PluginSpoofer

A Bukkit Plugin to Spoof Client the Server Plugin List

17

PluginSpoofer

PluginSpoofer

Reduces plugin detection and avoids exposing the real environment. *Logo generated by Google Gemini (Nano Banana)

PluginSpoofer is a Bukkit/Paper plugin based on PacketEvents, used to intercept common probe commands, filter command tree completion, and return a configurable list of fake plugins.

Why Do This?

Many servers are probed for their plugin stack using methods such as `/pl`, `/plugins`, `/version`, `/about`, and command completion.

PluginSpoofer's goal is not "absolute security," but rather to significantly increase the cost of detection and reduce the risk of script kiddies easily understanding the configuration.

Core Functionality

- Supports intercepting blacklisted commands (e.g., `/plugins`, `/pl`, `/about`, `/version`, customizable) - Supports high-version command tree filtering and Tab completion filtering - Supports forging `/plugins` / `/pl` return results (distinguishing between Paper/Bukkit styles) - Non-plugin list blacklisted commands follow the server-side native Unknown Command process - Retains the original command name in the Unknown prompt to avoid exposing "command replacement traces" - Management commands `/pluginspoofer` and `/ps` are hidden from the command tree by default

Dependencies

- Required: PacketEvents

Commands

- `/ps help` View help - `/ps reload` Reload configuration - `/ps version` View version

Permissions

- `pluginspoofer.admin` (default OP)

Configuration Example

```yml debug: false modern-server: true block-slash-completion: true block-non-minecraft-namespaces: true blocked-commands: - "plugins" - "pl" - "version" - "ver" - "about" - "icanhasbukkit" - "bukkit:plugins" - "bukkit:pl" - "bukkit:version" - "bukkit:ver" - "bukkit:about"

plugins: enabled: true force-legacy-format: false paper: enabled: - "Geyser-Spigot" - "ViaVersion" - "ProtocolLib" legacy: - "ViaBackwards" - "OldCombatMechanics" disabled: - "SkinsRestorer" - "AuthMe" bukkit: enabled: - "EssentialsX" - "WorldEdit" - "LuckPerms" - "Vault" - "PlaceholderAPI" legacy: - "PermissionsEx" - "GroupManager" disabled: - "CoreProtect" - "WorldGuard" ```

Compatibility

- Platform: Bukkit/ Paper 1.20-1.21 - Velocity: Planned

We have only tested versions 1.20-1.21.11 so far; it seems that version 1.12.2 also works in earlier versions. We welcome you to test more versions; we are committed to making it even better.

Notes

- This plugin is for "minimal information exposure" and is not an anti-cheating or intrusion protection solution. - When used simultaneously with other plugins that forcibly modify the command system, please perform integration testing first.

License

- AGPL-3.0

ADS