ChampionsCode.

ChampionsCode is a client-side Fabric mod for Minecraft 26.3 that brings an msfconsole-inspired workflow to authorized, defensive server and plugin research, alongside an explicitly enabled runtime Java addon development system.

Download 0.1.0-beta.1 Release notes

Research console

A terminal in game.

F8 opens a movable, resizable terminal with Console and Java tabs
clickgui and categorygui interfaces with typed option editors
Module registry with structured findings and explicit run controls
Command history, scrolling, colors, and confirmation redaction

Modules

Passive-first tooling.

Server fingerprint, connection posture, and plugin-surface audits
Wire-lens and session-trace packet observation
Container integrity, transaction echo, and motion evidence
Chat plugin enumeration with silent and bounded aggressive modes

Safety model

Authorization first.

Exact-host authorization allowlist validated on every run
One-run CONFIRM phrase and append-only JSONL audit log
Bounded, sequential probes with rate limits
No exploit delivery, credential collection, or stealth features

Development

Current position.

The beta foundation builds, tests, and produces an installable Fabric JAR. Runtime Java addons compile real sources with a full JDK 25 behind developer mode and source-hash confirmation. The first public release is now available on GitLab as 0.1.0-beta.1. Download the mod jar or read the release notes above.

Research workflow

From observation to evidence.

The console organizes authorized checks into a repeatable workflow with visible scope and records.

Authorize

Add the exact target host to the allowlist and provide the one-run confirmation phrase before active checks can begin.

Observe

Start with passive server, connection, plugin-surface, packet, transaction, and motion observations.

Record

Structured findings and an append-only JSONL audit trail preserve what ran, where it ran, and what was observed.

System design

Built for controlled extension.

The beta combines a client-side research console with an opt-in Java addon workflow.

Module registry

Tools share structured metadata, options, run controls, and findings so the console remains consistent as modules are added.

Two interfaces

The movable terminal provides Console and Java tabs, while clickgui and categorygui expose typed controls visually.

Runtime Java

Developer mode can compile real Java sources with JDK 25 after source-hash confirmation, keeping the feature explicit.

Bounded execution

Sequential probes, rate limits, exact-host checks, and confirmations constrain active behavior by design.

Project boundary

Only for systems you may test.

ChampionsCode is framed for authorized defensive research. It does not include exploit delivery, credential collection, stealth operation, or permission-bypass features.

Inspect the project