Compatibility
Minecraft: Java Edition
Platforms
Tags
Creators
Details
🛡️ HyronSecurity
The Lightweight Packet‑Level Exploit Blocker for Spigot, Paper & Purpur
HyronSecurity sits directly on the network layer to intercept and neutralise malicious packet‑based attacks before they can cripple your server's TPS. Instead of reacting after the damage is done, this plugin proactively filters out TabComplete floods, malformed book NBT, and other crash attempts—keeping your gameplay smooth and your players happy.
📌 General Information
| Badge | Info |
|---|---|
| Supported Platforms | Spigot, Paper, Purpur (1.12 – 1.21+) |
| Required Dependency | ProtocolLib (mandatory) |
| Project Owner | Mr_Stable |
| Project Manager | Samiop12 |
| License | All Rights Reserved |
⚠️ WARNING: This plugin will not work without ProtocolLib. Please install it before starting your server.
✨ Features
| Feature | Description |
|---|---|
| 🛑 Anti Tab-Complete Exploit | Monitors TabComplete packet frequency. If a player floods the server with an excessive number of requests per second (the infamous "TabCrash"), HyronSecurity instantly throttles the connection, preventing CPU spikes and freezes. |
| 📖 Anti Book Exploit | Intercepts and sanitises all book data before it reaches the server thread. The plugin checks for oversized NBT structures, invalid JSON, enormous page counts, and known character‑injection payloads—dropping malicious packets harmlessly. |
| 🛡️ Admin Whitelist (Bypass Mode) | Designate trusted players (Admins, Developers, or monitoring bots) to be fully exempt from all security checks. No false positives, no interruptions for your staff. |
| 🚨 Automatic Kick + Alert System | Choose your preferred reaction: silently log the offence, broadcast real‑time alerts to staff, or automatically kick the offender with a fully customizable message. Stay informed without being overwhelmed. |
| ⚡ Zero‑TPS Impact | All packet listeners run asynchronously. The plugin adds virtually zero overhead to your server's tick rate. |
📦 Installation
-
Download & Install ProtocolLib
- Place
ProtocolLib.jarin your/plugins/folder. - Restart your server (
/reloadis not sufficient for ProtocolLib to initialise correctly).
- Place
-
Install HyronSecurity
- Place
HyronSecurity.jarin your/plugins/folder. - Restart your server once more (or use
/hyronsecurity reloadafter the first startup).
- Place
-
Configure
- After the first start, a default
config.ymlwill be generated inside/plugins/HyronSecurity/. - Adjust the thresholds, kick messages, and alert settings to match your server's needs.
- Run
/hyronsecurity reloadto apply your changes instantly.
- After the first start, a default
📜 Commands & Permissions
| Command | Permission | Default | Description |
|---|---|---|---|
/hyronsecurity |
hyronsecurity.admin |
OP | Displays plugin status and active mitigation statistics. |
/hyronsecurity alerts |
hyronsecurity.alert |
OP | Toggles real‑time exploit alerts on/off. |
/hyronsecurity reload |
hyronsecurity.reload |
OP | Safely reloads the configuration file without restarting. |
/hyronsecurity bypass |
hyronsecurity.bypass |
OP | Toggles bypass mode for a specified player (if enabled in config). |
💡 Note: All permissions are inherited by default for Operators (OP). Assign them via your preferred permissions manager (LuckPerms, PermissionsEx, etc.) for non‑OP staff.


