NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Aug 16, 2012@m1enkrafftman
I think we should avoid overriding stuff for "easy" things, because overriding network handlers instantly creates error sources of difficult to judge impact and it also renders us incompatible with a good range of other plugins that override the network handelrs because they have no other choice, at least the potential for that is huge.
So unless it is really very much better than methods using events i would prefer it not to be used. The extra information and your idea about an extra event however are very good things, just i think a ticket for CraftBukkit and a well desigtned pull request are better than risking so much before we have a stable and somewhat complete update. Not to be misunderstood: i find that network stuff very rewarding for anti cheat plugins, i just feel we get more trouble less compatibility for a not too big gain in detetion accuracy.
But i am not the project lead...
@Blackixx
Can't as a player? (just to clarify)
@CheeseBallz02
Can you give more info about used versions and the lag and other plugins probably (either by pm or in a similar tickets thread: http://dev.bukkit.org/server-mods/nocheatplus/tickets/134-sometimes-the-server-get-lagg-spikes-and-then/)
@cembry90
Yeah i think i should actually make up some documentation about the hooks.
To get started you should check out the hooks package, that will lead you to registering a hook etc. - For examples and maybe a platform to hook into to be able to intercept events on lowest event priority before NoCheatPlus gets them you might have a look at CompatNoCheatPlus, which allows to register hooks with additional listeners (it ensures that NCP is re-enabled to get events before NCP). Both are on GitHub.
The current API only covers check failures, i will probably more or less soon add more API to exempt players from checks, before checks have been done.
-
View User Profile
-
Send Message
Posted Aug 16, 2012@MyPictures
Thanks. I'll have to crack it open and see how it works. ^_^
-
View User Profile
-
Send Message
Posted Aug 16, 2012@cembry90
The API of NC+ 3.7 changed completely (thx to @asofold for his nice API ), and currently there are no documents about it but maybe @asofold or @NeatMonster will explain how it works now. We will make documents about it when its done. At the moment only CompatNoCheatPlus uses that new API of it. (Thats all I know)
-
View User Profile
-
Send Message
Posted Aug 16, 2012My issues, Player count goes up to 20 and nocheatplus lags the serverr we removed it to check, making sure and it is nocheatplus also teleportion like /home you die from hitting the ground to hard once again we removed nocheatplus to check if thats the issue.
-
View User Profile
-
Send Message
Posted Aug 16, 2012Did you remove the API?
In the 1.2.5 version (NCP 3.6.1) it was
When I try to import this now with the newest Dev build, that package doesn't exist. :(
Apparently the API changed, and the usage page hasn't been yet updated to reflect this.
Thanks.
-
View User Profile
-
Send Message
Posted Aug 16, 2012bug (development build): Everytime when I reload my server (just reload without stopping the server), I cant execute commands until I stop and start the server again...
-
View User Profile
-
Send Message
Posted Aug 16, 2012@asofold
Because it seems like the easiest thing to do (In my opinion) I have an idea on how to do it that way, I can PM it to you if you want.
Another idea is to create a new, custom Event, that combines BlockDamageEvent and BlockBreakEvent, so that you can get the start time, end time, insta-break boolean, itemInHand, etc.
-
View User Profile
-
Send Message
Posted Aug 16, 2012@LEOcab
sososo(Edit: mixed Minecraft with CB here, might be related to fixes in in MC 1.3.2)If they die by void damage you might consider the hot fix plugin "No Void Damage".
-
View User Profile
-
Send Message
Posted Aug 16, 2012@H8llfire
This was fixed in the latest dev build. The only problems I'm getting as of build #29 are: 1) Sometimes a player dies when they cross a nether portal. Very rarely though. 2) Sometimes portal teleportation happens too fast. 3) False fall damage kills players under certain conditions.
Honestly, I much rather deal with these light issues than having to babysit everyone to make sure they're not hacking.
-
View User Profile
-
Send Message
Posted Aug 16, 2012@PlayCityCraft
Build number for NCP?
Plugins?
Full error stacktrace ?
Currently NCP is incompatible with SpoutPlugin / Spout.
-
View User Profile
-
Send Message
Posted Aug 16, 2012NCP, is extremely un-stable with 1.3.1
Once server gets populated boom lag spikes and random disconnects in mass of players.
Then the occasional 30-35 line error which is pretty cool to look at :P
Any solutions for 1.3.1?
-
View User Profile
-
Send Message
Posted Aug 16, 2012@asofold
Ok, so you know about the problem. Thanks
-
View User Profile
-
Send Message
Posted Aug 16, 2012@H8llfire
Disable the check for now.
-
View User Profile
-
Send Message
Posted Aug 16, 2012The newest version seems to block the ability for players to eat. They just die after a short amount of time, while the client tells them, that they have full a eat bar. I as an admin get "instanteat" or something.
-
View User Profile
-
Send Message
Posted Aug 16, 2012@m1enkrafftman
I always have to ask why packet inspection should be necessary for that ?
Is there no event for start digging ?
(Edit: i leave the short question first.)
-
View User Profile
-
Send Message
Posted Aug 16, 2012@zonedabone
It is possible to remove all log entries for actions and put them after a VL>500 entry.
One can not distinguish by user groups, though (mods get it , admins not).
@Intangir
The protect plugins option now also prevents the help functionality, becasue one can get information about plugins there too. Set the setting to false in the config and players can do /plugins and /help.
-
View User Profile
-
Send Message
Posted Aug 16, 2012@MasterGabeMOD
Not a fastbreak, it's an instant. This is done by sending the dig packet with 0 as an argument, then immediately sending another dig pxacket, with 2 as an argument (start digging, then end digging). Once they've done that, they just set the block break delay to about 0.5 (so it's not too too fast), and they're done. Instant mine.
I personally don't know exactly how one would go about fixing that (besides sorting out all incoming packets, and then handling it when you have a Packet14BlockDig(0, i, j, k, 1) and a Packet14BlockDig(2, i, j, k, 1) back to back. Even then anybody with a diamond shovel digging sand would send notifications at the slightest bit of lag... Either that method, or determine the start and end time, the person's tool, the enchantments on it, and do some maths to determine how long they dug, and how long they should have been digging, and the difference is the violation level.)
-
View User Profile
-
Send Message
Posted Aug 16, 2012@deleted_8156133
Yea the spam filter (NoPwnage) didn't work at all how it should do. I don't know the progress yet but please test the latest NC+ DEV build and if it still happens then make a ticket.
@Shreaders
Yes some stuff has changed in that check, please test with the latest DEV build and if you think its still not ok make a ticket. Minecrafts enchated stuff is really fast in vanilla also...
-
View User Profile
-
Send Message
Posted Aug 16, 2012@Shreaders
Actually, about a week ago, Neat was trying to find a fix for that, so i'm pretty sure a fix will come soon, but right now, the main focus is to fix bugs, then we find a patch for that.
I tested this myself, and the only way he's doing it is through fastbreak. The enchantment "efficiency" itself is like a hit in a half. Fastbreak with efficiency is one hit and smash.
So, there's a 90% this person is a hacker.
-
View User Profile
-
Send Message
Posted Aug 16, 2012Hello,
I'd like to start off by saying: Great plugin. I love it! I have been using it since the birth of my server a little less than a year ago.
I am not sure if this is the proper place to be asking this question or not, but I am hoping the developer(s) of this plugin would be able to assist me? There is a player on my server who I am suspicious of using mods/hacks to speed up his mining. He uses an efficiency I pickaxe but mines unbelievably fast (almost as if he were in creative). I followed him for almost 15 minutes and it is just ridiculous how fast this kid mines.
My question is, does the current dev build of this plugin for 1.3.1 prevent fast mining hacks/mods? And if so, why does this guys seem like he is mining at an unfair speed? Worries me that others might be using this mod/hack on the server to gain an unfair advantage over other players.
Thank you, Logan.