NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Feb 5, 2013@MyPictures
1.4.7 recomended and the current NCP 3.8.9-b353.
I also use CNCP.
I have 2 players admitting to using Nodus after i found his tunnels dug straight to Diamond ore
-
View User Profile
-
Send Message
Posted Feb 5, 2013@BBFChaser
What means "up to date" for you? Please give us CB and NC+ version. For Craftbukkit 1.4.7 you need at least this build or higher: http://dev.bukkit.org/server-mods/nocheatplus/files/44-nocheat-plus-3-8-9-b353/
-
View User Profile
-
Send Message
Posted Feb 5, 2013I am using this and its up to date yet have had hackers using Nodus does this not block it?
-
View User Profile
-
Send Message
Posted Feb 5, 2013@xclucky
Please update your NoCheatPlus version to at least 353 or higher. That might fix your issue. If not then create a new ticket for us please.
@Waterworth12
Do you you or the affected player use any armor that is enchanted with the new "Thorns" enchantment? Sounds really strange... You should try out one from the bleeding builds that are available on our Jenkins page. If it still happens then feel free to open a new ticket so we can keep track of this issue.
@accmss
Mods such as InventoryTweaks or any other InvenotryManagerMods give those players who use that kind of mod a advantage compared to other players that play with full vanilla Minecraft. We wont remove any warning by default but our config file allow you to tweak NC+ so it fits your likings. If you want players to allow the use of InventoryManager mods then I recommend to disable the FastClick check in the configuration file (careful! By disabling this check you allow players/hackers to use ChestStealer and other cheats!).
More about configs here: http://dev.bukkit.org/server-mods/nocheatplus/pages/documentation/configuration/
P.S I don't recommend banning on only what NC+ says, its not always 100% right and sometimes false positives can pop up (mostly because of lag...).
-
View User Profile
-
Send Message
Posted Feb 5, 2013Could you disable these warning by default. I banned a player for sorting his inventory.
xxxPlayerxxx failed FastClick: tried to move items in his inventory too quickly. VL 490.
-
View User Profile
-
Send Message
Posted Feb 5, 2013@asofold
Latest NCP Version
http://dev.bukkit.org/server-mods/nocheatplus/files/44-nocheat-plus-3-8-9-b353/
Latest Bukkit version
http://dl.bukkit.org/downloads/craftbukkit/view/01845_1.4.7-R1.0/
Warnings include:
moving.survivalfly VL 457 blockbreaking.noswing VL 29 flight.reach VL 3 flight.knockback VL 50 moving.passable VL 1
- All of which were warns on my Alt account, without any modifications to my client normal player permissions.
-
View User Profile
-
Send Message
Posted Feb 5, 2013@Waterworth12
Which version of NCP are you using? Which CraftBukkit version?
Does this always happen or often or rarely?
Can you be more specific about getting pulled into the ground? What alerts does NCP generate?What does "/ncp info PLAYER" show for a player who suffered this? (Would be best if you start with "ncp remove PLAYER" before testing this, to be able to compare, all in case you can actually reproduce it on your server.)
In my tests i did not get pulled anywhere but air, but the side conditions may be important here.
-
View User Profile
-
Send Message
Posted Feb 4, 2013Using latest build, when Zombies,Spiders or Mobs holding a knock back sword hit you, you are pulled back and begin to sink into the ground for awhile. Seems some check is too strict or there is a bug, please take a look.
-
View User Profile
-
Send Message
Posted Feb 4, 2013@lenis0012
It will be more difficult to do that in the next release, but certainly a strong knockback essentially is like a little bit of flying, in future we might try to confine it more and more, but due to latency things are not exactly straight forward on velocity.
-
View User Profile
-
Send Message
Posted Feb 4, 2013somebody said this in the comments of one of my plugins:
I heard bout a way to "cheat" the NoCheat plugin, if you get attacked with a sword with knockback, you activate your flyhack before hit the ground then you can fly for 4-10 secconds. If possible, can you fix this? (or if it is a real bug)
It should basicly ignore fly hacking when a sword has knockback.
-
View User Profile
-
Send Message
Posted Feb 4, 2013@ViscousSummer88
Seems some builds were deleted, a new one is available right now.
-
View User Profile
-
Send Message
Posted Feb 4, 2013@MyPictures
I am using NCP version 3.8.9-b327 and Craftbukkit 1.4.7-R1.0. I also noticed this happening on 1.4.6... I'm wondering if there is some new type of hack out there that breaks a block without actually breaking the block...
-
View User Profile
-
Send Message
Posted Feb 4, 2013Need to be running a latest DEV build of NCP, but Jenkins has no uploads in it.. is there an alternative link?
-
View User Profile
-
Send Message
Posted Feb 4, 2013@datacrypt
Which version of NCP are you using? What exactly do players do and when exactly do they suffer those set-backs?
Jumping off the blocks edge, during falling...?
-
View User Profile
-
Send Message
Posted Feb 3, 2013Anyone know some good tweaks for the senitivity? Seems a lot of people are getting false positive readings. i.e. Jumping off of a player made diving board and getting "survival fly" detection's.
-
View User Profile
-
Send Message
Posted Feb 3, 2013@RSGTechno
That's a part of the SurvivalFly check. VClip is basically teleporting/moving up or down. So its already covered :)
@xclucky
Whats your Craftbukkit and NoCheatPlus version? Please be sure that you at least this version (or higher) for Craftbukkit 1.4.7 R1.0: http://dev.bukkit.org/server-mods/nocheatplus/files/44-nocheat-plus-3-8-9-b353/
-
View User Profile
-
Send Message
Posted Feb 3, 2013Is there a hack to break signs? This has happened countless times where a sign is randomly broken and no logblock data is there for it. I've noticed this in worldguard regions, residences and griefprevention regions... It is getting very annoying >.>
Also, I just got a big error when a player attempted to fly:
-
View User Profile
-
Send Message
Posted Feb 3, 2013Add a "No Vclip" option?
-
View User Profile
-
Send Message
Posted Feb 3, 2013@felixislive
Be sure you use the right versions: For now I recommend:
CraftBukkit 1.4.7 R1.0: http://dl.bukkit.org/downloads/craftbukkit/view/01845_1.4.7-R1.0/
Together with this NoCheatPlus: http://dev.bukkit.org/server-mods/nocheatplus/files/44-nocheat-plus-3-8-9-b353/ (or one from our jenkins).
Also what exactly doesn't work? Are you OP or have "*" permissions?
-
View User Profile
-
Send Message
Posted Feb 3, 2013Doesnt work...