NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Sep 10, 2012@457undead
It is the actions entry for the check that is alerting.
If you have "actions: log:somename:0:5:icf cancel" as the first entries,
you can do "actions: cancel vl>8 log:somename:0:5:icf cancel", which would still cancel actions but start the logging after violation level of morethan 8. That would only adjust the logging.
Alternatively you can remove the "i" at the end of the log entries to not log those to ingame chat.
-
View User Profile
-
Send Message
Posted Sep 10, 2012@asofold
How do i increase the violation level ? EDIT: I cannot seem to find it in the config.
-
View User Profile
-
Send Message
Posted Sep 10, 2012Disable the check or increase the violation level for logging (vl>7 before the log:...).
-
View User Profile
-
Send Message
Posted Sep 10, 2012My server is kinda laggy and when someone is fighting i keep getting the message Instantheal tryed to regenerate more health then normail VL: 7 And they are not hacking ! is there any way to fix this ? it clusters up my screen. Thanks !
-
View User Profile
-
Send Message
Posted Sep 10, 2012@PhanaticD
Did you update before disabling the checks?
Seems somewhat unlikely, though it can always be something indirect with commands involved and logging.
-
View User Profile
-
Send Message
Posted Sep 10, 2012Hi the other day I posted about getting lag spikes and clusters of more packets, I tried disabling the fastbreak and fastplace block checks, and I do not get them anymore and my server performance has increased greatly! If you are okay with people using possible nukers or build hacks I suggest turning off those checks seeing how your server runs without them.
using dev build 78 atm
-
View User Profile
-
Send Message
Posted Sep 10, 2012Ok coolness. Thanks a BUNCH for an awesome plugin.
-
View User Profile
-
Send Message
Posted Sep 10, 2012@diskman2000
Yea, FastClick can block that: nocheatplus.checks.inventory.fastclick
Add that permission to the group and they can bypass this check. (It was made to block Nodus chest sealer and stuff..)
-
View User Profile
-
Send Message
Posted Sep 10, 2012@diskman2000
Deactivate the fastclick check in the inventory section or with permissions: nocheatplus.checks.inventory.fastclick
-
View User Profile
-
Send Message
Posted Sep 10, 2012Does the current 1.3.1 version block InvTweaks also? I allow that on my server but I am getting complaints. Is there a node to allow invtweaks then?
-
View User Profile
-
Send Message
Posted Sep 10, 2012@MarioG1
Yes i noticed that it triggers for grass and other rarely for legit players.
The latest build does decrease it with time.
-
View User Profile
-
Send Message
Posted Sep 10, 2012-
View User Profile
-
Send Message
Posted Sep 10, 2012@Snozynoze
You are using an old version of NocheatPlus (for 1.2.5, as shown with the download link).
Use the development version for 1.3.1:
Found at: http://www.nocheatplus.org:8080/job/NoCheatPlus/
-
View User Profile
-
Send Message
Posted Sep 10, 2012Every time I download NCP I get errors. (Reads bottom to top)
They go away when I uninstall and come back when i reinstall.
10.09 21:51:50 [Server] INFO at net.minecraft.server.ThreadServerApplication.run(SourceFile:539)
10.09 21:51:50 [Server] INFO at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:378)
10.09 21:51:50 [Server] INFO at net.minecraft.server.DedicatedServer.init(DedicatedServer.java:140)
10.09 21:51:50 [Server] INFO at net.minecraft.server.MinecraftServer.a(MinecraftServer.java:225)
10.09 21:51:50 [Server] INFO at net.minecraft.server.MinecraftServer.d(MinecraftServer.java:275)
10.09 21:51:50 [Server] INFO at net.minecraft.server.MinecraftServer.i(MinecraftServer.java:296)
10.09 21:51:50 [Server] INFO at org.bukkit.craftbukkit.CraftServer.enablePlugins(CraftServer.java:247)
10.09 21:51:50 [Server] INFO at org.bukkit.craftbukkit.CraftServer.loadPlugin(CraftServer.java:265)
10.09 21:51:50 [Server] INFO at org.bukkit.plugin.SimplePluginManager.enablePlugin(SimplePluginManager.java:381)
10.09 21:51:50 [Server] INFO at org.bukkit.plugin.java.JavaPluginLoader.enablePlugin(JavaPluginLoader.java:365)
10.09 21:51:50 [Server] INFO at org.bukkit.plugin.java.JavaPlugin.setEnabled(JavaPlugin.java:217)
10.09 21:51:50 [Server] INFO at fr.neatmonster.nocheatplus.NoCheatPlus.onEnable(NoCheatPlus.java:72)
10.09 21:51:50 [Server] INFO java.lang.VerifyError (class: fr/neatmonster/nocheatplus/checks/chat/ChatListener, method: commandPreprocess signature: (Lorg/bukkit/event/player/PlayerCommandPreprocessEvent;)V) Incompatible argument to function
10.09 21:51:50 [Server] SEVERE Error occurred while enabling NoCheatPlus v3.6.1 (Is it up to date?)
10.09 21:51:50 [Server] INFO [NoCheatPlus] Enabling NoCheatPlus v3.6.1
-
View User Profile
-
Send Message
Posted Sep 10, 2012Thank you to all the Devs for the support and work!
Does anyone have a pastebin of a config which seems to do the least amount of checks but still overall stops the most typical grief.
I have tweaked every single line of the config - but I would like to compare what I have done against another.
-
View User Profile
-
Send Message
Posted Sep 10, 2012Yay you managed it to block Nuker. And sometimes it even crash Nodus if you try to use Nuker and Nocheat is installed on the server :)
-
View User Profile
-
Send Message
Posted Sep 10, 2012@MarioG1
I had that too, but actually NCP can't set that reason by design, currently. Because of kicks not being possible during asynchronous processing. The used commands are executed delayed but with the normal Player.kickPlayer method. @devs: could that be CraftBukkit? I can't look into that right now.
@gramoobi
You can use the "ncp tempkick" command for actions now, build 80 will also have an example string for "tempkick5", to kick for five minutes.
@build 80
This build (+79) introduces:
Found at: http://www.nocheatplus.org:8080/job/NoCheatPlus/
-
View User Profile
-
Send Message
Posted Sep 9, 2012@SuperPyroManiac
Did you try the latest dev build? At least state the latest version you have tried, otherwise this is useless. Better make a ticket and describe a little more.
@gramoobi
We might add a feature to deny people to log in for a while - until then you have to make use of the configurability of NoCheatPlus. So you can ban them or if you have a temp-ban plugin, add a command for that to the strings section and make use in the corresponding actions.
Edit: Next version will include a tempkick command.
-
View User Profile
-
Send Message
Posted Sep 9, 2012it only kicks a player once then they can rejoin and keep hacking with no kicks
-
View User Profile
-
Send Message
Posted Sep 9, 2012Everyone is bypassing the fly on my server now.. I have tried a ton of different dev builds. Seems so many clients are able to bypass a lot of the things on here.