Skip to content

GuidesServer safety

The principle

bitchos is an overlay. It reads what Hypixel already sends your client and draws over it. Everything it prints in chat is local, prefixed [bitchos], and never leaves your machine. There is no generic packet hook in the mod at all; it injects into five named handlers (chat, titles, tab list, keep-alive, time) and nothing else.

What does talk to the server

Only three things ever send anything to Hypixel, and all three are ordinary chat commands you could type yourself:

feature sends when
AutoRequeue /play bedwars_two_four when it decides to leave a lobby. Mode = Confirm only prints the command instead.
AutoWho /who shortly after a game starts, so stats resolve before you open TAB
AutoGG your Message when a game ends
PartyNotifier a party-chat line when AntiCheat flags someone or a party joins, rate-limited to one message per CooldownMs
/pl stats /p list, once only if your party roster is not known yet

Automation and Hypixel's rules

Sending commands automatically is against Hypixel's rules, whatever the command. That is why AutoRequeue, AutoWho and AutoGG ship off and why AutoRequeue has a Confirm mode. Use them at your own risk.

Modules that change what you can do

Almost every module changes what you see. Two change what you can do, and both are off by default:

  • NoHitDelay removes the swing cooldown after a miss.
  • Sprint keeps you sprinting whenever you move forward.

Hitboxes with ThroughWalls on, and BedESP, draw things you could not otherwise see. Hypixel treats that as a disallowed modification. ThroughWalls is off by default for exactly that reason, and the whole Legit+ tab can be hidden from the menu with Interface → HideLegitPlus.

What bitchos sends elsewhere

destination what why
hwic.dev your UUID and key, over HTTPS licence check on start and every 6 hours; update check
hwic.dev or the stats source names or UUIDs from your tab list resolving stats and threat scores
hwic.dev tag labels you create (notes only if ShareNotes is on) the shared tag database, if Cloud is on
api.urchin.gg names, with your own key only if you entered an Urchin key

Nothing under ~/.bitchos/ is uploaded. The safety page under Support has the full list and the scripting caveats.