NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Oct 18, 2012@TNTUP
Except that the old versions did ip-ban for saying "hi" three times fast.
You can configure the chat.text check to be less hard on repetitions etc.
If you want to allow using letters and special characters same as normal words then set the noletter weight to 0.
And also writing "." repeatedly is the same was writing "join x.y.z" repeatedly in the eyes of many server admins. The power comes from configurability here.
Some things are perceived as "not spam" because they are put in some reasonable context, but an anti spam check can not simply know such contexts, that would be a field of research in science to cover, more or less. So you can also set the levels higher for which to regard something as spam. But start of with "noletter: 0" instead of the default value, that should help already with the "." and the "10 ... 9 ... 8 ...". The warning message can configured too if it sounds too harsh (NCPdoes not contain any banning by default anymore).
-
View User Profile
-
Send Message
Posted Oct 18, 2012(Sorry for being mad at this, I'm just annoyed to see those bugs never happened before!)
Oh god again... my players reports me saying they don't even spam and poof it says they risk a ban.... FOR a simple ... dot. yes! A dot! unlike for lag tests, an guest says " . " poof saying they risk a ban... another dot... kick.
Another point is bad with this plugin, my players can't count ... they can't play seek and hide, 10 to 0, poof kick.
Those issues didn't happened in Older releases!
Steps to repeat it: Use your alt account or ask a friend to test it, say " . " then you get the spam message saying he risk a ban. another " . " poof kick.. In older versions of NCP, the older versions was better. now its getting worse.
Again, using the default config, I dont even know how to change a thing... When my players plays a game, eg: tag, they count 10 to 1.. saying they spam. *sigh* how I can fix that?
proof: Using my alt account saying " . " http://puu.sh/1g58W
2nd proof: Using my alt account saying " . " again : http://puu.sh/1g59M
-
View User Profile
-
Send Message
Posted Oct 17, 2012@iQwz
Couldn't reproduce, NC+ should also work fine on KitPvP servers with AutoSoup or whatever. If you still have issues could you please give us more info? (server.log, nocheatplus.log, VLs?)
@TanveerGT5 @DinoScope
Thanks :)
-
View User Profile
-
Send Message
Posted Oct 17, 2012@LordKainzo
Hi! Try to teamviewer your friends and check theyre pcs or macs.
Most times these people have used Nodus and have just "force updated" it which causes false positives by nocheatplus, which actually isn't really false, but its anooyying.
Please check.
-
View User Profile
-
Send Message
Posted Oct 17, 2012@asofold
telling them to use a vanilla client now - we'll see.
-
View User Profile
-
Send Message
Posted Oct 17, 2012@LordKainzo
If they can reliably reproduce it would be interesting to see if they can cause it with a vanilla client as well...
-
View User Profile
-
Send Message
Posted Oct 17, 2012@asofold
Well, these are two typically trusted members of my community. Both state that they are "laggy".
Both users say they are on Spoutcraft (RB) for their client.
Morningstar states "anything I do really, a few times I was in my town just breaking/replacing dirt and torches"
-
View User Profile
-
Send Message
Posted Oct 17, 2012Really nice work on this plugin.
I'll try and donate when I get the money, you've done a lot to help the server community.
Thanks!
-
View User Profile
-
Send Message
Posted Oct 17, 2012@LordKainzo
They don't get improbable vls for doing nothing (sure thing).
Lag might lead to something, i would have to investigate.
-
View User Profile
-
Send Message
Posted Oct 17, 2012@asofold
This user isnt fighting or anything. I've also seen this from another user "Barnubus" and they were simply standing around doing nothing.
I believe that either they are lagging (on a bad connection) and eventually their desyncs or something else is occurring. It's troublesome because they will cluster logs with their troubling high VL's and I dont know how to fix it.
-
View User Profile
-
Send Message
Posted Oct 17, 2012@LordKainzo
The high improbable count could be related to block placing. But not sure, what exactly did the user do?
Usually one only triggers improbable with fighting hacks that much.
If you had a much older version before you might regenerate yawrate and improbable config sections to rule some things out.
-
View User Profile
-
Send Message
Posted Oct 17, 2012@asofold
http://dev.bukkit.org/server-mods/nocheatplus/files/27-nocheat-plus-3-7-4-rc-b156/
That build.
They arent attempting to place massive structures or using high efficient tools.
It may be an issue with either latest CB (we're on RB) or this update... hard to say.
-
View User Profile
-
Send Message
Posted Oct 17, 2012@LordKainzo
What build are you running?
They were constructing large structures with many block places per second (ca. 5 + ) ?
Relogging shoudl not have anything to do with NCP - there are in fact desyncing bugs in Minecraft (like digging down or destroying lots of blocks with high efficiency tools).
-
View User Profile
-
Send Message
Posted Oct 17, 2012@asofold
I was fixing it :) sorry I'm actually at work here trying to do two things :)
Now, the current issue I have with this update (and it may have been present before but not as transparent)
Users are stating they are getting "desynced" where they have to relog to fix it, they seemingly cant place blocks after a while, etc. It takes 2-5mins to "desync" and restarting fixes it.
Morningstar's pastie log - I believe this person to NOT be hacking.
http://pastie.org/private/lle7lldanumq9ugx1ejug
-
View User Profile
-
Send Message
Posted Oct 17, 2012@LordKainzo
Please use a paste or code tags :) It is hard to read and does not show indentation as is.
Exclusions entries are only for commands.
Yeah only add to handleaschat if it is meant to be chat like just normal chatting (like /me).
-
View User Profile
-
Send Message
Posted Oct 17, 2012handleaschat:
- /me
- /skill
- /party
I see the issue now I think.
-
View User Profile
-
Send Message
Posted Oct 17, 2012@asofold
Right, I've added it here. However, people are still getting kicked/banned and temp banned for "spamming" despite these settings, did I do something wrong?
Better paste..
http://pastie.org/private/axialsda8cy3uoacfmjsxg
-
View User Profile
-
Send Message
Posted Oct 17, 2012@LordKainzo
The chat checks have a commands section, there is the exclusion list for commands now.
-
View User Profile
-
Send Message
Posted Oct 17, 2012Quick question....
nopwnage:
active: true
exclusions:
- /skill
- /party
level: 500
banned:
active: false
timeout: 5000
weight: 100
How do I do the exclusions now? players BIND /skills Fireball to a hotkey in spoutcraft and are now getting kicked.
The above was the old config but I dont see it in the new config, another hidden option?
-
View User Profile
-
Send Message
Posted Oct 17, 2012@iQwz
Yes it is, I've use the bukkitgames since day one with nocheat+