NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Mar 15, 2013Some inofficial rush-updates and protocol-compatibility builds (like Spigot 631 about) still have the wrong bounding boxes set for snow, internally, thus the server might tp players back slightly for certain snow heights, this too could trigger survivalfly.
To me it seems that layered snow is ok with CB2646.
To work around survivalfly with such a block, you can try to override the block flags for snow to "ground+height100+ground_height+ign_passable", in order to allow players standing on any level of the block and also pass through it. Don't keep the "default" entry, since that would keep workarounds for leveled snow active. The flag overriding would allow players to cheat a little with layered snow (pass through, jump on top at height 1 always, similar), though.
-
View User Profile
-
Send Message
Posted Mar 15, 2013Your 1.5 compat seems to be working splendidly on our 1.5 (actually) build that we've been using over the past few days. The only issue is that a long standing bug appears more often with maps with layered snow: when you jump right on an edge you violate survivalfly. Other than that, the inventory works great, stairs work great.
-
View User Profile
-
Send Message
Posted Mar 15, 2013@owenftw
Thanks for feedback.
@masterolos09
Check the latest release, it has rough compatibility for MC 1.5 built in, though some things won't be as accurate as with a dedicated version (some more blocks can be passed through, abused for climbing, other):
NoCheatPlus 3.8.12-RC2-b472
A version explicitly updated for CB/1.5 will be available on our Jenkins soon, however you have to count in the possibility of CraftBukkit still changing things around, also CB itself might still contain bugs. The already released version should not break with altered CB-dev-builds for 1.5, while explicitly "updating for 1.5" can not guarantee that for early dev-builds of CB.
-
View User Profile
-
Send Message
Posted Mar 15, 2013Please update for 1.5..
-
View User Profile
-
Send Message
Posted Mar 15, 2013Working fine for me :)
-
View User Profile
-
Send Message
Posted Mar 14, 2013@alexporrini
@MyPictures
I think ChestShop does only use Bukkit API by now.
Apart from the general point which @MyPictures already pointed out, it will depend on what the plugins do. There are new blocks and some events might be different (inventory). Especially the hoppers will change things for Chest-protection - without an update or a protective addition chest protection can be bypassed for some cases. Also the new tnt and dispenser features can pose problems, depending on how quickly Bukkit adds events for those.
After all one can't really rely on any plugins working 100%, if they rely on pre-1.5 game mechanics which then got altered. Difficult to judge, best is to keep in touch with the developers / support of the plugins.
NCP works with "pseudo 1.5" servers, i.e. servers running 1.4.7 but allowing 1.5 clients by some hack. Also the "bukkit-api-only" feature guarantees that NCP will not break fully, just because of a new Minecraft update. So far it looks good, however a "real" 1.5 server will have significant internal changes as opposed to 1.4.7, and NCP does relay on some game mechanics and event sequences, so i can't foretell what will happen with the "real thing". Still the testing with what the 1.5 clients send to a 1.4.7/pseudo server seems to be ok with NCP, so i am optimistic.
Do mind the update: NoCheatPlus 3.8.12-RC2-b472
-
View User Profile
-
Send Message
Posted Mar 14, 2013@alexporrini
Every plugin that only uses native bukkit code should work fine but every other plugin that uses Minecraft internals (NoCheatPlus, ChestShop, .....) will need a update. However NoCheatPlus has something called "BukkitAPIonly" means that if NC+ detects a unknown CraftBukkit version then it will automatically switch to "BukkitAPIonly" to provide compatibility with unsupported server versions by only using native bukkit code (some parts of NC+ will get limited by this so update as soon as possible!). For more info's read "Minecraft Updates" at the beginning of this page.
@YoshiGenius
Yea. All we can do is wait for Bukkit now.
-
View User Profile
-
Send Message
Posted Mar 14, 2013will 1.4.7 plugins work for 1.5!
-
View User Profile
-
Send Message
Posted Mar 14, 2013@Endless123
Lol, hehe :D
@MyPictures
Ah, awesome. Hope they get added in that case! Probably a bad time though, seeming as 1.5 just came out...
-
View User Profile
-
Send Message
Posted Mar 14, 2013@YoshiGenius
There has been already made some by @riking (Thanks riking):
https://github.com/Bukkit/CraftBukkit/pull/1035
https://github.com/Bukkit/CraftBukkit/pull/1036
-
View User Profile
-
Send Message
Posted Mar 14, 2013@YoshiGenius
Holy shit - me as a normal player... i have no idea what u just said
-
View User Profile
-
Send Message
Posted Mar 13, 2013Regarding the thorns issue, you could send a PR to CB and B on GitHub to add DamageCause.ENCHANTMENT_THORNS and throw a damage event where NMS handles the damage.
-
View User Profile
-
Send Message
Posted Mar 13, 2013@LordKainzo
Please check out the situation with the latest release concerning velocity skills. Since back when you asked last time, the velocity handling has been re-coded for horizontal velocity.
DragonTravel might be another issue, it clearly depends on what the plugin does to make players travel. Need more info on that, any checks alert, what happens at what moment (exactly: during flight, when getting off the dragon, ...).
NoCheatPlus 3.8.11-RC-b467
-
View User Profile
-
Send Message
Posted Mar 13, 2013It appears that DragonTRavel sometimes makes the user go bck to all the way where they first started the dragon travel - is there some way to bypass this?
Also any chance to revert that Velocity change that breaks our movement skills? we're dead in the water for nocheat atm without it.
-
View User Profile
-
Send Message
Posted Mar 13, 2013@Slappygilmore
It is only special items (not normally enchantable items) ?
-
View User Profile
-
Send Message
Posted Mar 13, 2013I've talked to the guy who made the mod, or the guy who's spawning the items and who also has over 1,000 alts. So I cannot ban the guy from my server really. But he gave me the source god for the beta items.
-
View User Profile
-
Send Message
Posted Mar 13, 2013@geor196
@MyPictures
Since the Bukkit-API is leaving this topic out, it is up to the permission plugin to provide such a feature. We have several ways to help, though (setting permission default to false, an option alter all defaults, a command to disable notifications). Most likely i will add the last of the options some day. You could edit the plugin.yml inside of the jar and add the "default: false" entry to the section of the notify permission. This should have the wanted effect.
-
View User Profile
-
Send Message
Posted Mar 13, 2013@geor196
This is not a problem that comes from NoCheatPlus, your permissions plugin should handle this. If you have PermissionsEx or GroupManager you can search in the configuration of them for something like "allowOP=true" setting this to false should do the trick.
We could also implement a feature that allows you to handle this over NoCheatPlus itself but on my opinion its better if the permissions plugin handles permissions and not NC+.
They are hackers but you shouldn't allow them to spam your server with hack attempts because it causes unneeded load on your server.
@Slappygilmore
Not sure then. I suggest to take a look at the server log and also check all players (even staff) that have access to special commands such as /i, /give and so on. Also check your permissions for possible security holes that could allow such things.
-
View User Profile
-
Send Message
Posted Mar 12, 2013@asofold
Sorry for mi attitude, i was really mad :p
The problem is that im owner so i have the '*' permission node, to fix this giving me all permissions i denied the logging.ingamechat , Everything goes perfect there. 'Problem:' If a player is OP this plugins gives that player ALL permissions ignoring any permissions plugin, if i'm right can you fix that?
@MyPictures
Yeah they're hackes, server is 150 full and NO premium, so hackers is something that is around every single corner
-
View User Profile
-
Send Message
Posted Mar 12, 2013@4lfalfa
You can find the ip on my website, I don't want to feel like I'm advertising my server on the list... http://www.insanitycraft.org Thank you for your interest 4falfa.