NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Mar 12, 2013@Slappygilmore
give me the ip to your server, maybe i can figure it out
-
View User Profile
-
Send Message
Posted Mar 12, 2013@MyPictures
I have verified so, there is no creative world or multiverse on my server.
-
View User Profile
-
Send Message
Posted Mar 12, 2013@geor196
Those players are for sure trying to kill someone faster then allowed. VL 302 is insanely high for a normal player and I would recommend you to spy them a bit.
-
View User Profile
-
Send Message
Posted Mar 11, 2013@geor196
To globally disable notifications use the configuration of NoCheatPlus (set logging.ingamechat to false).
If you want some players to receive notifications but not ops, then you need to configure that with your permission plugin, at present.
First we need to know what you actually want. Later there might be a command to disable notifications or an option to remove the op-default.
-
View User Profile
-
Send Message
Posted Mar 11, 2013I have GroupManager and nocheatplus.admin.notify Is FUCKED UP , doesn't works at all, i already denied the permisssion and nothing. I read the OP thing, but i am and i want to keep being op, please fix that
-
View User Profile
-
Send Message
Posted Mar 11, 2013@Slappygilmore
This: http://dev.bukkit.org/server-mods/nocheatplus/?comment=4478
Do they have access to enter a creative world somehow? Can you verify that they are not being in creative gamemode? (With Essentials you can do /whois PlayerName).
-
View User Profile
-
Send Message
Posted Mar 11, 2013@MyPictures
No regular players have access to Gamemode on my server.
@asofold
Where do I find these @MyPictures answers? Sorry I'm totally confused on that part... I don't even have an imgur account I just drag photos I need to be seen by other people on there.
-
View User Profile
-
Send Message
Posted Mar 11, 2013@Slappygilmore
I opened it without scripts activated (prefer that), so you posted the right link from the start. For the rest see @MyPictures answer.
@mlopezv
The velocity issues (including knockback) should be mostly fixed in the current development branch. That's nothing one should have to alter the config for. It is affected by lag in general, since one can't wait forever to allow the client to receive the velocity packets, but the dev branch should greatly improve this matter (See Jenkins links, keep to the latest "mostly stable").
-
View User Profile
-
Send Message
Posted Mar 11, 2013@Slappygilmore
Do they have creative gamemode? A player can spawn in everything over creative gamemode and NoCheatPlus currently does nothing against that.
@Tomas325
Forcefield: NC+ detects Forcefield as long as they use overpowered cheats: Hitting too fast, Hitting multiple entities too fast, hitting out of allowed reach distance, ...
Clickbots: If a Clickbot simulates a normal player then there is no way to distinguish a normal player with a clickbot. However NoCheatPlus has a check called BlockInteract_Speed which prevents hackers from clicking/interacting too fast (NC+ 438 and higher).
Freecam: NC+ will detect some parts of freecam such as: GodMode, Interacting trough walls, hitting entities without looking at them, ....
@mlopezv
Please don't use "latest" as version identifier because NC+ and as well as CB can update every minute. I think the Knockback check is affected by lag.
@WoZo
Hmm strange. Could you maybe upload the *.examine file somewhere and share it with us? Would be interesting to compare it with the .txt output file.
-
View User Profile
-
Send Message
Posted Mar 11, 2013@asofold Latest CB and NCP vesions always (I check for updates every few days, release candidates of course, not betas). Older versions were giving problems to people boating long times (that was taken as flying) but newest is giving the same (or even more) problems with knockback. When a player knockbacks you NCP just teleport again to latest position, and player keeps playing ping pong with you if he's got knockback II or more. It's hilarious. The most laggy the player, the most permissive I need the plugin to be in this cases. A balanced config might solve this, but at least for people to know that default config is not working ok now.
-
View User Profile
-
Send Message
Posted Mar 11, 2013Oh yeah...
Well here is the picture with all my plugins. http://imgur.com/2LkWThH,79LUuNd#1 I don't think it's a bug or a plugin, I think it's like a hacked client of some sort?
-
View User Profile
-
Send Message
Posted Mar 11, 2013@Tomas325
Can't be 100% prevented if the client does it right. Some things we already prevent (interact with blocks through walls), some are lessened in effect (god-mode, extreme fighting advantages with force field). Some might still get improved.
@Slappygilmore
Interesting. Question is if this is an effect possible due to plugins or a CraftBukkit/vanilla bug. Might elaborate on the illegalenchantments check to generalize it, though initially we thought we might remove it by now or move it to another plugin.
You uploaded the image twice i think :).
@WoZo
It will be better in performance, of course disabling the moving checks allows all sorts of flying and speeding. The problem with the timings sample is the number of events. This low number with java does not say much, you should always have samples within 1 million to better 10 million moving events (10 for bigger servers) to have a reliable result.
I am currently reviewing some things to improve performance.
-
View User Profile
-
Send Message
Posted Mar 11, 2013@asofold
Disabled console entries and moving checks.
Here's the results: http://pastebin.com/HTjafjZS
Seems like it's better with the checks disable, but that means they can cheat then, right? o,o
-
View User Profile
-
Send Message
Posted Mar 11, 2013@Slappygilmore
im REALLY curious about how they did this
i help u in anyway if i get to know how they did this
so juicy om gotta know
-
View User Profile
-
Send Message
Posted Mar 11, 2013-
View User Profile
-
Send Message
Posted Mar 11, 2013@asofold
Nothing in the console responding to the items the player used to do this. They used a rose, and full diamond, and a diamond sword.
@Tomas325
No you can't prevent from those, forcefield and click aimbot and freecam are not able to be prevented. Though I don't believe freecam has many uses anyway. Forcefield is obvious when used. Click aimbot, you're on your own... Just gotta guess. Though NCP does send you messages when players are doing something out of the ordinary.
-
View User Profile
-
Send Message
Posted Mar 11, 2013Does this plugin prevent the ForceField hack, Click Aimbot, FreeCam?
-
View User Profile
-
Send Message
Posted Mar 11, 2013@Slappygilmore
Same question as @4lfalfa .... how do they do it ?
Edit: What kind of items? Any commands they used showing on the console? Related plugins? Any other information?
@mlopezv
There is no global option for such. It also is
tremendouslysomewhat complicated to implement in a useful way (prevent "stupid" violation levels counting too much while counting in the important ones etc.). Would be nice but unlikely to happen soon, though we do have more "global switches" in mind. What i can do is to ask which versions of NCP and CraftBukkit you are using and which kind of checks are problematic, since there might be a subset of checks for which this might be possible, thinking of "strict"-flags, for instance...-
View User Profile
-
Send Message
Posted Mar 11, 2013Is there any config option that makes NCP more permissive in all its features? I need NCP to be more permissive in my server because we got players all around the world and most laggy ones suffer from NCP a lot. And I just don't wanna tweak EVERY ncp option to be more permissive.
If someone knows how to do this...I'll appreciate it. If it's not possible I'd like to have a global option to make this done in future plugin releases. Something like: IncreasePermissiveness: 30 (and that would make ALL checks to be 30% more permissive). An option like that would be glorious. Less config time, more customization.
-
View User Profile
-
Send Message
Posted Mar 11, 2013@Slappygilmore
how do they do it? can u give me ur ip?