AnarchyExploitFixes

Fix exploits on anarchy Minecraft servers

GPL-3.0 License

Stars
273
Committers
33

Bot releases are visible (Hide)

AnarchyExploitFixes - AnarchyExploitFixes 2.6.7 Latest Release

Published by xGinko 8 months ago

  • Fixed java.lang.IllegalStateException: Accessing entity state off owning region's thread in Folia/Kaiiju 1.20.4
    NOTE: Due to changes in Folia, this could only be done by increasing the amount of tasks that are being scheduled, so your memory usage might slightly increase with this build.
  • Improved TagParser crash check.
  • Changed how AEF checks for TPS on Folia. This could positively affect performance.
  • Folia builds can now understand &-codes to a limited degree.
AnarchyExploitFixes - AnarchyExploitFixes 2.6.6

Published by xGinko 8 months ago

  • Patch for TagParser server crash exploit. If you've seen the following error message appear right before your server was shutdown, you were probably targeted:
	at net.minecraft.nbt.TagParser.readValue(TagParser.java:138) ~[?:?]
	at net.minecraft.nbt.TagParser.readListTag(TagParser.java:186) ~[?:?]
	at net.minecraft.nbt.TagParser.readList(TagParser.java:144) ~[?:?]
	at net.minecraft.nbt.TagParser.readValue(TagParser.java:138) ~[?:?]
	at net.minecraft.nbt.TagParser.readListTag(TagParser.java:186) ~[?:?]
	at net.minecraft.nbt.TagParser.readList(TagParser.java:144) ~[?:?]
	at net.minecraft.nbt.TagParser.readValue(TagParser.java:138) ~[?:?]
	at net.minecraft.nbt.TagParser.readListTag(TagParser.java:186) ~[?:?]
	...
  • Improved experimental godmode patch to address a recently discovered bug in the game (more to follow)
  • Added bypass permission check for vehicles on netherroof
AnarchyExploitFixes - AnarchyExploitFixes 2.6.5

Published by xGinko 9 months ago

  • Fixed a bug where players couldn't put ender eyes into end portal frames when banned-blocks.prevent-placing was enabled and END_PORTAL_FRAME was configured as banned on folia builds.
  • Fixed a bug where horses that can carry chests were prevented from using a portal even when they were not carrying chests
AnarchyExploitFixes - AnarchyExploitFixes 2.6.4

Published by xGinko 9 months ago

  • Fixed a NotImplementedException on 1.16 when using Elytra speed limit
  • Fixed a bug where netherportals would be partially destroyed when using prevent-nether-roof
  • Made elytra speed calculation toggleable between 3D and 2D distance (#184)
  • Improved prevent-window-click-crash
  • Added support for self-place in prevent-burrow
  • Improved performance for old/newchunks detection in elytra speed
AnarchyExploitFixes - AnarchyExploitFixes 2.6.3

Published by xGinko 9 months ago

This update fixes remaining bypasses for the window click crash method

  • Improved window click crash patch - any remaining bypass methods are now fully patched.
  • Improved elytrafly speed calculation. Vertical speed is properly respected now.
  • Improved elytrafly configurability. Notifysound can now be configured
  • Improved redstone trapdoor crash prevention.
  • Added prevention against a crash method that involves entities teleporting between worlds very quickly.
  • Added experimental module against lag caused by players moving big items between inventories very fast (#170).
AnarchyExploitFixes - AnarchyExploitFixes 2.6.2

Published by xGinko 9 months ago

Folia users update!

This build fixes issues with TPS detection on Folia

  • Fixed TPS Detection on Folia.
  • Made modules using Portal events on Folia work effectively the same (Folia has broken Portal api, read the comments in the config)
  • Improved elytrafly speed calculation, making it possible to manage speed for players trying to bypass it with generic Speedhacks / Timer now without them getting kicked.
  • Chunk-limit for dropped items now gets checked on chunk load.
AnarchyExploitFixes - AnarchyExploitFixes 2.6.1

Published by xGinko 9 months ago

  • Fixed NoSuchFieldError when using Join/Leave messages on folia build (#177)
  • Fixed BedTrap prevention not working on both builds
  • Fixed IllegalStateException spamming on Folia when some modules that query entity info where active (Thanks @F3F5)
AnarchyExploitFixes - AnarchyExploitFixes 2.6.0

Published by xGinko 10 months ago

  • The plugin can now properly check TPS per region on Folia! (#160) (Thanks @Dreeam-qwq for switching the project to gradle so the dependencies for checking TPS could be used!)
  • TPS is no longer updated via a scheduled task but cached everytime it is requested.
  • Removed all chat modules except for CommandWhitelist. They contained too many bypasses and where overall badly implemented.
  • Removed all 1b1t options as they were used by almost no one and can easily be recreated better in a separate plugin.
  • Fixed language system only producing english lang files. It is recommended to check/reset your lang folder.
  • Improved BookBan prevention. The module is now able to detect any kind of large item instead of just books.
  • Improved performance in Legacy build by pre-parsing XMaterials and caching them.
  • Fixed and improved all combat modules. Cooldowns are more configurable now.
  • Fixed and improved all chunklimit modules.
  • Improved all caching- and cooldown systems where possible.
  • Added logging to modules where it made sense.
  • Minor overall improvements that are too small to mention.

Hopefully for the last time:

Use the "Legacy" build if you're running Paper 1.12 - 1.19.4 and the "Folia" build if you're running Folia 1.19.4+ or Paper 1.20+

AnarchyExploitFixes - AnarchyExploitFixes 2.5.2

Published by xGinko 12 months ago

Fix crafting issues when window-click-crash-patch is enabled.

AnarchyExploitFixes - AnarchyExploitFixes 2.5.1

Published by xGinko 12 months ago

URGENT UPDATE! PATCHES CONTAINER CLICK / WINDOW CLICK CRASH EXPLOIT

This update contains a patch against a powerful lag/crash method that works across multiple versions

Example error that this update patches:

[INFO]: [STDOUT] [net.minecraft.CrashReport] Negative index in crash report handler (0/18)
[ERROR]: Failed to handle packet net.minecraft.network.protocol.game.PacketPlayInWindowClick@4fcb5fbf, suppressing error
net.minecraft.ReportedException: Container click
	at net.minecraft.world.inventory.AbstractContainerMenu.clicked(AbstractContainerMenu.java:398) ~[?:?]
	at net.minecraft.server.network.ServerGamePacketListenerImpl.handleContainerClick(ServerGamePacketListenerImpl.java:3342) ~[?:?]
	at net.minecraft.network.protocol.game.ServerboundContainerClickPacket.handle(ServerboundContainerClickPacket.java:58) ~[?:?]
	at net.minecraft.network.protocol.game.ServerboundContainerClickPacket.handle(ServerboundContainerClickPacket.java:23) ~[?:?]
	at net.minecraft.network.protocol.PacketUtils.lambda$ensureRunningOnSameThread$0(PacketUtils.java:51) ~[?:?]
	at net.minecraft.server.TickTask.run(TickTask.java:18) ~[purpur-1.20.1.jar:git-Purpur-2062]
	at net.minecraft.util.thread.BlockableEventLoop.doRunTask(BlockableEventLoop.java:153) ~[?:?]
	at net.minecraft.util.thread.ReentrantBlockableEventLoop.doRunTask(ReentrantBlockableEventLoop.java:24) ~[?:?]
	at net.minecraft.server.MinecraftServer.doRunTask(MinecraftServer.java:1365) ~[purpur-1.20.1.jar:git-Purpur-2062]
	at net.minecraft.server.MinecraftServer.d(MinecraftServer.java:197) ~[purpur-1.20.1.jar:git-Purpur-2062]
	at net.minecraft.util.thread.BlockableEventLoop.pollTask(BlockableEventLoop.java:126) ~[?:?]
	at net.minecraft.server.MinecraftServer.pollTaskInternal(MinecraftServer.java:1342) ~[purpur-1.20.1.jar:git-Purpur-2062]
	at net.minecraft.server.MinecraftServer.pollTask(MinecraftServer.java:1335) ~[purpur-1.20.1.jar:git-Purpur-2062]
	at net.minecraft.util.thread.BlockableEventLoop.runAllTasks(BlockableEventLoop.java:114) ~[?:?]
	at net.minecraft.server.MinecraftServer.tickServer(MinecraftServer.java:1451) ~[purpur-1.20.1.jar:git-Purpur-2062]
	at net.minecraft.server.MinecraftServer.runServer(MinecraftServer.java:1191) ~[purpur-1.20.1.jar:git-Purpur-2062]
	at net.minecraft.server.MinecraftServer.lambda$spin$0(MinecraftServer.java:322) ~[purpur-1.20.1.jar:git-Purpur-2062]
	at java.lang.Thread.run(Thread.java:833) ~[?:?]
Caused by: java.lang.ArrayIndexOutOfBoundsException

New:

  • Added patch against players sending Window Click packet where a negative button or slot value would result in heavy lag followed by a crash. Affects a wide variety of versions up untill 1.20.2. (Consider upgrading paper though unless you need to stay on your version.)

Fixes:

  • Fixed issues with /aef kickphrase and /say command.
AnarchyExploitFixes - AnarchyExploitFixes 2.5.0

Published by xGinko about 1 year ago

New:

  • Commands can now be turned on or off in config.yml. The server will need a restart for changes to take effect though. (#146)
  • Added /aef disable command for testing and better plugman/serverutil reloads (Using them on aef is still not recommended).
  • Added option to configure mob pathfinding limits to reduce mobai ticks (#145)
  • Added module to prevent flying flooding machines using waterlogged blocks in Folia build
  • Added module to remove illegal storage items with pre-stored item nbt tags
  • Added module to remove illegal damage nbt tags
  • Improved preventions.portals.prevent-destroying-end-portals
  • Added bundle checks to all illegal item modules in Folia build
  • Replaced usage of almost all deprecated API in Folia build
  • Improved performance and configurability for all illegal item modules

Fixes:

  • Fixed trapdoors dropping but not breaking when using prevent-redstone-on-trapdoor-crash
  • Fixed bucket entities not spawning when using illegals.spawn-eggs.prevent-using (#152)
  • Fixed revert-specific-higher-enchants doing nothing (#151)
  • Fixed false positives when inside vehicles in Burrow Module (#150)
  • Fixed error in anti nether roof module for Folia (#147)
  • Fixed lag when using first-join-messages and a lots of new players would join at the same time
  • Fixed anti-bed-trap module resetting bed without checking if the player is actually bed trapped (#144)
  • Fixed preventions.permanent-block-breaking.by-exploding-pistons
  • Fixed es_es.yml and pt_br.yml

Once again:

Use the "Legacy" build if you're running Minecraft 1.12 - 1.19.4 and the "Folia" build if you're running Folia 1.19.4+ or Paper 1.20+

AnarchyExploitFixes - 2.4.0 Folia Compatibility, Build Changes and Fixes

Published by xGinko over 1 year ago

New:

  • Seperate build fully compatible with 1.20+ Paper and Folia, utilizing MiniMessage formatting for lang files (reset your lang folder)
  • Added a configurable villager chunk limit that removes excess villagers based on profession priority. (By default it will delete jobless villagers and nitwits first if it finds some.)
  • Added a configurable /help command. (Configure an alias in your commands.yml if you want to use a different plugin for /help on your server)
  • Added toggle for the notification sound in elytrafly section.
  • Added ability to switch between teleporting back and canceling the event when players go too fast on elytra.
  • Optimized lang message display speed and corrected color codes in both builds.

Fixes:

  • Fixed fishing hooks automatically reeling in when snowball exploit prevention was enabled (#143).
  • Fixed players getting their elytra removed too early when elytrafly was disabled on the ceiling and players were 3 blocks within the ceiling bedrock layer.
  • Fixed Burrow not detecting calibrated sculk sensors as slabs on 1.20.
  • Fixed Section titles showing up as plain comments in the config.yml.
  • Fixed a problem where some chatmessages containing dots where unable to be sent.

To clear up confusion because the regular version has been renamed to Legacy:

It is now recommended to use Folia builds when running a Paper or Paper fork server >=1.20. This is because Folia's API is backwards compatible and you will DEFINITELY profit from the major improvements that working with a newer API and Java version brings to the table.

BOTH VERSIONS WILL STILL CONTINUE TO BE MAINTAINED.

AnarchyExploitFixes - 2.3.1 Support for 1.20 and 1.20.1

Published by xGinko over 1 year ago

New:

  • Updated dependencies to support 1.20

Fixes:

  • Fixed commandwhitelist tabcomplete filtering thanks to (@F3F5)
  • Changed how redstone trapdoor crash fix works (Instead of preventing the placement, it will now break the trapdoor should it open too many times per second)
AnarchyExploitFixes - 2.3.0 Prevent Redstone Trapdoor Crash

Published by xGinko over 1 year ago

New:

  • Added prevent-redstone-on-trapdoors module to prevent a crash method that affects 1.13 - 1.19.3 (#137)
  • Added prevent-liquid-update-lag module which limits the amount of liquid updates in a chunk per configurable time (play with the config, default one is not perfect)
  • Added minecart-limit module to chunk limits to help against players using them for entity cramming
  • Added rate-limit-wither-skulls module where different cooldowns for withers shooting skulls can be configured depending on if they have a target and whether the target is a player or not (helps with lag and can also assist servers that want to nerf withers on newer versions) (#132)
  • Made a seperate prevent-scanning-server-plugins module to prevent hacked clients scanning plugins using tabcomplete packets (would previously only be enabled when using command-whitelist)
  • Heavily improved performance for falling-block-limit
  • Improved prevent-lever-spam configurability, now the patch doesnt just rate limit lever usages and works like a proper antispam instead.
  • Improved new combat config section and moved a few relevant config options there (BowBomb and Burrow might need to be reconfigured)
  • Made a few more optimizations to the plugin that are too technical to include here

Fixes:

  • Fixed a bug where jumping on farmland would falsely trigger burrow
  • Fixed a bug where using prevent-map-reset-spam could cause an NPE and therefore be bypassable
  • Fixed a bug where using packetfly-patch could throw IllegalStateException: Asynchronous player kick!
  • Fixed a bug where using boatfly-patch could throw IllegalStateException: Asynchronous player kick!
AnarchyExploitFixes - 2.2.0 Patch Beehive Coordinate Exploit

Published by xGinko over 1 year ago

(Rerelease because there was a mistake with shading in nbtapi)

New:

  • Patched a coordinate exploit where reading out the nbt data of beehives and beenests would return the location where the bees spawned at and/or found a flower
  • Added a configurable cooldown for creating maps for 1.12 servers to combat spammers resetting map arts (reset your lang folder for new translations)
  • Added an experimental "combat" section to AEF config where seperate cooldowns for Crystal-, Bed- and AnchorAura can be configured
  • Optimized events for all illegal item checks. Checks are even more efficient now while being less cpu intense

Fixes:

  • Fixed a compatibility problem with other plugins using the same Reflections based language loader (@ImNotSoftik)
AnarchyExploitFixes - 2.1.0 - Bugfixes, Improvements and new Patches

Published by xGinko over 1 year ago

New:

Fixes:

  • Fixed a bunch of errors regarding modules handling player head items and placed player heads (fixes wither skull items getting deleted)
  • Fixed a problem where players couldn't place buckets on the sides of blocks in the end dimension when prevent-destroying-end-portals was enabled.
  • Removed the experimental revert-unnatural-datavalues module, as the implementation was too simple and would've led to multiple vanilla items in 1.12 reverting.
  • Fixed a ClassCastException when using delete-shulker-if-contains-inapplicable-enchant
  • Removed default entries in some modules that would lead to structure blocks getting deleted
  • Fixed a ClassCastException when using delete-shulker-if-contains-unbreakable
  • Improved Shulker checks for illegal items
  • Improved cooldown mechanic for prevent-lever-spam and prevent-crafting-recipe-lag-exploit
  • Improved the way the snowball exploit fix works
  • Fixed an issue where a small amount of players could be permanently locked out from chat by the anti-spam
  • Fixed and improved command anti-spam (#126)
  • Fixed a bypass for chat.banned-regex involving russian characters and uppercase letters (#123)
  • Fixed russian translation file thanks to @ImNotSoftik (reset your ru_ru.yml)
  • Fixed french translation file thanks to @CAEC64 (reset your fr_fr.yml)
AnarchyExploitFixes - 2.0.0 - MAJOR RELEASE, 1.19 SUPPORT

Published by moom0o over 1 year ago

Version 2.0.0 - Stable Release

This contribution was made possible thanks to a number of people, mostly @xGinko.
Special thanks to @adalmo for testing the plugin and reporting 90% of the bugs and problems.

This plugin is now mostly maintained by contributors as I have no interest in running Minecraft servers anymore, however, I will still attempt to patch major server breaking exploits.

NOTE:
If you're upgrading from 1.x, BACKUP your config and add your values to the new config manually. - ALL CONFIG OPTIONS WILL REVERT TO THE DEFAULTS!
Upgrading from 2.X Beta releases should be fine, still some values could revert so be sure to check everything.

The code hasn't been thoroughly checked, however it has been tested by numerous server owners in order to make sure the plugin is stable. I do encourage you to read over the changed code and find any improvements that can be made.

All Changes:

New Features:

  • Rewrote the entire code for version support. Plugin now fully works on versions 1.12.2 - 1.19.3
  • Added Multi-Language support with 15 languages. If enabled, the plugin's messages will now change based on the locale of the player. You can configure all messages inside the lang folder. Feel free to add your language in a pr if it isn't present!
  • Enourmous performance gains by only registering to the event handler what is enabled in the config - The plugin basically does DisabledClasses automatically now without needing a reboot.
  • Large performance gains by using efficient methods and optimized code.
  • Completely restructured and redid the entire config.yml (warning, resets your old config!) and enhanced the plugins config handling - the plugin will now automatically add new options and comments on every update!
  • Largely improved logging. Console logging for any module can now be toggled and wrong config options will show now with the AEF prefix + config path so you can debug the plugin much faster.
  • Largely improved ElytraFly. Added speed limit on nether ceiling, added more configuration options for each environment and made all messages customizable with the ability to use different coloring for different environments. Also use FastMath for better performance.
  • Added feature to revert illegal incompatible enchantments (ex.: boots with Depth Strider + Frost Walker, etc.) (Suggested by @adalmo)
  • Added anti backdoor features to prevent illegally opped and creative players. (Suggested by @adalmo)
  • Added feature to remove spawners of unnatural type (ex.: pig spawners, warden spawners, etc.) that have been placed in the world. (Suggested by @adalmo)
  • Improved feature to remove illegal blocks that have been placed in the world (ex.: player heads, bedrock, etc.)
  • Added configurable /say command (Suggested by @PistonCube).
  • Made height levels for overworld floor, nether floor and nether ceiling customizable to support datapacks/custom generators.
  • Added the ability to compare the similarity between previously sent messages in precent for players bypassing antispam by adding random characters in their sentences.
  • Made anti chat spam and some other modules async
  • Command Whitelist: Added a patch against hacked clients scanning the server's plugins using tabcomplete packets (for servers that don't have tab-complete set to -1 in spigot.yml).
  • Made 1b1t options more configurable so more people can use it.
  • Added configurable /say command.
  • And much more!

Fixes:

  • Fixed all problems with world heights in 1.18+
  • Fixed all anti-illegal items features for versions 1.12 - 1.19.3.
  • Fixed all bedrock-filling features for versions 1.12 -1.19.3 and largely improved performance.
  • Fixed all commands and make subcommands tabcomplete properly now.
  • Fixed https://github.com/moom0o/AnarchyExploitFixes/issues/109
  • Made the plugin stable without protocollib (You should still use ProtocolLib though!)
  • Fixed command-whitelist and added blacklisted-subcommands config option.
  • Fixed Burrow in 1.12.2+ versions.
  • Fixed BookBan not working with unsigned books and light_gray_shulkerboxes in 1.12.2+ versions.
  • Fixed FirstJoinMessage count being off.
  • And much more.

Closes:

https://github.com/moom0o/AnarchyExploitFixes/issues/91, https://github.com/moom0o/AnarchyExploitFixes/issues/96, https://github.com/moom0o/AnarchyExploitFixes/issues/97, https://github.com/moom0o/AnarchyExploitFixes/issues/101, https://github.com/moom0o/AnarchyExploitFixes/issues/104, https://github.com/moom0o/AnarchyExploitFixes/issues/109, https://github.com/moom0o/AnarchyExploitFixes/issues/111, https://github.com/moom0o/AnarchyExploitFixes/pull/113

AnarchyExploitFixes - 1.27.3 - Add option to disable antispam logs

Published by moom0o almost 2 years ago

  • LogBlockedMessages: true (#96)
AnarchyExploitFixes - 1.27.2 - Fix witherspawning

Published by moom0o almost 2 years ago

fixes witherspawning config option where it won't let anything spawn near spawn.

AnarchyExploitFixes - 1.27.1 - Fix null point exception

Published by moom0o almost 2 years ago

Contribute

Please consider contributing to AEF. 1.19 has many changes that break some AEF modules. It would be very helpful if you could fix or report some issues. This project is currently only maintained by contributors. I do not have any time to work on these plugins.

Changelog

  • Fix Nullpointer Exception in 1.19+ (#100)