NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Feb 11, 2013@dotapurex1
NCP does not block vclip ?
@harlequin135
There is no magic box. You can tell cheating for some extreme cases, but many hack clients adapted at least to NCP to only generate low level violations, it is hard to tell without experience for many cases. Usually it is possible to tell which check reaches which level (even counting false positives in), but there can be new bugs also in NCP but also in Minecraft or CraftBukkit which can lead to players getting very high violation levels on some occasions for some checks. One example was Spigot changing the block breaking code leading to fastbreak violations for farming, another example is CraftBukkit/Minecraft reporting exiting boats as moving of the player instead of teleportation, which means an instant pretty high violation due to an instant location change by more than 1 block. Of course we attempt to fix those spots, but since there are many places in Minecraft that are not anti-hack plugin friendly (such as the client not sending events pinpointing transitions from air to ground and vice-versa), one will have to live with some uncertainty.
We will be adding documentation about what check reaches which violation levels on what occasion.
-
View User Profile
-
Send Message
Posted Feb 10, 2013Are there any anti-cheat plugins that can tell if someone if actually cheating?
-
View User Profile
-
Send Message
Posted Feb 10, 2013Hello,
I was wondering why does nocheatplus not block vclip? But anticheat completely blocks it?
-
View User Profile
-
Send Message
Posted Feb 10, 2013@harlequin135
That depends on check itself. However VL 1000 is a bit too high if you ask me so I would recommend to take a look at that player with /vanish to be sure that he is 100% trying to hack/cheat.
Every check uses a different handling with VL. While checks such as NoSwing and Reach cant even go over VL 10, its pretty easy to go over 300-400 with SurvivalFly with a false positive.
There was bug in SurvivalFly where you got a VL over 1000 by crashing with a boat while moving in it (fixed in the new versions 353 and up).
So in short: We cant tell the difference if player is hacking 100% or if he just stuck in a infinity loop that kicks his VL higher, higher and higher.
@PuremineServer
"[Automatic Detection]" is not a part of NoCheatPlus. NoCheatPlus also wont ban any player for anything (just tempban for chat spamming). So that must be an other plugin then. If you still think that this issue comes from NC+ then send us your config file over here: http://dev.bukkit.org/paste/
-
View User Profile
-
Send Message
Posted Feb 10, 2013Hi, some of my players are getting banned for: [Automatic Detection] There players are not trying to hack, as I know them irl and they are part of my staff.
How can I fix this from happening? I dont want this plugin to ban anyone, I just want it to prevent them from hacking / using mods
-
View User Profile
-
Send Message
Posted Feb 10, 2013@harlequin135
If I get VL of 1000 does that even mean anything?
-
View User Profile
-
Send Message
Posted Feb 10, 2013@asofold
Is there any way to find out if someone is actually cheating? Do VLs give any indication?
-
View User Profile
-
Send Message
Posted Feb 10, 2013@harlequin135
It depends on the check, because vls are not standardized in any way (yet). We will try to provide a table which shows what check reaches what vl under what circumstances, but it needs extra time.
@x_clucky
Not sure... there had been problems with half-blocks in CB/WorldGuard some time ago, but those have been fixed, could be plugin interference as well.
@sgebbia
Which "this" plugin (i.e. which is the version in use) with which server version? Usually that means using outdated versions. Do you have cncp as well with Spout/... ?
Of course people still "hack", but what they can actually reach with it should be severely limited for most severe hack types.
-
View User Profile
-
Send Message
Posted Feb 9, 2013this plugin doesnt work. i tried it tons of times. it doesnt prevent ANYTHING. people still hack. i havent seen it block a single person yet!
-
View User Profile
-
Send Message
Posted Feb 9, 2013Is there some hack out there now that allows players to break blocks that aren't whole blocks in protected areas? http://i.imgur.com/iDSLCmu.png?1 As you can see... Logblock says no block was broken, however, the ladder is obviously no there... This has happened countless times with signs, skulls, and many other things, but never a whole block.
I am using the newest version of NoCheatPlus as of 2/9/2013, along with the newest version of every other plugin (I am hooked into an RSS reader that notifies me when a plugin updates, so I am 100% sure I am using the newest version of EVERYTHING except for rTriggers, which I will update tonight). I am also using the newest version of CraftBukkit, 1.4.7-R1.0.
-
View User Profile
-
Send Message
Posted Feb 9, 2013We know NoCheatPlus can misfire sometimes so what violation level is a good indication that someone is cheating and it's not lag? I'm getting VL 1, 0 and 13...is 500 bad?
-
View User Profile
-
Send Message
Posted Feb 9, 2013@LeserPL
As @Dynamite_Dez stated, there is a newer version compatible with 1.4.7:
http://dev.bukkit.org/server-mods/nocheatplus/files/
@XeonG8
Don't give the creativefly permission, it allows to bypass the creativefly check which does speed limiting for flying. Flying players should have the survivalfly bypass permission not the creativefly bypass permission.
-
View User Profile
-
Send Message
Posted Feb 9, 2013allow client mods= true, but prevent speed flying.. the moving checks are active, and players who are allowed to fly have nocheatplus.checks.moving.creativefly or suvivalfly.. perms.... but can speed fly so what am I doing wrong.
-
View User Profile
-
Send Message
Posted Feb 9, 2013@LeserPL
You need to download the latest build, yours is out of date by quite a few.
-
View User Profile
-
Send Message
Posted Feb 9, 2013So, if we want to have ncp on 1.4.7 we must wait for 'newest' update, right?
[SEVERE] Error occurred while enabling NoCheatPlus v3.8.4-RC-b271 (Is it up to date?) java.lang.NoClassDefFoundError: net/minecraft/server/IBlockAccess at fr.neatmonster.nocheatp
-
View User Profile
-
Send Message
Posted Feb 9, 2013@wicked2217
dont worry, ive gone onto github and it works fine! (got the newest update on the that site)
-
View User Profile
-
Send Message
Posted Feb 9, 2013@MyPictures
nocheatplus 3.8.9-b353
-
View User Profile
-
Send Message
Posted Feb 9, 2013@wicked2217
Please give the exact version instead of "newest" (with /version NoCheatPlus). NC+ could update every minute.
-
View User Profile
-
Send Message
Posted Feb 9, 2013@asofold
i am using - 1.4.7-r1.0-b2524 and the newest version of NCP! hope that helps!
-
View User Profile
-
Send Message
Posted Feb 9, 2013@Kingdom08
If you type in a command and you get just a list of commands back then you have definitely the wrong version of NC+ installed. For MC 1.4.7 you need at least 353 or higher.