ExploitShield vs MLSAC

ExploitShield is a free, open-source Minecraft server plugin that guards against packet exploits, crash attempts, invalid NBT data, malicious payloads, and duplication methods. It filters and validates packets, limits their rate, detects malformed traffic, and checks payloads and plugin messages. NBT checks cover oversized content, invalid UTF-8, illegal characters, and invalid stack sizes. Listed crash protections address books, signs, payloads, chat overflow, TabComplete, and invalid packet cancellation. Duplication defenses cover inventory, creative, hoppers, containers, pistons, minecarts, boats, and vehicles, alongside chunk detection and item signature tracking. Administrators can configure protection modules, thresholds, packet and rate limits, alert messages, and punishments. Responses include alerts, cancellations, kicks, bans, IP bans, and custom commands. It supports Minecraft 1.17.x–1.21.x on Paper, Spigot, and Folia, and requires Java 17+, PacketEvents 2.13.0+, and ProtocolLib 5.4.0+. The license is GPL-3.0; modified distributions or projects incorporating its source must use that license and publish their complete source code.

MLSAC is a neural-network anti-cheat plugin for Minecraft servers. It examines combat camera movement and surrounding packets for patterns associated with KillAura, TriggerBot, AimAssist, Reach, and hits through walls. The plugin sends combat camera and body movement, hit details, and player names and UUIDs to MLSAC's cloud for model scoring; it does not send chat or inventory data. The maker says this remote analysis does not use the Minecraft server's CPU or TPS for detection. Setup involves installing the plugin, entering a licence key, and choosing a preset configured on the website. No client mod is required, and PacketEvents is included in the plugin jar. Server owners can configure responses including damage reduction, kicks, and bans. The dashboard provides licences, keys, presets, statistics, and player dossiers. The free Beginner plan includes the Mini model; Pro and Pulse require paid plans, and Pulse also requires project verification. Ultra is early access for plugin 2.0 and cannot run alongside other models. When a plan's daily request limit is reached, checks pause until the next day.