NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Feb 1, 2013@MyPictures
So far only one player but he insists he's not using any cheats. I'll keep my eye open, also four people have had this warning: failed SurvivalFly: tried to move unexpectedly
-
View User Profile
-
Send Message
Posted Feb 1, 2013Does it even broadcast when a player is doing something wrong? I haven't seen anything
-
View User Profile
-
Send Message
Posted Feb 1, 2013@wackydude1234
Every player? Or just one/a group of them? Its nearly impossible to get a false positive with the Combined_BedLeave check. The check was made to prevent players from faking BedLeave packets which could allow them to be invincible or fly around without NC+ noticing it. If every player or the biggest part of them are getting kicked by BedLeave and you realaly think that it is definitely a false positive then please open a new ticket for us with all the information's we need.
-
View User Profile
-
Send Message
Posted Feb 1, 2013My players keep being kicked for Failed BedLeave VL1
-
View User Profile
-
Send Message
Posted Feb 1, 2013@andrewkm
355 - you are brave :)
It is a known issue, though 5 seconds is a lot indeed, that will need adaption.
-
View User Profile
-
Send Message
Posted Feb 1, 2013Build 355 default configuration: http://www.ecocitycraft.com/forum/threads/bug-report.38251/
-
View User Profile
-
Send Message
Posted Jan 31, 2013@dotapurex1
"NPCEntity" - some NPC plugin is outdated, there has been a change from CB 1.4.7-R0.1 to CB 1.4.7-R1.0 !
Edit: just quick look: Any plugins that do something with NPCs (not NCP :) ), like Combat-tag or citizens.
@Puremin0rez
It is not strictly needed, it is aimed at performance, due to teleporting and setting back constantly leads to more load on the server.
False positives ? How are you sure it is false positives? What situations, what log messages or alerts, any details ?
-
View User Profile
-
Send Message
Posted Jan 31, 2013Is there a particular reason why the survival fly check kicks players? I always assumed it stopped it fully, so I don't really see a need for kicking them. Just wondering because the survival fly kick is about 90% of the false positives on my server.
-
View User Profile
-
Send Message
Posted Jan 31, 2013Hello,
Im getting this error and its crashing my server?
http://pastebin.com/Sc8ypmEv
-
View User Profile
-
Send Message
Posted Jan 31, 2013@deltagi
Thanks
What do you mean with "No Spamming"? We already have chat checks to prevent chat spam if you mean that. Or something else? Better make a new Ticket for your suggestion so we can keep track :)
-
View User Profile
-
Send Message
Posted Jan 31, 2013NoCheatPlus works extremely well!!!! if you cant get it to work its you not the plugin!!! Thanks NoCheatPlus
Suggestion- maybe a "No Spamming" thing. that would be awesome!!! Thanks for the plugin!
-
View User Profile
-
Send Message
Posted Jan 31, 2013@AlphaFarer
NCP prevents placing blocks against fluids but placing water should be possible (i just tested it).
@ekhakanza
Can you be more specific about the messages shown? You are using NCP 3.8.9-b353 and CraftBukkit 1.4.7-R1.0?
-
View User Profile
-
Send Message
Posted Jan 31, 2013@asofold
in screen after klick join.. the player not fly.. but NCP is detect player use fly mode..
-
View User Profile
-
Send Message
Posted Jan 31, 2013I take water from /i water and give to my server player, when he tries to place block NCP blocks, but no violation says or something similiar, but Ops can place water from /i water
Why the hell is this happening, hm?
-
View User Profile
-
Send Message
Posted Jan 30, 2013@Samppatus
What works? What can the player do... faster jumping?
Basically NCP allows packets to arrive in faster succession also to compensate for lag on both client and server side. Still the number of packets that NCP allows is limited, though i am not entirely sure if the current buffering method allows a little bit too much or not, i will likely change the buffering system to something that can be controlled more intuitively, but that needs some re-coding.
@ekhakanza
No idea what you mean.
What is the kick message? Are there in-game alerts or log file entries about the player (plugins/NoCheatPlus/nocheatplus.log)? What does "/ncp info PLAYERNAME" show for a kicked player?
-
View User Profile
-
Send Message
Posted Jan 30, 2013Why the player auto kick after join? but he not use fly...? please fix?
-
View User Profile
-
Send Message
Posted Jan 30, 2013I found working hack in that test server. If you use timer and jump same time timer works.
And i used nodus.
-
View User Profile
-
Send Message
Posted Jan 30, 2013@Samppatus
It is not directly supported, walking or flying speeds are not yet checked on base of individual players settings.
Currently you can only globally configure a different walking speed and give certain players a speeding permission, which allows moving faster with a configurable factor.
-
View User Profile
-
Send Message
Posted Jan 30, 2013Does this allow to use essentials's /speed command?
-
View User Profile
-
Send Message
Posted Jan 30, 2013@LordKainzo
NoFall can not create violations for most cases, because the "real" nofall hacks just sneak around getting damage until they hit water, so NCP agressively (dealdamage) deals the appropriate fall damage whenever it thinks people are on ground, while MC/CB would believe what the client is telling instead. In essence we can't distinguish hackers from normal players, we just deal the fall damage to be sure that cheaters don't get away with it. We only generate violations for one newer exploit which is basically like telling the server you re on ground, while you are not, so the server deals the fall damage prematurely, while you can regenerate in air and reduce the fall damage that way.
Would be good if you could state the spigot/craftbukkit version string, so we can try to reproduce it.
@dannebooi123
The point would be if you have the right permissions to be allowed to fly. You should also state the versions, "latest" usually changes with time, so it is not suitable to really judge the matter.
For normal flying you need nocheatplus.checks.moving.survivalfly.
@zergqq
Radar - not really. Player radar can be fought be using plugins like PlayersInCubes or the distance feature of VNP (if ti is still in), but all those methods also have strong draw-backs.
Autoaim can not really be prevented if it is done smart. All it does is turn somewhere and fire a bow. Any kind of fix trying to prevent this is likely to be bypassed within one day (rough estimation). What we can find (and deal attack penalty time for) is extremely quick turning or firing the bow too fast.