NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Mar 8, 2013@Apple_columb
@MyPictures
Don't be so hard on server owners :) - a moving debug trace needs a testing setup and can't be expected from a live server, and in fact would lag the server out with 100 online for the console spam. It is very helpful if people find something and can reproduce it on a testing setup, but for just the alerts i think we don't have much more than [tags] for survivalfly + live-servers :).
-
View User Profile
-
Send Message
Posted Mar 8, 2013@judgmentrealm
Update to NoCheatPlus 438 please (if you haven't already). It should fix a lot of issues with SurvivalFly. If you still get issues with it then make a detailed ticket for us and we take a look at it for you.
@Apple_columb
NoCheatPlus doesn't "detect a hack client", it just watches the player and decides if he/she/it is hacking based on heuristics. There can be wrong alerts caused by bugs in NC+/MC/CB or just latency. It does matter because adding such a check, because it will again need a little bit of performance and may cause some other unexpected bugs. So if we add such a check then it will be under hard testing before we release it to the public to make sure that it actually works as its supposed to work. Also we currently have more important issues and ideas that we would like to focus on but I will keep your idea in mind.
Actually SurvivalFly detected block jumping sometimes even before @asofold made those changes but now (since @asofold made changes on it) its much better at detecting those glitches with world protection plugins (WorldGuard, Towny, Factions, EssentialsProtect, ...).
-
View User Profile
-
Send Message
Posted Mar 8, 2013@MyPictures
they punish them self because it decreases the food bar
It doesn't matter. It's just another way to detect hacked client and ban it. This is what NCP is for, right?
@asofold
Repdroduce what? I just checked my players with /ncp info. I dont know how and where they triggered it.
some more console and/or ingame info.
My console/chat is under heavy load almost every day (100+ players online). I don't have extra time to read debug info of NCP. Sometimes players asking me why NCP kicking them if they are innocent. (Yes, I have pretty rough NCP settings) and I can't help just cause I don't know what was exact reason of kick.
Another way to show more info is to add [tags] to the violation message for survivalfly. Those will contain information about what kind of sub-check failed and other.
Good idea.
@MyPictures
Is this annoying glitch finally got fixed? Oh god... It's awesome!
-
View User Profile
-
Send Message
Posted Mar 8, 2013Ok so NC+ is overreacting to players doing survivalfly, when I know they are not hacking, and are like sprint jumping. Does anyone know any optimal settings for not only survival fly, but also for the other things the plugin often overreacts to
-
View User Profile
-
Send Message
Posted Mar 8, 2013@JAG100
Use NoCheatPlus 438 or higher it already has a feature to prevent this. Thanks :)
-
View User Profile
-
Send Message
Posted Mar 8, 2013HI NoCheatplus team! I love your plugin so this is the first place I thought to start as I'm looking to stop some players from using a stacking block glitch to fly up literally two to three fences high in order to venture outside of protected spawn areas on our server. Here's a video that shows: http://www.youtube.com/watch?v=KAWcY5PxsdI
Best, JAG100
-
View User Profile
-
Send Message
Posted Mar 8, 2013@Apple_columb
If you can reproduce it on a test setup, you could use TestNCP to get more details, also setting the debug flags can give some more console and/or ingame info.
Another way to show more info is to add [tags] to the violation message for survivalfly. Those will contain information about what kind of sub-check failed and other.
@MyPictures
Long message wins out :).
-
View User Profile
-
Send Message
Posted Mar 8, 2013@Apple_columb
With that "standing sprint" hack they punish them self because it decreases the food bar even without moving so I wouldn't put this hack under critical/important. However it might get included in NC+ at some day but correctly we focus on more important things.
SurvivalFly is already kinda separated in different parts that prevent against moving cheats. If you want to see them you need TestNCP which you can get here: http://dev.bukkit.org/server-mods/ncptools/
SurvivalFly is the core of NoCheatPlus and its task is to prevent everything that involves cheating with movement (sprint, fly, illegal claiming, ...). Some other checks such as MorePackets, NoFall and BedLeave support SurvivalFly to detect more speeding hacks more efficient. Everything would get complicated if we would split everything in a own check:
1. It would need much time to split them (permissions, config, ....)
2. There will be crossover bugs which would require fixes in multiple checks then
3. It would be annoying for those who use the NC+ API to exempt players from SurvivalFly.
There wouldn't be any benefit for this if you ask me. You can simple use moving debug: true together with TestNCP. We use that also to track down bugs and it works pretty well.
-
View User Profile
-
Send Message
Posted Mar 8, 2013@asofold
It's possible to detect sprint hacks. Vanilla clien't can't "sprint" while standing still. But hacked clients is able.
Too much hacks is under "survivalfly". Still be nice to separate it. Easier to bugreport. Some of my trusted players have this check violations. More info about check would help to file a more useful bugreports.
-
View User Profile
-
Send Message
Posted Mar 8, 2013@Apple_columb
Because it is flying to the server side. Our on-ground checks have been adapted to detect things like spider as not on ground, many cases can't be distinguished (spider, high jump, ...). Not sure it pays to change things to have a random guess if a player is flying high jumping or spidering or just near a wall.
@InvisiCraftOfficial
One might do more about it by allowing different frequencies for signs and enchantment tables.
-
View User Profile
-
Send Message
Posted Mar 8, 2013@InvisiCraftOfficial
AutoSign: NC+ curently only blocks AutoSign hacks that place more then 1 sign at the same time.
AutoEnchant: NC+ will only prevent that If a hacker moves items much faster around then a normal player (Inventorys).
Sprint: What do you mean? A normal player should be allowed to sprint. Its a vanilla feature.
Whats you CB and NC+ version?
-
View User Profile
-
Send Message
Posted Mar 8, 2013Some recommendations:
- AutoSign is not blocked - AutoEnchant seems to work fine - it is reported, but not block - Sprint is not blocked
Great plugin!
-
View User Profile
-
Send Message
Posted Mar 7, 2013@asofold
Build 449 blocks spider just fine, great job. But why it's "moving.survivalfly"? Would be nice to have "moving.spider"
-
View User Profile
-
Send Message
Posted Mar 7, 2013@LordKainzo
Build 450 might be of interest. It is not extensively tested, further needs more tweaks, but might improve the issue with horizontal velocity, if you like to test it early.
-
View User Profile
-
Send Message
Posted Mar 7, 2013@LordKainzo
It is queued :), but i have to consolidate some other things before testing/fixing.
-
View User Profile
-
Send Message
Posted Mar 6, 2013@asofold
Any love for the velocity skeelz? :)
-
View User Profile
-
Send Message
Posted Mar 6, 2013@Apple_columb
Believe me, there are other spider hacks using different methods / speeds, though blocking the simple ones isnt a bad thing.
Not sure if you can bypass that with a potion of slowness, depends on the client. You could also try with slow flying for a change.
-
View User Profile
-
Send Message
Posted Mar 6, 2013Tried dozen or so of hacked clients. Seems like they are almost the same. Player client just simulate ladder on block which doesn't have it. Glad to hear about upcoming spider update, thanks.
-
View User Profile
-
Send Message
Posted Mar 6, 2013@Apple_columb
Balancing both a) actually blocking spider (not just one or two simple variations of it), b) not cause too many false positives.
Further NCP actually blocks flying and climbing not only on base of the moving speed, but also on base of the distance to set-back locations. The calculations needed for that are much more complex and are not as simple to adjust to spider as one might think, since players are not a point but have a bounding box in Minecraft.
In fact optimizing performance and spider are in focus of development right now.
-
View User Profile
-
Send Message
Posted Mar 6, 2013@asofold
It's still pretty damn much. Especially for parkour/spleef. Why you can't completly block it like AntiCheat do?