async checking REMOVED: FightCriticals check. 1) Critcals hacks should already be handled by movement checks. 2) Too many false-positives. NOTE: Slightly improved Speed check during PvP. This should impact a handful of kill-auras out there.

ADDED: Anti-velocity check FIXED: More knockback false positives I'm really proud to release this anti-velocity check. It isn't perfect, but I haven't found many false-positives so far, and it seems accurate. By default, this check is disabled. If you want to try it out, you should enable it under the configuration. Just look for "antivelocity" under "checks". Don't worry! The configuration is auto-generated now.

FIXED: Async thread not terminating on plugin disable FIXED: Ladders and vines false-flagging for small-hop FIXED: Some false-positves regarding knockback

You can now move all the checking to a separate thread to alleviate load from the network thread. Just enable "asyncChecking" in the configuration file. Use at your own risk. Hawk will not prevent cheating when this option is enabled. You will not receive any support for any bypasses you encounter while this option is enabled.

The entire framework has been rewritten along with most checks. The project is now open-source, so anyone can contribute. Users upgrading to at least this version should regenerate their configuration. The configuration is now automatically generated.

- ADDED: Command to exempt players from checks - ADDED: Cracked Vape check - Renamed Nuker check to Creative Fastbreak check - ADDED: Survival Fastbreak check - Fixed an NPE in 1.7.10 servers caused by interacting through blocks with small hitboxes. There has been changes to the configuration file. Under notifications, you may want to add a line for survival nuker, like this: Code (Text): nukerSurvival: "&7%player% failed survival block break speed. VL: %vl%" Add this anywhere in the config: Code (Text): #Cracked Vape detection (hawk.bypass.vape) vape: #Enable vape detection? enabled: false Change this... Code (Text): #Creative Nuker | Fastbreak | creativebreakspeed (hawk.bypass.creativebreakspeed) nuker: #Enable nuker check? (this is for creative only) enabled: true commandsToRun: - "20:0:hawk kick %player% Breaking blocks too quickly" - "" ...to this: Code (Text): #Creative Nuker | Creative Fastbreak (hawk.bypass.creativebreakspeed) nukerCreative: #Enable fastbreak check? (this is for creative gamemode only) enabled: true commandsToRun: - "20:0:hawk kick %player% Breaking blocks too quickly" - "" #Survival Nuker | Survival Fastbreak (hawk.bypass.survivalbreakspeed) nukerSurvival: #Enable fastbreak check? (this is for non-creative gamemode only) enabled: true commandsToRun: - "20:0:hawk kick %player% Breaking blocks too quickly" - "" An automatic config generator/updater is being worked on for the official release. This will make manual config editing completely unnecessary in the future.

- FIXED: A Nofall false positive. - Possibly optimized move checking a bit. - ADDED: Ability to toggle in-game GUI via config Make a new line anywhere in your config with this in it (preferably near the beginning of the config): Code (Text): gui: true

- REMOVED: Enderpearl wall-glitch fix (no, this fix isn't for enderpearl glitching/abusing) - ADDED: Support for SmashHit asynchronous hit detection plugin. - REMOVED: ProtocolLib as a required dependency (if running 1.7.10 - 1.8.x) - ADDED: Permission "hawk.bypass.*" - FIXED: NoClassDefFound (IBlockAccess) error in 1.7.10 when interacting with blocks - FIXED: A few more NPEs when reloading When using SmashHit, it is imperative that you set the max-reach to 10 or more in the SmashHit config to avoid bypasses. Do not disable SmashHit while Hawk is running. No changes were made to the configuration.

- FIXED: Command execution parser. - FIXED: Hawk fails to successfully start on 1.7 servers. - Nuker now checks for players in any gamemode; not just creative. - FIXED: A false positive when getting shot by a punch enchanted bow. - FIXED: A small command bug, in which running /hawk unmute/ban will reply twice if the target is offline. - Inertia can now cancel moves. Added "cancel" value under inertia in the configuration. Code (Text): #Inertia (hawk.bypass.inertia) (EXPERIMENTAL) inertia: #Enable Inertia check? enabled: false #Notify staff when player fails Inertia? notify: true #Notify every X violations notifyEveryX: 5 #Time interval to reset violations (in seconds) violationResetTime: 60 #INSERT START--------------------------------- #Cancel moves failing Inertia? cancel: false #INSERT END---------------------------------- commandsToRun: - ""

- FIXED: Trip glitch once again. - ADDED: Command to unmute/unban players from the chatflood check. - Hawk no longer kicks players interacting too far or moving in an illegal fashion. - ADDED: Simple API for exempting players from checks. This will soon be improved. - FIXED: Speed false-positives when using depth strider underwater. - Possibly fixed a nofall false-positive regarding teleportation. No configuration changes in this update.

- FIXED: Some notifications do not handle placeholders properly. - FIXED: Values in notifications are not rounded to 2 digits. - Improved the chat flood check a little bit. There are no changes to the configuration in this update.

- ADDED: JSON chat messages - FIXED: some NPEs and other exceptions - Jesus check now checks for players in creative mode too - removed some redundant code I added this to the configuration file near the violation messages: Code (Text): #Show verbose information when hovering over notifications & execute command when clicking notifications? #YOU MUST RUN A SPIGOT SERVER FOR THIS TO WORK enableJSONNotifications: false #Requires "enableJSONNotifications" to be enabled. Leave this blank to disable. Example usages: "kick %player%", "ss %player%" notificationClickCommand: ""

- Fight angle/reach violation system now behaves like NCP - ADDED: API which currently supports violation events - FIXED: False flags when walking over some slabs - Added more placeholders to command executor

I don't get why the last update post didn't update the jar. Let's see if it does anything now...

Wow! Excited for this new update! Sorry, I had to skip a few days. I'm cramming them all into this one. · ADDED: New flight check; replaces FlyA, FlyB, and Glide. · ADDED: Support for velocity events · ADDED: Support for jump/speed effects · ADDED: Colored notifications in console · REMOVED: FlyA · REMOVED: FlyB · REMOVED: Glide · FIXED: jumping on slimeblocks sets off v-speed false-positive · FIXED: cannot swim up a waterfall if on the edge · FIXED: jumping down slopes sometimes causes fly false-positive · FIXED: add blocks to passable ignore list: 1.8 fences, bed, daylight sensor, etc... · FIXED: walking up bed causes v-speed false-positive · FIXED: combat issue with kb The full version has gotten an additional interaction angle/raytracing check. I might implement it to the demo version in some time.

FIXED: Jumping on edge of block causes false-positive due to FlyA FIXED: Jumping off of edge of block causes nofall false-positive FIXED: Certain blocks not listed in passable ignore list FIXED: A glide false-positive FIXED: A FlyB false-positive FIXED: Lilypad/carpet issue on water