Darky RAT Check/Minecraft Plugin Checker

FILE SCANNER PAPER · SPIGOT · BUKKIT · VELOCITY

Check a plugin before it touches your server.

Upload the actual plugin JAR to recover its metadata, commands, permissions, resources, strings, endpoints and verified JVM behavior—without running it.

01 Not executed02 Archive contents03 Evidence report

Drop a plugin JAR

or click to select a file

Maximum 4 MB · Not executed · Automatically deleted

Uploads are inspected in an isolated temporary workspace and are never executed. Analysis depth depends on file size, archive complexity and available recovery engines.

Plugin metadata

Reads plugin.yml, paper-plugin.yml, bungee.yml, velocity-plugin.json, entry points, commands and permissions.

CODE

Compiled behavior

Maps real method calls, runtime strings, URLs, process access, file access and network capabilities.

VERIFY

Exact identity

Computes cryptographic hashes and performs an exact published-file lookup where supported.

JAR

plugin.jar

Minecraft server plugin

Download full report Not executed

SCAN VERDICT

Analysis complete

0RISK

Detected package

Code recovery

Most-used external packages

JVM references

Package map

Classes by namespace

Local JAR identity

Read directly from metadata

Published-file verification

Exact hash lookup

Cryptographic fingerprints

Use these to compare exact files

Recovered metadata

plugin.yml, mod JSON/TOML and manifest

Search recovered code

This searches decompiled source and extracted text resources, not a predefined suspicious-word list.

Choose a file from the left to inspect its recovered source or JVM bytecode.

Verified JVM method invocations

These calls were parsed from compiled class bytecode.

Caller class	Caller method	Invoked owner	Invoked method

Recovered runtime strings

Strings loaded by compiled methods, with their originating class and method.

URLs

Domains

Complete archive inventory

Every readable archive entry, including classes, resources, nested JARs and embedded binaries.

Path	Type	Size	Compressed	View

Security findings

Findings require verified capabilities or behavior chains; loose words in metadata do not create critical verdicts.