Skip to content
SPECIFICTION
Get listed

ExploitShield

github.com

Free plan Self-hosted
Visit github.com
Spec score 7.6 #13 of 57 in Minecraft Anti-Cheat Plugins

What it is

ExploitShield is a free, open-source Minecraft server plugin that guards against packet exploits, crash attempts, invalid NBT data, malicious payloads, and duplication methods. It filters and validates packets, limits their rate, detects malformed traffic, and checks payloads and plugin messages. NBT checks cover oversized content, invalid UTF-8, illegal characters, and invalid stack sizes. Listed crash protections address books, signs, payloads, chat overflow, TabComplete, and invalid packet cancellation. Duplication defenses cover inventory, creative, hoppers, containers, pistons, minecarts, boats, and vehicles, alongside chunk detection and item signature tracking. Administrators can configure protection modules, thresholds, packet and rate limits, alert messages, and punishments. Responses include alerts, cancellations, kicks, bans, IP bans, and custom commands. It supports Minecraft 1.17.x–1.21.x on Paper, Spigot, and Folia, and requires Java 17+, PacketEvents 2.13.0+, and ProtocolLib 5.4.0+. The license is GPL-3.0; modified distributions or projects incorporating its source must use that license and publish their complete source code.

Spec sheet

Purpose
ExploitShield is an open-source Minecraft server plugin for protection against packet exploits, crash attempts, invalid NBT data, malicious payloads, and duplication methods.Read 7 Oct 2026 · github.com
Support
The project directs users to its Discord community for help, bug reports, and feature suggestions, and welcomes GitHub issues and contributions.Read 7 Oct 2026 · github.com
License
ExploitShield is licensed under GPL-3.0; the README says distributed modified versions or projects incorporating its source must also use GPL-3.0 and make their complete source code public.Read 7 Oct 2026 · github.com
Alerts and actions
The configurable alert system supports alerting, cancelling, kicking, banning, IP banning, and custom commands.Read 7 Oct 2026 · github.com
Compatibility
The README lists Minecraft 1.17.x–1.21.x and Paper, Spigot, and Folia, with Java 17+ required.Read 7 Oct 2026 · github.com
Configuration
Administrators can customize packet limits, punishments, protection modules, alert messages, thresholds, and rate limits.Read 7 Oct 2026 · github.com
Crash protection
Listed protections cover book, sign, and payload crashes, chat overflow, TabComplete, and invalid packet cancellation.Read 7 Oct 2026 · github.com
Duplication protection
Listed protections include inventory, creative, hopper, container, piston, minecart, boat, and vehicle duplication, plus chunk duplication detection and item signature tracking.Read 7 Oct 2026 · github.com
Integrations and requirements
ExploitShield uses PacketEvents and ProtocolLib and requires PacketEvents 2.13.0+ and ProtocolLib 5.4.0+.Read 7 Oct 2026 · github.com
NBT protection
It checks NBT data for oversized content, invalid UTF-8, illegal characters, and invalid stack sizes, among other conditions.Read 7 Oct 2026 · github.com
Packet protection
It validates and filters packets, limits packet rates, detects malformed packets, and validates payloads and plugin messages.Read 7 Oct 2026 · github.com
Usage statistics
The project says bStats collects Minecraft version, Java version, operating system, plugin version, and online player count, and says it does not collect personal information, player data, server IPs, or configuration files.Read 7 Oct 2026 · github.com

Plans and prices

Free Free Minecraft 1.17.x–1.21.x · Paper, Spigot, or Folia · Java 17+ · PacketEvents 2.13.0+ and ProtocolLib 5.4.0+ required Read 7 Oct 2026 · github.com

Every ExploitShield plan and price →

Strong points and limits

Strong points

  • Covers packet, crash, NBT, payload, and duplication threats.
  • Administrators can configure limits, modules, and punishments.
  • Supports Paper, Spigot, and Folia servers.
  • Available free under GPL-3.0.

Limits

  • Requires Java 17 or newer.
  • Requires PacketEvents 2.13.0+ and ProtocolLib 5.4.0+.
  • Modified versions must publish their complete source code.

Who it suits

It suits administrators of Paper, Spigot, or Folia Minecraft servers who need configurable protections against packet, crash, NBT, payload, and duplication exploits.

Verdict

ExploitShield offers a broad set of configurable server protections and enforcement actions. Check its software dependencies and GPL-3.0 terms before adding it to a server.

Where Specifiction places it

Alternatives to ExploitShieldAll alternatives →