KroshAntiCheat

KroshAntiCheat

KroshAntiCheat v1.1.6 — Full Feature List

Movement Checks

Speed — detects players moving faster than the allowed horizontal speed per tick. Threshold is configurable in config.yml.

Fly — detects players rising into the air without a valid reason. Checks vertical delta per tick against a configurable max-rise value.

NoFall — detects players who fall a significant distance without taking fall damage, a common exploit used by cheat clients.

Timer — detects players sending movement packets faster than the server tick rate, giving them a speed advantage without technically moving fast.

Combat Checks

KillAura — detects abnormal CPS (clicks per second) during combat. When enough preliminary flags are accumulated, triggers the Fake Entity verification system.

Fake Entity Verification — when KillAura is suspected, an invisible silent ArmorStand is spawned directly behind the player where they cannot see it. A legitimate player never hits it. A KillAura client automatically targets it and gets confirmed with a high-weight flag labeled "Fake-Entity" in alerts.

AutoClicker — detects inhuman clicking speed independent of KillAura, focused on raw attack packet rate.

Reach — detects players hitting entities from beyond the allowed distance. Uses a ping-compensated formula based on the player's real server-side ping (from keep-alive packets, not client-reported). Also keeps a 4-tick position history for both attacker and target to backtrack and eliminate false positives caused by latency. Stationary targets are handled correctly.

World Checks

Scaffold — detects players placing blocks too rapidly beneath themselves, a common bridging cheat behavior.

InventoryMove — detects players moving horizontally while a container screen (chest, furnace, anvil, etc.) is open. Legitimate clients freeze movement input when a GUI is open. Knockback and explosion movement are ignored to prevent false positives.

Packet Layer (Pre-Server Core)

All checks above run at the Bukkit level after the server processes packets. The packet layer runs on the Netty I/O thread before the server core ever sees the packet.

PacketTimer — counts raw movement packets per second at the Netty level. Catches clients that flood packets to gain speed without Bukkit ever seeing the surplus.

PacketValidator — validates packet field values before the server processes them. Detects NaN or Infinity in coordinates, coordinates beyond world boundaries, and abnormally rapid attack packets at the raw level.

Violation System

• Every check has its own configurable violation threshold and action (WARN / KICK / BAN)
• Violations decay every 30 seconds to prevent unfair accumulation from minor lag spikes
• High-confidence detections (like Fake Entity hits) add weighted violations instead of just +1
• Alerts show the check name, player name, current VL, and an optional tag like "Fake-Entity" or "PacketLayer"

Commands

Permissions

Compatibility

• Paper 1.19.x — 1.20.4
• Java 17 or higher
• Not compatible with Paper 1.20.5+ (requires reflection update for Mojang mappings)