================================================================================
================================================================================
--------------------------------------------------------------------------------
MovementAndSecurityBySummer is a comprehensive hybrid security solution for
Minecraft servers (1.21.x). It uniquely combines a server-side Spigot/Paper
plugin with a client-side Fabric mod to bridge the gap between server authority
and client transparency. This system goes beyond standard anti-cheat heuristics
by establishing a direct, secure communication channel between the client and
server.
================================================================================
================================================================================
1. ADVANCED MOVEMENT HEURISTICS
- Fly Detection: Monitors vertical velocity and airtime.
- Speed/Motion Detection: Analyzes horizontal movement speed relative to
player attributes (walking, sprinting, potion effects).
- Vertical Motion Analysis: Detects abnormal Y-axis movement (e.g.,
Step hacks, HighJump).
- Smart Bypass: Automatically grants exemptions to players in Creative mode,
Spectator mode, or those with specific permissions.
2. COMMAND-BASED BYPASS SYSTEM
- Intelligent Command Monitoring: The plugin listens for movement-altering
commands (e.g., /fly, /tp, /gamemode).
- Automatic Exemption: When a player runs a recognized command, the plugin
temporarily disables checks for them to prevent false positives.
- Configurable: Administrators can define which commands trigger this bypass.
3. COMPREHENSIVE ADMIN GUI (/msec, /mcheck, /ms)
A fully interactive, inventory-based Control Panel for administrators:
- [Manage Reports]: View a paginated list of reported players and read detailed
violation logs (Time, Hack Type, Details).
- [Client Logs]: Inspect raw packet logs from connected clients.
- [Detected Mods]: View the exact mod list of any player using the client mod.
- [Exemptions]: Add or remove players from the exemption list via GUI.
- [Server Settings]: Toggle maintenance mode, debug mode, or the
"Client Mod Required" enforcement policy in real-time.
4. PACKET LOGGING & SECURITY (Requires ProtocolLib)
- Chat Inspection: Logs all chat messages (server-side and client-reported).
- Command Snooping: Logs commands even if they aren't registered on the server
(detects client-side command macros).
- Hidden Channel Detection: Monitors plugin messaging channels to detect
unauthorized mods communicating silently.
================================================================================
================================================================================
The MovementSecurityClientMod is a Fabric-based client-side mod that acts as a
trusted agent on the player's machine.
1. SECURE HANDSHAKE & MOD ENUMERATION (The "Extra Feature")
- Upon joining the server, the mod scans the player's active Fabric mod loader.
- It compiles a complete list of every installed mod (Filename, ID, Version).
- This list is cryptographically encoded into a custom packet payload
(Channel: `movement:security`) and sent privately to the server.
- **Benefit**: The server admin can see *exactly* what mods a player is using
via the "Detected Mods" GUI, making it impossible to hide "X-Ray" or
"Fullbright" mods that don't send standard packets.
2. SERVER-SIDE ENFORCEMENT
- The server can be configured to **KICK** any player who joins without this
specific mod installed.
- This creates a "Trusted Environment" where every participant is verified
to be running the security client.
3. CHAT MIRRORING & DEDUPLICATION (not perfect)
- The mod hooks into the client's chat sending pipeline.
- It mirrors every sent message directly to the security plugin via a side-channel.
- The server compares this against the standard chat packet. If they differ,
it exposes "Ghost Chat" hacks where clients try to hide messages or commands
from the server console.
4. PROTOCOL COMPATIBILITY
- Uses custom VarInt and String encoding to ensure compatibility with
standard Minecraft protocol streams, ensuring stability even on
modified network stacks.
================================================================================
================================================================================
Server: Drop the plugin JAR into /plugins folder. (Requires ProtocolLib).
Client: Drop the mod JAR into /.minecraft/mods folder. (Requires Fabric API).