NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Mar 19, 2013@Maroseliss
Did you even try if that bugs still happens without NC+?
-
View User Profile
-
Send Message
Posted Mar 19, 2013@Maroseliss
A while ago CompatNCP was conflicting with all of my warps (running them instantly at first, then after the cooldown expired, ran them again).
I now realize that it's only Factions commands causing this problem, and have let them know as well as booscooldowns.
Sorry for the inconvenience!
-
View User Profile
-
Send Message
Posted Mar 19, 2013@libraryaddict
Thanks, i can read the code, i am just interested in the details how the speed setting works, since i cant test it all out right now. Will continue commenting on the ticket...
@Maroseliss
How do you conclude that NCP is running warps, are there any alerts (and if so, please post them)?
-
View User Profile
-
Send Message
Posted Mar 19, 2013Also added this as a reply to the ticket.
-
View User Profile
-
Send Message
Posted Mar 19, 2013NCP is running any warp command twice. The first teleport takes you there instantly, then after the cooldown it goes off again and teleports you again.
Not using CombatNoCheatPlus, just NCP. I'm using booscooldowns for my warm-ups. Going to post this there as well.
NCP version: 3.8.12-RC2-b472
booscooldowns version: 3.4.2
Spigot version: 1.5 R0.1 (build 675)
Thank you!
-
View User Profile
-
Send Message
Posted Mar 19, 2013@asofold
Oh. Just remembered how.
Basically their speed is set at 0.2 normally. But the plugin set it to 0.3 When my calculations happen it comes up with a multiplier of 1.5
This means the player can now travel 1.5 times further then before. Which makes sense because of his new walk speed.
-
View User Profile
-
Send Message
Posted Mar 19, 2013@asofold
Sorry. Was tired and didn't read your post fully.
The only changes is grabbing the final calculation of the max distance they could have moved in survival fly and creative fly.
And multiplying it with (player.isFlying() ? player.getFlySpeed() * 10 : player.getWalkSpeed() * 5)
Both of those when untouched bring it to 1. Meaning its 0.6*1 which means the player didn't notice a thing.
And Im not quite sure how I came up to it. I mostly just sit and stare at the screen for a while. Write comments then go 'ereka!'
-
View User Profile
-
Send Message
Posted Mar 19, 2013@asofold
Well this particular fix isn't going to be CPU intenstive.
You have no current fix.
This basically multiplies their max allowed speed by their bukkit set speed.
If their bukkit set speed isn't changed. The final calculation remains untouched. If their bukkit set speed has decreased. The final calculation is decreased as well. Meaning speed hackers bypassing plugin set speed limits are no longer gaining a easy hack/bypass. A bad effect however is that when the number is low enough merely moving by jumping would fire it.
Long story short however. I'm running my build of this on a server with 500+ players. And there are no issues at all. No speed hackers. No one complaining about the glitching that occurs when the plugin modifies their speed.
When trying to speed hack with this, its just as accurate.
A bit tired. But if you guys are not going to implement this, its fine. Building NCP isn't that difficult. But other server owners WILL want this.
-
View User Profile
-
Send Message
Posted Mar 18, 2013@Phiwa
Thanks :)
@Kartikitrak
That's offline mode? The user name spam on pre-login or ping is not covered by NCP, only real logins. NCP allows to limit the number of players to log in within some time frame, however that would not be an option for an offline-mode setup.
@LordKainzo
Did you read my previous messages? There is no velocity check, it is called "velocity handling" because it allows the player to do more than normally if velocity is present. Please answer to my previous post(s), otherwise we will keep guessing.
@libraryaddict
I have seen a thousand "best fixes". Can you link the documentation for speed-modifier calculation or explain how you come to the conclusion that the speed modifiers work pretty exactly like that?
Further points to consider are:
You can start any kind of discussion any time, best in the associated ticket, since this place will be forgotten soon, alternatively as a pull request on GitHub.
-
View User Profile
-
Send Message
Posted Mar 18, 2013Is it possible for me to submit a fix for ticket 328
http://dev.bukkit.org/server-mods/nocheatplus/tickets/328-moving-checks-do-not-account-for-set-walk-speed/
You just need to change this in fr.neatmonster.nocheatplus.checks.moving.CreativeFly at line 82
And add this to fr.neatmonster.nocheatplus.checks.moving.SurvivalFly at line 856
before this line
And it fixes a whole host of problems people suffer. A simple fix..
And its the best one too.
Fixes NoCheatPlus not giving a shit about our plugins doing player.setWalkSpeed() and player.setFlySpeed()
-
View User Profile
-
Send Message
Posted Mar 18, 2013@asofold
still having issues with velocity skills on latest and 1.5 ..... is there a way to successfully disable that new velocity check? I wont be able to update to latest if it stays in, in its current state.
-
View User Profile
-
Send Message
Posted Mar 18, 2013Can you please add xray stats like anticheat :)?
-
View User Profile
-
Send Message
Posted Mar 18, 2013Hello NoCheatPlus developer. I have recently starting encountering a problem with my server. It's not a problem with the plugin but my server is getting bot flooded. Thankfully the program used is not updated but when it eventually does and ends up happening to my server again, will NoCheatPlus be able to protect the server from this?
This is the basic console spam, I'm getting. This is only a small fragment but the the rest is basically other random accounts with different IPs attacking. This goes on for about 3-5 minutes with 8 players attempting to join at once.
http://pastebin.com/skW5zSqd
-
View User Profile
-
Send Message
Posted Mar 18, 2013@LordKainzo
Released v1.8.8.1 which should solve the problem.
@LordKainzo: If dragon-riders are still recognized as "hackers" in any situation, please tell me!
-
View User Profile
-
Send Message
Posted Mar 18, 2013@IndigoParadox
The chat checks of NC+ will simple prevent players from writing messages or executing commands in a too high frequency (too fast). So if you have like a command sign that executes 10 commands at once then expect NC+ to kick you for spamming, the plugin author would have to exempt players from the Chat checks by using the NC+ API to allow such features without NC+ interfering. You could also poke @asofold over CompatNoCheatPlus and request compatibility with a plugin you have currently problems with. Maybe he can help you out somehow.
Also delete NC+s configuration.yml (in the NoCheatPlus folder) and let it regenerate (restart server or /ncp reload), just to be on the save side.
-
View User Profile
-
Send Message
Posted Mar 18, 2013@MyPictures
Also having @TheR3ktor 's messages. No problem though.
But NCP is kicking people for command / chat spam seemingly for no reason. I turned the values for both of them to false since then and the problem has stopped. It's like they're just trying to /login and it kicks for console spam. Or command spam.
I just downloaded another ncp 1.5 compatible to see if it will go away.
-
View User Profile
-
Send Message
Posted Mar 18, 2013So i have a little problem. I think when somebody enter in berserk from MCMMO plugin he can't pickup items but when he exit from it should be able to pick up again. Now i sometimes (randomly) this dosn't happand and i have to delete .dat file from that player. It might be from nocheatplus?My bad.. Found the problem :) Keep going :) Great Plugin-
View User Profile
-
Send Message
Posted Mar 18, 2013@PuremineServer
Yea we will but currently we are too busy to do it now. Support for the new MC items will get implemented ASAP.
-
View User Profile
-
Send Message
Posted Mar 18, 2013@TheR3ktor
Im getting the same thing as him, it would be nice if you could add those items even if it isnt causing any major errors
-
View User Profile
-
Send Message
Posted Mar 18, 2013@TheR3ktor
Nothing much to worry about: http://dev.bukkit.org/server-mods/nocheatplus/tickets/472-1-5-update-works-but-seems-missing-items/
@LordKainzo
There was a reason why we had to change velocity handling in NC+, the old one had other annoying problems that interfered with other checks (Mostly SurvivalFly). I'm sorry if it messed up your skill plugin but @asofold already could reproduce your report and he also attempted a fix for it. We are actually waiting for you to try it out and report back.
If the new velocity handling goes well then we might be able to put something together against NoKnockback cheats.
Its not NC+s fault, all what it does is preventing players from cheating. Plugins like DragonTravel will cause issues for sure and sadly its not possible to "white list plugins". Its not only annoying you, its annoying for everyone (even for me and @asofold). For that reason @asofold implemented a brand new API to allow plugin developers to get compatible with NC+. We also have CompatNoCheatPlus which tries to make other plugins compatible that aren't interested in using the NC+ API.
Every developer is welcome to contribute code to CNCP if he/she doesn't want to have "depencies" in his/her plugin.
@Phiwa
You need SurvivalFly for sure and maybe also CreativeFly (for players in creative mode). If your plugin has ability's to do crazy stuff (like go through blocks) then maybe Moving_Passable and Moving_NoFall also. However best would be to give it a try with NC+ and see which check of NC+ will freak out on it.