NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Sep 3, 2012@asofold
I have pmed you a few things. And yes our configs are completely fresh and regenerated.
-
View User Profile
-
Send Message
Posted Sep 3, 2012@imaxorz
That is the flying checks by CraftBukkit. If you stand in mid air you get pulled down.
NeatMonster made attempts to do something about it, but i am not sure if the nomovedtooquickly option is really safe to use, some people were experiencing problems with it.
There might be client side fly mods that allow better compatibility, but i am not into it right now.
CraftBukkit version might matter if it is about the creative flying qursiton (teleports, world changes: CB 2357 fixes, supposedly).
-
View User Profile
-
Send Message
Posted Sep 3, 2012I have 3.7.0 dev and I can fly ok since I gave myself the right permissions, but if I pause in mid-flight I get pulled to the ground. Am I missing something?
-
View User Profile
-
Send Message
Posted Sep 3, 2012@andrewkm
It will be subject to revision, though there are many servers that rely on a pretty rigid chat handling and probably have to due to the amount of online players, so we will have to provide some default configuration that allows reasonable protection against real spam attacks out of the box.
Still first you have to check your version, if you had a version with globalchat active, the latest builds changed some things and you might have to regenerate parts of the configuration (its enough to delete the paramters like level etc. no need to remove command lists.).
Then you need to find out / know which check actually forces them into captcha, currently there is nopwnage and globalchat. Knowing which prevents what can help to know what part of the configuration to adapt.
I will try to add a "quick page" about configuration of developement features, which are not well covered by the other documentation, yet. That will cover Flying and speed, chat. i will link it from here and from the configuration page soon.
-
View User Profile
-
Send Message
Posted Sep 3, 2012Default nocheatplus config is incredibly hardcore on our users regarding chat. Any way to make this more user friendly? (I've disabled captcha completely.... everything else in the config is default; and users are finding it quite incredibly hard to chat)
-
View User Profile
-
Send Message
Posted Sep 3, 2012@lbb601
It should be: nocheatplus.checks.chat.globalchat
The parent nodes are not yet set up so one has to give it explicitely, most likely (indev...).
-
View User Profile
-
Send Message
Posted Sep 3, 2012Whats the permission for globalchat? The thing to bypass the check.
-
View User Profile
-
Send Message
Posted Sep 3, 2012@VergilPrime
Uncanceling has been fixed quite some time ago.
And maybe you can describe your problem more precisely - what does "gives me my ....." mean?
I assume you are using an old version of NoCheatPlus, best update to the latest, to be found at: http://www.nocheatplus.org:8080/job/NoCheatPlus/
-
View User Profile
-
Send Message
Posted Sep 3, 2012uncancels the command preprovess event (said someone smarter than me)
Basically I tried to rewrite/override some commands using CommandHelper, but with NCP installed, it gives me my CH command AND the original command both.
Irritating :I
-
View User Profile
-
Send Message
Posted Sep 3, 2012Build 63 addresses some issues, some might get reverted due to concept changes, but some might be lasting improvements:
100 would be 100% of normal speed, thus 200 is two times the normal speed. It applies to the normally allowed speed including ice etc., but it only works for walking and sprinting by default.
Other changes in the recent builds:
(See for commit list: http://www.nocheatplus.org:8080/job/NoCheatPlus/changes)
-
View User Profile
-
Send Message
Posted Sep 3, 2012@asofold
Alright, Thanks.
It was done without warning, same with Scrayos, as he's kicked too.
If Neat needs me to do anything, i'll be whiling to still help out. I've just been busy the past few days, getting ready for school.
-
View User Profile
-
Send Message
Posted Sep 3, 2012@MasterGabeMOD
I don't know.
Somebody (NeatMonster?) wanted to adjust the roles, i think. I will have to ask him...
-
View User Profile
-
Send Message
Posted Sep 3, 2012@asofold
Hey why am I not on the list anymore? No one told me about this...
-
View User Profile
-
Send Message
Posted Sep 3, 2012@dotapurex1
That may be your judgement, how about disabling the captcha, setting active to false for the captcha section in the configuration (checks -> nopwnage -> captcha -> active: false)?
I also favour a review of how to configure it and what the default settings should be (for instance banning etc, for chat), but currently it is set to active by default. How the captcha looks like in chat might also be subject to change, for instance sending a multi line "image" of the captcha instead of an easy to parse message.
@icheesy
The captcha bypass permission is mostly useless, because without captcha the normal nopwnage checks and possibly actions are run. Only difference to disabling captcha alltogetehr is that you can disable it for a player. Usually the nopwnage actions are more severe than captcha, like kicking or banning so it might not really pay to disable them for some players only.
(Edit: probably not that much useless for they can be used with globalchat too.)
You can disable captcha in the configuration, the permission is:
nocheatplus.checks.chat.nopwnage.captcha
For speeding you can currently not distinguish flying and speeding for individual players (maybe worth a ticket) - you can add values for flyingspeed, walkingspeed, sprintingspeed, blockingspeed, sneakingspeed in the survivalfly section of the configuration. 100 is the normal value.
What do you want to allow speeding for actually?
Just to allow people to wlak faster, or also to swim faster, run faster while blocking / sneaking etc. ?
-
View User Profile
-
Send Message
Posted Sep 3, 2012@dotapurex1
If it's bothering you that bad, then make captcha "false". Some people prefer it to help with spam, and possibly to annoy spammers as well.
So I would say, it's necessary to have, but that's why there's a option to shut it off.
-
View User Profile
-
Send Message
Posted Sep 2, 2012What's the permissions to bypass captcha
EDIT: How can I allow people to speed hack, but not fly hack? What would I enable/disable?
-
View User Profile
-
Send Message
Posted Sep 2, 2012Please remove the Captcha on the new Nocheatplus dev builds... They are unecessary and extremly flaw and useless...
-
View User Profile
-
Send Message
Posted Sep 2, 2012@GuildMasterLelo
1. Over the beta build i would recommend the developement build CB 2357, because it fixes some issues, also related to creative flying with teleports or world changes.
2. As MasterGabeMod said, YOu should use the latest developement version.
@chrishillz
I am not sure what the problem is, actually - are there any kick commands issued for spam violations ?
There could be some cross plugin issue, because NCP is using the asynchronous chat events, on violations NCP will let them be synchronized into the main thread by a custom event (i.e. waits for the man thread processing that). So it could happen that plugins receive the asynchronous chat event after NCP at a moment after NCP has already run the actions, whatever commands are defined in there.
The latest developement versions rely on the actions for banning + kicking only, so if you are using an outdated configuration file, the kick entry might simply be missing.
Not sure if any of your other chat protection plugins (if i understand right, you have some) should perform kicking and fail.
-
View User Profile
-
Send Message
Posted Sep 2, 2012@asofold
Yeah I see what you mean, but I don't think there is a automatic configurable kick command like the last versions had, this seems to be a problem with mcbans for antispam plugins.
Anyone else use mcbans here, and have a similar problem where the player is banned over 50 times?
-
View User Profile
-
Send Message
Posted Sep 2, 2012@GuildMasterLelo
You can use the latest devs here: http://www.nocheatplus.org:8080/job/NoCheatPlus/