NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Nov 8, 2012@asofold
Very happy to see you are working on performance btw :) NCP is currently our biggest timings (compared to second place which is more then 3 times less) - This is great news asofold! Thank you :)
-
View User Profile
-
Send Message
Posted Nov 8, 2012@Liger_XT5
Difficult to judge ... what version of NCP and CraftBukkit are you running right now?
"glitch into flymode" is very difficult to imagine, do you have any more information like logs for those moments? It could be that players have the impression while the chunks are not yet loaded, the client assumes the player should fall, but in fact there is blocks in the way, which NCP will then detect as noclip (Passable check). But that is now my first guess. Otherwise "flymode" is hard to imagine for me right now. For builds before 231 you might disable the accounting (survivalfly), which might lead to false positives with lag, that could resolve some issues potentially.
@andrewkm "managelisteners" ensures that NCP registers only one listener per event + priority "officially" with CraftBukkit (of course the listeners are somhow still there in the same number as with the feature deactivated, but they are hidden within one listener registered with craftbukkit). I can't promise that it actually will gain any performance, but it might in future allow easier compatibility add-ons, because it allows registering hooks such that they reliably receive events before or after NCP, allowing to do without any plugins load order issues). So it is a bit like a "future" feature, which can be disabled without any penalty, though i am interested in performance data of course (the server i am running it on does not get near 1 million events between restarts currently, so i don't have reliable data yet...). Should use build 231+ for it -
itchanging it needs a restart (or server reload) to work.Build 231 also contains some changes to the moving checks which might mean performance improvements in average anyway (after failure permission checks will only perform some permission checks like for speeding, if the player is moving faster than normally allowed).
-
View User Profile
-
Send Message
Posted Nov 8, 2012What is the manage listeners option for?
-
View User Profile
-
Send Message
Posted Nov 8, 2012Not sure what's causing the issue as of yet. Players are having issues with jumping or falling if survivalfly is enabled. If I disable it, some people, some how, glitch into flymode upon login, as they say.
-
View User Profile
-
Send Message
Posted Nov 8, 2012I just wanted to say after looked at all these people complaining; guys you have a great plugin here and keep up the good work! Its done my server proud :)
-
View User Profile
-
Send Message
Posted Nov 7, 2012@Curtis4321
NCP does use more resources, but without more information we can't really say anything about this. It is planned to do another dev-iteration for performance, but currently there are other things more important.
If 100% CPU spikes mean a problem to you, you might open a ticket and give us more information like versions and logs and other and to what tps your server drops during those spikes - also some profiling data would be intresting.
-
View User Profile
-
Send Message
Posted Nov 7, 2012When using this, my CPU Spikes to around 100% every 20/30 mins
130+ players.
-
View User Profile
-
Send Message
Posted Nov 6, 2012@Jamesst20
This is an issue in 1.4.2 - It's fixed in the next MC version according to the Mojang Bug Tracker
-
View User Profile
-
Send Message
Posted Nov 6, 2012@gramoobi
Updated NoCheat+ for 1.4 also? Please make a ticket with more info's so we can help you.
-
View User Profile
-
Send Message
Posted Nov 6, 2012Since 1.4.2 people have been able to fly superjump and run really fast with nodus and another mod idk what it is though...
-
View User Profile
-
Send Message
Posted Nov 6, 2012@Jamesst20
NoCheat+ does not modify the world loading in any way. Did you even test without NoCheat+? I never found such an issue in build 207 or higher.
-
View User Profile
-
Send Message
Posted Nov 6, 2012Men could you do something? Every player get stuck failling in void everytime I add your plugin NoCheat+ and it happens since 1.4.2 update. NoCheat+ Was fine in 1.3.2
-
View User Profile
-
Send Message
Posted Nov 6, 2012@andrewkm
The "*" permissions is a feature of the permission plugin you use but I'm going to take a look at it anyways now.
Made a ticket here: http://dev.bukkit.org/server-mods/nocheatplus/tickets/311-permission-issues/#comments
-
View User Profile
-
Send Message
Posted Nov 6, 2012Also asofold; this has been happening for about a month to me but I really never bothered to look into it.
I have * permission and am not in the op file. For some reason nocheat still blocks many things for me. CJB xray (Fly works - xray doesnt perhaps new block codes or something?), chat checks "please slow down chat you might get kicked for spam" - I do infact get kicked, denied access back to server for a while, etc...
What am I doing wrong. I have attempted to give myself nocheatplus.* as well and no luck?
Using groupmanager. (Although problem was on pex as well) Ideas?
EDIT: Adding myself to the OP file works with disabling the checks for me however the xray problem still exists. (Although I really prefer not to be in the OP file) - Any ideas?
-
View User Profile
-
Send Message
Posted Nov 6, 2012@asofold
We have blocked it here instead: https://github.com/EcoCityCraft/Spigot/commit/68aaadb97eb896c77127509425a0befd58d1b98c
:)
-
View User Profile
-
Send Message
Posted Nov 6, 2012@Chaett
Yea it exactly means that :)
-
View User Profile
-
Send Message
Posted Nov 6, 2012I'm getting a NCP message upon logging in as Owner/admin:
NPC: Your configuration might be outdated. Some settings could have changed, you should regenerate it!
After seeing this, I updated to the latest NCP, but still getting this message. Does regenerate mean delete the config file then restarting? Just want to make sure.
-
View User Profile
-
Send Message
Posted Nov 6, 2012@LiLChris06
Something to stop potentially hundreds of permission checks would be really good. The whole tab completion stuff is really fancy and useful, but if i imagine a player spamming tab completion packets with "/yxbcv" for instance, on a big server with a hundred of registered commands each tab completion will lead to each comands permission being checked, given most permission plugins will be even slower on not present permissions ...
I will not now add any serious hacks to alter CraftBukkit in order to deny tab completion most efficiently, but i might add something to alter default permissions of existing commands or add a permission if none is present, so that you can control for which commands get shown.
-
View User Profile
-
Send Message
Posted Nov 5, 2012@asofold
Take a look here maybe?
https://github.com/EcoCityCraft/Spigot/commit/68aaadb97eb896c77127509425a0befd58d1b98c
:)
-
View User Profile
-
Send Message
Posted Nov 5, 2012@andrewkm
Good point, i will evaluate a technique for that...