NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Nov 5, 2012Using chat auto tab complete which is now in bukkit you can spy on all server commands. Just type / and hit tab.
We really need a way for nocheatplus to block the chattabcompleteevent if a / is used in chat first. This way it only works on names.
-
View User Profile
-
Send Message
Posted Nov 5, 2012@Nickbbeezy
There have been no changes to those checks in a while.
Are the people reliable? You could allow people in creative mode to break blocks slightly faster by setting the intervalcreative to the same value as with intervalsurvival (like 45). Thus alowing 20 blockbreaks per second roughly.
Concerning commands you would have to give us more information. Could be you added a plugin with signs or so which does multiple commands in the name of the player at once ? Please check the logs for such a case, they should show commands, and the violation or at least the kicking entry.
-
View User Profile
-
Send Message
Posted Nov 5, 2012Not sure what's causing it, but when I use build #222, players can't break blocks in creative.
Error given: http://prntscr.com/j1wmq
It does this for everyone. It works when I use NoCheatPlus 3.8.0-RC-b207, but with that build people get kicked/temp-banned for using commands for some reason.
-
View User Profile
-
Send Message
Posted Nov 4, 2012@LordKainzo
Sure.
-
View User Profile
-
Send Message
Posted Nov 4, 2012@asofold
I guess I'm not sure how to do that. I could show you a skill that is having issues and if you'd like maybe you could help me make some of those checks? I'm just at a bit of a loss here.
-
View User Profile
-
Send Message
Posted Nov 4, 2012@LordKainzo
BlockPlace/speed is launching projectiles, actually. Not sure why exactly it got sorted in there, though.
I guess the arrow skill is triggered by some normal action or command/item use - in that case you can exempt the player from BlockPlace_speed during creation of the projectiles. That should normally do, because projectile damage is not surveyed by NCP.
Not allowing cheating is a bit difficult, if you have an entity attack event or something that triggers your skill (which then damages multiple entities), then you might not exempt from the first damage event (the normal one), but exempt the player before calculating the multiple other events if they are done all at once. So the events that trigger the multi-damage will have to be at normal fighting pace/direction, etc.
That can not work with all skills of course.
Concerning TestNCP i have no idea right now, strange...
-
View User Profile
-
Send Message
Posted Nov 4, 2012@asofold When I attempt to use "SkillCleave" as a Heroclass, this is what triggers, cleave attempts to damage everything within a range, so it increases reach, etc.
FIGHT_REACH vl 0.057 (+0.057)
FIGHT_NOSWING vl1 +1 Details cancel=true
FIGHT_SPEED vl 1.667 (+1.667) details limit =15 cancel=true
12.11.04 10:30:12 [INFO] X failed NoSwing: didn't swing arm. VL 3.
12.11.04 10:30:12 [INFO] X failed Speed: tried to attack with too high a frequency. VL 2.
When using a skil that shoots out multiple projectiles (aka snowballs/fireballs) - this is the check it triggers, it is NOT placing blocks.
http://pastie.org/5181830
So the better question is ... how might I adjust this without allowing hacks to work better?
-
View User Profile
-
Send Message
Posted Nov 4, 2012@asofold So I added myself as a tester and I'm still not triggering any logs and I know for a fact that logs will be triggered with some of these skills... Very confusing. http://pastie.org/private/pz3e5hyll9dojnlcxaa
I'm on latest Dev - do I have to update TestNCP?
Edit when using a non-op'd nonadmin account the TESTNCP logs are showing up fine :D
In fact, I'll have Skill Sneak on and it will actually push me back like I triggered a check, but nothing appears in console or the logs of nocheat.
testers:
- Kainzo
-
View User Profile
-
Send Message
Posted Nov 4, 2012@craftovski
NC+ doesn't output such messages if a player fails a fly check or something. Do you have allow-flight=true? Pluginlist? CB version? NC+ version? You should better make a ticket if you think that NC+ is the issue. Towny for example also has a fly check by default...
-
View User Profile
-
Send Message
Posted Nov 4, 2012Is it NCP error or bukkit error im not sure but here it is.
While flying in survival with all permissions console is getting spammed with :
craftovski was kicked for floating too long! and the funny part is i dont get kicked =)
So anyways just wanted to report to see if its problem on npc or bukkits side.
Tx for reading.
-
View User Profile
-
Send Message
Posted Nov 3, 2012@asofold
I'm using the latest recommended NCP build. Which would be 3.8.0-RC-b207.
-
View User Profile
-
Send Message
Posted Nov 3, 2012@GuildMasterLelo
The chat configuration is probably adapted to slightly bigger servers (average?) needs, so it will not allow too much. I mgiht make it less sensitive probably - which version of NCP have you tested and was that actually the default configuration ?
Of course making it less strict will also allow more spamming, but bigger servers have to adapt the config anyway for chat, usually (chat channels, spam bots).
-
View User Profile
-
Send Message
Posted Nov 3, 2012I think this might be driving some players away from this amazing plugin. The chat sensitivity is too high. Players tend to talk fast at a normal rate which NCP considers spam. I know the config can be edited, but it's a bit confusing. I think chat sensitivity should be lowered by default. Please let me know if this suggestion is accepted, or maybe how to change the config for my request. Thanks :)
-
View User Profile
-
Send Message
Posted Nov 3, 2012@zoraxpvp
Please give us more info s. 2 Blocks high hole or just free surface? NC+ version? CB version? Plugin list?
There is a bug in bunny hoping but that's with a 2 blocks hole. We try to fix everything if we can reproduce it ^^
-
View User Profile
-
Send Message
Posted Nov 3, 2012Theres a bug with the jumping when u jump then start going a certain distance then run / jump at same time it glitches u back to where u jumped PLEASE FIX
-
View User Profile
-
Send Message
Posted Nov 3, 2012@LordKainzo
With tstncp you have to to tell it who should receive the logging in the configuration. I think it logs to console by default (but check it to be sure), in any case you have to add either player names to the testers list or "*" for all.
-
View User Profile
-
Send Message
Posted Nov 3, 2012@asofold
Alright, that makes a bit more sense. Also I tried testncp and I didnt see any alerts being triggered when doing things. Was strange - Not sure if I had to enable anythign else.
-
View User Profile
-
Send Message
Posted Nov 3, 2012@mima19
The config of NC+ allows you to do that. "If a player gets this VL level NC+ will run THAT action."
@FuRiouSOne
Read here: http://dev.bukkit.org/server-mods/nocheatplus/pages/development/pinboard/#w-improbable
-
View User Profile
-
Send Message
Posted Nov 3, 2012Can someone explain what this improbable check means? It sure does spam alot..
-
View User Profile
-
Send Message
Posted Nov 3, 2012Is there a way to kick a preson from a server is hacking lv is above certain number?