✨Authority [1.8 - 1.21.5]

✨Authority [1.8 - 1.21.5] -----

An anti-virus for your Minecraft server.

Authority [1.8 - 1.21.5]
An Anti-Virus for Your Minecraft Server
[IMG]

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
» Overview

Authority is a powerful plugin security system that scans and blocks malicious or backdoored plugins before they even load.
It works by analyzing plugin bytecode and detecting common exploit behaviors like:

• Remote code execution
• Chat-triggered backdoors
• Command injection
• Unsafe reflection or event abuse

If a plugin is flagged, it is immediately quarantined, and the server shuts down to prevent further damage.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
» Features

✔ Early detection using static preload scanning
✔ Automatic quarantine of suspicious plugins
✔ Whitelist and SHA-256 trust support
✔ Scan level sensitivity: Lenient, Normal, Aggressive
✔ Admin commands for live rescanning and control
✔ Console and admin alerts for all detections
✔ Optional logging to file for audit trails

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
» Commands

Code (Text):

/authority flagged

- List all flagged plugins

Code (Text):

/authority rescan

- Re-run scan on all plugins

Code (Text):

/authority scan <plugin>

- Scan a specific plugin

Code (Text):

/authority setlevel <lenient|normal|aggressive>

- Set detection sensitivity

Code (Text):

/authority whitelist add/remove <plugin>

- Modify plugin whitelist

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
» Permissions

Code (Text):

authority.use

– Access Authority commands

Code (Text):

authority.notify

– Receive alerts from Authority

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
» Configuration Example

Code (YAML):

# Authority Plugin Configuration

# Plugins that are always allowed
whitelist :
- Authority
- Essentials
- WorldEdit

# Trusted plugin file hashes (SHA-256)
trusted-hashes :
# - a1b2c3d4e5f6g7h8i9j0aabbccddeeff00112233445566778899aabbccddeeff

# Scan level determines sensitivity:
# - LENIENT: Only block very obvious malicious patterns
# - NORMAL: Balanced mode
# - AGGRESSIVE: Block anything remotely suspicious
scan-level : NORMAL

# Enable logging to plugins/Authority/authority.log
log-to-file : false

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
» Quarantine System

• If a plugin is flagged by Authority, it is renamed to `.disabled`
• It is moved to:

Code (Text):

plugins/quarantine/

• A big red terminal banner is printed to warn the console
• The server is automatically shut down to protect data
• Admins with permission are alerted in chat

You can later review the file and manually decide whether to trust, delete, or whitelist it.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
» Detection Levels

LENIENT –
Only blocks blatant exploit code (e.g., Runtime.exec, dispatch from chat)
Best for minimizing false positives.

NORMAL –
Balanced scanning; blocks known exploit patterns and suspicious command injections.
Recommended for most servers.

AGGRESSIVE –
Flags anything remotely suspicious (even if uncertain)
Best for high-security environments, but may require more whitelisting.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
» Screenshots & Examples

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
» Compatibility

Server Types: Paper, Spigot, Purpur, and many more!
Minecraft Versions: 1.8.x – 1.21.5
API Version: 1.21 (Works on most versions though!)
Load Order: STARTUP (runs before plugins load!)

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
» FAQ

1. Add the plugin name to your `whitelist` in the config
2. OR add its SHA-256 hash to `trusted-hashes`
3. Restart or reload the server

You can find the hash by scanning the file or using `/authority scan <plugin>`.

Not automatically.
Authority will move and rename the file to

Code (Text):

plugins/quarantine/

to avoid accidental execution.
You may delete it manually if desired.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
» Final Notes

Authority runs before most other plugins, giving it a critical security edge.
It’s ideal for public servers, modded packs, or any environment where plugin trust is uncertain.

Regularly audit plugins, keep backups, and stay alert.
Authority is actively maintained and future features may include:

• Auto-updater
• Improved exploit signature detection
• Remote alerting & webhook support
• Admin dashboard or GUI

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

If you have ideas or feedback, feel free to share them in reviews or discussion. Leaving a review motivates me to keep developing!

Protect your server before it's too late.
Use Authority and gain peace of mind.

View on SpigotMC

Resource Information

Author:

----------

Total Downloads: 19

First Release: May 20, 2025

Last Update: May 20, 2025

Category: ---------------

All-Time Rating:

1 ratings

Version -----

Released: --------------------

Downloads: ------

Version Rating:

----------------------

-- ratings