NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Aug 13, 2012@mikeyriver
Not possible, turn online-mode to true and it should be fixed.
@mikeyriver
Otherwise I can recommend you this plugin: http://dev.bukkit.org/server-mods/opprotect/ Or use a Auth plugin: http://forums.bukkit.org/threads/sec-xauth-v2-0-10-offline-mode-authentication-1-2-5-r1-3.8712/ http://dev.bukkit.org/server-mods/authme-reloaded/
@mikeyriver
Don't think @NeatMonster will add that back, because its kinda useless for normal servers now.
-
View User Profile
-
Send Message
Posted Aug 13, 2012Please add it back, please :D
-
View User Profile
-
Send Message
Posted Aug 13, 2012Just asking, is there another plugin like nocheat that doesnt allow op ingame?
-
View User Profile
-
Send Message
Posted Aug 13, 2012But someone just hacked and forced Oped themselves into my server :(
-
View User Profile
-
Send Message
Posted Aug 13, 2012@mikeyriver
"Force only console to be able to OP" feature got removed in NC+ 3.7, Mojfang fixed the "OP Hack" so its no longer needed.
-
View User Profile
-
Send Message
Posted Aug 13, 2012Question, how come I can still op other members in game with the latest build?
-
View User Profile
-
Send Message
Posted Aug 13, 2012@marti2001
You can use the NC+ DEV build for CB 1.3.1: http://ci.nocheatplus.org/job/NoCheatPlus/
A RC will come out when all the important bugs are fixed.
-
View User Profile
-
Send Message
Posted Aug 13, 2012@marti2001
He will soon ;)
NeatMonster has been working very hard the last few days.
I'm sure a CB will be out when it's ready.
-
View User Profile
-
Send Message
Posted Aug 13, 2012Are you updating it to CB 1.3.1? I really want to use it again! :)
-
View User Profile
-
Send Message
Posted Aug 13, 2012@aphilosopher
That link leads to the NC+ Jenkins: http://ci.nocheatplus.org/job/NoCheatPlus/
Currently its the only way to get NC+ for 1.3.1 so use it, I cant make the buttons any bigger they would look ugly then.
-
View User Profile
-
Send Message
Posted Aug 13, 2012@aphilosopher
Just hit the source code and then the ZIP button. You can then build your own :)
-
View User Profile
-
Send Message
Posted Aug 13, 2012@asofold
ya id love to try the newer dev builds............. but i cant find them.......
from the description above it says
"•Where can I download NoCheatPlus? You can... •use the Download button somewhere on this page (usually top right corner) for the latest BukkitDev approved version; •use the Recent Files links in the Facts section (somewhere to the right) for one of the latest BukkitDev approved versions; •use the GitHub Downloads section. "
the github downloads are all from months ago....
and the only thing on dev bukkit is 1.2.5..........
so it seems the 3.7.0 version linked at the top is the only option available for us public :'(
-
View User Profile
-
Send Message
Posted Aug 13, 2012flyingspeedlimitvertical: 100
flyingspeedlimithorizontal: 60
flyingheightlimit: 128
Do I set these to 0 to disable them?
-
View User Profile
-
Send Message
Posted Aug 12, 2012@LockedCraft
You would have to limit it to just above what you get. For example 20 in 10 seconds as an extreme. Set it to 30 in 10 seconds then.
My server has a 120 cap and fills up to 50 frequently and I don't have this problem, though it's a smaller server.
-
View User Profile
-
Send Message
Posted Aug 12, 2012@deleted_8156133
Connection throttle wouldn't work on a server that fills up to it's 230 cap. People would just get mad not being able to log in.
-
View User Profile
-
Send Message
Posted Aug 12, 2012@deleted_8156133
Yeah and it was always /mail commands so I blocked access to it temporarily but I hope they manage to fix this quickly.
-
View User Profile
-
Send Message
Posted Aug 12, 2012@LockedCraft
Hmm I see. Well yeah that would be a good idea to have command spam fixed then, this is a security hole unless this is patched :(
-
View User Profile
-
Send Message
Posted Aug 12, 2012@TheOneWhoOwns
I don't think advertising is allowed here but just look for LockedCraft at the top of a listing site.
@deleted_8156133
It's only one player at a time spamming the same command a few hundred times. We are protected from bots with multiple players but we used NoCheatPlus to block command spam.
-
View User Profile
-
Send Message
Posted Aug 12, 2012@LockedCraft
Hmm so how many bots do you think come online at a time? You could use the connection throttle for now to limit logins. Say 5 new players every 10 seconds would do, and a 10 second cool down?
-
View User Profile
-
Send Message
Posted Aug 12, 2012@LockedCraft
Whats the ip ?