NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Jul 7, 2012It would seem that NoCheatPlus often detects efficiency tools and breaking snow blocks with diamond shovels etc as fastbreak hacks
-
View User Profile
-
Send Message
Posted Jul 7, 2012@bacon_avenger
It is already fixed, they added E-mail to the authentication. So force attack should be solved.
http://www.evenprime.at/2012/04/why-i-published-the-minecraft-force-op-hack/
@simdol
Neat is recoding the whole plugin and on the dev tests (on NoCheatPlus) server it looks much better. OP hack doesn't work anymore, if you want to be sure then just don't join unknown servers with your account.
@Teh_Kitteh
I don't know... looks like Neat is busy with something different. We should just give him time and hope that he will inform us about that.
-
View User Profile
-
Send Message
Posted Jul 6, 2012There is no such thing as a force op hack. Well, to be fair, there isn't one that has been proven to work. The latest one, which has been known for a few months now, is a session stealer where the griefer will try to have someone log into a "trapped" server that will use the session ID to log into the target server.
There isn't any way to prevent this at this time, besides not trying to connect to unknown servers when asked by someone you do not know, it's a bug in the way Mojang handles authentication of accounts. Mojang is aware of the hole and, last I heard, it will be fixed in the next release of minecraft.
-
View User Profile
-
Send Message
Posted Jul 6, 2012@simdol
Do there exist any force op hacks ?
-
View User Profile
-
Send Message
Posted Jul 6, 2012Ok First The No Cheat + Is Not Accurate About Detecting Hacks. This Should Fix On Next Update Usually People Even Don't Use Hacks But Nc+ Detects As Hack. Thats The Most Important Problem. And Is It Possible To Block Force Op Hack?
-
View User Profile
-
Send Message
Posted Jul 6, 2012@Dinastya
Wait it was pushed back again? I'm sorry but I really don't want to wait 'till Thursday for an update I was expecting awhile ago. Fuck :\
-
View User Profile
-
Send Message
Posted Jul 5, 2012@thommy101
It allows the minimap no matter what. THe thing that this plugin disables is the entity radar function in the minimap also cave map.
-
View User Profile
-
Send Message
Posted Jul 5, 2012Any news on the update? It was end of the week and now it's Thursday. Really need a update of this.
-
View User Profile
-
Send Message
Posted Jul 5, 2012@MarioG1
Thanks for the answer!
-
View User Profile
-
Send Message
Posted Jul 5, 2012You can use the minimap but not radar, cavemap (possible with Reis Minimap)
-
View User Profile
-
Send Message
Posted Jul 5, 2012Hello,
I've just installed this plugin in my server, and tried to test it. To test I have NONE permission (and no OP), and installed Rei's minimap. In the config "allowclientmods" is false. And still I can use the minimap without a problem.
Can someone help me? If someone needs more info, just ask.
-
View User Profile
-
Send Message
Posted Jul 5, 2012@aphilosopher
Ik,
I also use Nocheat+ since the release of it and i never had any problems with it. Only the hacker on my server don't like it :).
-
View User Profile
-
Send Message
Posted Jul 5, 2012@MarioG1
i have been using NoCheat since it came out, and when it was abandoned i tried both AntiCheat and NoCheatPlus, ended up settling back with NoCheatPlus
im running a survival server public no whitelist very few rules, and we advertise EVERY DAY
yes we have had TONS of people come through the server, it has been online 24/7 for 19 months, we have had MANY hackers come on and try their luck,
NEVER in all that time has ANY player EVER done ANYTHING that NoCheat has claimed to prevent, sure they have attempted it plenty, and the NC alerts always appeared, sure there have been bugs here and there, but in the year and a half we have been online we have never had anyone 'op' themselves or give themselves creative,
all it takes is proper perm/config management + this plugin.
if a hacker is telling you that you should NOT install NoCheatPlus, then i guess it makes sense to just trust them and not install it.....right? (sarcasm)
-
View User Profile
-
Send Message
Posted Jul 4, 2012suggestion
/ncp toggle
would toggle ingame nocheat info on and off.
Thank you as always for the amazing work you all do!
-
View User Profile
-
Send Message
Posted Jul 4, 2012@marcus22uk
Hey it is completely ok, your post did not look rude at all, it just had a notion of panic and maybe not 100% clear description of what was the case.
Besides this is not "my plugin", i might be invovled lateron, but currently NeatMonster and Juliui are running all. I might have contributed half a check but anyway. So i am just involving in the chat here, because i don't know what the plugin developers arew doing right now, but i do know that NoCheat contained a good bit of special cases treatment which will add to an almost complete recode becoming pretty complex, so i would'nt be too scared about a week or two difference from planning, especially if people are going through other examinations.
It is certainly useful to get info about posts in popular forums that have malicious downloads abusing the name of NoCheat/Plus etc., maybe just don't let it sound as if NoCheatPlus was containing opme commands, it is completely ok to formulate plainly what they are claiming (offering a download with the name NOCheat+ that contains malicious commands, something like that) :p
If it was a critical exploit of NoCheatPlus gaining unlimited items because of NoCheatPlus then i would totally agree upon not putting it here directly, but you could PM the maintainers and mabye put a post in the forum and a ticket telling to check the pm for important bug or whatever. In this case it is just people offering an altered version of NoCheatPlus or just a renamed other malicious plugin.
-
View User Profile
-
Send Message
Posted Jul 3, 2012So, while a user is in creative mode or using /fly, will it disable the "Stop Flying" feature?
-
View User Profile
-
Send Message
Posted Jul 3, 2012sorry if i seemed rude and silly. i mean i always download from the right place.. so its not my fault. i wanted to show you, and i was uneasy about that. and though you had some involvement. i mean i use your plugin. so you can see why i asked. i did not say you did. just a question. for that i am sorry. clearly you are not doing that. maybe i was wrong, but anyways nice plugin/
-
View User Profile
-
Send Message
Posted Jul 3, 2012@basicsensei
The core NCP is still on GitHub, though in an older version - as far as i read from posts etc. it seems they wanted to set up their own jenkins server for dev builds. But i don't know about progress.
@MarioG1
Thx .)
-
View User Profile
-
Send Message
Posted Jul 3, 2012Take a look the file NoCheatPlusHook.java on GitHub. that gives 404 :)
-
View User Profile
-
Send Message
Posted Jul 3, 2012@MarioG1
Ok thank you :)
As i expected it is about people providing fake versions for download, and i stay with my statement to always download form the official sources and not from some googled location or what you find in some forums.
Still it can be useful to know if it is placed on popular sites to somehow counter that by telling people not to use those evrsions, and only to trust the official download places.
Probably you could erase the links, so people don't click on them accidentally ...
@andrewkm
I don't know...