NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Dec 23, 2012Could you improve the fly check? Users are still able to float a block above.
-
View User Profile
-
Send Message
Posted Dec 23, 2012@diamondthree
The improbable check does combine several inputs, mainly it is directed against force-fields. It does limit what force-fields can do, but preventing fighting hacks on server side is much more difficult than writing a hack on client side. The check also gets input from things like inventory manipulations and block placing, so if players somehow manage to do too many things at the same time this check might go off. So it is something like an anti-bot check with fighting-hacks as the main topic. It will need further adaptions to get closer to give people a fair chance to fight force-fields, but realistically one should not expect too much for 1 vs 1 pvp situations. Given the fact that the cheat client can detect the other player with "eyes in the back of the head" and can prepare for "impact", those situations will always stay difficult, because a really well-coded client will not even have to do anything sudden to be first to attack.
@mikeyriver
As @Mypictures said: please provide versions of NoCheatPlus and CraftBukkit, as well as more info about that profiling. Also pastes of the errors would be interesting. First thing to check is if the version of NCP is meant for the CraftBukkit version in use.
-
View User Profile
-
Send Message
Posted Dec 22, 2012@mikeyriver
Please make a ticket with your CB and NC+ version also add your plugin list and configuration file.
-
View User Profile
-
Send Message
Posted Dec 22, 20123.8.7 of nocheat still causes severe errors. It loads up just fine but after the server finishes loading, it causes all the other plugins to give off error( i profiled all the plugins one by one and found out that nocheat was the problem)
-
View User Profile
-
Send Message
Posted Dec 22, 2012@EncryptedCurse
No that's the in-build vanilla spam check, has nothing to do with NoCheatPlus. At the moment there is no way to disable this (I think only OPs have permission to bypass this).
-
View User Profile
-
Send Message
Posted Dec 22, 2012A bunch of my users are getting kicked for "disconnect.spam". I'm using 1.4.6 and plugin #294. Could this glitch be coming from NCP?
-
View User Profile
-
Send Message
Posted Dec 22, 2012@diamondthree
Combined_Improbable is a combined check, means that it gets feed by many other checks. So if a player fails 2 checks a the same time then Combined_Improbable could show up. There was a little bug which caused some false positives, install the current version (works with 1.4.6 and lower): http://dev.bukkit.org/server-mods/nocheatplus/files/42-nocheat-plus-3-8-7-beta-b294/
And try again.
@Jleeevinnn
Please tell us what CraftBukkit and NoCheat+ version you use, also list your plugins (spout, mcmmo, compatnocheatplus, ...) and check your permissions (OP and "*" have permission to bypass all NC+ checks).
-
View User Profile
-
Send Message
Posted Dec 22, 2012So I installed the latest 1.4.6 dev build but when I try and fly/use nodus it still works.
-
View User Profile
-
Send Message
Posted Dec 22, 2012@ NoCheatPlus Team:
What is being detected when the "meets the improbable" occurs? I looked around, didn't find any info... I get this message alot.
-
View User Profile
-
Send Message
Posted Dec 22, 2012@andrewkm
That does not look too critical, melons are pretty fast breaking anyway and as one can see the speed is not that high. Also it seems to be within what NCP allows by default. (It also seems, that the check is operative, preventing some breaking there.)
@MrSkeleton33
opinconsoleonly seems to work with 1.4.6, did you do /ncp reload and ensure that nothing went wrong on loading/reloading?
I will upload latest dev build as beta, since CB has a beta too.
To be approved: NoCheatPlus 3.8.7-beta-b294
-
View User Profile
-
Send Message
Posted Dec 22, 2012@EricPickup
Please be sure your SecurityTools do not block this website. You could also use the direct IP to connect to our Jenkins (if your provider takes long time to update domains): 209.17.150.94:8080
Some AntiViruses don't like Jenkins and deny it to run on your web browser.
@MrSkeleton33
We take no responsibility for development build of NoCheatPlus. If you find a bug for it then please make a ticket and we take a look.
@Rosiepoo284
What is not working? CB and NC+ version please? Make a ticket so we can keep track of your issue if you want.
@Pr07o7yp3
Watch the config page section actions: http://dev.bukkit.org/server-mods/nocheatplus/pages/configuration/#w-how-actions-work-an-overview
Just set a kick action on those checks you want to kick on (Fight_Speed, Combined_Improbable, ...)
@andrewkm
Do you have permissions/OP? Whats your Craftbukkit and NC+ version. I will still have a look at it.
@mbcx2
Please check your AntiVirus if it blocks our Jenkins, some of them like to do that.
-
View User Profile
-
Send Message
Posted Dec 22, 2012@mbcx2
You could always wait for recommended bukkit build, I'm sure NCP would have a new release by then :P
-
View User Profile
-
Send Message
Posted Dec 22, 2012@mbcx2
What is says right here:
The link to that page is here;
http://www.nocheatplus.org:8080/job/NoCheatPlus/
-
View User Profile
-
Send Message
Posted Dec 22, 2012Can you upload the 1.4.6 version to bukkit?
because the website http://www.nocheatplus.org:8080/job/NoCheatPlus/ does not work :,(
and I am scared to run my server without this plugin, I hate hackers alot
-
View User Profile
-
Send Message
Posted Dec 21, 2012NCP 293 Nodus fastbreak seems to work http://www.youtube.com/watch?v=qmYd4CJ3SFs
Using absolutely default configuration.
-
View User Profile
-
Send Message
Posted Dec 21, 2012How can I set to kick forcefield players?
-
View User Profile
-
Send Message
Posted Dec 21, 2012Happy Holidays from all the players from AceCraft! Thank you for your hard work - you're plugin is a critical part of our server and we hope you continue the awesomeness! A little something for you in your account :)
-
View User Profile
-
Send Message
Posted Dec 21, 2012I updated my jar, for 1.4.6 and now its not working. it didnt say i ahd to regen the config, did i?
-
View User Profile
-
Send Message
Posted Dec 21, 2012Wtf? I put "OponlyFromConsole" To true but I can still op Ingame !
-
View User Profile
-
Send Message
Posted Dec 21, 2012@jjacobson The site itself though (nocheatplus.org) works fine for me.