ExploitShield
ExploitShield is a free, open-source Minecraft server plugin for protection against packet exploits, crash attempts, invalid NBT data, malicious payloads, an…
What ExploitShield is
ExploitShield is a free, open-source Minecraft server plugin for protection against packet exploits, crash attempts, invalid NBT data, malicious payloads, and duplication methods. It validates and filters packets, limits packet rates, detects malformed packets, and checks payloads and plugin messages. Its NBT checks cover oversized content, invalid UTF-8, illegal characters, and invalid stack sizes. Listed crash safeguards address book, sign, and payload crashes, chat overflow, TabComplete, and invalid packet cancellation. Duplication protections include inventory, creative, hopper, container, piston, minecart, boat, and vehicle cases, as well as chunk duplication detection and item signature tracking. Administrators can configure protection modules, thresholds, packet limits, alert messages, and punishments. Available responses include alerts, cancellation, kicks, bans, IP bans, and custom commands. It supports Minecraft 1.17.x–1.21.x on Paper, Spigot, and Folia, and requires Java 17+, PacketEvents 2.13.0+, and ProtocolLib 5.4.0+. The project says bStats collects software and server usage details, not personal information, player data, server IPs, or configuration files. It is licensed under GPL-3.0.
Good
- Covers packet exploits, crash attempts, NBT, and duplication.
- Offers configurable alerts and enforcement actions.
- Supports Paper, Spigot, and Folia.
- Free and open-source under GPL-3.0.
Watch out
- Requires Java 17 or later.
- Requires PacketEvents 2.13.0+ and ProtocolLib 5.4.0+.
- Listed Minecraft support ends at 1.21.x.
- GPL-3.0 requires public source for modified distributions.
Who it suits
It suits Minecraft server administrators using Paper, Spigot, or Folia who need configurable packet, crash, NBT, and duplication protections. Administrators must meet its Java and plugin dependencies.
Verdict
ExploitShield provides broad server-side safeguards with configurable responses for supported Minecraft environments. Its required dependencies and GPL-3.0 terms are key considerations for deployment.
Plans and prices
From ExploitShield's own pricing page, checked 7 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free | Free | Minecraft 1.17.x–1.21.x · Paper, Spigot, or Folia · Java 17+ · PacketEvents 2.13.0+ and ProtocolLib 5.4.0+ required |
The facts
Each one read from ExploitShield's own pages, with the date it was checked.
What it does
- Alerts and actions
- The configurable alert system supports alerting, cancelling, kicking, banning, IP banning, and custom commands.checked 7 Oct 2026
- Compatibility
- The README lists Minecraft 1.17.x–1.21.x and Paper, Spigot, and Folia, with Java 17+ required.checked 7 Oct 2026
- Configuration
- Administrators can customize packet limits, punishments, protection modules, alert messages, thresholds, and rate limits.checked 7 Oct 2026
- Crash protection
- Listed protections cover book, sign, and payload crashes, chat overflow, TabComplete, and invalid packet cancellation.checked 7 Oct 2026
- Duplication protection
- Listed protections include inventory, creative, hopper, container, piston, minecart, boat, and vehicle duplication, plus chunk duplication detection and item signature tracking.checked 7 Oct 2026
- Integrations and requirements
- ExploitShield uses PacketEvents and ProtocolLib and requires PacketEvents 2.13.0+ and ProtocolLib 5.4.0+.checked 7 Oct 2026
- License
- ExploitShield is licensed under GPL-3.0; the README says distributed modified versions or projects incorporating its source must also use GPL-3.0 and make their complete source code public.checked 7 Oct 2026
- NBT protection
- It checks NBT data for oversized content, invalid UTF-8, illegal characters, and invalid stack sizes, among other conditions.checked 7 Oct 2026
- Packet protection
- It validates and filters packets, limits packet rates, detects malformed packets, and validates payloads and plugin messages.checked 7 Oct 2026
- Purpose
- ExploitShield is an open-source Minecraft server plugin for protection against packet exploits, crash attempts, invalid NBT data, malicious payloads, and duplication methods.checked 7 Oct 2026
- Support
- The project directs users to its Discord community for help, bug reports, and feature suggestions, and welcomes GitHub issues and contributions.checked 7 Oct 2026
- Usage statistics
- The project says bStats collects Minecraft version, Java version, operating system, plugin version, and online player count, and says it does not collect personal information, player data, server IPs, or configuration files.checked 7 Oct 2026
