AstroSploit >> Private

Get You're server whitelisted >> Discord > ThreadCrash

High-performance packet protection plugin for Paper & Spigot

AstroSploit is an open-source protection plugin designed to filter exploit packets, invalid items, custom payload abuse, and Netty buffer overflows before they reach the main server loop.

Trusted by 17+ servers and protecting over 488 players

GitHub Repository View config.yml

How It Works

AstroSploit acts as an inline packet engine at the Netty pipeline layer, filtering malformed traffic before it hits the server.

Legit Traffic: Valid player packets are verified by AstroSploit decoders and forwarded directly to the server.

Malicious Traffic: Exploit payloads are intercepted and dropped inside AstroSploit without touching main ticks.

Features

Full Configuration

Control checks, actions, thresholds, and limits in config.yml.

Punishments

Disconnect exploiters, set delayed bans, and define max violations before punishment.

Integrations

Supports Discord webhooks, SQLite, MySQL, and YAML storage.

Packet Protection

Checks malformed packets, oversized payloads, rate abuse, and invalid data before they hit the server.

Configurable Checks

Enable or tune checks like BookCrash, CustomPayload, InvalidItem, InvalidSign, InvalidPosition, RecipeSpam, and BrandSpoof.

Console & Discord Preview

Clean server console logs and real-time Discord webhook notifications.

Server Console

[12:04:15] [AstroSploit] » Notch failed Packet Decoder (x1) - Dropped

[12:04:18] [AstroSploit] » frep failed Invalid Custom Payload (x1) - Dropped

[12:04:22] [AstroSploit] » iTz_Lucky failed Invalid Item (x1) - Disconnected

AstroSploit BOT Today at 12:04

Player Exploit Flagged

Player: ThreadCrash

Check: Invalid Custom Payload

Status: Flagged & Dropped

Ping: 42ms

Webhooks dispatch instantly to staff channels without impacting server tick rate.

AstroSploit Statistics

600 400 200 0

17 Servers

488 Players

config.yml

YAML

general:
prefix: "&#ABEDC6ASTROSPLOIT &8» &7"
announce-brand-on-join: true
debug: false
player-logs:
expiration: "1d"
auto-purge-expired: true
alerts:
console: true
in-game: true
permission: "astrosploit.alerts"
cooldown-ms: 500
format: "%prefix%&f%player% &7failed &e%check% &8(&cx%violations%&8)"
discord:
enabled: true
webhook-url: ""
checks:
invalid-item:
enabled: true
action: KICK
max-nbt-depth: 10
max-nbt-size-bytes: 16384
cancel-event: true
invalid-custom-payload:
enabled: true
action: KICK
max-payload-size-bytes: 32768
cancel-event: true
invalid-sign:
enabled: true
action: KICK
max-line-length: 384
cancel-event: true
invalid-recipe:
enabled: true
action: KICK
max-recipe-packets-per-sec: 15
cancel-event: true
invalid-window-click:
enabled: true
action: KICK
max-clicks-per-sec: 35
cancel-event: true
packet-rate:
enabled: true
action: KICK
max-packets-per-sec: 300
burst-threshold: 500
entity-limit:
enabled: true
max-entities-per-chunk: 80
max-vehicles-per-chunk: 25
op-protection:
enabled: true
strict-whitelist: true
whitelisted-ops:
- "ThreadCrash"
messages:
no-permission: "%prefix%&cYou do not have permission to execute this command."
reloaded: "%prefix%&aConfiguration reloaded successfully."
alerts-enabled: "%prefix%&aStaff alerts enabled."
alerts-disabled: "%prefix%&cStaff alerts disabled."