BackdoorDetector plugin enhances your server's security by detecting and disabling suspicious plugins that may contain backdoor loaders or malicious code.
Dynamic whitelisting and blacklisting of plugins via commands
Real-time monitoring of server commands for potential threats
Detailed logging of suspicious activities
Comprehensive scanning for network connections, file manipulations, suspicious bytecode, and unauthorized classes
Commands:
/scanplugins - Manually scan for backdoors in plugins
/whitelistplugin <pluginName> - Add a plugin to the whitelist
/blacklistplugin <pluginName> - Remove a plugin from the whitelist
Permissions:
backdoordetector.scan - Allows scanning for backdoors in plugins (default: op)
backdoordetector.whitelist - Allows adding plugins to the whitelist (default: op)
backdoordetector.blacklist - Allows removing plugins from the whitelist (default: op)
How It Works: The plugin continuously monitors all installed plugins, calculating their hashes using multiple algorithms. It scans for suspicious patterns such as network connections, file manipulations, and unauthorized classes. If a potential threat is detected, the plugin is disabled, and the activity is logged. Admins can manage a whitelist of trusted plugins and dynamically add or remove plugins using commands.