NoCheatPlus

Table of Contents

NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!

Minecraft 1.11.2 and latest features are currently only available on Jenkins - once things stabilize, stable builds will be available here again.

Introduction

NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.

NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.

Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).

NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.

Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.

Orebfuscator

Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)

Downloads and History of Changes

Download officially approved versions on the Files page at BukkitDev.
Development builds have been moved over to the Jenkins at md-5.net.
Do not download from any other source, do not use jars other people send you.
Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
Source code
~~Plugin statistics are no longer reported to mcstats.org~~.

Support

Documentation Resources

Consider first: Frequently asked Questions and Known Issues.
Wiki (Configuration, Permissions, Commands)
Developers might have a look at the page describing the API of NoCheatPlus.

Contact us

Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC)
For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.

Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).

Comments

_ForgeUser7091862
- Join Date: 6/29/2011
- Posts: 161
- Member Details
#366 _ForgeUser7091862

View User Profile

Send Message

Posted Apr 20, 2012
@CoolOppo Good suggestion, thanks!

@deleted_8156133 Haha, no won't because griefers will always find new bypasses.

@GodWar101 Thanks! <3

@Adrenalineq @andrewkm @Gamecrazer Already fixed. Fix will be deployed in the next release. Thanks!

@epicbastion Hum... I don't even see 'cmd:jail' in your actions list.

@Pr07o7yp3 In fact, the client is sending a packet to the server telling the player is looking at the entity, but isn't showing the move in the player's screen. If you've any suggestion on how to improve the anti-aura checks of NC+, feel free to leave another comment or to open a ticket.

@Adrenalineq Please don't not post twice the same issue (especially with the exact same stacktrace). I read and reply to all posts.

@LordKainzo As it has been suggested in a comment, I'll add an API to NC+, so every developer will be able to whitelist his plugin's functionalities. I'm pretty you understand this is the most convenient way to do that. By the way, thanks for the log!

Rollback Post to Revision RollBack
Kainzo
- Join Date: 5/19/2011
- Posts: 1,174
- Member Details
#365 Kainzo

View User Profile

Send Message

Posted Apr 20, 2012
Hi NeatMonster ... I have a massive paste for you ... I'd like for you to look it over. The majority of the log is from non-hackers. NoCheat (not plus) is what I'm using at the moment.

http://paste2.org/p/1987176

We have several skills that let the player deal damage in various forms. The majority of violations are caused by this. I'm not sure if you've ever seen a report from servers from 100+ members but here it is.

I'd love to whitelist our skills so they don't trigger these alerts if possib;e.

Rollback Post to Revision RollBack
Forge_User_61842651
- Join Date: 8/29/2011
- Posts: 2,535
- Member Details
#364 Forge_User_61842651

View User Profile

Send Message

Posted Apr 20, 2012
@Adrenalineq

If you post the nopwnge part of your configuration file, that might make it much faster to solve the problem.

Rollback Post to Revision RollBack

_ForgeUser5547085

Join Date: 9/13/2010
Posts: 740
Member Details

#363 Posted Apr 20, 2012

Bukkit 1.2.5 # 2155
NoCheat+ 3.5.7_v1

2012-04-20 17:35:34 [SEVERE] Could not pass event PlayerChatEvent to NoCheatPlus
org.bukkit.event.EventException
	at org.bukkit.plugin.java.JavaPluginLoader$1.execute(JavaPluginLoader.java:303)
	at org.bukkit.plugin.RegisteredListener.callEvent(RegisteredListener.java:62)
	at org.bukkit.plugin.SimplePluginManager.callEvent(SimplePluginManager.java:459)
	at net.minecraft.server.NetServerHandler.chat(NetServerHandler.java:786)
	at net.minecraft.server.NetServerHandler.a(NetServerHandler.java:764)
	at net.minecraft.serverhook.NetServerHandlerProxy.a(NetServerHandlerProxy.java:140)
	at net.minecraft.server.Packet3Chat.handle(Packet3Chat.java:34)
	at net.minecraft.server.NetworkManager.b(NetworkManager.java:229)
	at net.minecraft.server.NetServerHandler.a(NetServerHandler.java:113)
	at net.minecraft.serverhook.NetServerHandlerProxy.a(NetServerHandlerProxy.java:83)
	at net.minecraft.server.NetworkListenThread.a(NetworkListenThread.java:78)
	at net.minecraft.server.MinecraftServer.w(MinecraftServer.java:551)
	at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:449)
	at net.minecraft.server.ThreadServerApplication.run(SourceFile:492)
Caused by: java.util.IllegalFormatConversionException: d != java.lang.String
	at java.util.Formatter$FormatSpecifier.failConversion(Formatter.java:4011)
	at java.util.Formatter$FormatSpecifier.printInteger(Formatter.java:2725)
	at java.util.Formatter$FormatSpecifier.print(Formatter.java:2677)
	at java.util.Formatter.format(Formatter.java:2449)
	at java.util.Formatter.format(Formatter.java:2383)
	at java.lang.String.format(String.java:2825)
	at me.neatmonster.nocheatplus.checks.chat.NoPwnageCheck.getParameter(NoPwnageCheck.java:194)
	at me.neatmonster.nocheatplus.actions.types.ActionWithParameters.getMessage(ActionWithParameters.java:42)
	at me.neatmonster.nocheatplus.actions.types.ConsolecommandAction.getCommand(ConsolecommandAction.java:30)
	at me.neatmonster.nocheatplus.checks.Check.executeConsoleCommand(Check.java:78)
	at me.neatmonster.nocheatplus.checks.Check.executeActions(Check.java:68)
	at me.neatmonster.nocheatplus.checks.chat.NoPwnageCheck.runCommands(NoPwnageCheck.java:270)
	at me.neatmonster.nocheatplus.checks.chat.NoPwnageCheck.check(NoPwnageCheck.java:156)
	at me.neatmonster.nocheatplus.checks.chat.ChatCheckListener.chat(ChatCheckListener.java:75)
	at sun.reflect.GeneratedMethodAccessor192.invoke(Unknown Source)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:616)
	at org.bukkit.plugin.java.JavaPluginLoader$1.execute(JavaPluginLoader.java:301)
	... 13 more

_ForgeUser6922804
- Join Date: 5/29/2011
- Posts: 144
- Member Details
#362 _ForgeUser6922804

View User Profile

Send Message

Posted Apr 20, 2012
@NeatMonster

Ohh, this new features sound nice. :) And what about "Aura" (In Nodus client it's called ForceField). This allow to user to hit some players in the same time even while is not looking at them?

Last edited by _ForgeUser6922804: Apr 20, 2012

Rollback Post to Revision RollBack
Forge_User_61842651
- Join Date: 8/29/2011
- Posts: 2,535
- Member Details
#361 Forge_User_61842651

View User Profile

Send Message

Posted Apr 20, 2012
@epicbastion

Ban-ip for (vl>30) on morepackets sounds very harsh :)

Does the crash also ever happen with a kick command instead?

You might try this tool: DelayedCommand - just for the jail command, use ''dlcmd jail [player] noob" to delay the command, it might be an Essentials issue, but it might also be due to the command being dispatched from within an EventHandler. It is a wild guess be me though, after all.

Alternatively you could also try for a quick test: remove the cancel for the jail thingy - you don't need to cancel a move if the player is getting jailed anyway, if NoCheatPlus uses teleporting after jailing for instance, it might happen strange things when NoCheatPlus tries to restore the "correct" set-back position while Essentials tries to keep the player inside of a jail.

I think a delayed command might solve such an issue, but i t could be another kind of issue...

Last edited by Forge_User_61842651: Apr 20, 2012

Rollback Post to Revision RollBack
_ForgeUser7456779
- Join Date: 8/28/2011
- Posts: 95
- Member Details
#360 _ForgeUser7456779

View User Profile

Send Message

Posted Apr 20, 2012
hey guys love the work you are doing. I have run into one thing that is causing me issues.

when someone is trying to fly and i have this for the action:

actions: cancel vl>5 log:fdirection:3:5:f cancel vl>20 log:fdirection:0:5:if cancel vl>35 log:fdirection:0:5:if cancel cmd:jail vl>50 log:fdirection:0:5:cif cmd:kick cmd:ban cmd:ban-ip

it also happens with this:

morepackets: active: true actions: log:morepackets:3:2:if cancel vl>15 log:morepackets:0:2:if cancel cmd:jail vl>30 log:morepackets:0:2:if cancel cmd:kick cmd:ban cmd:ban-ip

when they get sent to jail using this:

jail: jail [player] noob [which is the command for essentials jail]

it crashes the server, i am using 1.2.5 b2149, with 3.5.7_1 installed.

any ideas why it just crashes, there is no log or anything just crashes.
Last edited by _ForgeUser7456779: Apr 20, 2012

Rollback Post to Revision RollBack
_ForgeUser3763190
- Join Date: 1/1/2010
- Posts: 1
- Member Details
#359 _ForgeUser3763190

View User Profile

Send Message

Posted Apr 20, 2012
@andrewkm

Same here. Repeats An Error Similar Until all players Get End of stream http://pastie.org/3821213 More Of The Error, you just pasted the One That Loop Spams

Last edited by _ForgeUser3763190: Apr 20, 2012

Rollback Post to Revision RollBack
andrewecc
- Join Date: 5/22/2011
- Posts: 498
- Member Details
#358 andrewecc

View User Profile

Send Message

Posted Apr 19, 2012
Incase you dont see this on IRC;

[01:44] <10+andrewkm> NeatMonster: our server just crashed with following error spammed hardcore in console: [01:45] <10+andrewkm> http://pastie.org/3820934

Latest NC+ 3.5.7_1

Last edited by andrewecc: Apr 19, 2012

Rollback Post to Revision RollBack

_ForgeUser5547085

Join Date: 9/13/2010
Posts: 740
Member Details

#357 Posted Apr 19, 2012

Bukkit 1.2.5 Recommend
NoCheat+ 3.5.7

2012-04-20 07:30:11 [SEVERE] Could not pass event PlayerChatEvent to NoCheatPlus
org.bukkit.event.EventException
	at org.bukkit.plugin.java.JavaPluginLoader$1.execute(JavaPluginLoader.java:303)
	at org.bukkit.plugin.RegisteredListener.callEvent(RegisteredListener.java:62)
	at org.bukkit.plugin.SimplePluginManager.callEvent(SimplePluginManager.java:459)
	at net.minecraft.server.NetServerHandler.chat(NetServerHandler.java:786)
	at net.minecraft.server.NetServerHandler.a(NetServerHandler.java:764)
	at net.minecraft.serverhook.NetServerHandlerProxy.a(NetServerHandlerProxy.java:140)
	at net.minecraft.server.Packet3Chat.handle(Packet3Chat.java:34)
	at net.minecraft.server.NetworkManager.b(NetworkManager.java:229)
	at net.minecraft.server.NetServerHandler.a(NetServerHandler.java:113)
	at net.minecraft.serverhook.NetServerHandlerProxy.a(NetServerHandlerProxy.java:83)
	at net.minecraft.server.NetworkListenThread.a(NetworkListenThread.java:78)
	at net.minecraft.server.MinecraftServer.w(MinecraftServer.java:551)
	at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:449)
	at net.minecraft.server.ThreadServerApplication.run(SourceFile:492)
Caused by: java.util.IllegalFormatConversionException: d != java.lang.String
	at java.util.Formatter$FormatSpecifier.failConversion(Formatter.java:4011)
	at java.util.Formatter$FormatSpecifier.printInteger(Formatter.java:2725)
	at java.util.Formatter$FormatSpecifier.print(Formatter.java:2677)
	at java.util.Formatter.format(Formatter.java:2449)
	at java.util.Formatter.format(Formatter.java:2383)
	at java.lang.String.format(String.java:2825)
	at me.neatmonster.nocheatplus.checks.chat.NoPwnageCheck.getParameter(NoPwnageCheck.java:194)
	at me.neatmonster.nocheatplus.actions.types.ActionWithParameters.getMessage(ActionWithParameters.java:42)
	at me.neatmonster.nocheatplus.actions.types.ConsolecommandAction.getCommand(ConsolecommandAction.java:30)
	at me.neatmonster.nocheatplus.checks.Check.executeConsoleCommand(Check.java:78)
	at me.neatmonster.nocheatplus.checks.Check.executeActions(Check.java:68)
	at me.neatmonster.nocheatplus.checks.chat.NoPwnageCheck.runCommands(NoPwnageCheck.java:270)
	at me.neatmonster.nocheatplus.checks.chat.NoPwnageCheck.check(NoPwnageCheck.java:156)
	at me.neatmonster.nocheatplus.checks.chat.ChatCheckListener.chat(ChatCheckListener.java:76)
	at sun.reflect.GeneratedMethodAccessor258.invoke(Unknown Source)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:616)
	at org.bukkit.plugin.java.JavaPluginLoader$1.execute(JavaPluginLoader.java:301)
	... 13 more

_ForgeUser8601207
- Join Date: 3/18/2012
- Posts: 62
- Member Details
#356 _ForgeUser8601207

View User Profile

Send Message

Posted Apr 19, 2012
NeatMonster, good job so far with this NoCheatPlus update :)

Rollback Post to Revision RollBack
_ForgeUser8156133
- Join Date: 12/6/2016
- Posts: 139
- Member Details
#355 _ForgeUser8156133

View User Profile

Send Message

Posted Apr 19, 2012
@NeatMonster

Nice work man :)

Soon this plugin will remove all of the griefing clients abilities :O

Can't wait for the new Minecraft API to come out!

Rollback Post to Revision RollBack
_ForgeUser6878637
- Join Date: 5/23/2011
- Posts: 97
- Member Details
#354 _ForgeUser6878637

View User Profile

Send Message

Posted Apr 19, 2012
@NeatMonster

"added a new check to prevent players from being able to hit/run while blocking with their sword and I added another new check to prevent players for doing critical hits when it's not technically possible."

Very nice work! Is it possible to make sure that players are knocked back when hit? I haven't tested if the NoPush part of this plugin prevents that yet, though I assume it does not.

Rollback Post to Revision RollBack
_ForgeUser7091862
- Join Date: 6/29/2011
- Posts: 161
- Member Details
#353 _ForgeUser7091862

View User Profile

Send Message

Posted Apr 19, 2012
@shukamu I won't add this to NoCheat+ because if your Minecraft has crashed and the "ghost" of your player is still connected to the server (like on IRC), you won't be able to join the server. You better try talking with xAuth's developer to solve this issue.

@erdrickk @MutinyCraft @erdrickk Yeah, sorry about that. The fix will be included in the next release. Thanks for the comments!

@rasnyderiii Can you give me more details?

@deleted_8156133 The screenshot has finally come, yay! More seriously, the fix will also be included in the next release. Thanks for the report chrissshill!

@ProGamerzFTW Really? I've done a lot of testing I haven't been able to get caught by NoCheat+.

@FateAverie NoCheat+ blocks almost all the features of the Nodus client.

@Devinish NoCheat+ doesn't prevent anyone to type URLs in chat.

No new version today, I've spent my day (from 11:00 to 01:30, seriously) working on the next version of NoCheat+ but it's not ready yet.

What has been fixed/added? I fixed the issue with the Unpushable check and the one with the NoPwnage check, I added a new check to prevent players from being able to hit/run while blocking with their sword and I added another new check to prevent players for doing critical hits when it's not technically possible.

What's left? I still need to add a new check to prevent players from walking at the normal speed when being into spider web, I need to improve the anti-smasher and I also need to start working on the API for the FastBreak/FastPlace checks.

I now that you're waiting for a new update but please be comprehensive: I've already spent around 100 hours working on this plugin (mostly the night). Please don't denigrate me or my work and when you're reporting an issue, add enough information for me to know how to fix it (not just "it's not working").

Enough said, I need to sleep... Night guys!

Edit: One more important thing: read the Instructions.txt before asking a question.

Last edited by _ForgeUser7091862: Apr 19, 2012

Rollback Post to Revision RollBack
Devinesque
- Join Date: 8/9/2011
- Posts: 1,111
- Member Details
#352 Devinesque

View User Profile

Send Message

Posted Apr 19, 2012
Does this plugin prevent players from typing urls in chat? If so, what is the permission to disable that feature? I don't see it in any of the documentation.

Rollback Post to Revision RollBack
_ForgeUser8407505
- Join Date: 2/11/2012
- Posts: 42
- Member Details
#351 _ForgeUser8407505

View User Profile

Send Message

Posted Apr 19, 2012
does this also stop players from cheating with the Nodus Client?

Rollback Post to Revision RollBack
_ForgeUser6914979
- Join Date: 5/28/2011
- Posts: 76
- Member Details
#350 _ForgeUser6914979

View User Profile

Send Message

Posted Apr 19, 2012
The default fastbreak options need to be changed. When people are shoveling snowblocks with a diamond shovel, i get spammed by nocheat from it.

Rollback Post to Revision RollBack
_ForgeUser8156133
- Join Date: 12/6/2016
- Posts: 139
- Member Details
#349 _ForgeUser8156133

View User Profile

Send Message

Posted Apr 19, 2012
Alright I got it. Thought of a way to get the screenshot up there :)

Here:

http://www.minecraftnation.org/files/error.png

Edit: here is the end of the error: http://www.minecraftnation.org/files/error2.png

Last edited by _ForgeUser8156133: Apr 19, 2012

Rollback Post to Revision RollBack
Forge_User_61842651
- Join Date: 8/29/2011
- Posts: 2,535
- Member Details
#348 Forge_User_61842651

View User Profile

Send Message

Posted Apr 19, 2012
@rasnyderiii

Other way round :)

How about deactivating the check in the configuration ?

Rollback Post to Revision RollBack
_ForgeUser4529205
- Join Date: 6/9/2010
- Posts: 640
- Member Details
#347 _ForgeUser4529205

View User Profile

Send Message

Posted Apr 19, 2012
UNPUSHABLE: - also messes with VanishNP.

Rollback Post to Revision RollBack
To post a comment, please login or register a new account.

Project ID

38212
Created

Apr 2, 2012
Last Released File

Jan 11, 2018
Total Downloads

1,896,985
License

GNU General Public License ver...

Bukkit

NoCheatPlus

Bukkit Plugins

NoCheatPlus

Table of Contents

Introduction

Recommended

ProtocolLib

CompatNoCheatPlus (cncp)

Orebfuscator

Downloads and History of Changes

Support

Documentation Resources

Contact us

Comments

About This Project

Categories

Members

Recent Files

Bukkit