Decoy

# Decoy Silent honeypot anti-cheat for catching x-rayers, killaura, ESP, and reach cheaters. --- ## How It Works Decoy places invisible traps around players that are completely undetectable during normal gameplay. Fake ore veins, hidden entities, and bait chests are scattered underground on a repeating cycle. Legitimate players will never encounter them. Cheaters using x-ray, killaura, ESP, or reach hacks will interact with these traps and get flagged silently — they receive no warning or alert. All traps use vanilla-accurate generation. Ore veins match real Minecraft blob shapes and per-ore sizes (diamonds spawn in veins of 4-8, emeralds as singles, etc). Traps are placed behind solid walls so only cheaters can find them. --- ## Features - **Ore Traps** — Fake ore veins using vanilla blob generation with correct sizes per ore type. Depth-aware placement (deepslate variants below Y=0, nether ores in the nether). Blocks give no drops and revert instantly on break. - **Entity Traps** — Invisible armor stands that catch killaura and reach. Flags players who hit entities they shouldn't be able to see or reach beyond 4 blocks. - **NPC Traps** — Invisible stands with floating player nametags. Only visible to ESP/entity radar cheats. - **Chest Traps** — Bait chests buried in stone with valuables inside. Inventory never opens for the player — they get flagged on interaction. - **Nether Support** — Ancient debris, nether gold, and quartz traps in nether worlds with correct block replacement (netherrack, basalt, blackstone). - **Flag Threshold** — 1 flag marks a player as suspicious. 3+ flags (configurable) marks them as confirmed. Severity shows in all alerts and commands. - **Mining Path Tracking** — Tracks recent block breaks per player. Calculates how many blocks a player mined in a straight line toward a trap (beeline detection). - **Discord Webhooks** — Rich embed alerts with player head thumbnail, severity color coding, flag history breakdown, location, and beeline data. Fully async, won't lag your server. - **Auto Punish** — Configurable command tiers that execute at specific flag counts. Set up automatic kicks, tempbans, and bans with `{player}` and `{count}` placeholders. - **SQLite Storage** — All detections logged with player UUID, name, type, coordinates, timestamp, and approach distance. Persists across restarts. - **Crash Recovery** — Active trap blocks are tracked in the database and restored to their original state on server restart. --- ## Commands | Command | Description | |---|---| | `/decoy status` | Plugin overview (active traps, total detections) | | `/decoy check <player>` | View player flags with type breakdown and severity | | `/decoy recent ` | Recent detections across all players | | `/decoy clear <player>` | Wipe all flags for a player | | `/decoy test` | Force deploy traps around you (admin testing) | | `/decoy near ` | List nearby trap ores | | `/decoy tp` | Teleport to nearest trap ore | | `/decoy reload` | Reload configuration and restart trap cycle | | `/decoy purge` | Remove all active traps and stop the cycle | --- ## Permissions | Permission | Description | Default | |---|---|---| | `decoy.admin` | Access to all /decoy commands | op | | `decoy.notify` | Receive in-game detection alerts | op | | `decoy.bypass` | Exempt from all traps | false | --- ## Configuration Everything is configurable in `config.yml`. Key settings: - **traps.interval** — How often traps refresh around players (default: 90 seconds) - **traps.ore.veins** — Number of ore veins placed per player per cycle (default: 25) - **traps.ore.radius** — Placement radius around each player (default: 48 blocks) - **flags.confirm-threshold** — Flags needed to mark a player as confirmed (default: 3) - **discord.webhook** — Your Discord webhook URL for alerts - **punish.tiers** — List of flag thresholds with commands to execute - **worlds.blacklist** — Worlds where traps won't be placed ### Discord Setup Set `discord.enabled: true` and paste your webhook URL. Alerts are sent asynchronously and include player avatars, severity levels, flag breakdown, and coordinates. ### Auto Punish Setup Set `punish.enabled: true` and configure tiers in config. Works with any punishment plugin — just use the console commands you'd normally run. ```yaml punish: enabled: true tiers: - flags: 3 commands: - "kick {player} Suspicious activity detected" - flags: 5 commands: - "tempban {player} 1d Automated ban - xray detected ({count} flags)" - flags: 10 commands: - "ban {player} Confirmed cheating - xray ({count} flags)" ```