NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Oct 9, 2012I see all these broken builds, and not sure what one is most stable..
-
View User Profile
-
Send Message
Posted Oct 9, 2012@chopstick121
NCP does not do "formats". It might remove colors from messages (but not from the format) if you don_t have the permission nocheatplus.checks.chat.color . Probably this has to do with oyur chat manager (which is it?).
@lst96
Admins might be missing the permission: nocheatplus.checks.chat.color
-
View User Profile
-
Send Message
Posted Oct 9, 2012Hey NCP blocking admins from using color text. Anyway to fix this?
-
View User Profile
-
Send Message
Posted Oct 9, 2012it messes up my essentials Tag i have [Admin] but turn out <chopstick121> when i removed no cheatplus is back to [Admin] what does it do that how can i disable chat format in NoCheatplus
-
View User Profile
-
Send Message
Posted Oct 9, 2012@andrewkm
Do you have more detials ? Were there check alerts or strnage log entries ?
Edit:Fixed in 153, thank you for quick report.
-
View User Profile
-
Send Message
Posted Oct 9, 2012@LordKainzo
Keep me up to date what 145 or 149 does with it (prefer 149 if it works for you).
-
View User Profile
-
Send Message
Posted Oct 9, 2012@andrewkm
150 was quite experimental and longer up than intended. 149 should be quite ok.
-
View User Profile
-
Send Message
Posted Oct 9, 2012NCP #150 / Default configuration.
After server restart... suddenly no one was able to move. Not even OPS / * permission. Reverted to NCP 145 all is fine. Restarted server ; users logged back in and again all is fine.
Something def up with #150
-
View User Profile
-
Send Message
Posted Oct 9, 2012@finamenon
Currently we have Configuration and Dev Pinboard for reference. Both will be updated with the upcoming release, but might be missing some entries.
If you have a particular question or aim to reach just ask, or open a support ticket.
-
View User Profile
-
Send Message
Posted Oct 9, 2012Is there documentation anywhere on what exactly the numbers actually mean in the config file? I feel like any changes I make are completely arbitrary because I don't know, for example what "minimum, factor, weight, level" etc... actually do. Am I missing out on something?
-
View User Profile
-
Send Message
Posted Oct 9, 2012@LordKainzo
We do not have a premium support or anything like that so you don't need to pay us for help :)
Heroes skills can only be fixed in Heroes uses the NC+ API. There are 2 ways to do this: 1. Heroes developers use the NC+ API to allow heroes skills working with NC+ 2. Over the plugin CNCP (CompatNoCheatPlus). Block breaking n stuff should be doable without problem only when it gets to the moving stuff its a bit harder to do. But lets see what @asofold says to this.
Stairs are still an issue kinda yea, @asofold tried some fixes on the SurvivalFly check but sometimes it still makes wrong alerts. Please try with build #147 or up, should be much better on those builds.
NC+ should be pretty save in the latest state, so you should be protected on the most critical hacks.
-
View User Profile
-
Send Message
Posted Oct 9, 2012@Asofold ugh! Having so many issues - going to update to the latest.
I wish I could pay for some premium support to help me crack down on some of these issues.
Still having issues with players sneaking down steps, still getting a lot of rubber bands, most of the heroes skills arent supported at all (anything to do with velocity appears to be shot)
I've had to grant such high values that I'm not even sure I'm being protected against actual hackers.
-
View User Profile
-
Send Message
Posted Oct 9, 2012@matagin
Difficult to judge. Are the players trusted? Do any warnings or log messages show up (depending on config in the server log or nocheatplus.log or in-game or not at all)?
It could be the dynamic reach adaption by the fight check, but that would not adapt to lower than possible distance (for not moving players).
Also some checks deal time penalties for attacking.
Important is to find out how to reproduce the issue, if people are moving away from each other, it can happen that the are in range on client side and out of range on server side, esepcially with lag, but also simply due to the latency. The reach check does account for lag by extended reach, but adapts dynamically if players hit on long distance (preventing all time aura effects). Also it would deal a penalty time (500 millisecond by defaults) for violations. "/ncp info playername" should reveal if the player has violations on that account, before testing "ncp remove playername" would ensure that no old violations are shown. Reducing the penalty time for reach might help, you can also deactivate reach adaption setting "reduce: false".
Another check that deals penalty time for attacking is the yawrate component, which prevents attacking if people turn too much for certain actions like attacking (...), throwing stuff, shooting bows.
-
View User Profile
-
Send Message
Posted Oct 9, 2012I'm seeing an issue where every few minutes or so, players are not able to hit other players and mobs. We have NCP build #145 and the latest cncp. Is there a check I can tweak to fix this? Maybe it's related to the forcefield check.
-
View User Profile
-
Send Message
Posted Oct 9, 2012@HOUSEMASTERR
What rates ? Edit: Also which checks? If block lag, it would only be fastbreak usually.
Usually this would be lag of some kind, or you have an old version running ?
Which blocks + tools/enchantments is it ?
The invisible blocks is a Minecraft issue when mining downwards.
-
View User Profile
-
Send Message
Posted Oct 9, 2012Default settings provided give a lot of false positives for breaking various blocks with enchanted diamond tools. For the client it looks like "block lag" where the blocks don't disappear, or they get stuck jittering inside invisible blocks until they relog. This happens with only NCP installed on vanilla minecraft server. (lag isn't involved, happens with 20 tps too).
Only thing that worked out for me was disabling those checks entirely. Changing rates didn't seem to work.
-
View User Profile
-
Send Message
Posted Oct 9, 2012@asofold
Someone tested noclip on our server and he did lose health when he got trough walls yea.
-
View User Profile
-
Send Message
Posted Oct 9, 2012@MasterGabeMOD
@np98765
Technically i am not sure how they do it, i have heard of one hack that might lead to moving events not being fired with the right coordinates or not being fired at all. That is somewhat unconfirmed though.
Noclip hacks are still possible, certainly. CraftBukkit only puts through moving events that mean a minimum distance from the last set position for the player. In effect the hack clients could make a bigger step towards a wall then within the unguarded distance step into the wall. NCP allows them to move inside of the block, currently. That has been done to let players not be trapped while they should not be in vanilla. I can certainly add stuff to prevent abuse further. Provided moving events are fired at all, it should be possible.
Did the players lose health in that?
Important edit: Please do activate the moving.morepackets check, it is light in comparison and is currently necessary to back up against flying.
If i find some more time (next century?) , i will probably switch to / add other accounting methods to flying checks to make them more accurate, lag-independent, morepackets-independent, potentially easier to make compatible. maybe
-
View User Profile
-
Send Message
Posted Oct 9, 2012@MasterGabeMOD
@np98765
Are you guys sure that the passable check is online? without that check they can noclip trough blocks.
The SurvivalFly bypass is already know. One of the private hack clients go leaked and now its public, so I guess you 2 got some of them using it. @asofold is trying to fix this but its gonna bee hard and need time to do.
And yes that bypass also works with AntiCheat at the moment. That client they use is really cool I mean bad, it even had a NoFall bypass which is fixed now on the latest NC+ builds.
-
View User Profile
-
Send Message
Posted Oct 8, 2012@ExtremeHeat11
@MasterGabeMOD
I've had the same issue! I had someone come on, asking if they could use mods (specifically, Smart Moving). I said no. A few minutes later, they're zooming through blocks (turning black), in the ocean, flying at top speed.
I'm using the most updated recommended build (Download linked one)