NoCheatPlus

Table of Contents

NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!

Minecraft 1.11.2 and latest features are currently only available on Jenkins - once things stabilize, stable builds will be available here again.

Introduction

NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.

NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.

Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).

NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.

Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.

Orebfuscator

Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)

Downloads and History of Changes

Download officially approved versions on the Files page at BukkitDev.
Development builds have been moved over to the Jenkins at md-5.net.
Do not download from any other source, do not use jars other people send you.
Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
Source code
~~Plugin statistics are no longer reported to mcstats.org~~.

Support

Documentation Resources

Consider first: Frequently asked Questions and Known Issues.
Wiki (Configuration, Permissions, Commands)
Developers might have a look at the page describing the API of NoCheatPlus.

Contact us

Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC)
For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.

Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).

Comments

_ForgeUser8603292
- Join Date: 3/18/2012
- Posts: 197
- Member Details
#3136 _ForgeUser8603292

View User Profile

Send Message

Posted Nov 16, 2012
Hmm no edit button, weird...

Anyways wanted to ask 1 more thing, hows it going with preventing players from using /+TAB to see that list, cuz that can cause some nice lag too.

Tx.

Rollback Post to Revision RollBack
_ForgeUser8603292
- Join Date: 3/18/2012
- Posts: 197
- Member Details
#3135 _ForgeUser8603292

View User Profile

Send Message

Posted Nov 16, 2012
I just had some serious lag caused by player Failed passable and its violation lvl went up to 300, so how would i put in config if vl>100 kick vl> 300 ban.

I looked in configuration tutorial but i dont know where to put kick, ban in config file.

Ty.

Rollback Post to Revision RollBack
Forge_User_61842651
- Join Date: 8/29/2011
- Posts: 2,535
- Member Details
#3134 Forge_User_61842651

View User Profile

Send Message

Posted Nov 16, 2012
@Mortalsinn

That's interesting. I assume that some plugin is modifying something with entities concurrently, be it directly or indirectly (could be asynchronous chunk generation or whatever), bukkit being buggy might also be possible but more unlikely. One might try to find out which plugins could be candidates for such...

Rollback Post to Revision RollBack
_ForgeUser9709947
- Join Date: 9/29/2012
- Posts: 284
- Member Details
#3133 _ForgeUser9709947

View User Profile

Send Message

Posted Nov 16, 2012
@asofold

Hey Asofold,

I know this error isn't related to your plugin but you mentioned something about Bukkit's unsafe list was buggy? well I just got this error. Perhaps this will help in some way, not sure

http://pastebin.com/A03j3pn9

Rollback Post to Revision RollBack
Forge_User_61842651
- Join Date: 8/29/2011
- Posts: 2,535
- Member Details
#3132 Forge_User_61842651

View User Profile

Send Message

Posted Nov 16, 2012
@MyPictures

I think instantbow with strict set to false just helps laggy game play but does not change much performance-wise :) - it allows one instant shot always but ensures the time between shots is not longer than pulling the string would take, roughly. The strict version checks time from interaction to the shot, which is more influenced by lag.

Most heavy is logging in case of false positives or also normal violations. So if you don't need logging, just turn it off. At least restrict it to one thing mainly (not log to file and console).

If you don't need to prevent noclip stuff you can also disable moving.passable.

Also you could disable "managelisteners", it is a future-feature and it might spare a bit of performance.

Yet every minecraft update performance is a new topic - not that i would be surprised.

@mrchasez

Please make a ticket stating versions. And please also use a photo thing that i can view without scripts etc. enabled.

Rollback Post to Revision RollBack
MyPicturesCP
- Join Date: 10/30/2011
- Posts: 927
- Member Details
#3131 MyPicturesCP

View User Profile

Send Message

Posted Nov 16, 2012
@craftovski

Be sure you are running with the latest build first, 244 has some nice performance improvements.

@KevinEssence If you ask me:

- NoSwing
- Direction
- InstantBow
Do that what asofold said ;P

Depends on what you need and what not, whats your server TPS? CB and NC+ version?

@mrchasez

Action for WrongBlock, Fight speed and combined improbable:
Default for FightSpeed:
actions: log:fspeed:0:5:if cancel

Take out the i and it wont message you in game.
i: InGame chat
f: file (nocheatplus.log)
c: console

Here how it would be for FightSpeed after:

actions: log:fspeed:0:5:f cancel

Take a look at the config page please, the logging/actions part should already be in.

Anyways, FigthSpeed should throw out that much false positives (In my entire NC+ testing time I didn't even get 1) so check that player if he uses a Killaura hack that tries to hit the entities faster then allowed.
Last edited by MyPicturesCP: Nov 16, 2012

Rollback Post to Revision RollBack
Mrchasez
- Join Date: 6/5/2011
- Posts: 928
- Member Details
#3130 Mrchasez

View User Profile

Send Message

Posted Nov 16, 2012
@asofold How can i fix the NoCheatPlus Spam?
Inside this pastie is links to pictures: http://pastie.org/5389435

Keep in mind, this is mostly default settings at 18TPS.
Some settings are set higher so it spams less, but it still does it.
So many false positives.

Rollback Post to Revision RollBack
_ForgeUser8047260
- Join Date: 12/10/2011
- Posts: 1,711
- Member Details
#3129 _ForgeUser8047260

View User Profile

Send Message

Posted Nov 16, 2012
@craftovski

Yeah me too but not sure what can cause it? Any ideas on the major ones I can disable?

Rollback Post to Revision RollBack
_ForgeUser8603292
- Join Date: 3/18/2012
- Posts: 197
- Member Details
#3128 _ForgeUser8603292

View User Profile

Send Message

Posted Nov 16, 2012
Well im trying to cut all unnecessary actions that might increase lag or whateva.

Rollback Post to Revision RollBack
MyPicturesCP
- Join Date: 10/30/2011
- Posts: 927
- Member Details
#3127 MyPicturesCP

View User Profile

Send Message

Posted Nov 16, 2012
@craftovski

Just open the config and do:

logging: active: false

I don't really recommend doing that but you can if you want.
Rollback Post to Revision RollBack
_ForgeUser8603292
- Join Date: 3/18/2012
- Posts: 197
- Member Details
#3126 _ForgeUser8603292

View User Profile

Send Message

Posted Nov 16, 2012
How can i disable all logging cuz i dont rly need it, what exactly to delete after log:__:0:5:if/icf/cif to disable logging.

Tx.

Rollback Post to Revision RollBack
_ForgeUser9709947
- Join Date: 9/29/2012
- Posts: 284
- Member Details
#3125 _ForgeUser9709947

View User Profile

Send Message

Posted Nov 16, 2012
@asofold

Yes, sorry I meant DisguiseCraft. Thanks for the fast reply :)

Rollback Post to Revision RollBack
Forge_User_61842651
- Join Date: 8/29/2011
- Posts: 2,535
- Member Details
#3124 Forge_User_61842651

View User Profile

Send Message

Posted Nov 16, 2012
@Mortalsinn

That looks like DisguiseCraft ? Is it possible that that was a player vs disguise attack?

I will add some security guard to dev version, because it makes sense. But this seems to be something strange" in terms of some list getting modified concurrently or similar. Seems Craftbukkits "unsafe list" got modified concurrently, or the iterator-pooling is buggy.

Did this happen often ?

Build 251 will catch the exception (though it does can not eliminate its cause).

Last edited by Forge_User_61842651: Nov 16, 2012

Rollback Post to Revision RollBack

_ForgeUser9709947

Join Date: 9/29/2012
Posts: 284
Member Details

#3123 Posted Nov 16, 2012

Getting this error with Bukkit 1.4.4 build 2467 and NoCheatPlus 3.8.1-RC-b244

by the way I did install MobDisguise - not sure if this is the cause or if this helpful info :P

2012-11-16 08:07:19 [SEVERE] org.bukkit.event.EventException: GenericListener<org.bukkit.event.entity.EntityDamageEvent> @LOWEST encountered an exception for fr.neatmonster.nocheatplus.checks.fight.FightListener with method public void fr.neatmonster.nocheatplus.checks.fight.FightListener.onEntityDamage(org.bukkit.event.entity.EntityDamageEvent)
	at fr.neatmonster.nocheatplus.event.GenericListener.onError(GenericListener.java:114)
	at fr.neatmonster.nocheatplus.event.GenericListener.execute(GenericListener.java:105)
	at org.bukkit.plugin.RegisteredListener.callEvent(RegisteredListener.java:62)
	at org.bukkit.plugin.SimplePluginManager.fireEvent(SimplePluginManager.java:477)
	at org.bukkit.plugin.SimplePluginManager.callEvent(SimplePluginManager.java:462)
	at org.bukkit.craftbukkit.event.CraftEventFactory.callEvent(CraftEventFactory.java:80)
	at org.bukkit.craftbukkit.event.CraftEventFactory.callEntityDamageEvent(CraftEventFactory.java:364)
	at org.bukkit.craftbukkit.event.CraftEventFactory.handleEntityDamageEvent(CraftEventFactory.java:386)
	at net.minecraft.server.EntityLiving.damageEntity(EntityLiving.java:658)
	at net.minecraft.server.EntityHuman.damageEntity(EntityHuman.java:605)
	at net.minecraft.server.EntityPlayer.damageEntity(EntityPlayer.java:306)
	at net.minecraft.server.EntityHuman.attack(EntityHuman.java:794)
	at pgDev.bukkit.DisguiseCraft.listeners.DCMainListener.onDisguiseHit(DCMainListener.java:72)
	at sun.reflect.GeneratedMethodAccessor366.invoke(Unknown Source)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
	at java.lang.reflect.Method.invoke(Unknown Source)
	at org.bukkit.plugin.java.JavaPluginLoader$1.execute(JavaPluginLoader.java:339)
	at org.bukkit.plugin.RegisteredListener.callEvent(RegisteredListener.java:62)
	at org.bukkit.plugin.SimplePluginManager.fireEvent(SimplePluginManager.java:477)
	at org.bukkit.plugin.SimplePluginManager.callEvent(SimplePluginManager.java:462)
	at pgDev.bukkit.DisguiseCraft.listeners.DCPacketListener$1.onPacketReceiving(DCPacketListener.java:45)
	at com.comphenix.protocol.injector.SortedPacketListenerList.invokePacketRecieving(SortedPacketListenerList.java:48)
	at com.comphenix.protocol.injector.PacketFilterManager.handlePacket(PacketFilterManager.java:404)
	at com.comphenix.protocol.injector.PacketFilterManager.invokePacketRecieving(PacketFilterManager.java:375)
	at com.comphenix.protocol.injector.PacketInjector.packetRecieved(PacketInjector.java:224)
	at com.comphenix.protocol.injector.PacketInjector.packetRecieved(PacketInjector.java:209)
	at com.comphenix.protocol.injector.ReadPacketModifier.intercept(ReadPacketModifier.java:116)
	at net.minecraft.server.Packet7UseEntity$$EnhancerByCGLIB$$4e747c7b.a(<generated>)
	at net.minecraft.server.Packet.a(Packet.java:111)
	at net.minecraft.server.NetworkManager.i(NetworkManager.java:190)
	at net.minecraft.server.NetworkManager.c(NetworkManager.java:344)
	at net.minecraft.server.NetworkReaderThread.run(SourceFile:93)
Caused by: java.lang.reflect.InvocationTargetException
	at sun.reflect.GeneratedMethodAccessor44.invoke(Unknown Source)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
	at java.lang.reflect.Method.invoke(Unknown Source)
	at fr.neatmonster.nocheatplus.event.GenericListener.execute(GenericListener.java:102)
	... 30 more
Caused by: java.util.NoSuchElementException
	at org.bukkit.craftbukkit.util.UnsafeList$Itr.next(UnsafeList.java:247)
	at fr.neatmonster.nocheatplus.utilities.PlayerLocation.isOnGround(PlayerLocation.java:342)
	at fr.neatmonster.nocheatplus.checks.fight.Critical.check(Critical.java:57)
	at fr.neatmonster.nocheatplus.checks.fight.FightListener.handleNormalDamage(FightListener.java:135)
	at fr.neatmonster.nocheatplus.checks.fight.FightListener.onEntityDamage(FightListener.java:186)
	... 34 more

Last edited by _ForgeUser9709947: Nov 16, 2012

Forge_User_61842651
- Join Date: 8/29/2011
- Posts: 2,535
- Member Details
#3122 Forge_User_61842651

View User Profile

Send Message

Posted Nov 16, 2012
@Dinastya

Please provide more information about which build exactly you are using and also which minecraft version. And what "can't jump down means"... logs?

Rollback Post to Revision RollBack
_ForgeUser8115646
- Join Date: 12/20/2011
- Posts: 518
- Member Details
#3121 _ForgeUser8115646

View User Profile

Send Message

Posted Nov 16, 2012
What setting do i disable to stop it that players can't jump down from high distance?

I have tried Fall damage etc but that all don't fix it.

With recent dev builds players can't jump down in worldguard/faction regions where fall damage is disabled.

Rollback Post to Revision RollBack
MyPicturesCP
- Join Date: 10/30/2011
- Posts: 927
- Member Details
#3120 MyPicturesCP

View User Profile

Send Message

Posted Nov 16, 2012
@PCM_Tazmaik

The difference between CreativeControl and NoCheat+ is that NC+ can be completely managed with a permissions system. Also the most server owners that use NC+ want their complete server protected including nether and end.

We should have a look at these then :) Please make a ticket with all your suggestions if you want.

Rollback Post to Revision RollBack
_ForgeUser9870733
- Join Date: 10/25/2012
- Posts: 158
- Member Details
#3119 _ForgeUser9870733

View User Profile

Send Message

Posted Nov 16, 2012
Hi ! For me, the multiworld support is very bad :/

This is why I propose a system more effectively perform (hopefully) and not too complicated to implement.
Instead of creating ourselves by world files, the plugin automatically creates a folder "world" into the folder "NoCheatPlus" with one file per world that bears his name. "Ex: world.yml, world_nether.yml ..."
Then these files, for example, a line added "Enable plugin for this world: false / true". * Thus, you can easily disable the plugin without necessarily removing options world.
File "config.yml" in the root of the plugin will handle the basic configuration of the plugin.

For un example, the plugin "CreativeControl" use this methode !

Thanks and sorry for my bad english.
Rollback Post to Revision RollBack
Forge_User_61842651
- Join Date: 8/29/2011
- Posts: 2,535
- Member Details
#3118 Forge_User_61842651

View User Profile

Send Message

Posted Nov 16, 2012
@andrewkm

"savebackconfig" is a flag indicating if NCP should fill up the configuration with default values.

It is intended to keep per-world configs minimal, so you need need not regenerate all configs for just having some checks disabled in one world.

@dragondeatth

If you want people to fly, give them the permission "nocheatplus.checks.moving.survivalfly".

Rollback Post to Revision RollBack
_ForgeUser8603257
- Join Date: 3/18/2012
- Posts: 177
- Member Details
#3117 _ForgeUser8603257

View User Profile

Send Message

Posted Nov 16, 2012
Just a quick note:

When you have Essentials installed, and you use the /speed, command to fly faster, NCP will recognise it as you're hacking. Can you please do so this doesn't happen, as my donators are getting a little frustrated xD

Rollback Post to Revision RollBack
To post a comment, please login or register a new account.

Project ID

38212
Created

Apr 2, 2012
Last Released File

Jan 11, 2018
Total Downloads

1,897,258
License

GNU General Public License ver...

Bukkit

NoCheatPlus

Bukkit Plugins

NoCheatPlus

Table of Contents

Introduction

Recommended

ProtocolLib

CompatNoCheatPlus (cncp)

Orebfuscator

Downloads and History of Changes

Support

Documentation Resources

Contact us

Comments

About This Project

Categories

Members

Recent Files

Bukkit