DeMalware-RETRO
Boot-level JVM agent protection against trojans, backdoors, shell execution, Log4Shell, and JNI escapes. Includes interactive in-game Chest GUI (/demalware net) for network telemetry and manual IP blocking.
How DeMalware Powers Through All Stacks
What began as a low-level JVM agent for Minecraft servers has expanded into the industry-grade DeMalware-UNIVERSAL framework. The same bytecode transformers and memory-safe sandboxing now defend JVM enterprise applications, Node.js backends, Python APIs, and Linux native binaries under zero-day threats.
Java 8–25+, Spigot, Folia, Spring Boot with ASM 9.6 transformer & StackWalker.
Express, NestJS, Electron with tamper-proof V8 prototype descriptor locking.
FastAPI, Django, Flask with unbypassable C-level interpreter audit hooks.
Real-time CPU overhead speedometers, memory radar, and audio synthesis.
Pelican Panel 6-Run Benchmark
Empirical startup time audit measured on a live Pelican Panel Purpur 1.21 server with heavy plugin suites (EssentialsX, Skript 2.15.4, ViaVersion, Vault, ProtocolLib).
⚡ Why DeMalware-RETRO is 1,000x Faster Than Legacy Scanners
Like searching through 10,000 physical books page-by-page. They decompress every .jar file on disk and run slow regex loops across millions of lines of text.
Like an X-ray scanner at the front door. Hooks into the JVM ClassLoader via -javaagent and evaluates ASM binary opcode streams in RAM as Java loads them, adding zero disk I/O latency!
Commands & Administrative Controls
Opens interactive 54-slot Chest GUI to inspect real-time plugin network connections, view target host IP stats, and manually block/unblock IPs without automatic network disruption.
Displays protection status, JVM Class Transformer agent state, block mode, and enabled heuristic modules (force-op, shell-exec, jar-injector).
Runs an offline heuristic scan across all plugin JARs in the /plugins directory.
Whitelists a plugin JAR by SHA-256 hash to skip heuristic scans (console only).
Decrypted audit history for operator grants (setOp) and critical console command attempts.
Reloads plugin config values from config.yml.
JVM Agent Startup Parameter
Copy & paste into your startup flags for full bytecode protection.