St3ix Docs

DupeDB

Check the plugins on Minecraft servers for known dupes and exploits listed on dupedb.net.

Stratum → Users & Security → DupeDB. When the dupe check is on, the Installed tab of the plugins page gets a Dupe Check button.

What it does

The check reads the plugin JARs in the server's plugins folder and looks each one up on dupedb.net. For every plugin it shows the known dupes and exploits, whether they still work, and which versions they hit. Plugins with a working exploit get a red badge in the plugin list, so owners see the risk before players find it.

Keys

DupeDB needs an API key. You choose whose key is used:

ModeWorks like this
Panel key, users may add their ownA user's own key is used when they have one, otherwise the panel's.
Only the panel keyEveryone scans with your key. Users cannot add keys.
Only users' own keysEach user adds their own key on the plugins page.

The panel key is stored encrypted and never sent to browsers.

The admin page also has a search, so staff can look up a plugin by name without scanning a server.

Suggestions

Use the panel key so customers get the check without signing up anywhere. A dupe found before a wipe is one ticket less after it.

On this page