NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Feb 13, 2013@lANTHONYl
Hmm I'm not able to reproduce this still. I look what I can do for you. More info's I post on the ticket you made. Thanks.
@RumbleIV
Flying up ladders, water, ... is fixed in the latest development version.
The second one we have to allow or your players wont be able to do any knock-backs anymore. What version of CraftBukkit and NoCheatPlus are you using? Normally they wont be able to fly that far with this emo hit fly.
-
View User Profile
-
Send Message
Posted Feb 13, 2013You can fly up water with nodus. Also, if someone hits you, you can activate fly for a couple seconds and it'll allow you to fly. (this helps people fly back into spawn when pvping or escape from pvp. even worst if u have fire aspect)
-
View User Profile
-
Send Message
Posted Feb 13, 2013@asofold
I just opened a ticket. Also just banned 2 folks for successfully using a Smart Move mod :/ I've had to disable survivalfly checks due to the unknown issue.
Please, let me know if there is anything else i can do to help pinpoint the issue. Any additional info you require can be provided.
-
View User Profile
-
Send Message
Posted Feb 13, 2013@lANTHONYl
We can't reproduce it with Spigot build 485, so we need more in-detail information.
(NCP builds 386 and 387 address other issues than half-steps.)
-
View User Profile
-
Send Message
Posted Feb 13, 2013@MyPictures
Sure thing. Also, it was a late night last night and i forgot i installed b387. That seems to produce even more false positives despite b386 having commits addressing this very issue :/
-
View User Profile
-
Send Message
Posted Feb 13, 2013@lANTHONYl
I cant reproduce this. Could you please open a ticket and add some more info's together with some screenshots so I can rebuild it?
-
View User Profile
-
Send Message
Posted Feb 13, 2013When ppl fly and log off (only /fly no creative) When they try to log in back before they login they fall on ground and nocheatplus kick them for flying. But they still not even loged in... I use AuthMe as login plugin.
-
View User Profile
-
Send Message
Posted Feb 13, 2013Using Spigot-b485 and NCP-3.8.9-b353
Walking on floating halfslabs triggers survivalfly checks. Players quickly raise the VL and get kicked in less than 5 seconds.
-
View User Profile
-
Send Message
Posted Feb 13, 2013@zergilng
That's NoCheatPlus. Do the players connect with a normal client (not a chat-only client or so)? Do you have plugins installed for spectating and similar?
If you should happen to run your server in offline-mode, other players might attempt to get your players banned by logging in with their user names and trying to crash the server, we can't do much about that. We might make it configurable if to deny login or not.
-
View User Profile
-
Send Message
Posted Feb 12, 2013full log :
12:40:44 [INFO] userid[/ip:1053] logged in with entity id 3491327 at ([world] 313.0, 248.0, -82.0)
12:40:44 [INFO] [Skillz] Loaded player in 0.00241ms!
12:40:44 [SEVERE] [NCP] could not restore location for userid deny login for 24 hours
12:40:44 [WARNING] [NCP] Disconnect userid due to illegal move!
12:40:48 [INFO] Disconnecting userid [/ip:1071]: You are temporarily denied to join this server. (rejoin log)
sometimes this bug cause for any users. i think he nothing to do anything
-
View User Profile
-
Send Message
Posted Feb 12, 2013@alexandercitt
Please also be sure that you don't have 2 NoCheatPlus.jar files in your plugin folder (NoCheatPlus.jar and NoCheatPLus(1).jar? Or anything similar to this) because it would bug out the loading of the NC+ plugin.
-
View User Profile
-
Send Message
Posted Feb 12, 2013@alexandercitt
You have not tried "latest" versions, otherwise this would not have happened.
You should try: http://dev.bukkit.org/server-mods/nocheatplus/files/44-nocheat-plus-3-8-9-b353/
(For development builds see my signature.)
-
View User Profile
-
Send Message
Posted Feb 12, 2013Hey guys, I've got a huge problem. Our server really depends on NoCheatPlus and we'r having errors...
Some facts: -We run the most updated version of NoCheatPlus. We tried the latest development version and the version on Bukkit Dev. Both give the same error. -We run the latest Bukkit recommend build 1.4.7.
This is the error:
-
View User Profile
-
Send Message
Posted Feb 12, 2013@Johnny_Bravo0_0
Yea but which NC+ version do you run on that? (/version NoCheatPlus). NC+ will only check players by default, OPs and "*" permission owner wont be checked by default. Can you explain your issue better somehow? I couldn't understand what your issue is so I guessed that you might use a broken NC+ build or so...
-
View User Profile
-
Send Message
Posted Feb 12, 2013@MyPictures
I have recommended build 1.4.7
Is it a version for that ?
-
View User Profile
-
Send Message
Posted Feb 12, 2013@dotapurex1
Yea your bug could be reproduced and we have to see what to do now against this.
@zergilng
Could you provide a full server.log and NC+/CB version? NC+ shouldn't deny login for 24 hours (until @asofold changed something).
The IsIllegal check cant be configured over the config file because its way too important to disable it in any way. It prevents players from crashing your server with an exploit that "teleports" the hackers to an invalid height which causes a crash. So I don't recommend disabling touching this check in any way.
@asofold will know more about this one.
@Johnny_Bravo0_0
Emmm.. What? Be sure you use the right NC+ version for your Craftbukkit server or it wont work. By default NC+ will prevent players from hacking that don't have bypass permissions.
-
View User Profile
-
Send Message
Posted Feb 12, 2013[NCP] could not restore location for player deny login for 24 hours [WARNING] [NCP] Disconnect player due to illegal move!
how to disable this cheat guard in cfg? i think that player no guilty
i'm so frustrated
-
View User Profile
-
Send Message
Posted Feb 11, 2013@asofold
Yes, NCP doesn't block vclip. I've tested it myself on my server. And im using the latest NCP / CNCP builds.
-
View User Profile
-
Send Message
Posted Feb 11, 2013Is it any way to turn on so everyone will be check from hack, people on my hole Ip can use hack...I want it to be only OP players not everyone one on my IP just because i'm OP :/
-
View User Profile
-
Send Message
Posted Feb 11, 2013@dotapurex1
Ok. I could reproduce this now: http://dev.bukkit.org/paste/7101/
@asofold will take a look at this tonight, thanks for reporting :).