NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Jul 21, 2012Does the latest build of NCP work with R4.1?
Or is there a developmental build that I have to go get somewhere else?
-
View User Profile
-
Send Message
Posted Jul 21, 2012Anyone know what exact is going on or?
It's like 3 weeks later already.
Getting more sad every day that there are no updates.
There should really be way more devs working on this plugin.
It's the most important plugin a server need.
And then there is just 1 "active" dev that's really bad.
There should be at least 5 or something like other big plugins like multiverse.
A update delayed for more then a month for a big plugin as this is really sad.
I understand real life on first place but as i said you should get more devs working on this if 1 dev isn't available to finish a update then another dev can finish it and still release the update.
-
View User Profile
-
Send Message
Posted Jul 21, 2012@EricPickup
Eric @ Bawwss!
-
View User Profile
-
Send Message
Posted Jul 20, 2012@Hans6666
Yeah, the cmd:kick entries can be removed to not kick. (intstructions.txt).
-
View User Profile
-
Send Message
Posted Jul 20, 2012@Storm3y open the config and search for the word "kick" and remove it, and maybe the "cmd", too
-
View User Profile
-
Send Message
Posted Jul 19, 2012Hi,
Is it possible to set it to stop kicking people? Just stop them from hacking?
Cheers
-
View User Profile
-
Send Message
Posted Jul 19, 2012There's a hack working out there..
"Always run at Speed Potion II Speed"
Basically lets the players run as fast as they're on potions forever.
-
View User Profile
-
Send Message
Posted Jul 19, 2012Any clue how I would go about making the fly and speed checks more tolerant?
-
View User Profile
-
Send Message
Posted Jul 19, 2012@EricPickup
You might simply disable nopwnage, or change all occurences of ban to kick for the nopwnage section.
-
View User Profile
-
Send Message
Posted Jul 19, 2012My server is cracked so anyone can login as anyone but they also need to login/register with the auth plugin. People log on as others and spam commands to get them banned by NoCheatPlus's anti-pwnage, any way I could fix this?
-
View User Profile
-
Send Message
Posted Jul 19, 2012@Pwnzsolo
By default those checks do not ban anyway.
You might take a look at the explanations under "Expectations" above, depending on lag some checks can lead to alerts for not-cheating players.
Some checks also have bugs which will hopefully be fixed soon (alerts for shears etc.).
-
View User Profile
-
Send Message
Posted Jul 19, 2012@andrewkm
Ok, WorldGuard is good for a quick comparison :)
I don't know if it pays to disable other checks, each check will involve permission checks unless deactivated, so the more you deactivate the better the performance should become.
Yet i have no experience with deactivating other checks for the moving, one could think of swimming and cobweb but that might really depend on your server concept.
Also if you have different worlds you could deactivate some things completely for a creative world or the spawn/town world, probably.
-
View User Profile
-
Send Message
Posted Jul 19, 2012@asofold
Also do you frequest IRC? I am always on esper and would love a chat when you have some time. Im in all the minecraft channels pretty much so I'm easy to find.
-
View User Profile
-
Send Message
Posted Jul 19, 2012@asofold
Alright Ill give waterwalk check a disable as well as the nopwnage.
As well I am using a few heavily used plugins to do comparrisons to. Nocheatplus+ used to be only twice that of worldguard timings for example; and now its easily 4 times the amount. (As in total time) - Im not just looking at the amount of time spent of course :P - But comparing to other plugins its gotten much worse (As in regarding the ratio)
Anyways other then the two above anything else you recommend disabling?
-
View User Profile
-
Send Message
Posted Jul 19, 2012@minecraftyord
To provide a customized solution your plugin would need an API that allows to distinguish what a player is doing, then maybe CompatNoCheatPlus can add a hook for it, though you/the developer could also write one yourself probably.
To me the only way seems to give the bypass permissions, and probably to adjust some hidden configuration options about flying speed and such, which could actually help (instructions.txt !).
The waterwalk check should be deactivated anyway, it will be removed or improved lateron anyway.
-
View User Profile
-
Send Message
Posted Jul 19, 2012I'm using the plugin cybsenergy (for spout): http://forums.spout.org/threads/misc-fun-cybsenergy-spn1244-cb1-2-5-r4-0.3763/
It adds some additional movement options for players that obviously conflict with the nocheatplus checks. Now, I tried to give players the runfly bypass permission, it helps a little bit, but the shift key seems to be stuck after shift jumping. Does anyone have experience with that issue? Or is it possible to add a mod exception node like for zombe's in the config?
Thank you very much!
EDIT: My bad, forgot the sneak and sprint permission from modifyworld - works now. It would still be nice to have a custom exception, then I don't need to allow all kinds of running and flying...
-
View User Profile
-
Send Message
Posted Jul 18, 2012@andrewkm
Deactivate the waterwalk check for sure, and maybe also deactivate nopwnage. .
And just for reference:
The total time spent of 600+ seconds does not necessarily mean too much, NoCheatPlus does perform checks on a wide range of events (almost all types) and it does do calculations on them, so you need some reference plugin to compare to to know if this is now much or not. The other plugins are very light plugins probably, but i don't know what you have installed there.
And does it actually lag your server or did you just get upset by the timings?
The PlayerLoginEvent is not really a big problem with 0.2 milliseconds in average, PlayerJoin is a bit heavy with more than one millisecond, but it is also a very seldom event.
More critical are the events with a high count and a higher average value, such as PlayerMove (20 times per second per player at an average of roughly 35000 nanoseconds for one check on your server), easily summing up into the milliseconds per server tick range for bigger number of players. Do deactivate the waterwalk check, that is worth it, hopefully it will lag less then.
-
View User Profile
-
Send Message
Posted Jul 18, 2012Any ideas how to reduce nocheatplus server lag. It is our highest timings .... on an insane level - all other total times are below 50 while nocheatplus has soared up to above 600.
http://pastie.org/4282046
Main is playerloginevent which seems to just be killing it.
Perhaps some advice on configuration file setup to make this more lag friendly?
Current config: http://pastie.org/4282061
As well any news on an update to this? Perhaps a few good sized donations would speed things up?
-
View User Profile
-
Send Message
Posted Jul 18, 2012@Idntwanttwousernamesasswhipe
Did you disable proximityhider ? Do you need non-hidden chests getting cloaked?
That will improve performance of Orebfuscator by a lot, and might not be needed if you have things like chest protection and/or region protection anyway.
There are other settings too that might help improving perormance, but proximityhider should be the first decision.
But for Orebfuscator you might ask on the plugins site for hints on a fast configuration for your needs.
Size of server might not have to do with it, if you have a dedicated machine though, you might have more full cpu cores at bay, to run parts of Orebfuscator in parallel better.
-
View User Profile
-
Send Message
Posted Jul 18, 2012I suggest to make this plugin block mod nodus codes and their hacks.