PluginSpoofer

Reduces plugin detection and avoids exposing the real environment. *Logo generated by Google Gemini (Nano Banana)

PluginSpoofer is a Bukkit/Paper plugin based on PacketEvents, used to intercept common probe commands, filter command tree completion, and return a configurable list of fake plugins.

Why Do This?

Many servers are probed for their plugin stack using methods such as /pl, /plugins, /version, /about, and command completion.

PluginSpoofer's goal is not "absolute security," but rather to significantly increase the cost of detection and reduce the risk of script kiddies easily understanding the configuration.

Core Functionality

• Supports intercepting blacklisted commands (e.g., /plugins, /pl, /about, /version, customizable)
• Supports high-version command tree filtering and Tab completion filtering
• Supports forging /plugins / /pl return results (distinguishing between Paper/Bukkit styles)
• Non-plugin list blacklisted commands follow the server-side native Unknown Command process
• Retains the original command name in the Unknown prompt to avoid exposing "command replacement traces"
• Management commands /pluginspoofer and /ps are hidden from the command tree by default

Dependencies

• Required: PacketEvents

Commands

• /ps help View help
• /ps reload Reload configuration
• /ps version View version

Permissions

• pluginspoofer.admin (default OP)

Configuration Example

debug: false
modern-server: true
block-slash-completion: true
block-non-minecraft-namespaces: true
blocked-commands:
  - "plugins"
  - "pl"
  - "version"
  - "ver"
  - "about"
  - "icanhasbukkit"
  - "bukkit:plugins"
  - "bukkit:pl"
  - "bukkit:version"
  - "bukkit:ver"
  - "bukkit:about"

plugins:
  enabled: true
  force-legacy-format: false
  paper:
    enabled:
      - "Geyser-Spigot"
      - "ViaVersion"
      - "ProtocolLib"
    legacy:
      - "ViaBackwards"
      - "OldCombatMechanics"
    disabled:
      - "SkinsRestorer"
      - "AuthMe"
  bukkit:
    enabled:
      - "EssentialsX"
      - "WorldEdit"
      - "LuckPerms"
      - "Vault"
      - "PlaceholderAPI"
    legacy:
      - "PermissionsEx"
      - "GroupManager"
    disabled:
      - "CoreProtect"
      - "WorldGuard"

Compatibility

• Platform: Bukkit/ Paper 1.20-1.21
• Velocity: Planned

We have only tested versions 1.20-1.21.11 so far; it seems that version 1.12.2 also works in earlier versions.
We welcome you to test more versions; we are committed to making it even better.

Notes

• This plugin is for "minimal information exposure" and is not an anti-cheating or intrusion protection solution.
• When used simultaneously with other plugins that forcibly modify the command system, please perform integration testing first.

License

• AGPL-3.0