NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Jul 25, 2012@KevinEssence Probably Minecraft kicks them - do you have allow-flight to false in server.properties?
What is the kick message(s) (log / kicked player / ingame notification)?
-
View User Profile
-
Send Message
Posted Jul 25, 2012It still kicks my players for flying and I took the command off to kick, I even remove all the cmd:kicks in my files and it still kicks
-
View User Profile
-
Send Message
Posted Jul 25, 2012The instructions file is so huge I missed parts of it and I looked over multiple times. It's a nightmare for dyslexic people. x.x I may make an HTML page with the file colorized and stuff though. I'd like help making a config file that will work for not attacking everyone who falls.
Maybe you can login to my server to see if it's actually nocheatplus or if they really do have cheats? Currently I have nocheatplus.jar renamed to nocheatplus.off so nothing is happening anymore.
-
View User Profile
-
Send Message
Posted Jul 24, 2012Hi people,
I come back from Los Angeles by the end of the week and I'll try to talk / see NeatMonster as soon as possible. I'm REALLY sorry about the lack of communication during the last weeks but I've been really busy, and I don't have any news of NeatMonster, I sincerely hope that everything is fine. By the way, I'll keep you in the loop. And I'm really sorry that I can't be very helpful right now...
Oh, and I want to say "Big thanks" to asofold, MyPictures and every other people who have help you during this time.
-
View User Profile
-
Send Message
Posted Jul 24, 2012@Pwnzsolo
I was on some live streams @Neatmonster did and the build he tested there was had like 0 false positives. He knows the performance and the false positives problems that the current NCP has, on the live stream he fixed some checks to work right but then he just disappeared and missed his release date. I hope he can fast manage his RL problems and bring some new life in NoCheatPlus.
What he checked on the live stream when I was on: - Enchanted tools breaking stuff - Shears with leaves and grass - SurvivalFly check fixed - Added some new checks... - Re coded block break check with better performance and less false positives - And more...
He checks the Minecraft wiki how long you need to break a block with each tool and then he codes NoCheatPlus to only allow that time and not more.
-
View User Profile
-
Send Message
Posted Jul 24, 2012@Pwnzsolo
Actually it is not "my" plugin, NeatMonster is the developper, i did contribute a check, but mainly i am just doing some of the chat stuff right now, and i have no idea where NeatMonster or Juliui are.
As far as i know the only check banning players is the nopwnage check.
-
View User Profile
-
Send Message
Posted Jul 24, 2012@asofold
I have read your expectations in full and your instrcutions and everything I could about this plugin save the insane amount of forum posts that I take are a good indication that I am not the only person who is having issues of this sort and others. I do not expect the plugin to work like magic but I would like it to work without potentially ruining the experience of players who have done nothing wrong. I mean aside from the checks I was describing there are other things that can happen that will ban the player even though they have done nothing wrong. I realize it is a giant project and for the scope it is the best in this area of plugins. Anticheat is less invasive and stressful but there are too many get arounds that players can use to bypass it and it really doesnt log or prevent hardly anything. Nocheat+is really our only option right now so that is probably why so many people expect so much from it. I will continue to follow your plugin because I have faith that you will work it out to be the only plugin a server owner even thinks about when looking for an antihack plugin. Thank you
-
View User Profile
-
Send Message
Posted Jul 24, 2012@VasVadum
It can be understood by readingthe instructions.txt ... theoretically.
vl>100 is the entry that says what comes right of it will be performed as action when the violation level for the check is above 100.
How the violation level raises depends on the check and its confugration, should be up to experience rather.
log:moveshort:3:5:f (can be read in the instructions.txt) is a naction to log the violation of flying, while moveshort is the test name or something , 3:5 i forgot right now (look it up!) is related to how often to log it, in terms of delay in second etc., f means log to file you could also have icf which would be ingame chat, console, file.
While the cancel entry means to cancel the event, i.e. prevent the m,oving or attacking or blockbreaking, depending on the check.
The point is now what do you want to adapt ? Do you want to adapt the flying check ?
For cobwebs: Permission to disable it for players is: nocheatplus.checks.moving.cobweb
Otherwise you could try to tweak the speed in the runfly check section: cobwebspeed (see instructions.txt)
-
View User Profile
-
Send Message
Posted Jul 23, 2012log:moveshort:3:5:f cancel vl>100 log:moveshort:0:5:if cancel vl>400 log:movelong:0:5:cif cancel I don't understand this at all, I can't figure out what it even means. It's a jumbled mess of code all mushed together. moveshort;3:5:f ? moveshort:0:5:if ?
What's the :3:5:f thing? I just want to make it so it stops stopping everyone all the time. I'm going to de-op myself and jump down one of my most glitched areas to see if it still effects me, but I'll have to do that a bit later. If it does, it means it's the cheat plugin and not the users secretly having cheats installed.
-
View User Profile
-
Send Message
Posted Jul 23, 2012@Davyhalliday
You can do this yourself in the config, edit the log messages.
-
View User Profile
-
Send Message
Posted Jul 23, 2012Hey there,
Could you add an option to remove the coordinates from the NCP notifications? Many of my staff have been accused to utilise these coordinates to find or raid players
Thanks, Davy
-
View User Profile
-
Send Message
Posted Jul 23, 2012@VasVadum
Did you check out the instructions.txt link above.
Players landing on water and getting killed by nocheat are usually having a fly/cheat client on that claims the player to be on firm ground though he isnt, players might even try to trick server owner s into removing anti cheat plugins using that "trick".
Disable the water walk check in any case, and cobwebs... isnt there a cobweb check ? Just try to disable it or adapt the violation level/parameters.
And what means cheating ? Reading the "Expectations" section above and/or instructions.txt will reveal that many alerts of ncp are on base of rough statistics and if you dont want alerts for low violation levels, then you can configure it to only alert on higher levels.
This overview page should have some more distinct explanation on some things , though (violation level principle for instance).
-
View User Profile
-
Send Message
Posted Jul 22, 2012I've had to disable NCP because it interferes with absolutely everything, if someone lags even once, they are cheating. If someone jumps off a tall building into spider webs I placed, they are cheating and moved all the way back up top. If someone makes a 70 block fall with deep water at the bottom and they use it to quickly get down, they are cheating. It's extremely aggravating that it calls it flying when you're falling into webs and water! And the config file is the most confusing thing I've ever seen in my life. I can't even figure out what to change in it to stop this thing from whooshing all my players back to the top when they jump off high things or moving them back every time they send one more packet than they should have from lag. I've read the config file looking for "fly" in there, and couldn't find it. I've looked through the config file for one other thing people kept getting punished for repeatedly, but couldn't find it either. I don't know what to change where.
There should be an easy option somewhere to make it more or less strict. Like at the top; StrictNessLevel: 2 (current), 1 being half as strict, allowing for less false possitives. 0 turns off NCP, 3 makes it double strict, which'd likely mean no one could ever do anything in the server again but sure why not? Take one step and you've got a speed hack! :P
I'm sorry I can't figure out your config file, it's just driving me insane that I can't build nice things for people to jump off of and land in or have any other interesting contraptions because somehow everything marks them as cheating now. My friend got stuck in an infinite fall loop just 10 minutes ago and I had to get on to teleport him manually. A while back one friend fell in his own castle and got stuck in an endless fall loop which he quit for because I didn't know about it till 2 days later when I had to pester him to get on so I could fix it without deleting his inventory. This needs to stop quality people as flying when they are falling, and stop qualifying them as avoiding fall damage when the server just lags for a second and forgets to add on their fall damage. I want to stop legitimate cheaters, not every single false possitive in the world.
-
View User Profile
-
Send Message
Posted Jul 22, 2012Nvm looks like I'm back to NC+ - far too many ways I could bypass AntiCheat. FAR FAR FAR too many :P
Hopefully this is picked up again; im more then willing to offer financial support on it!
-
View User Profile
-
Send Message
Posted Jul 22, 2012i just realized, wheres the permissions node list?
-
View User Profile
-
Send Message
Posted Jul 21, 2012@Dinastya
Well that is not entirely correct, NeatMonster did react to suggestions and did bring in suggested changes. Just now he basically disappeared.
And EvenPrime did this "alone" as well, before NeatMonster continued it.
A team can be better of course, but it is not simple to find people that both do it for free have time and also want to go the same way of developement.
Actually NeatMonster was about to form a new team, as you could read in one of the earlier comments by Juliui, but as it seems NetMonster has vanished for the moment.
I for instance would not have gone the way for a web interface, especially i myself would never log in somewhere with my minbecraft user name and password, but i think that something completely different came in the way, so one should not be arguing about reasons too much right now.
Nontheless we are now in the situation that the developer is not there and the plugin needs some updating...
-
View User Profile
-
Send Message
Posted Jul 21, 2012Looks like I'm going to be moving/switching to anticheat. :( Hopefully this gets updated eventually. I definitely will be back :) Cheers everyone and goodluck to the developer!
-
View User Profile
-
Send Message
Posted Jul 21, 2012@MyPictures
I know that... But i'm sure there are enough good trusted devs that would help a plugin like this. Maybe even some staff from bukkit. It's a core plugin and 1 dev is just way to less. In the past i have read comments of ppl who would like to help but neat didn't do anything with it i think. Just annoying me that a plugin like this got 1 dev and that a update takes months while the eta was giving more then a month ago. And if you work with github or another system then griefings wont be a big deal. Like Factions and Essentials and Multiverse have multiple devs and updates getting added quick and if 1 isn't available then someone else just keeps going.
-
View User Profile
-
Send Message
Posted Jul 21, 2012No updates since may... this is getting scary.
-
View User Profile
-
Send Message
Posted Jul 21, 2012@Dinastya
Its not that easy to add unknown people to your project, they have full access then and can do everything. What happens if you get a bad one? He/She will delete everything...
NoCheatPlus is OpenSource so you can take the source and code your own plugin if you don't like this one. Or make a team and create a new project with that source code.
Or you try AntiCheat plugin.