NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Sep 12, 2012@asofold
I get false positive fast-break check results if i break following block:
Block + used tool
glass block + eff 4 shovel
melon block + everything
glowstone + diamond pickax eff 3
dirt + iron shovel
EDIT:
NCP version #84
-
View User Profile
-
Send Message
Posted Sep 12, 2012@LordKainzo
Autosprint ? If you want to allow that players sprint automatically when attacking, then you have to disable the check simply, or if to differentiate by players, give them the bypass permission.
Knockback interval has to be set to something lower rather to make it more tolerant towards delay etc., but if the clients "autosprint", i assume they send a sprint packet each time the client attacks ? That would of course trigger the knockback check, because a human would usually need longer time between sprint and attack
Concerning sneak + fly i am not sure, would have to take a closer look .. Edit: seems that sneaking would only affect the allowed speed for players, so if they rubberband even though they are allowed to sneak fast, then it remains "strange" for the moment.
-
View User Profile
-
Send Message
Posted Sep 12, 2012@asofold
It looks like its happening for all Spout clients. It may be due to the AUTOSPRINT it has installed, is there any way to check against this?
Trying to conquer this, I've set Knockback for the below.
knockback: active: true interval: 100 actions: cancel vl>2000 log:knockback:10:15:f cancel
Another issue I'm seeing is when players have /skill sneak on - they get rubber banded during any "fall" or 1 drop distance when going down stairs, etc.
Skill sneak forces the client to sneak (but it appears they are running etc) It's worked fine when I just allowed 'sneak hacks' but now with NCP it seems to have issues with fall distance. Any way I can adjust this?
-
View User Profile
-
Send Message
Posted Sep 12, 2012@andrewkm
Thx :)
-
View User Profile
-
Send Message
Posted Sep 11, 2012Bah just crashed on IRC and cant connect to my znc anymore because godaddy is being stupid again. -_- I'll be back on in an hour or two when its fixed and have your flags set in #nocheat :)
-
View User Profile
-
Send Message
Posted Sep 11, 201284 has fixed our issue :) Thank you very much :D
-
View User Profile
-
Send Message
Posted Sep 11, 2012@andrewkm
Build 84 splits the frequency checking off fastbreak, thus insta destroying can be limited.
This might reduce that effect. "blockbreak.frequency" allows ten breaks for creative and 20 for survival, at most. The individual block breaking speed is then monitored by blockbreak.fastbreak.
The frequency check accumulates over 2 seconds (allowing to break double amount, but then have to pause), it can be changed with hidden settings.
Im on bukkitdev, pm me there - and thanks for testing!
-
View User Profile
-
Send Message
Posted Sep 11, 2012@asofold
Can you possibly come on irc; theres a pretty bad bypass to nuker that we are able to use.
First im removing cncp; it may be the cause. Lets see.
Edit: Nope removing cncp he is still able to do it.
Basically with an efficiency 5 diamond pick he can level a 200x200 pumpkin farm in seconds... (Which can really destroy our economy) If you cant get on irc/server to see for yourself I will have a video made for you instead and pm it to you :)
Edit2: looks like it works with the current version of nodus as well.
-
View User Profile
-
Send Message
Posted Sep 11, 2012Very neat plugin, I'll make sure to donate in a bit. It's the least i can do!
-
View User Profile
-
Send Message
Posted Sep 11, 2012@ViscousSummer88
That is interesting, because for creative the old breaking interval is used in build 83, are you talking of build 82 or build 83 ? I will check it anyway, but i'd like to know.
@MarioG1
You can switch back to the old version with setting oldcheck to true in the fastbreak section, no need to disable. Do you have more details on false positives ?
Edit: i will address this in the next build with hidden settings.
@LordKainzo
Does that happen to other players who have Spout installed ? The check just checks if th time between start of sprint and the attack is smaller than the specified time in the configuration. Unless that happens with all Spout clients, it looks like very unlikely to happen that often for one player only. If the sever lags and with fast timing it can happen though that the packets arrive or get processed in shorter sequence than they were sent. You could reduce the time setting to 40 millisecons instead of 50 to see if that makes it better, others reduce it to 20.
(Edit: The connection to one client can also be stricken with dely , thus lag. And i also don't know what Spout does on that account, yet it seems unlikely to wait with sending sprinting or attacking packets,m but one never knows...)
-
View User Profile
-
Send Message
Posted Sep 11, 2012@LordKainzo
Hmm that false positive is really strange... I hope it has nothing to do with the optimized packet sending of the SpoutClient.
-
View User Profile
-
Send Message
Posted Sep 11, 2012@asofold
Does this look very bad to you?
http://pastie.org/private/wrnwtcgjpzotlzqbwuqvfq
he's saying that its because he has spout installed and is using Heroes commands - thoughts?
-
View User Profile
-
Send Message
Posted Sep 11, 2012@ViscousSummer88
@MarioG1
@asofold added added some new stuff to the Fastbreak check which is bleeding at the moment. Please make tickets and try to explain as good as you can, if we can reproduce that we also can fix it then maybe.
@MartyComplex
We recommend to use Craftbukkit/Minecraft 1.3.2 for NC+ 3.7.0 because the falling bug that got fixed in the client. 1.3.1 should also work but may give some false positives out.
When the Beta is done we push on on dev.bukkit ;)
@HighlifeTTU
Thank you very much :)
-
View User Profile
-
Send Message
Posted Sep 11, 2012Please update the CB version's this is known to be compatible with in the Files tab.
Build #83 and NC+ 3.7.0 don't inform us of anything. Thank you! This plugin is so darn important!
-
View User Profile
-
Send Message
Posted Sep 11, 2012@asofold
I had to disable the fasbreak check because it pruduces lots of false positive check results.
NCP version: 83
-
View User Profile
-
Send Message
Posted Sep 11, 2012@ViscousSummer88
in the settings disable console & chat warnings, this wills top the spam and messages in console and in game, it will still block users for doing hacks so dont worry about that
-
View User Profile
-
Send Message
Posted Sep 11, 2012Many thanks from the MineZ development team. We threw some money your way to help with server costs. I recommend any other server who uses NoCheatPlus do the same, as you know how miserable multiplayer servers would be without the NoCheatPlus team.
-
View User Profile
-
Send Message
Posted Sep 11, 2012@asofold
This new update has just caused huge spam and over alerts for players in creative mode:
-
View User Profile
-
Send Message
Posted Sep 11, 2012@asofold
:) Thanks for all the work!
-
View User Profile
-
Send Message
Posted Sep 11, 2012Build 83 introduces a new fast break check, aimed at allowing realistic breaking times, especially instantly breakables should not pose problems anymore, most config for it is hidden, however. It can be switched for the old one, if desired. The InstantHeal check is now disabled by default, the WrongBlock check was improved to prevent accumulation of seldom triggers.
This build is considered feature complete for beta and probably slightly further. From now till release we will only do fixes and updating of the documentation and configuration changes for balancing.
Develpement builds found at:
http://www.nocheatplus.org:8080/job/NoCheatPlus/