NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Dec 27, 2012@noxturno
Yeah, this is a definite issue. This has been happening alot recently. Players unable to hit mobs is a gigantic issue.
NCP seems pretty iffy as of late.. not sure why, 1.4.6 probably didn't help.
-
View User Profile
-
Send Message
Posted Dec 26, 2012@bob7l
do you have op?..? please check
-
View User Profile
-
Send Message
Posted Dec 26, 2012long pvp fights are out of the question with NCPlus atm also building sometimes is not posible or even killing mobs.
notice this when players click alot they cant damage anything or place blocks after a while anyway to fix this? besides disabling some settings such as improbable in the config, also I am not sure if is because of nocheaplus but my players take some random damage.
-
View User Profile
-
Send Message
Posted Dec 26, 2012Completely ignores any block break actions. I'm trying to use nuker in creative mode, it doesn't seem to care that I'm destroying 100+ blocks at the same time?
-
View User Profile
-
Send Message
Posted Dec 26, 2012There is a hack with a client known as the Vanity Client (The client AVO uses to produce their videos) that is activated when the user types ".crash". This as you may have guessed, crashes the server. just a suggestion, but this may just help to make Minecraft a better game.
no Pressure. :)
-
View User Profile
-
Send Message
Posted Dec 26, 2012This probably won't help much considering I wasn't able to catch the entire error but my Server crashed for the first time in months with something related to metrics and neatmonster.fastbreak cache or something similar.
Just thought I'd let you know :)
-
View User Profile
-
Send Message
Posted Dec 26, 2012There MAY be a memory leak in the latest dev build of NCP. Please take a look! Unfortunatly, I do not have anything to check if it does.
-
View User Profile
-
Send Message
Posted Dec 26, 2012@LordKainzo
The "testers" list in the configuration of testncp only specifies who receives input at all. Each tester can use "/testncp input PLAYER1" to only receive violations of PLAYER1, by default you receive all violations of all players.
-
View User Profile
-
Send Message
Posted Dec 26, 2012@asofold
Cool thanks for the link again - is it possible to do /testncp showplayer <name> ? or do you have to manually add the player name in the file instead of in-game?
-
View User Profile
-
Send Message
Posted Dec 26, 2012@LordKainzo
@MyPictures
Concerning TestNCP: Just don't add '*' to testers for live servers :) - only add the names of people that are to receive violations info, otherwise everybody receives the violations messages. Testers can use "/testncp input ..." to set whose violations info you receive, for the case you want to focus on one/several players violations.
-
View User Profile
-
Send Message
Posted Dec 26, 2012@FuRiouSOne
Well that's called beta ;P. Could you spy those users that trigger SurvivalFly and check what they are doing? Every event that has to be canceled costs a little bit of performance, so if someone spams a check or more then its more heavy for the server to cancel all those. Does it happen to all players or just to that one? Thanks
@LordKainzo
Some reason(s) why this desync bug could happen: http://dev.bukkit.org/server-mods/nocheatplus/tickets/320-erm-some-weird-freecam-bug/#c20
Anyways NC+ doesn't do anything that could desync the client because it uses the "native" bukkit method to setback (cancel). Such things come mostly from plugins like Orebfuscator with ProtoclLib, also if your players use a special client its more likely that they get desynced from the server. However this mostly happens if the players misses the "disconnect packet" which basically tells that the client to disconnect but since it never arrives (bad network, ...) they get only disconnected "server-side". Its a really strange "issue" but NC+ shouldn't affect that it any way. I also noticed that if you cancel a moving (Not NC+) event again, again and again its possible to get desynced from the server for some reason, maybe @asofold can find something in CraftBukkit.
TestNCP just throws out all VLs that are happening in the plugin NoCheatPlus, that's really helpful for debugging because it shows you exactly what happened if for example someone failed the SurvivalFly check.
You can get it here: https://github.com/asofold/TestNCP/downloads After that you have open its config file and write your name under "testers:
The * works also as you see, that basically shows debug messages to everyone. I do not recommend to use this plugin forever on your server because it could spam a lot of many checks fail and spam is not healthy for the server ;P
-
View User Profile
-
Send Message
Posted Dec 25, 2012@MyPictures
I have in game chat logging on only (Dont care to see console spam or huge log file) and i do get tones of survivalfly reports/violation with 294 build then i did a few builds ago. Improbable spam is also back. I have turned profiling on and will report timings and anything else i can in a ticket tomorrow.
Seems NCP runs nice an smooth till a new minecraft update comes out then goes nuts for the first week or 2 after update :(.
-
View User Profile
-
Send Message
Posted Dec 25, 2012I'm noticing more issues with Nocheatplus on 1.4.6 with users de-syncing. I really haven't changed much of my config so it must be something new. They are using a lot of Heroes-skills so I'm certain that they are being triggered as they are using a sphere attack or attacking targets too far away.
@Asofold - got anything to add to this or fix? Same old issues I presume, just even more apparent now.
Also - what was that testNCP plugin again? I'd like to see what things they are triggering so I can at least make exceptions for them.
-
View User Profile
-
Send Message
Posted Dec 25, 2012@acgalaxy
No there are no global actions in the current NoCheatPlus state, you would have to set the actions check by check. The reason why we don't use any ban action anymore is because of the false positives, players shouldn't get banned just because they stuck in a glitch loop of NC+/CB/MC.
We probably will never add a global action config because each check has its own VL level. For example its very easy to get a VL of 30 or higher from SurvivalFly but for FastBreak its quite hard to even get over a VL level of 3.
The API is more meant to exempt the players from curtain checks for a defied while, everything with actions should be done in the configuration.
https://github.com/NoCheatPlus/NoCheatPlus/tree/master/NCPPlugin/src/main/java/fr/neatmonster/nocheatplus/hooks
CompatNoCheatPlus is a good example on how the NC+ API can be used.
@FuRiouSOne
Do you have logging turned off? If not could you tell us if a check gets called on that time. The /ncp lag command shows some serious lag spikes there so best would be if you could enable plugin profiling and do some timings with /timings. Best would be if you could create a ticket for us, I'm sure @asofold can help you a lot better on this one then me.
http://wiki.bukkit.org/Bukkit.yml
-
View User Profile
-
Send Message
Posted Dec 25, 2012Running into many lag spikes after updating to latest build 294 using spigot 358 or higher (currently on 365). No other plugins has been updated other then NCP and ever since have noticed many lag spikes. Before updating NCP everything seemed normal. Also noticing Memory usage has increased a lot.
I do /ncp lag in game and see: 2012-12-25 20:07:26 [INFO] Lag tracking (roughly): Average lag: 0%[1s] 0%[3.3s] 0%[270s] Last hour spikes:
Not really sure how to read this but when lag spike hits i notice the average lag in percentage on 270s go up quite a bit and guessing this is not a good thing?
-
View User Profile
-
Send Message
Posted Dec 25, 2012Is there a global violation threshold? or any APIs to automatically ban repeat hackers,
-
View User Profile
-
Send Message
Posted Dec 25, 2012@CameronXZ
Need more info's to help you, please fill out a ticket with: Craftbukkit version, NC+ version, logs, which check gets exactly called and more (all what you know).
-
View User Profile
-
Send Message
Posted Dec 25, 2012For some reason, player's on my server can't hit mob's/player's or sometime's place/break blocks even though their not cheating, is there a way to fix this?
-
View User Profile
-
Send Message
Posted Dec 25, 2012@zSwayz
Ok thanks I will try to reproduce this also with the new Spigot build.
@Nickbbeezy
Text check under message you should find uppercase: 1.0. Increasing this value will cost extra for those who write in CAPS.
-
View User Profile
-
Send Message
Posted Dec 24, 2012@MyPictures
It's not just fastbreak but it seems as if this check is breaking the plugin or causing it to malfunction for some reason. I have posted a ticket with some more information. I do not currently have the time to get a vanilla server up but when i do i will gather some of my staff, and do a bit of testing. I can not guarantee i will have a test server up within the next few days.