NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Oct 6, 2012@xSkivy
The newest oneshould be preferable at this point of time.
I am not sure wihich version iof NCP you are running. Check the startup-log if NCP enables at all...
-
View User Profile
-
Send Message
Posted Oct 6, 2012@asofold
I am not sure what my permission plugin does with OPs, I use PermissionsEx. In my permissions file, the rank I am has the permission "nocheatplus.admin". Should I try the new build?
-
View User Profile
-
Send Message
Posted Oct 6, 2012@xSkivy
Build 138 might be a reference: http://www.nocheatplus.org:8080/job/NoCheatPlus/
You have really downloaded a version for 1.3.1/1.3.2 on not NCP 3.6.1 by accident ?
Also what does your permission plugin do with ops?
-
View User Profile
-
Send Message
Posted Oct 6, 2012I am using the newest version, and I am not receiving notifications when players trip NoCheat. I have enabled it in the config, but it still seems not to work. I am op and have the notification permission.
-
View User Profile
-
Send Message
Posted Oct 6, 2012@asofold
It could very well be lag spikes, But the player in question happens to live down the street!
Anyways, Ill look up more info on this and keep you updated.
-
View User Profile
-
Send Message
Posted Oct 6, 2012@macbookfan33
Need more details about versions, also you are using original CraftBukkit or Spout or something else ? Is that combined with any skill plugin / client mode? If oyur server ius running on low tps or has lots of lag spikes it might make it necessary to allow wither more accumulated too-fast-breaking time or just to set fastbreak.delay higher to allow breaking faster.
You can add "debug: true" to either the blockbreak or the fastbreak section.
Then have a player with the permissions nocheatplus.admin.debug reproduce the issue.
He should get sent reference information about the block break in chat. The lowest line shows if the server tells it is an instant break and also the used time in millisceonds (u) and the expected reference time in ms (r).
That would be interesting to see.
-
View User Profile
-
Send Message
Posted Oct 6, 2012@asofold
One of my moderators discovered this. He tried mining a single block of sandstone, not in water.
Everytime he tried mining it, it popped back and nocheatplus notified me of a violation. very odd. This has happened to other players too.
-
View User Profile
-
Send Message
Posted Oct 6, 2012@macbookfan33
"a block of sandstone" - very unlikely.
The VL roughly represents milliseconds that the player has mined too fast (maybe i will adapt it to be lower in general). And you can't possibly get that VL from one block of sandstone, further even with any high VL or overtime (buffered for like 2 minutes) you might have accumulated, you can still break any block if you stay within the allowed time with it.
Sandstone needs like 150 milliseconds (0.15 seconds) to break for a diamond pickaxe. To accumulate any overtime (i call it that though i mean mined too fast time) with it at all your player would have to mine a block faster than 60 milliseconds given default seconds. This can occasionally happen on lag, but you have to accumulate 2 seconds of overtime (counted over 2 minutes, also older overtime counts less) to trigger a violation at all.
Now assume the player has not been accumulating vls wit hother blocks, he can gain 60 ms overtime with each sandstone block, thus has to mine clearly more than 30 blocks in two seconds which. Thus at 15 blocks per second at instant breaking speed he would trigger one violation counting in as 60 ms, so to reach a vl of 19000 he has to dothat over a very long time. Which is very/ unlikely to achieve with sandstone.
It is more probable that he accumulated the overtime with other blocks. What might be is extreme server lag (running at 10 or lower tps for a while) which might need you to adapt the configuration to allow accumulation of more overtime.All provided no cheats are used.
Was the player mining under water / standing in the air ?
-
View User Profile
-
Send Message
Posted Oct 6, 2012Fastbreak VL:19000+ when breaking a block of sandstone with a diamond pick?!
-
View User Profile
-
Send Message
Posted Oct 6, 2012@Stuntweed
The fastclick check is against fast clicking, though. It does only limit the number of clicks.
Can you pm a plugin list with versions if possible '(including cb)? It ould be a plugin causing that (important to rule out). It would be a critical bug in CB.
-
View User Profile
-
Send Message
Posted Oct 6, 2012@asofold
No this is not client side, it actually bugs. I tried with a super click program and i'm duping easy pie even if kick them when trying.
fastclick: active: true actions: cancel vl>1 log:fastclick:1:1:cif cmd:kickfrequency
This is what i have configured now and I'm still able to dupe before being kicked (note i'm doing this with a non admin account so you don't get confused)
-
View User Profile
-
Send Message
Posted Oct 5, 2012@Ken6911
Thanks, i forgot to remove that reference before changing other entries in the configuration. Just remove the tell action or use build 137. The tell action is dominated by the kick anyway.
-
View User Profile
-
Send Message
Posted Oct 5, 2012I just updated to b136 and i'm getting this in my server.log
00:14:48 [WARNING] [NoCheatPlus] Failed to create action: NoCheatPlus doesn't know command 'tellchatfast'. Have you forgotten to define it?
Any clue?
-
View User Profile
-
Send Message
Posted Oct 5, 2012@Skydevil_
We are aware of that, you might try developement build 136 (http://www.nocheatplus.org:8080/job/NoCheatPlus/).
It might not fix it, though. We have to look into that further (real tricks involved).
-
View User Profile
-
Send Message
Posted Oct 5, 2012Hi I have just had a player come on my server and started flying around so i logged into a different account and asked him how he did it he said it was a new client he found called Malint i have all of NCP features turned on and it still didn't stop him just letting you know some where there's a work around Thanks for the plugin and keep up the great work SkyDevil_
-
View User Profile
-
Send Message
Posted Oct 5, 2012@Stuntweed
Item clicking: Do they really get more ? This could be a client side effect, but might be the bug is still present. Which CraftBukkit version is it ?
The config description might not be 100% up to date. Currently the fastclick check can not be configured other than disable/enable or the actions. It is enabled by default.
Concerning configuration for big servers it might strongly depend on how powerful your server is. If it is running on low TPS you will likely probably get violations cascading and create more lag.
A simple means to reduce such is to reduce the amount of logging. You can set it to only log for higher violation levels (or not at all) and to not log to file and console at the same time.
Another way is to either deactivate some checks completely or/and to give some of your rather trusted users or donators bypass-permissions for some checks.
You can also use world specific configurations, to turn off some checks for certain worlds completely.
-
View User Profile
-
Send Message
Posted Oct 5, 2012Hi,
So we have this problem on our server where players rightclick blocks in their inventory really fast and by doing so they create more of them. I'm not sure how to block this with fastclick since i cannot seem to understand how the config works. I read the configuration guide but i'm starting to think i'm stupid..
Also important to know is that our server is crowded, 175 slots and there are 100+ players online constantly so the lag has to be added to the equation.
Now my question is, how can i optimize NCP for a large server as ours?
-
View User Profile
-
Send Message
Posted Oct 5, 2012@Maxetto
Possible.
@vobilli
The question is what the reason is. We need more information to judge that, like used versions of CraftBukkit and NoCheatPlus. Further if it happens occasionally, if it happens for all players at once, does it endure, does it persist all the time and similar. Is the server running at 20 TPS roughly ?
-
View User Profile
-
Send Message
Posted Oct 5, 2012My players are getting rubber-banded back when using sprint/jump. I've tried changing some settings in nocheat but it didn't help. Could someone explain exactly what I would need to change to keep this from happening?
-
View User Profile
-
Send Message
Posted Oct 5, 2012I want be in the server with asofold! :P