🛡️ HyronSecurity

The Lightweight Packet‑Level Exploit Blocker for Spigot, Paper & Purpur

---

HyronSecurity sits directly on the network layer to intercept and neutralise malicious packet‑based attacks before they can cripple your server's TPS. Instead of reacting after the damage is done, this plugin proactively filters out TabComplete floods, malformed book NBT, and other crash attempts—keeping your gameplay smooth and your players happy.

---

📌 General Information

Badge	Info
Supported Platforms	Spigot, Paper, Purpur (1.12 – 1.21+)
Required Dependency	ProtocolLib (mandatory)
Project Owner	Mr_Stable
Project Manager	Samiop12
License	All Rights Reserved

⚠️ WARNING: This plugin will not work without ProtocolLib. Please install it before starting your server.

---

✨ Features

Feature	Description
🛑 Anti Tab-Complete Exploit	Monitors TabComplete packet frequency. If a player floods the server with an excessive number of requests per second (the infamous "TabCrash"), HyronSecurity instantly throttles the connection, preventing CPU spikes and freezes.
📖 Anti Book Exploit	Intercepts and sanitises all book data before it reaches the server thread. The plugin checks for oversized NBT structures, invalid JSON, enormous page counts, and known character‑injection payloads—dropping malicious packets harmlessly.
🛡️ Admin Whitelist (Bypass Mode)	Designate trusted players (Admins, Developers, or monitoring bots) to be fully exempt from all security checks. No false positives, no interruptions for your staff.
🚨 Automatic Kick + Alert System	Choose your preferred reaction: silently log the offence, broadcast real‑time alerts to staff, or automatically kick the offender with a fully customizable message. Stay informed without being overwhelmed.
⚡ Zero‑TPS Impact	All packet listeners run asynchronously. The plugin adds virtually zero overhead to your server's tick rate.

---

📦 Installation

1. Download & Install ProtocolLib

   • Place ProtocolLib.jar in your /plugins/ folder.
   • Restart your server (/reload is not sufficient for ProtocolLib to initialise correctly).

2. Install HyronSecurity

   • Place HyronSecurity.jar in your /plugins/ folder.
   • Restart your server once more (or use /hyronsecurity reload after the first startup).

3. Configure

   • After the first start, a default config.yml will be generated inside /plugins/HyronSecurity/.
   • Adjust the thresholds, kick messages, and alert settings to match your server's needs.
   • Run /hyronsecurity reload to apply your changes instantly.

---

📜 Commands & Permissions

Command	Permission	Default	Description
/hyronsecurity	hyronsecurity.admin	OP	Displays plugin status and active mitigation statistics.
/hyronsecurity alerts	hyronsecurity.alert	OP	Toggles real‑time exploit alerts on/off.
/hyronsecurity reload	hyronsecurity.reload	OP	Safely reloads the configuration file without restarting.
/hyronsecurity bypass	hyronsecurity.bypass	OP	Toggles bypass mode for a specified player (if enabled in config).

💡 Note: All permissions are inherited by default for Operators (OP). Assign them via your preferred permissions manager (LuckPerms, PermissionsEx, etc.) for non‑OP staff.

---