NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Jan 30, 2013Autoaim bow and radar still cant be prevented? :<
-
View User Profile
-
Send Message
Posted Jan 30, 2013Hey, I am Owner on a Server and And cant fly without Op....
is that a bug or something?
Im using the lastest release from Craftbukkit and Nocheatplus.
PLEASE HELP!
-
View User Profile
-
Send Message
Posted Jan 30, 2013@MyPictures
Nothing that has to do with falling damage... UnknownK9 NCP: 14:02:17 moving.passable VL2
-
View User Profile
-
Send Message
Posted Jan 30, 2013@LordKainzo
Do they have any VLs if you check with /ncp info PlayerName ?
-
View User Profile
-
Send Message
Posted Jan 30, 2013@asofold
My mistake.... We were on latest Spigot (which is based off of latest CB) .... we're now on an earlier build due to mob-spawning issues. It's around Jan 4th for the build. Can't recall off hand the exact number but its 1.4.6.
The issue is... when a player jumps (normally) they take falling damage. When they walk down steps, they take falling damage. It's as if the server has super-gravity on.
nofall: active: false dealdamage: false actions: cancel vl>5 log:nofall:0:5:if cancel vl>25 log:nofall:2:5:icf cancel Are the current settings that don't issue falling damage on jumps/walking down steps.
nofall: active: true dealdamage: false actions: cancel vl>5 log:nofall:0:5:if cancel vl>25 log:nofall:2:5:icf cancel Are the setting that makes the server feel like it has "super gravity"
-
View User Profile
-
Send Message
Posted Jan 30, 2013@SilverKytten
If kick reason is "disconnected.spam" then its the vanilla MC spam check that kicked you by executing your macros (Not NC+). A server.log and/or /ncp info PlayerName would be very helpful here.
Reis radar come from NC+ but there are also other plugins that do that (Could be NC+).
NC+ has no Full-bright check or whatsoever (Not NC+).
The OP thingi depends on what permissions aka. configuration you use. PEX will give every OPed player all permissions by default, GroupManager also. The other ones I don't know.
-
View User Profile
-
Send Message
Posted Jan 29, 2013Since our Jenkins server is down and we intended to release soon anyway, we release an ALPHA version on BukkitDev (to be approved):
NoCheatPlus 3.8.9-b353 (alpha)
Expect a couple of minor fixes and additions for a beta and/or full release within the next week.
@LordKainzo
Latest CB? Use the link above (once approved or at your own risk :) ) - build 301 is not compatible with Minecraft 1.4.7.
I am still not entirely sure what "taking fall damage" means, Minecraft would then deal fall damage, if dealdamage is set to true, NCP will deal damage to prevent certain nofall hacks.
-
View User Profile
-
Send Message
Posted Jan 29, 2013@asofold
all users say they take falling damage when the below is set. Any reason? I can verify this issue. b301
nofall: active: false dealdamage: false actions: cancel vl>5 log:nofall:0:5:if cancel vl>25 log:nofall:2:5:icf cancel
Yes ... we're on latest CB and recommended build of NCP.
This has been happening for a while though.
-
View User Profile
-
Send Message
Posted Jan 29, 2013@SilverKytten
Make sure if ncp blocks stuff actually, check with "/ncp info PLAYER" after testing long macros. To be sure you an do "/ncp remove PLAYER" before testing. If it does not show something about CHAT_COMMANDS or CHAT_TEXT then it was not NCP. Other way to find out is the kick message.
Not sure about rei, which version of NCP and CB are you using ?
-
View User Profile
-
Send Message
Posted Jan 29, 2013I'm having a bit of an issue with allowing bypasses - Ops are still kicked/blocked from using long macros, Rei's radar, and Fullbright - Even when the correct permissions are given to them.
-
View User Profile
-
Send Message
Posted Jan 29, 2013@slaveofcore
Could be ...
-
View User Profile
-
Send Message
Posted Jan 29, 2013Hmm... I dont get it, I installed the plugin but I'm still able to fly using Nodus! What am I doing wrong? I haven't touched the .yml or anything! Someone please send me a pm on how to fix this!
-
View User Profile
-
Send Message
Posted Jan 29, 2013@SkyRanger
Because its a development build which still needs testing and some fixes to be promoted as beta/release. On DevBukkit we only upload builds that are save to use for now (301 only works with 1.4.6 and below).
-
View User Profile
-
Send Message
Posted Jan 29, 2013@MyPictures
so why is there no link on the right side to download it ? its confusing!
but thanks for the Link.
-
View User Profile
-
Send Message
Posted Jan 29, 2013@PuremineServer
We don't have a 1.4.7-compatible build uploaded to BukkitDev, yet. It will happen this week, but until then you would have to use a development build of NCP if you want to use it with Minecraft 1.4.7.
Edit: deleted message, please use a paste (text only): http://dev.bukkit.org/paste/
-
View User Profile
-
Send Message
Posted Jan 29, 2013@asofold
Yea Improbable and Fight_Speed can have false positives but what some people are complaining that NoCheatPlus causes combat delays which I really cant reproduce. Yes NC+ can cancel hits and such but I really don't think that it delays hits that came from players. That's what I understand under "Combat delay" if I'm not mistaken. Hmm
-
View User Profile
-
Send Message
Posted Jan 29, 2013@MyPictures
It depends on his version. I was able to trigger improbable and seldomly fight.speed false positives with fast clicking.
Main point is that if you disable checks they don't run, so if they really run only thing that might have happened is that loading the config failed.
-
View User Profile
-
Send Message
Posted Jan 29, 2013@asofold
Yea not sure. Some claim to have but I dint saw any proof yet.
@Rosiepoo284
It would be awesome if you could track down one of your players that has the problem and execute /ncp info PlayerName to him/her. If you don't mind you could also send me your plugins folder together with your craftbukkit.jar, bukkit.yml and server.properties packed in a zip/rar and sent a link to me or @asofold. If NC+ is really doing this and we can reproduce this, then you can expect a fix very soon but the problem here is that we cant reproduce this. I punched @asofold for nearly 10 minutes in his face with a piece of meat and nothing happened (even with hard lag spikes), we also tested stone swords, insane jumping/hitting movements but nothing happened... So I expect a plugin that is interfering with NC+ causing it to do errors?
Are you sure everything was fine with AntiCheat?
How long did you test with AntiCheat?
Does it happen always, often, rare or only very rare?
-
View User Profile
-
Send Message
Posted Jan 29, 2013@Rosiepoo284
Did you read this comment?
I am pretty sure there is something wrong with your server otherwise, probably NCP did not start up correctly, you used "/reload" (there has been a bug in it for 5 months in CraftBukkit), or another plugin interferes. I can clearly not reproduce your problem of checks still doing something after disabling them. Do you always check your logs on server start and reloading configs ? Are there any errors with enabling NCP?
I adapted the improbable checks further in the development builds which will be in the coming release this week. It might pay to have a look, but if you disable checks and they still alert, then your configuration has errors most likely, there should also be some errors in the log for that case.
Concerning non-hacks we can't prevent all false positives, due to the nature of Minecraf and CraftBukkit, but i also think you used outdated versions of NCP.
We can't know what you actually did and how your config looked like and if your server.log shows errors if you don't give such information in the ticket you made: http://dev.bukkit.org/server-mods/nocheatplus/?page=3#c3970
-
View User Profile
-
Send Message
Posted Jan 28, 2013@MyPictures
well it certainly does cancel them. and it cancels many of the non hacks also on a lag free server. I wish there was a way to turn it off, i turned off all pvp checks and combined yawrate but there was still cancels.
I switched to anticheat and the problem with pvp was gone, which proves nocheat was the problem, however anticheat has problems of its own. It's very hard to find a good cheatblocking plugin.