CheckHacks

<div align="center"> <img src="https://i.imgur.com/4Shm5oc.png" alt="CheckHacks" height="60" /> **Catch hackers by their mods. 100% server side, no client mod needed.** It uses the **Sign Translation Vulnerability** (MC-265322), the same trick DonutSMP uses to catch cheaters. Signs pop up for just a split second, too fast to actually read. (https://img.shields.io/badge/version-1.3.0-blue.svg?style=for-the-badge)](https://github.com/Branduzzo/CheckHacks/releases) (https://img.shields.io/badge/platform-Paper%20%7C%20Spigot-orange.svg?style=for-the-badge)](https://papermc.io/) (https://img.shields.io/badge/minecraft-1.21+-green.svg?style=for-the-badge)](https://www.minecraft.net/) (https://img.shields.io/badge/java-21+-red.svg?style=for-the-badge&logo=openjdk&logoColor=white)](https://www.oracle.com/java/) (https://img.shields.io/badge/license-MIT-yellow.svg?style=for-the-badge)](LICENSE) (https://img.shields.io/github/downloads/Branduzzo/CheckHacks/total.svg?style=for-the-badge&logo=github&logoColor=white&label=github&color=00Abfg)](https://github.com/Branduzzo/CheckHacks/releases) (https://img.shields.io/modrinth/dt/B2gBml7j?style=for-the-badge&logo=modrinth&logoColor=white&label=modrinth)](https://modrinth.com/project/B2gBml7j) (https://img.shields.io/spiget/downloads/133154?style=for-the-badge&logo=spigotmc&logoColor=white&label=spigot)](https://www.spigotmc.org/resources/checkhacks.133154/) (https://img.shields.io/badge/Discord-join%20the%20server-5865F2.svg?style=for-the-badge&logo=discord&logoColor=white)](https://branduzzo.it/discord) (https://img.shields.io/github/stars/Branduzzo/CheckHacks.svg?style=for-the-badge&logo=github)](https://github.com/Branduzzo/CheckHacks/stargazers) (https://img.shields.io/badge/paypal-support%20me-00457C.svg?style=for-the-badge&logo=paypal&logoColor=white)](https://paypal.me/branduzzo) </div> --- ## 🆕 What is new in 1.3.0 This is a pretty big update, so here is a quick rundown of what has changed: - **10 new detections** - we added Trouser Streak, Ui Utils, SeedCrackerX, Simple World Downloader, Glazed, Litematica, Item Scroller, Xaeros Minimap and a few more - **Auto updater** - the plugin now checks GitHub when the server starts, but only if you have internet. If there is a newer version, anyone with `checkhacks.update` will get a message when they join. You just click it, it runs `/checkhacksupdate`, downloads the new jar, replaces the old one and asks you to restart. That is all - **Matrix support** - we already supported Grim, Vulcan and Spartan, and now Matrix is included as well. You can enable or disable each one under `detect-flag.anticheats.matrix` - **DoubleCheck** - if someone gets flagged as `DETECTED` or `PROTECTED`, we run a second confirmation scan right after. It really helps cut down on false positives - **About 3 times faster** - we optimized the Folia scheduler, signs are now handled more efficiently and we lowered `between-sign-ticks`. A full scan finishes in roughly a third of the time it used to - **Fewer false flags** - we hardened the whole `evaluateResponse` logic, including empty replies, the `key + letter` edge case, and the `METEOR` vs `TRANSLATE` vs `KEYBIND` exploit preventer check. Bedrock, Geyser and Floodgate skipping is also more reliable now - **Better webhooks** - you can now enable Discord **Components V2** with `discord.use-components-v2: true`. It sends a clean Container with your accent color, text blocks, a separator and a timestamp. If you prefer the old style, just set it to `false` and you will get the classic embeds - **Smarter rules** - `command-rules` lets you set a command per mod and per result. We also added `&hack&` so you can write something like `tempban %player% 7d Hack %hack%` and it will expand to `Meteor, Wurst` if both were detected. It works with `%hack%`, `&hack&`, `{hack}`, and for global commands you get a comma separated list of all flagged hacks - **General optimizations** - single SQLite connection with `WAL`, cached messages, async webhooks, cached reflection and NMS fixes for 1.21.4 and up. It just runs smoother and uses less resources --- ## ❓ So what is CheckHacks? CheckHacks is a server side anticheat that can tell which mods a player is running without them having to install anything. It works by using the **Sign Translation Vulnerability** (MC-265322). Here is how it works in practice: 1. You start a check, or it starts automatically when someone joins or your anticheat flags them 2. The plugin quietly places a couple of signs near them 3. It writes special translation keys on those signs 4. Their client opens the sign editor for a split second and then closes it 5. We read what their client sent back and immediately remove the signs Every mod registers its own translation keys, so a vanilla client and a modded client will respond differently. That difference