NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Feb 7, 2013@MyPictures
It seems fixed. I hope none of my users say its not
-
View User Profile
-
Send Message
Posted Feb 7, 2013Isen't it possible to set in the config that if you reach a vl10+ you get kicked and
vl50+ you get tempbanned for 1 hour.. as I have in my config.
Edit: This is defently hacking correct?
-
View User Profile
-
Send Message
Posted Feb 7, 2013@lenis0012
What NC+ build do you use? If you use 370 or higher I recommend to use at least 380. The build before have some issues with velocity handling (NC+ 353 and lower are fine).
Disconnect.Spam is the vanilla spam protection that comes with Minecraft/Craftbukkit, has nothing to do with NC+. I'm actually not sure if there is a permission to allow bypassing this vanilla spam check, so I don't know... sorry :(
-
View User Profile
-
Send Message
Posted Feb 7, 2013@asofold
there must be a correct multiplayer to check max time in the air for knockback.
Also, when using one of my plugins people get disconnected with the reason:
Disconnect.Spam
I am using packets if that makes sense, and if this is the issue, how can i incrase the spam limit or bypass this check with the api?
-
View User Profile
-
Send Message
Posted Feb 7, 2013@MyPictures
Thanks for your help :) Keep such a good support!
-
View User Profile
-
Send Message
Posted Feb 7, 2013@Smac3223
You seem to use the wrong version of NC+. For Minecraft 1.4.7 you need at least NC+ 353 or higher: http://dev.bukkit.org/server-mods/nocheatplus/files/44-nocheat-plus-3-8-9-b353/
-
View User Profile
-
Send Message
Posted Feb 7, 2013This is kinda random but I recently updated NoCheatPlus and now it seems to be broken... I've checked the logs and this is what I've found. Any clue as to what's wrong?
java.lang.NoClassDefFoundError: net/minecraft/server/IBlockAccess at fr.neatmonster.nocheatplus.NoCheatPlus.onEnable(NoCheatPlus.java:407) at org.bukkit.plugin.java.JavaPlugin.setEnabled(JavaPlugin.java:217) at org.bukkit.plugin.java.JavaPluginLoader.enablePlugin(JavaPluginLoader.java:457) at org.bukkit.plugin.SimplePluginManager.enablePlugin(SimplePluginManager.java:381) at org.bukkit.craftbukkit.v1_4_R1.CraftServer.loadPlugin(CraftServer.java:282) at org.bukkit.craftbukkit.v1_4_R1.CraftServer.enablePlugins(CraftServer.java:264) at net.minecraft.server.v1_4_R1.MinecraftServer.j(MinecraftServer.java:321) at net.minecraft.server.v1_4_R1.MinecraftServer.e(MinecraftServer.java:300) at net.minecraft.server.v1_4_R1.MinecraftServer.a(MinecraftServer.java:259) at net.minecraft.server.v1_4_R1.DedicatedServer.init(DedicatedServer.java:149) at net.minecraft.server.v1_4_R1.MinecraftServer.run(MinecraftServer.java:399) at net.minecraft.server.v1_4_R1.ThreadServerApplication.run(SourceFile:849) Caused by: java.lang.ClassNotFoundException: net.minecraft.server.IBlockAccess at org.bukkit.plugin.java.PluginClassLoader.findClass0(PluginClassLoader.java:70) at org.bukkit.plugin.java.PluginClassLoader.findClass(PluginClassLoader.java:53) at java.lang.ClassLoader.loadClass(Unknown Source) at java.lang.ClassLoader.loadClass(Unknown Source) ... 12 more
-
View User Profile
-
Send Message
Posted Feb 6, 2013@Breci
No. NoCheatPlus doesn't have any AntiXray feature included. Maybe a statistic based one will come in later but for now we have other things on priority. So you would need an other plugin to protect against xRay.
All features of NC+ you will find here: http://dev.bukkit.org/server-mods/nocheatplus/pages/documentation/features/
-
View User Profile
-
Send Message
Posted Feb 6, 2013Is there an Orebfuscator included on this plugin? Since i've installed nocheatplus ore need to be lighted to be seens...
I have nocheatplus, CompatNoCheatPlus and logblock for my protection.
-
View User Profile
-
Send Message
Posted Feb 6, 2013@asofold
We use no spout plugins
-
View User Profile
-
Send Message
Posted Feb 6, 2013@Niknox
Please use at least 353 with CB/Spigot for MC 1.4.7. I will open a new ticket and take a look at them.
Done: http://dev.bukkit.org/server-mods/nocheatplus/tickets/428-if-my-players-collide-with-enderdragons-nochea/
I remember that @NeatMonster made a hotfix for ender-dragons but its possible that his fix got broken now. So we need more testing in too this. More updates you will get on the ticket :) Thanks for reporting.
-
View User Profile
-
Send Message
Posted Feb 6, 2013Spigot 1.4.7-R0.2#454 with NoCheatPlus 3.8.9-b335
-
View User Profile
-
Send Message
Posted Feb 6, 2013@Niknox
What version of NoCheatPlus and Craftbukkit are you running on?
-
View User Profile
-
Send Message
Posted Feb 6, 2013If my players collide with Enderdragons, NoCheatPlus always warns me. Is there a way to fix this without removing the SurvivalFly function?
-
View User Profile
-
Send Message
Posted Feb 5, 2013@BBFChaser
Do you also use Spout-plugin/similar? in that case disable the player-class hook of cncp, there are some incompatibilities there.
@Mortiloche
It depends. Currently we have slightly increased problems with Survivalfly false positives (partly uncertain, partly concerning velocity). I will need to either revert some changes or do the pending recoding of it.
On the new jenkins we don't have more fine grained promotion symbols yet, so i will add textual information to the builds on the left side, once they are considered "easily usable" or so. In general development builds are not as much tested as uploads to BukkitDev, so be prepared to update or revert when using them.
@Zifarglweagrs
We don't "catch" people, but there are false positives. One prominent example is the bad habit of the Minecraft client to not send the moves for transitions from air to ground and the opther way round for instance, leading to us having to do "guessing" for those. Certainly we will attempt to reduce those as much as possible, but given the implementation of both Minecraft and CraftBukkit, one will have live with a couple of false positives. Of course you can configure it to not alert for smaller violation levels.
Latency is one thing, another thing is client-side/networking delay, which means asymmetric arrival time or synchronization being not in tune. For those cases we can't do too much without allowing a lot more action by the client. Partly you can configure to have the short-term checking be less strict (fight.speed for instance), for some cases it won't be possible.
-
View User Profile
-
Send Message
Posted Feb 5, 2013Plugin is good, but be prepared to do a lot of configuration. It often "catches" users who are completely innocent, as it doesn't seem to take latency into consideration.
-
View User Profile
-
Send Message
Posted Feb 5, 2013@MyPictures
This poses a problem there if you use versions jenkins? for example this one # 379?
Or your mieu used the alpha version?
-
View User Profile
-
Send Message
Posted Feb 5, 2013I use Orebfuscator as well and will be re-configuring it soon. The players just said they use Nodus to hack the server and other servers. I know NC doesn't prevent from X-ray howeer should it prevent the other uses of Nodus like fly or banning of players.
I will have one of the players test the ability to fly.
-
View User Profile
-
Send Message
Posted Feb 5, 2013@BBFChaser
A you mean x-ray? NoCheatPlus wont prevent x-ray hacks or anything like that. For X-Ray you need a additional plugin like Orebfuscator. Can they fly or something like that? Also do you use spout or anything special like that?
Check the features page to know what NC+ can prevent and what not: http://dev.bukkit.org/server-mods/nocheatplus/pages/documentation/features/
-
View User Profile
-
Send Message
Posted Feb 5, 2013@BBFChaser
I have not messed with the config and i have not checked the log yet however i will dig thru the log and pull their logs and pastebin them for you to see soon.