Sign Translation Vulnerability
Servers can trick clients into resolving translation keys and sending the result back, leaking installed mods, keybinds, and language settings. ExploitPreventer blocks resolution on sign and anvil edit screens.
Read more →
Local HTTP via Resource Pack
A crafted resource pack URL can force the client to hit local IPs (e.g. localhost:8080), revealing local services running on your machine. ExploitPreventer rejects resource pack URLs pointing to local addresses.
Read more →
Device Fingerprinting
Servers abuse the resource pack cache to uniquely identify clients across sessions, even after username or IP changes. ExploitPreventer isolates the cache per account so packs cannot be correlated.
Read more →