Skip to content

Releases: xGinko/AnarchyExploitFixes

1.21.2 - 1.18 hotfix - Fix minimum height limit.

15 Dec 03:44
Compare
Choose a tag to compare
  • Check if height limit is 0 or -64 for 1.18. To allow player to go below Y=0.

1.21.1 - Remove log4j exploit fix

13 Dec 03:47
Compare
Choose a tag to compare
  • Removed client side log4j exploit fix due to problems with death messages and interference with other plugins, I don't have time for this because I have a life. I recommend using Log4jFix instead. It's not much of a deal anymore as most clients have already updated. Make sure you are using Papaya or mojang's fix to patch the server sided exploit.

1.21.0 - Prevent RCE exploit clientside

10 Dec 23:03
Compare
Choose a tag to compare
  • Block all messages from reaching players if they contain ${ this should hopefully prevent any clients from running code from the recently found log4j remote code vulnerability. MAKE SURE TO USE Papaya FOR SERVER SIDE OR YOU COULD POSSIBLY BE BACKDOORED!
PreventRCEClientSideExploit: true # CLIENTSIDE ONLY - SERVER IS STILL VULNERABLE Blocks all messages containing "${" make sure you are using mojang's patch (https://www.minecraft.net/en-us/article/important-message--security-vulnerability-java-edition) or updated Papaya to patch this exploit on the server side, OTHERWISE YOU CAN BE BACKDOORED.
  • Add a reminder warning every minute to install ProtocolLib since it's essential. Specify in config.yml to disable protocollib completely to remove this message, but protocollib is required to patch many exploits.
  • Add a list of commands that will have the antispam activated for them. Useful if you don't want to have the antispam active on non chat commands. (#43)
AntiSpamCommandsUseWhitelist: false
AntiSpamCommandsWhitelist:
  - /msg
  - /message
  - /r
  - /reply
  - /w
  - /whisper
  - /tell
  • Add max skulls per chunk config option, useful if you have lots of skulls getting stuck in one chunk and lagging/freezing the server.
MaxSkullsPerChunk: 50

1.20.1 - Fix BowBomb Bypass

19 Nov 01:24
Compare
Choose a tag to compare
  • Fix bowbomb bypass by using spectral arrows.
  • Add BannedRegex config option. Allows you to have infinite customizability for blocking messages.
BannedRegex:
  - "^This is a(.*)banned message" # Prevents any message that starts with "This is a" and ends with "banned message"

1.20.0 - Prevent invalid usernames

31 Oct 17:24
Compare
Choose a tag to compare

Read the last release notes if you haven't already updated.

  • Prevent invalid usernames with characters that aren't A-Z, a-z, _, numbers, or are too long (> 16), or too short (<1)
PreventInvalidNames: true # Prevent names with characters that are non letters, numbers, or underscores, or too long/too short.

1.19.0 - BowBomb exploit patch

27 Oct 19:36
Compare
Choose a tag to compare

Read the last release notes if you haven't already updated.

  • Add BowBomb patch, server owners have tested this patch and has shown great results. (#40)
PreventBowBombExploit: true # Please report any problems in GitHub/Discord.
MaxBowSquaredVelocity: 15 # Fully pulled bow is ~9-10. 15 is default just to be safe.
  • Finally increment version to 1.19.0, releases from now on will be 1.X.0 when there's a new exploit.

1.18.21 - Fixes for 1.17 & Disable Any Class

26 Oct 02:31
Compare
Choose a tag to compare
  • Fix all(?) errors that happen on newer versions. One caveat with the Packetfly and boatfly patch on 1.17 is players won't be able to load any new chunks after using the exploit unless they relog, it's not that big of a deal. Note that the NoCom bypass patch is disabled on non 1.12 because it still causes errors, I believe this is already patched in newer Paper versions anyway. (#33)

  • Add config list to disable any class you want! Useful if you are having problems with specific classes or would like the negligible performance improvement of not needing to register events in the class.

# Disable certain classes - Semi advanced users only. Useful if you are having problems with specific classes or would like the negligible performance improvement of not needing to register events in the class.
# Caps SENSITIVE - To disable ProtocolLib, set DisableAllProtocolLib to true.
DisabledClasses:
  - "TestClass" # MUST BE CORRECT CAPITALS, CHECK SOURCE CODE, ERROR MESSAGES, OR TIMINGS REPORTS FOR CLASS NAMES.
  • Update ProtocolLib in maven

Please let me know if you have any problems on Discord or in the GitHub issues tracker.

1.18.20 - NoCom bypass

11 Oct 00:00
Compare
Choose a tag to compare

Read the last release notes if you haven't already updated.

  • Prevent supposed nocom bypass, check Use item packet as well.

1.18.19 - Monthly release

09 Oct 20:12
Compare
Choose a tag to compare

Development is probably going to slow down because I have school, there will probably only be a release at most each month, or when a new exploit is discovered.

  • Add minimum distance to vanish player when teleporting - Useful so player's don't teleport a ton of times to make tablist go crazy.
MinDistanceToVanishPlayer: 100 # Minimum distance to vanish player when teleporting, useful to prevent players from teleporting very fast in the same spot and making the tablist go crazy.
  • Add first join message (#38) - Disabled by default.
EnableFirstJoinMessage: false
FirstJoinMessage: "&7%player% joined the game for the first time. They are %players_num% to join." # %players_num% is how many players have joined the server + the current one (ex. 351th)
  • Add antispam for commands as well - Enabled by default:
AntiSpamCommands: true # Use the same antispam options for commands aswell.
  • Add anti nether roof meant for public servers and not just mine.
# This will automatically teleport players below nether roof if they are too high. Use permission node anarchyexploitfixes.netherroofbypass to bypass
PreventNetherRoof: false
  • Remove config boolean check for old/never used config option. (PreventGoingBelowBedrockFloorOnElytra). Proper config option is PreventGoingBelowBedrockFloor.
  • Attempted work on kickphrase command - still seems to be broken. Not that big of a feature to waste time fixing.

1.18.18 - RemoveWitherHeadsAutomatically, PreventTooManyEntitiesInChunk

28 Aug 19:34
Compare
Choose a tag to compare
  • Add option to remove wither heads after x ticks or after chunk unloads, whichever comes first.
RemoveWitherHeadsAutomatically: true # Experimental: Will remove wither heads on chunk unload or if its been longer than x ticks
RemoveWitherHeadsAutomaticallyTicks: 200 # 10 seconds
  • Add option to prevent too many (non living) entities in chunks, useful if players place a ton of crystals etc in one chunk to crash the server.
PreventTooManyEntitiesInChunk: false # Check all chunks every 30 seconds for too many entities, removes any entities left after reaching limit
MaxEntitiesInChunk: 100 # Does not include living entities. (animals/monsters) useful if players are placing a shit ton of crystals etc in one chunk and crashing the server.
LogEntityRemovals: false
EntityCheckTimeTicks: 20 # 1 second
  • Slight performance improvements