NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Jan 18, 2013Is there a permission to add an admin to the exempt list so he can have a fly client and not get knocked back when using it?
-
View User Profile
-
Send Message
Posted Jan 18, 2013@Nickbbeezy
Use NocheatPlus build 318:
http://www.nocheatplus.org:8080/
At your own risk, updating to 1.4.7 that quickly!
-
View User Profile
-
Send Message
Posted Jan 18, 2013@asofold
Using this Spigot build: http://ci.md-5.net/job/Spigot/415/ and I still get the error on startup
-
View User Profile
-
Send Message
Posted Jan 18, 2013@Nickbbeezy
You should use build 318 with a Minecraft 1.4.7 Spigot build. Always check if the Minecraft version is supported :)!
-
View User Profile
-
Send Message
Posted Jan 17, 2013Getting this error with NCP Build #318 & Spigot Build #413
http://pastebin.com/TWVYBSnW
-
View User Profile
-
Send Message
Posted Jan 17, 2013@orkun1675
The ncp ban command is just to display a message to the player and also kick the player, which looks pretty much like the vanilla command, not sure why i put it in in the first place.
The ban-ip command string in ncp is nothing else than the ban-ip command of minecraft, just that it can be used as an action (cmd:ban-ip) filling in the ip (see strings section of the config).
NCP does have a "tempkick" command which allows to deny login for an amount of minutes. With build 318 it als will prvent players counting for the logins check.
-
View User Profile
-
Send Message
Posted Jan 17, 2013@ScrimCraft
Thanks man! But NoCheatPlus has these as well. What I want is, to ban does ips so that that guy gives up on me. I lost all players already though, I guess :S
@ScrimCraft
I guess it has something to do with catacombs. But the major packet problem was with Bending. I removed it and they are less often now. I'll check with catacombs, thanks!
-
View User Profile
-
Send Message
Posted Jan 17, 2013@orkun1675
Does it always stop with that catacombs reference ?
Looks like the server ran out of memory. That could be related to plugins using memory of course. Question is, if you have enough memory in general, or if it is a plugin / server issue.
@Pythros
"proper way to list" <- The list is for blocks that pose trouble with the passable check. For instance if you have problem with fence gates you could add the (proper) name to the list, or the id. In that case it would be FENCE_GATE.
@orkun1675
Build 318 should improve this.
http://www.nocheatplus.org:8080/job/NoCheatPlus/
-
View User Profile
-
Send Message
Posted Jan 17, 2013@orkun1675
Yea but what makes you think that it comes from NoCheatPlus? Looks like it comes from the plugin Catacombs? Not sure...
@Pythros
@asofold should know about that, so we wait for him then...
@orkun1675 http://dev.bukkit.org/server-mods/nocheatplus/pages/documentation/configuration/#w-how-to-customize-your-actions
By setting actions to the relog check and take a look at the "logins" check. However we already have a tempkick (tempban there) so maybe its not a great idea to do this. The spam bot protection of NC+ is not super advanced at the moment so you cant do much against it. However it will prevent massive logins that could lag your server.
Hmm logins checks doesnt support any actions yet.. something for ToDo @asofold? xP
@ScrimCraft
We do also have a captcha if you mean that. Its just disabled by default (all parts of NoPwnage).
-
View User Profile
-
Send Message
Posted Jan 17, 2013@orkun1675
orkun1675, try to use this plugin: http://dev.bukkit.org/server-mods/antibot/
It includes no spamming or you have to enter a code to talk again, no login spams (configurable), and more!
Sorry to advertise, I really wanna help this guy
-
View User Profile
-
Send Message
Posted Jan 17, 2013My server is under attack!! How can I ban these ip's for 1 day so that they dont lag the server ?? Its urgent and causing a lot of problems:
http://pastebin.com/HRGsA3iv
-
View User Profile
-
Send Message
Posted Jan 17, 2013Is this section being used? If so, is there proper way to list different blocks, such as all fences types, iron bars, glass panes?
-
View User Profile
-
Send Message
Posted Jan 17, 2013@asofold
@asofold
Well okay. I think its about players join the server and the server thinks they are already onlin. (just a guess). Happens only to few players. And after some time the server crashes like this:
http://pastebin.com/nvFMEeb0
-
View User Profile
-
Send Message
Posted Jan 17, 2013@orkun1675
We don't do anything on packet level (yet) so I would stick with @asofold and say no.
-
View User Profile
-
Send Message
Posted Jan 17, 2013@orkun1675
I would say not.
Are you using NCP build 317 yet ? Earlier builds don't work with 1.4.7.
-
View User Profile
-
Send Message
Posted Jan 17, 2013Is this related to NCP:
http://www.spigotmc.org/threads/failed-to-handle-packet-for-player-ip-java-lang-nullpointerexception.380/
-
View User Profile
-
Send Message
Posted Jan 17, 2013@REDTURTL3S
One might try to get kicked with a vanilla client. The new type force fields will not get detected that easily when fighting against one entity. But certainly more is possible than we have at present.
@ottocraft
Water walking will likely work somehow, especially the dolphin stuff. Concerning forcefield mind the other answers, for the rest it depends on what you want to block. Reaching through walls will be tackled some day, but just using freecam is impossible to block. Similarly, bow-aimbot will be difficult or even impossible to distinguish from a skilled shooter, if clients do it smart. With advanced statistical analysis (+ machine learning), it might be possible to kill most clients on the market though. But i think such does not seem to be reasonable to implement at present.
Concerning 1.4.7, Development build 317 adds support for it. Few testing with 1.4.7 clients went into it, short checking of some OBC/NMS sources - so no guarantees.
http://www.nocheatplus.org:8080/job/NoCheatPlus/
-
View User Profile
-
Send Message
Posted Jan 17, 2013water walking / forcefield / bow aimbot / FreeCam Freeze s Working For Last Dev V in my server ...
-
View User Profile
-
Send Message
Posted Jan 17, 2013@wesseldeman
All plugins need to be updated to 1.4.7 due to bukkit changes at java classes^
-
View User Profile
-
Send Message
Posted Jan 17, 2013My console get this errors while starting the server on Bukkit 1.4.7 R0.1: http:pastie.org/5704284