NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Apr 22, 2012@asofold
Where is a "unpushable check"? hm i can't found.
-
View User Profile
-
Send Message
Posted Apr 22, 2012@guyag (updated)
@Lagg Try deactivating the unpushable check, it is one of the most expensive ones.
@NeatMonster the collide check ... shouldnt it exclude the Player object in question colliding with itself?
-
View User Profile
-
Send Message
Posted Apr 22, 2012@Kirdog
Me too. PlayerMoveEvent is the only thing causing lag, but holy hell is it causing a lot of lag. This didn't happen with nocheat the original. If the plugin author could optimise code that would be ace, but in the meantime if he could notify us which checks are most intensive so I can disable them. Thanks.
-
View User Profile
-
Send Message
Posted Apr 22, 2012I'm expiriencing tick drop from 60+ players on the server. But hardware of the server is fast and not bad. I checked several times the load percentage of the plugins with NolaggExam. And i found that "PlayerMoveEvent" taking a lot of time to process. Thats why we have tick drop.
Is it any way to fix it or make it more fast?
Thank you.
-
View User Profile
-
Send Message
Posted Apr 22, 2012Great plugin, i just have a quick question, do we have to set anything except : allowclientmods: false to prevent anyone from cheating with the mods listed above ?
-
View User Profile
-
Send Message
Posted Apr 22, 2012You're doing a great job with this plugin! Thank you for picking it up and maintaining it. :]
-
View User Profile
-
Send Message
Posted Apr 21, 2012ok i installed this plugin today and now me and some people cant log in we get unknown host failed to log in. started on first restart with plugin
-
View User Profile
-
Send Message
Posted Apr 21, 2012Thanks for telling me how to deal with the pushing glitch :)
-
View User Profile
-
Send Message
Posted Apr 21, 2012A few known players are now being kicked for spamhaus.org IP address. Is this part of nocheat?
Is it something that needs to be fixed; or should they personally contact spamhaus/change their IP to get on?
-
View User Profile
-
Send Message
Posted Apr 21, 2012Same here. 2000 ms+ on my 65 slot server (according to nolagg over 25 seconds)
-
View User Profile
-
Send Message
Posted Apr 21, 2012I've also been experiencing huge tick drop over the period of a few hours with NCP. :(
-
View User Profile
-
Send Message
Posted Apr 21, 2012Also, in all the flurries of reporting bugs/suggestions, I may have forgotten to say something very important...
Thank you!
This plugin is really amazing, and we all appreciate the work you've done to continue NoCheat. But more than that, we appreciate the work you've done to IMPROVE NoCheat...
Great job :D
-
View User Profile
-
Send Message
Posted Apr 21, 2012@NeatMonster
Yeah, i might try a pull request some time, though maybe some forum for relaxed and slow paced discussion of certain methods could also be interesting, i might provide the ideas/pseudo-code in some written form somewhere and link to it, i am not sure that i will get it on schedule for adding real checks...
So enough of the checks (+door traversal :) ), these comments are not optimal for discussing such, i will link to some results for it, maybe.
-
View User Profile
-
Send Message
Posted Apr 21, 2012What about if someone has a cracked client, I mean that by Nodus Client or other hacked clients? Something that has flying pretty much build into the minecraft.jar. I tried it on my server since I know a few people that use it. Didn't get any counter for such hacks.
-
View User Profile
-
Send Message
Posted Apr 21, 2012Also, the Mod "Smart Moving" seems to be allowing players to still climb over fences and climb walls. I haven't had time to test all the features of this and this was reported by a player on my server. I had him verify it with me watching it and he was able to climb fences that were 5+ high and climb over walls.
-
View User Profile
-
Send Message
Posted Apr 21, 2012@MutinyCraft Yep, this issue should be fixed using v3.5.8.
@Pr07o7yp3 Hum... I've added anything taking a lot of resource in the latest version. Of course NoCheat/NoCheat+ is an heavy plugin because of all the checks it does.
-
View User Profile
-
Send Message
Posted Apr 21, 2012This is really weird. :O Today after update NCP the TPS decreased to 3 sometime. I didn't update any other plugin except NoCheatPlus. Generally, my TPS fell to 11,12 when in the server there are 120+ players.
Please, check it.
Otherwise, it works greate and stop many cheats.
-
View User Profile
-
Send Message
Posted Apr 21, 2012I tried to find this error already mentioned but couldn't find it so I thought I would post it. I just noticed it when I saw that my server.log was extremely large after just being cleared for the day. Here is the pastebin for one of the errors: http://pastebin.com/YTy5xxCQ That error spammed over and over for a few thousand lines of the server.log. I was using NoCheatPlus version 3.5.7_1 at the time and you may have already fixed it in 3.5.8. Just thought I would let you know. :D
-
View User Profile
-
Send Message
Posted Apr 21, 2012@shutka Maybe, but a lot of server owners aren't giving their users this negative permission node.
What NC+ does is to change this negative node to a positive one (only the players having the bukkit.command.plugins permission node will be able to see the plugins).
-
View User Profile
-
Send Message
Posted Apr 21, 2012@GioboiMC OK, let me explain how this check and the "unpushable" option of clients works.
First, you must know that everything is handled client side. If a "change velocity" packet is sent by the server to the player, the client will simply ignore it (so no "push", no knockback, etc.). The server hasn't any control over the player's velocity if the player decides to ignore its orders.
So, the glitchy workaround I've found is to, instead of sending a "change velocity" packet, send a "move" packet the player. They can't ignore move packets. But as you've noticed, it's still a little bit buggy because regular clients will add the velocity and move at the same time (so the move is applied two times).
Can you please read the changelog?
@theask Are you using the latest version? NoCheat+ no longer modifies the plugins list.
@shutka @shutka Please read the Instructions.txt file.
@Spiritwo13 @Spiritwo13 Zombe's mod and the others can be disabled by NoCheat+ because those mods integrate special codes to disable their functionalities. Platinum, which is a griefing client will never integrate that kind of codes (OFC).
@7007King0770 NoCheat+ already integrates some checks against kill aura (reach, direction, speed, etc.) but most the clients bypass them. Recently, I added two new checks against auto-knockback and auto-criticalhit (which block Nyan's kill aura for example).
@np98765 There is already a MorePacketsVehicle check, so the issue isn't with packets. I'll try to improve the actual checks. Thanks for the suggestion!
@LordKainzo API is coming! (I'll probably add methods to disable/enable a check for a player.)
@asofold Feel free to submit a pull request if you want to contribute to NoCheat+.
@Basxt Haha, the only way to disable the radar is to do not send the other players position to the client, which is a little bit problematic (well, it'll be single player mode then).
@andrewkm As always, thanks for your nice comments andrewkm!