- Home
- Minecraft anti-cheat plugins
- ExploitShield
ExploitShield
What it is
ExploitShield is a free, open-source plugin for Minecraft server operators who want defenses against packet exploits, crash attempts, invalid NBT data, malicious payloads, and duplication methods. It validates and filters packets, limits their rates, detects malformed packets, and checks payloads and plugin messages. Its NBT checks include oversized content, invalid UTF-8, illegal characters, and invalid stack sizes. Listed crash protections cover books, signs, payloads, chat overflow, TabComplete, and invalid packet cancellation. Duplication safeguards include inventory, creative, hopper, container, piston, minecart, boat, and vehicle cases, along with chunk duplication detection and item signature tracking. Administrators can configure protection modules, packet limits, thresholds, rate limits, alert messages, and punishments. Responses include alerts, cancellation, kicks, bans, IP bans, and custom commands. The free plan costs nothing. It requires Java 17+, PacketEvents 2.13.0+, and ProtocolLib 5.4.0+ and lists Minecraft 1.17.x–1.21.x with Paper, Spigot, and Folia compatibility.
For and against
For
- Free plan costs nothing
- Covers packet, crash, NBT, and duplication threats
- Configurable alerts and enforcement actions
- Lists Paper, Spigot, and Folia compatibility
Against
- Requires PacketEvents 2.13.0+ and ProtocolLib 5.4.0+
- Requires Java 17+
- Compatibility listed only for Minecraft 1.17.x–1.21.x
The verdict
ExploitShield combines several server protection categories with configurable responses and listed support for three server platforms. Its dependency and Java requirements are important to check before choosing it.
Who it suits
It suits administrators of Paper, Spigot, or Folia Minecraft servers who need configurable exploit and duplication protections. Operators should be prepared to install its required dependencies and use Java 17 or later.
Plans and prices
Free
Minecraft 1.17.x–1.21.x · Paper, Spigot, or Folia · Java 17+ · PacketEvents 2.13.0+ and ProtocolLib 5.4.0+ required
Read 7 Oct 2026 · github.com
On the record
- Alerts and actions
- The configurable alert system supports alerting, cancelling, kicking, banning, IP banning, and custom commands.github.com · read 7 Oct 2026
- Compatibility
- The README lists Minecraft 1.17.x–1.21.x and Paper, Spigot, and Folia, with Java 17+ required.github.com · read 7 Oct 2026
- Configuration
- Administrators can customize packet limits, punishments, protection modules, alert messages, thresholds, and rate limits.github.com · read 7 Oct 2026
- Crash protection
- Listed protections cover book, sign, and payload crashes, chat overflow, TabComplete, and invalid packet cancellation.github.com · read 7 Oct 2026
- Duplication protection
- Listed protections include inventory, creative, hopper, container, piston, minecart, boat, and vehicle duplication, plus chunk duplication detection and item signature tracking.github.com · read 7 Oct 2026
- Integrations and requirements
- ExploitShield uses PacketEvents and ProtocolLib and requires PacketEvents 2.13.0+ and ProtocolLib 5.4.0+.github.com · read 7 Oct 2026
- License
- ExploitShield is licensed under GPL-3.0; the README says distributed modified versions or projects incorporating its source must also use GPL-3.0 and make their complete source code public.github.com · read 7 Oct 2026
- NBT protection
- It checks NBT data for oversized content, invalid UTF-8, illegal characters, and invalid stack sizes, among other conditions.github.com · read 7 Oct 2026
- Packet protection
- It validates and filters packets, limits packet rates, detects malformed packets, and validates payloads and plugin messages.github.com · read 7 Oct 2026
- Purpose
- ExploitShield is an open-source Minecraft server plugin for protection against packet exploits, crash attempts, invalid NBT data, malicious payloads, and duplication methods.github.com · read 7 Oct 2026
- Support
- The project directs users to its Discord community for help, bug reports, and feature suggestions, and welcomes GitHub issues and contributions.github.com · read 7 Oct 2026
- Usage statistics
- The project says bStats collects Minecraft version, Java version, operating system, plugin version, and online player count, and says it does not collect personal information, player data, server IPs, or configuration files.github.com · read 7 Oct 2026
