NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Feb 27, 2013@Lightning97
@asofold
I once had this idea also and you joined my local server also @asofold but it seems that something affects NC+. However moving the spawn point seems to have fixed it for me @Lightning97 but I'm still investigating on this one, however a ticket would be awesome to keep track of this issue.
@Dood76
For xRay you need to use another plugin like Orebfuscator and spider seems to get detected on my server. Please be sure you use NC+ 353 or higher for CraftBukkit/Minecraft 1.4.7 R1 and higher.
-
View User Profile
-
Send Message
Posted Feb 27, 2013how do you make it so people cant use xray or spider, i have noticed that some people are doing/using spider or xray
-
View User Profile
-
Send Message
Posted Feb 27, 2013@Lightning97
I don't know what @MyPictures was having in mind, probably some cross-plugin related thing.
But it could be an incompatibility with authentication / freezing / fake-player plugins.
We should put this to a ticket, otherwise information will get lost. We need more info on used plugins and if there are more entries in the logs / ncp info for the players, also log entries like "moved too quickly" for these cases.
-
View User Profile
-
Send Message
Posted Feb 27, 2013@MyPictures
No, Allow flight isn't on for obvious reasons and No, I don't believe the spawn radius is set to 16, It's actually set to 0. Would moving my spawn point really do anything? When I join the server, I'm standing where I last logged out, and stay in the same place when I log in, Spawn is no where near me.
-
View User Profile
-
Send Message
Posted Feb 27, 2013@LordKainzo
@MyPictures
NoSwing is another topic. Constantly breaking instantly breakables which gets cancelled can lead to some strange behavior of clients/event-sequences. Recent versions have the actions adapted to show less / rare warnings only.
Concerning velocity i am still not sure what is the case. You are not having those "moved too quickly"-messages? Which build that did not work did you try last?
-
View User Profile
-
Send Message
Posted Feb 27, 2013@MyPictures
Sorry, two seperate issues.
I'm reporting that a player that tries to break long-grass in a region/protected area - will spam that msg, despite them not actually breaking. I'm assuming it would be the same if they had shears and going to town on leaves.
It was a survivalFly issue for our Jump Skill, however.
-
View User Profile
-
Send Message
Posted Feb 27, 2013@LordKainzo
Wait NoSwing? I thought it was SurvivalFly.
-
View User Profile
-
Send Message
Posted Feb 27, 2013@asofold
Any word on the velocity changer? I still cant get it to work and its a deal breaker for my server. I've had to stay on older builds for nocheat :(
Also
http://i.imgur.com/0fQPVGd.png
happens whenever a player tries to break grass in a regioned area.
-
View User Profile
-
Send Message
Posted Feb 27, 2013@Lightning97
This could be due to other plugins faking or freezing players. Would need more info on other plugins, this should be taken to a ticket.
If your authentication plugin fakes or doubles players somehow it'll probably be diffcicult to do something about it.
-
View User Profile
-
Send Message
Posted Feb 27, 2013@Lightning97
Did you try to move your spawn-point a bit and do you have allow-flight together with spawn-radius (16) enabled?
-
View User Profile
-
Send Message
Posted Feb 27, 2013@asofold
Latest Build ( #412 (26-Feb-2013 17:48:29) )
Latest Recommended Build (1.4.7 R1.0)
Yes they get kicked instantly
Cracked and Legit clients
-
View User Profile
-
Send Message
Posted Feb 27, 2013@Lightning97
Please provide:
-
View User Profile
-
Send Message
Posted Feb 27, 2013I keep having to add the permission to bypass the Survival Fly checks in order for people to login because they keep getting kicked for "Flying or Related" and it's almost an instant kick from when they join the server, Yet, They weren't flying. This same thing happens to my donors who have access to /fly as well, What is this? It's proving to be more than annoying.
-
View User Profile
-
Send Message
Posted Feb 27, 2013@cgm616
Delete the NoCheatPlus folder update to 353 or higher and see if it still happens. Do you use Spout or SpoutCraft and maybe CompatNoCheatPlus also?
@SINFUL11
The problem here is that the most forcefield hacks are adapted to NoCheatPlus (staying under the limits of NC+). A real force-field which ignored NoCheatPlus can kill a player with 1 punch, so best here would be if you could try your forcefield hack on a friend and see if he is able to kill you or not.
We already have a ticket for this: http://dev.bukkit.org/server-mods/nocheatplus/tickets/51-forcefield-aimbot-reach/ More: http://forums.bukkit.org/threads/anticheat-kill-aura.130937/#post-1559945
-
View User Profile
-
Send Message
Posted Feb 27, 2013@SINFUL11
The yawrate check (fast turning) does cancel silently, it could be configured to give more penalty by default. It does feed the combined.improbable check on violations. Important are the fixes for the direction checks, but they are not yet on BukkitDev. They still might need some tweaking since they cause false positives with wild block clicking while turning randomly, but the direction checks had been virtually inoperable for a long time, having the tolerance set to something 100 times too big, roughly.
@cgm616
Do you get any alerts for sprinting? Is it just ordinary sprinting or special situations?
Which version of NoCheatPlus? Which version of CraftBukkit? Other plugins related to moving?
-
View User Profile
-
Send Message
Posted Feb 26, 2013@asofold
It is related to no cheat because when I turn off NC+, they can sprint again. Also, it is just normal sprinting. Is there anything in the NC+ settings I could have changed to make this happen?
-
View User Profile
-
Send Message
Posted Feb 26, 2013@asofold
im running the latest I think anyway NoCheatPlus 3.8.9-b353
it doesnt show anything except for some reach and its a very low number also your the man for replying so fast <3
-
View User Profile
-
Send Message
Posted Feb 26, 2013@SINFUL11
Which version of NCP are you using?
Concerning forcefield: what does "/ncp info PLAYERNAME" show? As hack clients adapt, they attempt to generate as few as possible violations, so on does not simply detect the smarter built ones like in the early days, since they act pretty much like normal (unlikely good) fighting.
Some things have been fixed in development builds already (coming with next release or for the brave already now in the dev-builds).
-
View User Profile
-
Send Message
Posted Feb 26, 2013Not sure how to fix this - The config seems a little confusing
It seems to sometimes register reach for +1 level if i go close then backaway really fast from the person when they are holding still No nodus users that do this (forcefield) are being detected for me anyway
Also "spider" seems to have no problem running i've seen people climb 3 blocks high and go over it.
Any suggestions? Thanks bukkit 1.4.7 :)
-
View User Profile
-
Send Message
Posted Feb 26, 2013@cgm616
How is it related to NoCheatPlus?
Do you get any alerts for sprinting? Is it just ordinary sprinting or special situations?
Which version of NoCheatPlus? Which version of CraftBukkit? Other plugins related to moving?