Inject Backdoor to ANY plugin
Authenticate with your Discord account to use GrimBackdoor
95+
Payload Commands
8
Operational Domains
20s
Avg Inject Time
0
Local Traces
// ARCHITECTURE
Built Different. On Purpose.
Every layer of Grim is engineered around one rule: if it can be logged, it can be traced. So it isn't logged.
Polymorphic Payloads
Every injected JAR gets a unique bytecode signature. Hash-based AV scanning sees a brand new file each time — because it is one.
In-Memory Execution
Payloads live in the JVM heap, never on disk. Kill the process, and there's nothing left to find. No class files, no temp dumps, no recovery.
Zero-Trace Networking
Reverse-C2 over HTTPS with domain fronting. Your beacon looks like a normal analytics packet. The firewall waves it through.
Instant Deploy
Drag a JAR, hit inject, download the infected build. Under 2 seconds from upload to ready artifact. No toolchain, no setup.
Full Remote Control
Console, file manager, inventory viewer, live map — all from the dashboard. You're not just a guest. You're root.
Session Isolation
Each injection carries its own auth key, webhook, and trigger method. Compromise one server, nobody learns about the others.
// CAPABILITY MAP
Eight Domains. Ninety-Five Weapons.
From silent operator elevation to kernel-level persistence. Every category is a separate theater of control.
// 01
Survival & Abilities
11 commands · SUB+
// 02
Teleportation
4 commands · SUB+
// 03
Combat & Destruction
12 commands · SUB+
// 04
Troll & Grief
15 commands · SUB+
// 05
Server Control
15 commands · SUB+
// 06
System & Exfiltration
14 commands · BOOST+
// 07
Persistence & Access
18 commands · VIP
// 08
VDS Advanced
16 commands · VIP
A NEW ERA OF CONTROL
We've completely redefined remote server exploitation. Grim is not just an injector; it's an apex-level persistent threat engine disguised as a platform. With polymorphic payloads, in-memory execution, and absolute stealth networking, you dictate the rules. Leave no logs, trigger no anti-cheats, and seize total dominion over the target architecture.
+op
Bypass all permissions. Silently give yourself operator privileges without
triggering console logs or anti-cheat alerts.
Stealth Mode
+crash
Execute an instant server crash using our custom Netty exploit payload. Leaves
absolutely no trace in crash reports.
Critical Exploit
+rat
Open a silent socket connection to interact with the target server's console
remotely directly from our dashboard.
Remote Access
+serverinfect
Inject backdoor exploit payload directly into target server.jar. Spreads core payload across system nodes.
JAR Exploitation
+vanish
Scrub all digital footprints. Wipes latest.log, intercept console packets, and
removes connection history from disk.
Anti-Forensics
+serverinfo
Exfiltrate comprehensive VDS system specifications, RAM, CPU specs, and Java environment details to Discord.
System Telemetry
+god
Absolute immortality. Cancel every damage event, void death, and environmental
hazard. Walk through lava, survive nukes.
Invincibility
+sudo
Force any player — or the console itself — to execute arbitrary commands. From
/gamemode to /ban. No permission node.
Root Dispatch
+spy
Relay every private whisper, staff chat, and player coordinate to your Discord
webhook in real-time. Total visibility.
Surveillance
+steal
Compress any target directory into a ZIP and exfiltrate it in encrypted chunks.
World saves, plugin configs, database dumps.
Data Heist
+exfil
Upload zipped server artifacts to anonymous file hosts over an encrypted channel.
Move gigabytes without disk limits.
Cloudlift
+persist
Recursive propagation routine. Silently re-injects GrimCore into every loaded
plugin JAR on disk. Delete one, ten grow back.
Self-Replication
+cron
Schedule recurring commands at fixed intervals. Auto-op trusted players, wipe logs
every 6 hours, rotate webhooks — fully autonomous.
Scheduled Chaos
+backdoor
Create a privileged system user on the host machine with an SSH keypair you own.
Survives plugin deletion, reset, OS reboots.
SSH Persistence
+revshell
Open an outbound encrypted socket back to your listener. Full interactive bash
shell on the VDS. No firewall stops outbound.
Reverse Shell
+rootkit
Deploy system-level hooks that hide your processes from top, ps, netstat, and
auditd. Kernel-grade invisibility.
Kernel Level
+livemap
Stream real-time chunk tiles and player beacons to your dashboard via reverse C2.
Watch the entire world breathe from orbit.
Orbital View
+bungeeexploit
Pivot from a single backend server to the entire BungeeCord / Velocity network.
One injection, full network takeover.
Network Pivot
+exhaust
Saturate CPU, RAM, or disk I/O on the host VDS until the kernel OOM-kills the
Minecraft process. Dirty, effective, untraceable.
Resource Warfare
+wipe
Format and delete world folders, plugin configs, and player data directories.
Leave the server as a smoking crater in seconds.
Scorched Earth
+lockconsole
Intercept and drop all keyboard input to the host terminal. The admin can't type,
can't issue commands, can't stop you.
Hostage Mode
+tornado
Spawn a swirling vortex entity that rips blocks from the ground and hurls players
into the sky. Pure environmental terror.
Storm Bringer
+nuke
Broadcast a countdown siren, then detonate a chain reaction of primed TNT that
levels everything within render distance.
Total Annihilation
+silent
Ghost protocol. Execute any command with all console echoes, log entries, and chat
notifications suppressed. Context preserved.
Ghost Protocol
// LIVE FEED
Operator Telemetry
Real anonymized activity from the Grim network. Reconnects, payloads, extractions — as they happen.
GRIM-C2 · STREAM ACTIVE
[00:00:01]INJECTPlugManX_v3.2.1.jar → payload embedded
· signature: 0x84c2a9f1
[00:00:04]HEARTBEATnode-7f3a · mc 1.21.4 · paper ·
42 players online
[00:00:07]AUTHoperator granted · method=chat · session
persisted 14d
[00:00:12]SPYintercepted whisper: "admin password
rotated again..." → webhook
[00:00:18]EXFILplugins/ folder zipped · 128 MB ·
uploading to cloud relay
[00:00:22]PERSISTGrimCore re-injected into 11 plugin
JARs · recurse depth=3
[00:00:27]EXPLOITNetty crash payload dispatched ·
ETA 2s · trace=clean
[00:00:31]LIVEMAPstreaming 512 chunk tiles · seed
0x8f3a72c1 · players=18
[00:00:36]REVSHELLVDS session 4b2e · uid=0(root) · tty
attached · encrypted
[00:00:41]CLEANUPlatest.log rotated · 4.2 MB
scrubbed · recovery window closed
[00:00:47]BUNGEEVelocity proxy infiltrated · 3
backend nodes now visible
[00:00:52]CRONscheduled task registered ·
interval=21600s · silent=true
[00:00:58]ROOTKITsyscall hooks deployed ·
proc/ps/netstat now blind to daemon
// COUNTERMEASURES
Against the House. And Winning.
What every major anti-cheat, plugin protector, and forensics suite sees when Grim walks in.
| Countermeasure | What It Watches For | Vanilla Exploit | Grim |
|---|---|---|---|
|
AntiCheat+ / Matrix
|
Operator flag spikes, permission deltas, fly/god anomalies | ✗ | ✓ |
|
Jar Signature Verification
|
Modified plugin archives on disk | ✗ | ✓ |
|
Console Audit Logs
|
Command echo, permission changes, exec events | ✗ | ✓ |
|
PluginMan / GuardPlugin
|
Unexpected classes, runtime injection, bytecode swaps | ✗ | ✓ |
|
Firewall / NetWatch
|
Suspicious endpoints, C2 beacons, port scans | ~ | ✓ |
|
Forensic Recovery
|
Residual payloads, journal artifacts, heap snapshots | ✗ | ✓ |
// ACCESS LEVELS
Choose Your Rank
Three tiers. One backdoor. Pick the level that matches your ambition.
// SUBSCRIBER
Standard Core
via Discord Role · Legacy
- ~65 base commands
- Standard injector + core
- Discord bot integration
- Chat / Anvil / Sign auth
- No future updates (frozen)
// BOOSTER
Active Booster
via Server Boost · Active while boosting
- ~99+ commands (all unlocks)
- Latest injector + core
- Combat & damage multipliers · legit immortal
- VDS & infiltration modules
- RAT · shell · persistence · exfil
- Live map + fleet control
// VIP · BEST VALUE
Lifetime Access
One-time · Forever
- Everything in Booster
- Reverse shells · implants · rootkit
- Bungee / Velocity network pivot
- Tokenscan + DB dump + clone
- No boost requirement. Ever.
// FIELD MANUAL
Frequently Asked
The questions every new operator asks before their first deployment.
How does Grim avoid detection on the target server?
Two reasons. First, our payloads never touch disk — they execute entirely in the JVM heap. Second,
every injected JAR carries a unique polymorphic signature, so static scanners can't fingerprint it.
Anti-cheats looking for "the same file on 200 servers" find 200 different files.
What does the target server owner see?
Nothing until you act. No new plugins in the list, no permission changes in console, no auth logs,
no unusual player joins. When you do act, the +silent and +vanish commands scrub echoes, chat
notifications, and log entries in real time.
Do I need a special Minecraft version or Paper fork?
Grim runs on Spigot, Paper, Purpur, and any fork between 1.16 and 1.21.4. Our injector uses dynamic
NMS reflection, so new Minecraft releases are supported via config — no rebuild needed.
What's the difference between Booster and VIP?
Same command set (~95). The difference is access model. Booster requires you to keep boosting the
Discord server — lose the boost, lose access. VIP is a one-time purchase. Pay once, own it forever.
Same payload, different lifetime.
How long does an inject take? Do I need a launcher?
Upload a JAR, click inject, download the infected build. Average time: under 2 seconds. Everything
runs server-side on our cloud — no launcher, no Windows executable, no VMProtect wrapper, no
client-side RAT scanner flagging your PC.
Can it survive a plugin deletion or server wipe?
Yes, if you use the persistence modules. +persist re-infects every loaded JAR automatically.
+backdoor creates a system SSH user. +startup and +cron register autonomous routines. The
+recoveryurl command pulls the payload back from a remote URL if the file goes missing.
Is there a free trial?
Servers panel is periodically opened to all tiers during limited events — keep an eye on the
Discord. Full VIP features (rootkit, revshell, livemap, tokenscan) are always VIP-locked.
Ready to Take Control?
Join hundreds of operators running Grim across production servers worldwide. Lifetime access starts with a single inject.
Welcome, ! Select your tier:
Subscriber
Standard Injector + Standard Core
You don't have the required role
Booster
Latest Injector + Latest Core
You don't have the required role
VIP
Lifetime Latest Injector + Latest Core (shopier.com/grimnetwork)
← Back to Login
🔑 VIP Key
Enter your VIP key to unlock access
← Back to Tier Selection
// inject
🛠️ Level 1 — Rookie
0 / 5 Injects
Drop your JAR here
or click to browse — .jar only, max 50 MB (Only Plugin JARs)
📄
✕
🔧
Backdoor Settings
▼
Auth Key — type in chat to unlock
Console Prefix — prefix for console commands
Webhook URL — Discord webhook for notifications
Bot Token — optional, for bot-based logging
UUID Lock
Tier
—
Session expires
—
Injector
—