CheckHacks vs ExploitShield

CheckHacks is a free, server-side Minecraft anticheat that detects client-side mods and hack clients using the Sign Translation Vulnerability. Players do not need to install a client mod: the plugin briefly places signs with special translation keys and checks the client’s response. Administrators can choose METEOR, TRANSLATE, or KEYBIND detection modes for each mod and add custom detections in checkhacks.yml. DoubleCheck repeats scans that return DETECTED or PROTECTED to help reduce false positives. CheckHacks can check players after Grim, Vulcan, Spartan, or Matrix flags them, and supports custom commands and detection alerts. A browser editor running on the game server lets administrators review scan history, look up players, and start checks. Access uses one-time tokens, while scan records are kept in a built-in SQLite database. Named server platforms include Bukkit, Folia, Paper, Purpur, and Spigot, with Minecraft versions 1.21 and later listed. The maker warns that client patches can temporarily block the detection method. The project is MIT-licensed, and donations are optional.

ExploitShield is a free, open-source Minecraft server plugin that guards against packet exploits, crash attempts, invalid NBT data, malicious payloads, and duplication methods. It filters and validates packets, limits their rate, detects malformed traffic, and checks payloads and plugin messages. NBT checks cover oversized content, invalid UTF-8, illegal characters, and invalid stack sizes. Listed crash protections address books, signs, payloads, chat overflow, TabComplete, and invalid packet cancellation. Duplication defenses cover inventory, creative, hoppers, containers, pistons, minecarts, boats, and vehicles, alongside chunk detection and item signature tracking. Administrators can configure protection modules, thresholds, packet and rate limits, alert messages, and punishments. Responses include alerts, cancellations, kicks, bans, IP bans, and custom commands. It supports Minecraft 1.17.x–1.21.x on Paper, Spigot, and Folia, and requires Java 17+, PacketEvents 2.13.0+, and ProtocolLib 5.4.0+. The license is GPL-3.0; modified distributions or projects incorporating its source must use that license and publish their complete source code.