DupeDB
Check the plugins on Minecraft servers for known dupes and exploits listed on dupedb.net.
Stratum → Users & Security → DupeDB. When the dupe check is on, the Installed tab of the plugins page gets a Dupe Check button.
What it does
The check reads the plugin JARs in the server's plugins folder and looks each one up on dupedb.net. For every plugin it shows the known dupes and exploits, whether they still work, and which versions they hit. Plugins with a working exploit get a red badge in the plugin list, so owners see the risk before players find it.
Keys
DupeDB needs an API key. You choose whose key is used:
| Mode | Works like this |
|---|---|
| Panel key, users may add their own | A user's own key is used when they have one, otherwise the panel's. |
| Only the panel key | Everyone scans with your key. Users cannot add keys. |
| Only users' own keys | Each user adds their own key on the plugins page. |
The panel key is stored encrypted and never sent to browsers.
Search
The admin page also has a search, so staff can look up a plugin by name without scanning a server.
Suggestions
Use the panel key so customers get the check without signing up anywhere. A dupe found before a wipe is one ticket less after it.