NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Jan 8, 2013@Sfmplayer
As other said, it comes probably from an other plugin.
@Gary520
It was effective once the hackers adapted to this change again. However we need know what checks are exactly failing before we edit them. Build 301 includes some fixes in the fighting check, you might want to check it out: http://www.nocheatplus.org:8080/job/NoCheatPlus/301/
Should be stable enough to run on a 1.4.6 or lower server.
More about forcefields here: http://dev.bukkit.org/server-mods/nocheatplus/tickets/51-forcefield-aimbot-reach/
@FourDowning
No at the moment we are trying to find out what is causing it. You can follow the progress here: http://dev.bukkit.org/server-mods/nocheatplus/tickets/390-dev-build-304-ncp-issues-with-spawn-pos/
For now we recommend to use NC+ 301.
@Zierk
If you get /ncp commands output with every /ncp command then its most likely that you use a outdated version of NoCheatPlus. Be aware that you need a beta or dev version of NC+ if you run a 1.4.6 server. If you click the download button it will lead you to the last recommended build which is 271 (for the old Craftbukkit builds without the NMS change...). So please tell us what version you exactly use, I recommend to at least use NC+ 294 or better 301: http://www.nocheatplus.org:8080/job/NoCheatPlus/301/ with 1.4.6.
-
View User Profile
-
Send Message
Posted Jan 8, 2013Let me rephrase my original comment, my admin account has the * permission. I am using Nodus 9.9 client on a separate account without OP or any other admin permissions and the NoCheatPlus is not detecting hacks. I have tried multiple flymodes, fastbreak, noswing.
I am using the current version of NCP on DevBukkit, latest CraftBukkit build. No notifications in game, no log entries in the log file. The config file is out of the box, I have verified that the checks are active and set to log: . In game notifications are also enabled.
EDIT: Something else i noticed, when i type any /ncp command regardless of arguments I keep getting the "/ncp commands" output. Only the "/ncp reload" command works properly. When I type for example "/ncp info <player>" it gives me the "/ncp commands" output in chat.
-
View User Profile
-
Send Message
Posted Jan 8, 2013@asofold
Is the issue with Essentials/MV spawns fixed yet? :)
-
View User Profile
-
Send Message
Posted Jan 8, 2013@Sfmplayer
Do you have essentials installed? if so i believe this is the cause, give them this permission node.
essentials.chat.url
-
View User Profile
-
Send Message
Posted Jan 8, 2013@Sfmplayer
Simply give the permission. essentials.chat.url (if you're using EssentialsChat)
-
View User Profile
-
Send Message
Posted Jan 8, 2013The Version 3.7.3-B111 was really effective against forcefield, I put these settings: Improbable:500, yawrate: 500 But since, there was an update, and the plugin kick players who do not cheat ...
-
View User Profile
-
Send Message
Posted Jan 8, 2013How can i allow players to send websites to the chat Cause right now the . (dot) is being removed everytime normal players try to link a site
-
View User Profile
-
Send Message
Posted Jan 8, 2013@Gary520
Forcefield detection is not perfect (far from). But clients already adapted to it, so they will try to create as few alerts as possible. You can lower the rate for yawrate, but it can also prevent normal players from attacking, so don't put it too low. The rate represents "degrees in seconds(grad: 360 is one full turn). One can also reach higher rates with clicking left and right into a bunch of mobs. Since clients adapt, the force-fields are limited but not impossible.
@InvisiCraftOfficial
What version? The jenkins versions have notes on them, mind to read those (essentials etc.). The problem is known for development builds above 301, yet it is special to essentials/multiverse/mob-arena.
You should be able to use build 301 of NCP. What were you using ?
-
View User Profile
-
Send Message
Posted Jan 8, 2013HELP!
This constantly unsets my /spawn!
-
View User Profile
-
Send Message
Posted Jan 8, 2013I have to configure "rate" ? He never spot forcefield with a rate of 380...
Sorry for my very poor English, I'm French.
-
View User Profile
-
Send Message
Posted Jan 8, 2013@Gary520
yawrate does not have actions, because it just deals a penalty time for attacking. Reason is: every player can turn around wildly with a vanilla client, so we just aim at preventing too precise turning+hitting with yawrate, so it silently deals a penalty time, so that the players attacks within that time will get cancelled. Given the default configuration, the yawrate check does add to improbable for the case of wild turning around. So currently the kick has to be in combined.improbable.
@Zierk
If you have the '*' permission, you won't be checked at all, so you can not generate any log messages yourself. It should be "nocheatplus.admin.notify" to receive notifications.
@ARavinMadMonkey
Radar hacks are fully client side in principle. Some client developers are as polite as to allow deactivation of certain features by a special message/part sent by the server, but a modified client might just ignore those. Currently hiding entities is not fun with CraftBukkit. For hiding players there are techniques available, but those are likely to conflict with vanish plugins and also hide the names from the player list (the latter can be "fixed" by sending extra packets). An example of a plugin that does that for players is PlayersInCubes.
-
View User Profile
-
Send Message
Posted Jan 8, 2013Could you add support, rather a lack of support and add a way to BLOCK this client side mod? http://www.minecraftforum.net/topic/1040810-146-radarbro-gui-mobplayer-radar/
On certain competitive multiplayer servers (Like Survival Games for example) this would give players a HUGE advantage as it allows the player with the mod to detect players, chests and basically any other entity! This is a huge cheat and I would be very appreciative (And will donate to you if you allow me) if this blocking feature is allowed.
-
View User Profile
-
Send Message
Posted Jan 7, 2013Notifications are not working in game. They are enabled in the config.yml file. I use PermissionsEX and have included the * permission node on my admin account. I receive no notifications, the log file does not update in the server folder. Any advice?
-
View User Profile
-
Send Message
Posted Jan 7, 2013Hello, can you help me configure "yawrate" ? I would kick players who use forcefield.
-
View User Profile
-
Send Message
Posted Jan 7, 2013@asofold
Hosts should update Java to 7 ... 6 is outdated :C
-
View User Profile
-
Send Message
Posted Jan 7, 2013@ferrybig
As asofold said its already compiled in Java 6, you can easily check that by opening the MANIFIST.MF :
Manifest-Version: 1.0
Archiver-Version: Plexus Archiver
Created-By: Apache Maven
Built-By: jenkins
Build-Jdk: 1.6.0_37
Be sure you use version 294 or better 301 for Craftbukkit 1.4.6, otherwise some parts of NoCheatPlus wont work.
-
View User Profile
-
Send Message
Posted Jan 7, 2013@ferrybig
It should be compiled with 1.6. If not, can you provide a stack-trace?
-
View User Profile
-
Send Message
Posted Jan 7, 2013plx compile using java 6 or my server host cant run it
-
View User Profile
-
Send Message
Posted Jan 7, 2013@Maxetto
There obviously was a heavy lag spike, but it can't be said what it was from the stack trace of the main thread, as far as i can judge it. The spot it shows is a spot that should not be able to block at all, like a function call (not synchronized), so it seems the server was still/again processing further events.
Just set managelisteners to false, it does not really gain anything (while we are not certain it registers 100% correctly since 1.4.6, roughly), though that is another topic.
-
View User Profile
-
Send Message
Posted Jan 7, 2013@asofold
I'm using the 3.8.7-beta-b294 with CB 1.4.6 R0.3 (Beta)
When it appeared the error my player were saying "Lag!".
In this days i'm doing many examine with NoLagg but all values are good and healthy...