NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Dec 8, 2012@zSwayz
Please update to NC+ 271 or up and could you try to update your Spigot? 303 should be the latest build that should work for now. Also don't forget to regenerate your configuration.yml in ./plugins/NoCheatPlus (just delete it and let the server regenerate on start).
Does she have bad connection or something? If you still get problems then please open up a ticket so we can keep track on your issue.
@DistortedDorian
This message comes form the Frequency check, it prevents the player from breaking 2 or more blocks at the same time. Does it only happen to one player or to everyone? Because this check can be affected by lag, so if someone lags pretty hard then the server may think that he broke 2 or more blocks at the same time.
You can also just make the limits for frequency higher in the configuration:
Will give you less protection but may fix your problem.
Nothing to sorry about its your server and you decide what you want to install on it. If you get issues with NoCheatPlus then feel free to make a new ticket. I and @asofold will try to help you as soon as possible. Bug reports are more valuable then donations!
@ridddle
Craftbukkit and NoCheatPlus version? This bug was fixed some builds ago so please update your NC+ and regenerate your configuration.yml to include the new settings.
Also be sure that you have vertical-accounting set to true (SurvivalFly section).
-
View User Profile
-
Send Message
Posted Dec 8, 2012I’m kinda tired of people dying from being rollbacked to the top of a tower, after jumping down to a lake or water brake. Sure, if you have to cancel the action, cancel the action, but at least reset the fall damage, please.
-
View User Profile
-
Send Message
Posted Dec 8, 2012Sorry for telling this but NoCheatPlus is too buggy for me. it kick player for hacking and it say: try to do it less ofter. i will use AntiCheat
-
View User Profile
-
Send Message
Posted Dec 8, 2012Fastbreak spam all over the log. one of my players were kind enough to video this for me
http://www.youtube.com/watch?v=b8TGRFBkb3A&feature=youtu.be
She said it was the same when breaking ores.
Spigot #278 NC+ #268 Not sure if an update would make a difference. I use all the default values like stated in previous comments.
-
View User Profile
-
Send Message
Posted Dec 7, 2012@mrchasez
@SmashboxGaming
Without details such as Server and NoCheatPlus versions and also what checks are spamming we can't say much in most cases. For chat it really matters what you want to allow people, current spam features do constant slower paced spamming.
If your players can hardly chat, then something is wrong of course, if you want them to send 40 messages per minute each, then you have to adapt the configuration. We just need more details about what actually happens. It could be you are using an incompatible Spigot build or are having conflicting plugins (doubling the chat events by canceling and firing new ones). Recently you two have brought in the only complaints on this, so we can't necessarily say that the settings are all that bad. Though i am indeed planning on more systematic tests with the anti spam features, simulating server chat to find the best config values that still provide protection.
-
View User Profile
-
Send Message
Posted Dec 7, 2012@SmashboxGaming
Such details: http://dev.bukkit.org/server-mods/nocheatplus/?comment=3275
I cant do anything with: Hey NC+ kicks all my players!
@SmashboxGaming We test our default configs before we release them to the public (as I said earlier), if you don't like them then just edit them. Simple? Otherwise make a pull request or a ticket and we will fix it imminently if we can reproduce. If you like AntiCheat more then why are you still here on the NC+ DEV page? Just go and use AC instead? I don't really see what you're aiming for here.
-
View User Profile
-
Send Message
Posted Dec 7, 2012@asofold
What "details" are you in need of?
-
View User Profile
-
Send Message
Posted Dec 7, 2012@asofold
I swear, this plugin is just so spammy the last month or so. I may have to completely disable all ingame message. It don't have /ncp lag though, i am using latest release
-
View User Profile
-
Send Message
Posted Dec 7, 2012@asofold
ah, sorry my fault. Latest its 307 downloaded from http://ci.ecocitycraft.com/job/Spigot/
and thanks i download NoCheatPlus_MC1_4_bridge.jar and now looks like its working ok, at least it starts ok :)
-
View User Profile
-
Send Message
Posted Dec 7, 2012@Gnacik
Latest Spigot = surprise , please always give the build numbers etc.
In fact in this case the related CraftBukkit build number decides on what to do.
I assume latest Spigot is like CB 2514 about, so you need to use the GitHub download:
https://github.com/NoCheatPlus/NoCheatPlus/downloads
Thanks to an ingenious decision by Bukkit team we have to improvise.
-
View User Profile
-
Send Message
Posted Dec 7, 2012Hai. After update to latest spigot NCP Stop work:
http://pastie.org/5493118
-
View User Profile
-
Send Message
Posted Dec 7, 2012@mrchasez
Which version ? Does it have the "/ncp lag" command (latest dev builds at Jekins / GitHub downloads)?
You could check the result of that command in such a situation.
It could be the effect of lag spikes, but the image also can show a client with a problematic connection or even a cheater.
Does "when ever someone" really mean all players always?
-
View User Profile
-
Send Message
Posted Dec 6, 2012@asofold
Hey, when ever someone is using a boat and in the ocean nocheat freaks and spams like crazy. Here is a picture http://i1139.photobucket.com/albums/n546/mrchasez/Untitled-4.png
-
View User Profile
-
Send Message
Posted Dec 6, 2012@rsmKaelub
No need to apologize, quick question, maybe a quick answer.
The latest version on BukkitDev (b271) as well as a range before do have anti vclip. The Passable check does that, it also alerts on login, becasue players already move before having received chunks.
Provided the players can't move more than the wall-thickness at once (normally can't, but with allowing them to fly fast it might change).
Details:
There are no interpolation tests, just start end endpoints (taking into account some specialty of CraftBukkit leading to sometimes having a different position than the moving events contain, thus up to 3 points). Doors and thin mechanisms are also all unsafe, thus real no-clip protection will need a thorough piston setup or tp through walls to prevent others ever entering a protected ground without need to always re-placing blocks. Also mind that moving diagonally (hacks) might bypass a diagonally set up wall:
ox
xo
But just to prevent direct passage 1-thick walls should suffice. Corners and piston entries need a little more care, i assume some clients are able to do the (pretty exact) diagonal move).
-
View User Profile
-
Send Message
Posted Dec 6, 2012I must apologize as I am a bit lazy right now. I have NCP on my server currently and is up to date to the latest build you have (non-dev). Does my version or any of your dev builds have antivclip? I will need it one way or another and was wondering if NCP currently had something in place for it.
-
View User Profile
-
Send Message
Posted Dec 6, 2012@ShakyTom
Concerning the CB 2511 -> CB 2512 change:
Try the experimental 1.4 compatibility build:
https://github.com/NoCheatPlus/NoCheatPlus/downloads
I have tested it shortly, but the range of mostly necessary changes might have lead to some more fish than i already caught.
Be aware that any other plugins can break randomly from CB 2512 on (if they are not only using Bukkit but access CB or MC).
-
View User Profile
-
Send Message
Posted Dec 6, 2012@Togakure321
This plugin does not ban. You can use "/ncp unkick player" against the chat short-term kicks. Also "NCP kicklist".
Are you using any other plugin that might hook into NCP and start banning players in the name of good ?
If it is NCP: Check the logs (server and nocheatplus.log in the plugins/NoCheatPlus folder) for kick / ban entries, also the checks that lead to kicking should be in there. Then adjust the config to your needs - if you want high chat frequency you have to increase the levels.
-
View User Profile
-
Send Message
Posted Dec 6, 2012Hello i did download it from your jenkins site however inexplicitly its still not working.. hs still banned and i cant seem to unban him. im going to reinstall. but any other suggestions?
-
View User Profile
-
Send Message
Posted Dec 6, 2012@Dasko222
NCP does not do anything against xray. Serious anti xray should need an extra plugin(Orebfuscator, Anti X-Ray, DarkTrace).
@ShakyTom
I probably won't quickly. Keep to CB2511 til then. In fact i already evaluated a compatibility version and committed an untested and non-compiling "half-state" to GitHub, taking one or another couple of hours prematurely (changes were not scheduled for now, hurts).
Unfortunately i have to change the build process to get this thing working in a reasonably convenient way, and i am not too familiar with maven. Also i think after this i wrecked the project setup and i will be away for one or another day very soon.
If anybody has experience with setting up the project with maven (or say,... gradle) such that i can have the compatibility packages compiled with different CraftBukkit versions (same artifact ids under maven...) while main core is Bukkit API, all in one integrating with Jenkins, i might appreciate some help on this. The interfaces are not self explaining, neither the tutorials i read or rather not read, i can't sit hours on that now.
Maybe i put a "CB2512" version on GitHub (hand sewn). But it contains a range of internal changes due to this CB policy change, that i cant test myself at present.
-
View User Profile
-
Send Message
Posted Dec 6, 2012Please just release one updated dev build that will work on the latest CB versions.
Pleaseeeeee :)