Spartan

Spartan gives every item in a player's inventory a hidden tracking id and scans online players every second. When the same id shows up twice, in one inventory or across two players, the extra copy is removed, logged to /dupelog and kept in a quarantine so staff can hand it back if it was a false positive. Other plugins don't see the tracking id, so shops, crates and item comparisons keep working.

Around that engine sit the tools staff use every day: GUI punishments with presets, staff mode with vanish and freeze, a chat log, a chat filter, player replays and /sus, one flag log for every anticheat on the server.

Features#

Anti-dupe engine

Every item carries a hidden tracking id. When the same id shows up twice, the extra copy is removed, logged and quarantined so staff can hand it back. Anti-dupe

Plugin exploit scanner

Your installed plugins are checked against DupeDB for known dupe exploits on start and every 6 hours. Plugin exploit scanner

Setup wizard

/spartan setup walks through every module in game, one page each. Nothing is saved until you finish. Setup wizard

Punishments with presets

/punish <player> opens a GUI: pick a type and a preset. Repeat offences step to the next duration on their own. Punishments

Player history

/history <player> shows every ban, mute, warn and kick with staff notes, and lets you edit them. History

Staff mode

/staffmode vanishes you and swaps your hotbar for staff tools. Your inventory comes back when you leave. Staff mode

Chat log

/chatlog <player> shows recent chat and commands, newest first. Private messages only show to staff allowed to read them. Chat log

One flag log for every anticheat

/sus collects flags from Grim, Vulcan, Matrix, AAC, Kratos and Spartan's anti-dupe in one board. Sus flag log

Replays of every dupe

A replay is saved automatically each time a dupe is caught, with 30 seconds of run-up, so staff can see how it was done. Replay

Chat filter

Catches spaced, leetspeak and stretched spellings of filtered words, with a strike ladder from a warning up to a ban. Chat filter

Client fingerprint

Cheat clients and mods are identified on join, with an alert first and a kick or ban on repeat offences. Client fingerprint

Dupe and economy watch

Staff are warned about suspicious piles of crate keys or identical shulkers, and about economy payouts repeating too fast. AI dupe watch and economy watch

Anti-exploit

Blocks the exploits posted publicly on DupeDB: NaN and overflow amounts, command spam, MiniMessage injection, book and chunk bans, bundle dupes, villager shear dupes and force-OP. Anti-exploit

Permissions#

Commands#

-s on a punishment command makes it silent: only staff with spartan.notify.silent see it. Durations use 10m, 1h, 7d or permanent.

Every command also works as /spartan <command>, for example /spartan ban.

Configuration#

Spartan keeps a main config.yml plus one folder per module under plugins/Spartan/modules/. Each module has its own config.yml, messages.yml and GUI files.

Main config.yml options:

Apply changes with /spartan reload.

Update alerts#

Staff with blazez.updates (OPs by default) get one chat message when they join, listing every installed BlazeZ plugin that has an update waiting. It stays off until you set check-for-updates: true in this plugin's license.yml.

Install#

1. Put Spartan-<version>.jar in your server's plugins folder.
2. Install PacketEvents if you want client fingerprinting and replays. Both stay off without it.
3. Start the server once. Spartan creates config.yml, license.yml and the modules folder.
4. Put your license key in license.yml under license-key, then restart. Your key is under My Licenses on the BlazeZ portal.
5. Join as an op and run /spartan setup. Until setup is finished, every Spartan command except /spartan setup is blocked for players.
6. Walk through the wizard and click finish. Your choices are written to the module configs.

For a network, put the same jar on your Velocity or BungeeCord proxy too. A ban then disconnects the player from the whole network instead of one backend, which matters when a lobby, limbo or AFK server doesn't run Spartan.

Setup wizard#

/spartan setup opens an in-game wizard with one page per enabled module. Nothing is saved until you finish, and you can run it again at any time.

Anti-dupe#

The scan runs every scan.interval-ticks (20) over each player's own inventory, including shulker boxes and bundles inside it. Open containers and plugin GUIs are skipped, because items there legitimately move between viewers. A clash has to show up on scan.confirm-passes (3) passes in a row before anything is removed.

Removed copies go to the quarantine (quarantine.enabled, up to 500 entries). /dupequarantine lists them with an index, and /dupequarantine give <index> [player] hands one back. Every hit also lands in /dupelog and /sus.

Built-in fixes cover Shopkeepers, EconomyShopGUI, BetterTeams and VariableEnderChests. /healtrades repairs Shopkeepers trades that a tracked item broke, and it also runs on its own every 15 minutes.

Dupe log#

/dupelog opens the flag log filtered to anti-dupe hits. Click a player to see their hits. dupe-log.max-entries (500) caps it. Set dupe-webhook.webhook in modules/sus/config.yml to post each hit to Discord.

Plugin exploit scanner#

On start and every 360 minutes, Spartan checks your installed plugins against DupeDB for known dupe exploits. /plugindupes lists the findings, /plugindupes review <id> marks one as handled, and staff are warned on join while findings are open (warn-on-join).

AI dupe watch and economy watch#

AI dupe watch looks at what players are carrying: large piles of crate keys, several shulker boxes with identical contents, or big stacks of valuable items. Staff get a soft warning asking them to judge whether it's legitimate. Each pile is warned once, and warnings wait for a staff member who isn't AFK.

Economy watch wraps your Vault economy and alerts staff when the same source pays a player 4 times within 10 seconds. List plugins whose payouts are meant to be clicked quickly under economy-watch.ignored-causes.

Item tools#

/finditem lists every place a copy of the item in your hand exists: inventories, ender chests, chests, barrels, shulker boxes, dropped items and PlayerVaultsX vaults. exact matches name, lore and data; type matches the material only. It's off by default (item-finder.enabled).

/additemlog shows which plugin gave which player what item, newest first.

Punishments#

/punish <player> opens a GUI: pick a type, pick a preset, confirm. Running /ban <player> with only a name opens the same preset picker. Punishments are announced to staff with spartan.notify.broadcast, or only to spartan.notify.silent when you add -s.

Presets live in presets.yml. Each has a type, a reason, a permission, an icon, and one or more duration values. With several durations, each repeat offence steps to the next one, for example 14d, then 60d, then permanent. A preset's optional command runs from console when it's applied, which lets you bridge to another plugin.

History#

/history <player> opens every ban, mute, warn and kick on record, with staff notes. From there you can open a punishment to see its details or edit it. When the player is online, their client brand and fingerprint strikes print in chat too.

Reports and appeals#

/report <player> opens a GUI where the player picks a reason. Staff with spartan.reports.notify are told, and /reports lists open reports. report.cooldown-seconds (120) limits how often a player can report. Set report.enabled to false to turn reports off.

/appeal is for a muted or frozen player. It opens a form, and the appeal goes to the Spartan web panel, where staff approve or deny it. It needs cloud.enabled.

Staff mode#

/staffmode puts you in creative, vanishes you and swaps your hotbar for staff tools. Your own inventory comes back when you leave. An action bar shows your vanish and staff chat state and the nearest player.

Change slots, materials and names under items in staff-mode.yml. A frozen player can only run the commands in freeze.allowed-commands (helpop, report, appeal).

Chat log#

/chatlog <player> opens a player's recent chat and commands, newest first. Private messages (/msg, /tell, /r and the rest in tell-commands and reply-commands) only show to staff with spartan.chatlog.private. It keeps 120 lines per player (history.max-per-player).

Chat filter#

The filter censors words from words.yml in public chat with censor-character (*). Matching ignores case, spacing, punctuation, common leetspeak and stretched letters, so one plain word in the list also catches s.t.u.p.i.d or ST4P1D. Quote a phrase to match several words.

Each filtered message is a strike. Strikes reset after 30 minutes without one. The default ladder is a warning at 3 strikes, a 10 minute mute at 5, a 1 hour mute at 8, a kick at 10, a 3 day ban at 15 and a ban at 20. Edit it under strikes.punishments. Use /chatfilter test <message> to try a word before adding it.

Anti-exploit#

Anti-exploit stops the mechanisms behind the dupes and crashes posted on DupeDB, so one patch covers every plugin that has the same flaw. enabled in modules/anti-exploit/config.yml turns the whole module on or off. A blocked action tells the player, logs to console and alerts staff with spartan.antiexploit.alerts. With mirror-to-sus: true it is also added to /sus. Bedrock players are skipped while skip-bedrock is true.

Patch menu#

/antiexploit patches lists all 40 patches with what each one stops, what it is useful for and what it needs. Click a patch to turn it on or off, shift-click to put it back on automatic. Your choices are saved in patches.yml.

On automatic, a patch made for one plugin (WorldEdit //calc, TheNewEconomy, QuickShop-Hikari, GSit, AxVaults, coinflip, lottery and RynekSK command crashes) is only on while that plugin is installed. Bundle patches need Minecraft 1.21.2+, the villager shear patch needs 1.21.6+, and packet, sign and anvil patches need PacketEvents. A patch that is off for one of these reasons shows why in the menu, and clicking it forces it on. Force-OP is off until you turn it on.

Checks#

Run /antiexploit status to see how many patches are on per check and how many actions each one blocked since the last restart.

Sus flag log#

/sus collects flags from every anticheat on the server in one log: Grim, Vulcan, Matrix, AAC, Kratos and Spartan's own anti-dupe. It opens on a board of flagged players. Click one, or run /sus <player>, to see their flags.

Live alerts are off by default (alerts.enabled). Staff with spartan.sus.alerts turn them on for themselves with /sus alerts. /sus check <name> silences one noisy check, such as a single Grim check, without turning off the anticheat. history.max-per-player (80) caps stored flags per player.

Client fingerprint#

Fingerprint identifies cheat clients when a player joins, from the client brand, plugin channels, mod loaders and a sign translation probe. It needs PacketEvents. Bedrock players are skipped (skip-bedrock).

Each detection in modules/fingerprint/config.yml has an action. ALERT tells staff with spartan.fingerprint.alerts. PUNISH also runs enforcement.first-strike (a kick by default) and then enforcement.repeat-strike (a ban by default) on the next offence. Freecam behavior and fast rotation detections are on by default, radar (minimap mods) is off.

/fingerprintexempt <player> [seconds] pauses every fingerprint check on a player, for example during a minigame that sends odd packets.

Replay#

Spartan records every player so staff can watch what happened. /replay opens a picker. Choose a player to set the rewind window and speed, then watch a body only you can see, controlled from a hotbar. Nearby players, block edits, chat, commands and combat play back with it. It needs PacketEvents.

A replay is saved automatically every time a dupe is caught (dupe-capture.enabled, 30 seconds of run-up). /replay <player> start [seconds] saves one by hand. /replay saved lists both. The recording goes back 900 seconds (recording.max-history-seconds), and saved replays past 200 delete the oldest.

Whitelist#

When the server whitelist is on, a non-whitelisted player's join attempt is announced in chat with attempt-join-message. Turn it off with whitelist-warning.enabled.

Placeholders#

Troubleshooting#

/ban and /mute run another plugin's command. With punishment.claim-commands: auto, Spartan steps aside when LiteBans, AdvancedBan, LibertyBans, BanManager or a similar plugin is installed. Set it to always to claim them.

Players can't run any Spartan command. Setup isn't finished. Run /spartan setup as an op and click through to the end.

Fingerprint or replay do nothing. Install PacketEvents and restart. The console prints a warning when it's missing.