ExploitPreventer logo Official Website

ExploitPreventer

The official Fabric mod that protects your Minecraft client from known server-side exploits.

Fabric · Client-side · MIT License · Free & Open Source

What it protects against

Sign Translation Vulnerability

Servers can trick clients into resolving translation keys and sending the result back, leaking installed mods, keybinds, and language settings. ExploitPreventer blocks resolution on sign and anvil edit screens.

Read more →

Local HTTP via Resource Pack

A crafted resource pack URL can force the client to hit local IPs (e.g. localhost:8080), revealing local services running on your machine. ExploitPreventer rejects resource pack URLs pointing to local addresses.

Read more →

Device Fingerprinting

Servers abuse the resource pack cache to uniquely identify clients across sessions, even after username or IP changes. ExploitPreventer isolates the cache per account so packs cannot be correlated.

Read more →

Downloads

Pick the build that matches your Minecraft version. All files are hosted directly on this official site.

Loading downloads…

How to install

  1. Install Fabric Loader for your Minecraft version.
  2. Install Fabric API (required dependency).
  3. Download the .jar above that matches your Minecraft version.
  4. Drop the .jar into your mods folder:
    • Windows: %APPDATA%\.minecraft\mods
    • macOS: ~/Library/Application Support/minecraft/mods
    • Linux: ~/.minecraft/mods
  5. Launch Minecraft with the Fabric profile. That's it.

Requires Java 21+. The mod is client-side only — no server install needed.

Hall of Shame

Servers and plugins documented as actively using these exploits. Source: official HALL_OF_SHAME.md.

Servers

AddressWebsiteExploits in use
cytooxien.netcytooxien.netTranslation key, Fingerprinting, Local HTTP
mc.blockgame.infoblockgame.infoTranslation key
minevn.netminevn.netTranslation key
mcpvp.clubstore.mcpvp.clubTranslation key
donutsmp.netstore.donutsmp.netTranslation key
play.ccnetmc.comccnetmc.comTranslation key
netherite.ggnetherite.ggTranslation key
play.firemc.funfiremc.funTranslation key
applemc.funapplemc.funTranslation key
hugosmp.netshop.hugosmp.netTranslation key
pixel-mc.netstore.pixel-mc.netTranslation key
boholsmp.ultramc.cobohol-smp.tebex.ioTranslation key
stray.ggstore.stray.ggTranslation key
fyresmp.netstore.fyresmp.netTranslation key
pvphub.mestore.pvphub.meTranslation key
unstableevents.netTranslation key
playunstable.netunstableanalysis.comTranslation key
uneasyvanilla.comuneasyvanilla.comTranslation key
play.vanillaplus.netvanillaplus.netTranslation key
pvpparadise.netTranslation key
play.dgnetwork.indgnetwork.inTranslation key

Plugins

PluginSourceExploits in use
AntiSpoof ProTranslation key, Fingerprinting
EXMNTGitHubTranslation key
TotemGuardGitHubTranslation key
CheckHacksGitHubTranslation key
FakeModBlockerGitHubTranslation key
uModDetectGitHubTranslation key

Reporting a Bypass

Found a new exploit or a way around the mod? Contact nikoverflow on Discord, or email nikoverflow007@gmail.com. Include reproduction steps, Minecraft version, and any logs or screenshots.