TCGuard 2.0 - Universal Crash, Exploit, Packet & Anti-Bot Security Engine
Supported Versions: Spigot / Paper / Purpur / Folia (1.8.8 - 1.21+ in a Single JAR)
Looking for an all-in-one, lightweight security solution to protect your Minecraft server from bot attacks, crash items, packet floods, and lag machines?
TCGuard is built from the ground up to eliminate known exploits, crashes, and malicious packets without introducing any lag or TPS drops.
==================================================
KEY FEATURES
==================================================
1. Anti-Bot & Connection Shield
• 0.0ms Handshake Timing: Detects automated connection bots instantly via packet timing analysis.
• Subnet (/24) Rate Limiter: Limits rapid join floods originating from the same IP range.
• Dynamic Attack Mode: Automatically triggers heightened protection during bot waves.
2. Exploit & Crash Prevention
• Log4J Protection: Blocks Log4J JNDI injection (CVE-2021-44228) in chat, commands, and signs.
• Invalid Movement Filter: Cleans invalid/NaN coordinates and extreme pitch/yaw angles.
• NBT Item Security: Drops nested shulker boxes (shulker bombs), oversized books, and particle fireworks.
• Format String Filter: Drops translation exploit strings (%s, %d) that crash clients or servers.
3. Packet & Combat Filters
• Netty Pipeline Shield: Traps corrupt network frames and closes broken sockets cleanly.
• Auto-Clicker & Macro Guard: Detects macro clickers (22+ CPS) using click interval variance analysis.
• FastBreak & FastPlace: Drops impossible block breaking and placement speeds.
4. Mandatory Admin GuardCode (2FA Pin Lock)
• Requires all OP and administrator players to configure and verify a secret GuardCode PIN on join.
• Unverified admins are completely frozen (cannot move, break/place blocks, open containers, or run commands except AuthMe).
• Console-Only Code Reset: Security PINs can ONLY be reset directly through the server console via "guardcode-reset <username>" or "guard resetcode <username>".
• Prevents compromised or backdoored OP accounts from damaging the server.
5. Console-Only Admin Whitelist & Automatic Deop Sync
• Having server OP does not grant permission to bypass TCGuard or access the menu.
• Only players added from the server console can open the menu or run commands.
• Automatic Deop Synchronization: When any administrator is deopped (/deop, console deop, or op change), they are immediately stripped of admin status and removed from admins.yml.
6. Auth Security & Brute-Force Shield
• Temporarily locks out IP addresses after repeated failed login attempts.
• Rejects weak and common passwords (123456, qwerty, etc.) during registration.
• Optional staff IP whitelist to protect administrator accounts.
7. In-Game GUI Dashboard
• Type /guard gui to view live TPS, RAM metrics, and toggle 14 protection modules with a single click.
8. Forensics & Database Logging
• Automatically records all security incidents to a local SQLite or remote MySQL database.
• Use /guard history <player> to inspect historical violations.
9. Multi-Language Support
• Built-in support for English (en), Turkish (tr), and Spanish (es). Switch languages directly in the GUI with one click.
==================================================
COMMANDS & PERMISSIONS
==================================================
Console Commands (Console-Only):
• guard-add <username> - Adds an authorized administrator to admins.yml.
• guard-remove <username> - Removes an administrator from admins.yml.
• guard-list - Lists all authorized administrators.
• guardcode-reset <username> - Resets an administrator's GuardCode PIN (Aliases: gcode-reset, resetcode).
• guard resetcode <username> - Resets an administrator's GuardCode PIN via main command.
In-Game Admin Commands (Authorized Admins Only):
• /guardcode set <pin> - Sets your administrator GuardCode PIN.
• /guardcode <pin> - Verifies your GuardCode to unlock your administrator session.
• /guard gui - Opens the live module dashboard.
• /guard reload - Reloads configuration and translation files.
• /guard stats - Displays security incident counters.
• /guard history <player> - Shows violation logs for a specific player.
• /guard logs [limit] - Shows recent security logs.
==================================================
INSTALLATION
==================================================
1. Drop TCGuard.jar (or TCGuard-2.0-ENTERPRISE.jar) into your server's plugins/ folder.
2. (Optional) Install ProtocolLib for deeper packet inspection.
3. Start your server.
4. From your server console, add yourself: "guard-add YourUsername"
5. In-game, set your 2FA pin: "/guardcode set 1234"
6. Type /guard gui in-game to view your dashboard!
Protect your Minecraft server today with TCGuard!
Supported Versions: Spigot / Paper / Purpur / Folia (1.8.8 - 1.21+ in a Single JAR)
Looking for an all-in-one, lightweight security solution to protect your Minecraft server from bot attacks, crash items, packet floods, and lag machines?
TCGuard is built from the ground up to eliminate known exploits, crashes, and malicious packets without introducing any lag or TPS drops.
==================================================
KEY FEATURES
==================================================
1. Anti-Bot & Connection Shield
• 0.0ms Handshake Timing: Detects automated connection bots instantly via packet timing analysis.
• Subnet (/24) Rate Limiter: Limits rapid join floods originating from the same IP range.
• Dynamic Attack Mode: Automatically triggers heightened protection during bot waves.
2. Exploit & Crash Prevention
• Log4J Protection: Blocks Log4J JNDI injection (CVE-2021-44228) in chat, commands, and signs.
• Invalid Movement Filter: Cleans invalid/NaN coordinates and extreme pitch/yaw angles.
• NBT Item Security: Drops nested shulker boxes (shulker bombs), oversized books, and particle fireworks.
• Format String Filter: Drops translation exploit strings (%s, %d) that crash clients or servers.
3. Packet & Combat Filters
• Netty Pipeline Shield: Traps corrupt network frames and closes broken sockets cleanly.
• Auto-Clicker & Macro Guard: Detects macro clickers (22+ CPS) using click interval variance analysis.
• FastBreak & FastPlace: Drops impossible block breaking and placement speeds.
4. Mandatory Admin GuardCode (2FA Pin Lock)
• Requires all OP and administrator players to configure and verify a secret GuardCode PIN on join.
• Unverified admins are completely frozen (cannot move, break/place blocks, open containers, or run commands except AuthMe).
• Console-Only Code Reset: Security PINs can ONLY be reset directly through the server console via "guardcode-reset <username>" or "guard resetcode <username>".
• Prevents compromised or backdoored OP accounts from damaging the server.
5. Console-Only Admin Whitelist & Automatic Deop Sync
• Having server OP does not grant permission to bypass TCGuard or access the menu.
• Only players added from the server console can open the menu or run commands.
• Automatic Deop Synchronization: When any administrator is deopped (/deop, console deop, or op change), they are immediately stripped of admin status and removed from admins.yml.
6. Auth Security & Brute-Force Shield
• Temporarily locks out IP addresses after repeated failed login attempts.
• Rejects weak and common passwords (123456, qwerty, etc.) during registration.
• Optional staff IP whitelist to protect administrator accounts.
7. In-Game GUI Dashboard
• Type /guard gui to view live TPS, RAM metrics, and toggle 14 protection modules with a single click.
8. Forensics & Database Logging
• Automatically records all security incidents to a local SQLite or remote MySQL database.
• Use /guard history <player> to inspect historical violations.
9. Multi-Language Support
• Built-in support for English (en), Turkish (tr), and Spanish (es). Switch languages directly in the GUI with one click.
==================================================
COMMANDS & PERMISSIONS
==================================================
Console Commands (Console-Only):
• guard-add <username> - Adds an authorized administrator to admins.yml.
• guard-remove <username> - Removes an administrator from admins.yml.
• guard-list - Lists all authorized administrators.
• guardcode-reset <username> - Resets an administrator's GuardCode PIN (Aliases: gcode-reset, resetcode).
• guard resetcode <username> - Resets an administrator's GuardCode PIN via main command.
In-Game Admin Commands (Authorized Admins Only):
• /guardcode set <pin> - Sets your administrator GuardCode PIN.
• /guardcode <pin> - Verifies your GuardCode to unlock your administrator session.
• /guard gui - Opens the live module dashboard.
• /guard reload - Reloads configuration and translation files.
• /guard stats - Displays security incident counters.
• /guard history <player> - Shows violation logs for a specific player.
• /guard logs [limit] - Shows recent security logs.
==================================================
INSTALLATION
==================================================
1. Drop TCGuard.jar (or TCGuard-2.0-ENTERPRISE.jar) into your server's plugins/ folder.
2. (Optional) Install ProtocolLib for deeper packet inspection.
3. Start your server.
4. From your server console, add yourself: "guard-add YourUsername"
5. In-game, set your 2FA pin: "/guardcode set 1234"
6. Type /guard gui in-game to view your dashboard!
Protect your Minecraft server today with TCGuard!
