Module Analysis

Full source code analyses of real hacked client modules. Every line annotated with packet interactions, MCP references, and anti-cheat bypass explanations.

Scaffold
World 811 lines Aqua 13

Aqua 13 Scaffold

Two-mode annotated analysis: full table with line-by-line explanations + pure JavaDoc code view. Covers block finding algorithm, 6 tower bypass modes (Watchdog, Verus, NCP, Cubecraft, Intave), silent slot switching, rotation override, and the Direct vs Legit placement system.
Disabler
Exploit 269 lines Tenacity 5.1

Tenacity 5.1 Disabler →

Watchdog-focused disabler. Cancels C0FPacketConfirmTransaction and S32PacketConfirmTransaction to desync the transaction queue from the server. Uses a bloom/queue-based release system that batches stale transactions and sends them with modified IDs. Also cancels C00PacketKeepAlive keepalives and spoofs the key value with random offsets. One of the most effective Hypixel Watchdog bypasses in the reference set.
Full Analysis → Source ↗
Exploit 87 lines Rise 6.0

Rise 6.0 Disabler →

Compact, modern disabler that targets the transaction system. Cancels C0FPacketConfirmTransaction and S32PacketConfirmTransaction to break the server's transaction confirmation loop. Sends fabricated C0F packets with Integer.MAX_VALUE window ID and randomized UID values to flood the server's transaction buffer. Also includes a Blink-compatible mode that buffers and releases movement packets alongside the transaction desync for a complete bypass.
Full Analysis → Source ↗
Exploit 791 lines Mint B1

Mint B1 Disabler →

The largest disabler in the reference set. Targets 5+ anti-cheats with separate modes: Watchdog (transaction cancellation + keepalive spoof + C08/C0F spam), Verus (motion desync via position packet manipulation), NCP (timer-based transaction delay + C04/C05/C06 ghost position injection), Intave (S08 cancel + C04 relay), and AAC (custom payload abuse). Implements a sophisticated transaction queue that tracks window IDs, action numbers, and timing to selectively ACK/NAK transactions at precise intervals.
Full Analysis → Source ↗
Exploit 202 lines Gugustus

Gugustus Disabler →

Server-mode-based disabler with separate configurations for Hypixel, Mineplex, Faithful, Erisium, and BlocksMC. Each mode adjusts which packets are cancelled: Hypixel blocks C0F+S32+C16PacketClientStatus+C13PacketPlayerAbilities; Mineplex uses S08PacketPlayerPosLook cancel + S2FPacketSetSlot cancel; Faithful/Erisium use a custom C0F transaction queue with delayed release. Includes a Blink integration mode that buffers C03 movement during the transaction desync window.
Full Analysis → Source ↗

All source code sourced from iroot3/mc-client-sources — a repository of decompiled/deobfuscated Minecraft hacked client source code.

These analyses focus on packet-level interactions. Client base code (event systems, settings frameworks, rendering utilities) is marked as CLIENT BASE and included for full-context representation.