hsSecurityCore - Modular Security Plugin [1.16+]

About Plugin
Meet hsSecurityCore, a new and free security plugin developed by HeliosProject! Designed to enhance the basic security of your server and simplify management, this plugin gathers different security layers under one roof. Thanks to its modular structure, you can provide protection without unnecessarily burdening your server by activating only the features you need.

Our goal is to offer server owners a configurable and stable solution that helps with many issues, from the abuse of OP privileges to simple exploits, command management, and tracking important events.


Features (Toggleable Modules)
All modules can be easily enabled or disabled via

Code (Text):

config.yml

!

• OP Protection:
  • Prevents unauthorized players from using
    Code (Text):

    /op
    and
    Code (Text):

    /deop
    commands in-game (excluding Console).
  • Provides options to log and/or alert staff about OP/De-OP actions performed via console.
  • Allows you to receive instant alerts on OP status changes.
• Logging:
  • Logs important security events (OP changes, blocked command attempts, etc.) to a configurable file (
    Code (Text):

    hsSecurityCore.log
    or custom name).
  • Which events are logged can be configured via
    Code (Text):

    config.yml
    .
• Command Control:
  • Plugin Hiding: Hides/blocks commands that reveal server information like
    Code (Text):

    /plugins
    ,
    Code (Text):

    /pl
    ,
    Code (Text):

    /?
    from unauthorized players. Allows bypassing this restriction with a specific permission (
    Code (Text):

    bypass_plhide
    ).
  • Command Filtering: Restricts command usage based on a configurable BLACKLIST (specified commands are blocked) or WHITELIST (only specified commands are allowed).
  • Provides options for logging and/or alerting staff about blocked command attempts.
  • Allows bypassing the command filter with a specific permission (
    Code (Text):

    bypass_filter
    ).
• Exploit Protection:
  • Book Exploits: Helps prevent server/client crashes by limiting the use of books with excessive page counts or total characters (configurable limits in
    Code (Text):

    config.yml
    ).
  • Sign Exploits: Limits the length of lines written on signs and prevents spam using excessive formatting codes (
    Code (Text):

    &
    ,
    Code (Text):

    §
    ).
  • Logs and/or sends alerts for blocked exploit attempts if the respective modules (Logging/Alerts) and config flags (
    Code (Text):

    exploit_fix.log_attempts
    ,
    Code (Text):

    exploit_fix.alert_on_attempt
    ) are enabled.
• Alert System:
  • Sends instant notifications about critical security events (OP changes, command blocking, exploit attempts, etc.) triggered by other modules.
  • Alert destinations can be selected via
    Code (Text):

    config.yml
    :
    • Server Console
    • Online players with a specific permission (
      Code (Text):

      hssecuritycore.alerts`) (with customizable message prefix)
      [*]Discord Webhook (Simple text format - Configurable message)
      [/LIST]
      [/LIST]
      [*][B]General Features:[/B]
      [LIST]
      [*]Modular Structure: You can completely disable any module you don't need via [CODE]config.yml
      .
    • Fully Configurable: Almost all settings and messages can be easily edited via
      Code (Text):

      config.yml
      and
      Code (Text):

      messages.yml
      .
    • Performance: Designed with performance in mind, utilizing configuration caching.
  
  
  Commands
  • Code (Text):

    /hsscreload
    - Reloads the plugin's settings from
    Code (Text):

    config.yml
    and
    Code (Text):

    messages.yml
    . (Permission:
    Code (Text):

    hssecuritycore.reload
    )
  
  
  Permissions
  • Code (Text):

    hssecuritycore.reload
    - Allows usage of the
    Code (Text):

    /hsscreload
    command. (Default: op)
  • Code (Text):

    hssecuritycore.alerts
    - Allows receiving security alert messages in-game. (Default: op)
  • Code (Text):

    hssecuritycore.cmd.bypass_plhide
    - Permission to bypass the plugin hiding feature. (Set in config.yml)
  • Code (Text):

    hssecuritycore.cmd.bypass_filter
    - Permission to bypass the command filter. (Set in config.yml)
• `config.yml`: Contains main settings for all modules, enable/disable toggles, limits, permissions, webhook URLs, etc. Please review the file carefully and configure it according to your server's needs.
• `messages.yml`: Most messages shown to players can be edited from this file. Color codes (
  Code (Text):

  &
  ) are supported.