NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Mar 20, 2013@asofold
I'm seeing a massive trigger amount for FastHeal ....
-
View User Profile
-
Send Message
Posted Mar 20, 2013So if the "config.yml" has "savebackconfig: false" and is empty otherwise, this will disable nocheat in all worlds except ones with their own predefined configs?
-
View User Profile
-
Send Message
Posted Mar 20, 2013@finamenon
You can create world-specific configurations by creating a file "WorldName_config.yml" for the world "WorldName". One time "ncp reload" will then fill the config with missing entries. If you want to only set some "active" flags, you could consider setting "savebackconfig" to false and only keep/add the entries that you want changed.
-
View User Profile
-
Send Message
Posted Mar 20, 2013Is there any method of enabling this in one world, but completely disabled in others? Sorry I attempted to find this information in the config section but the small tidbit there did not seem to do the trick.
-
View User Profile
-
Send Message
Posted Mar 20, 2013@4lfalfa
I have to update my question to this: is vclip onto ground, several blocks deep, not moving into blocks but through/over them still possible?
It should be fixed since passable-ray-tracing has been introduced, but i have two indications of some newly introduced problems:
-
View User Profile
-
Send Message
Posted Mar 20, 2013@deaddude22
is vclip fixed completly? or are you still able to clip 3 blocks up or down to get insite a bunker or anything?
-
View User Profile
-
Send Message
Posted Mar 20, 2013@asofold
VClip has been fixed with the latest release build. Working fine for me.
-
View User Profile
-
Send Message
Posted Mar 20, 2013@dotapurex1
Do you have any details on this? Which versions of NCP / CB are you using?
Anybody else on vclip + NCP b472+ ?
-
View User Profile
-
Send Message
Posted Mar 19, 2013@Salamantis
Build 478 (477) contains a hot-fix attempt for the vehicle-exiting issues.
@kakirocks
No need to worry, it just means that NCP does not yet have block breaking data set for those blocks, thus it will allow them to be broken instantly (only possible with hack clients). The missing info will be added soon.
-
View User Profile
-
Send Message
Posted Mar 19, 2013Hello, I'm getting this every time I start up my server.
I'm using
craftbukkit 1.5-R0.1 #2686.
Nocheatplus #476.
cncp #52
14:06:28 [WARNING] [NoCheatPlus] The block breaking data is incomplete, default to allow instant breaking:
14:06:29 [WARNING] --- Missing entries -------------------------------
14:06:29 [WARNING] * MISSING 147(GOLD_PLATE / SOLID IGN_PASSABLE GROUND GROUND_HEIGHT)
14:06:29 [WARNING] * MISSING 148(IRON_PLATE / SOLID IGN_PASSABLE GROUND GROUND_HEIGHT)
14:06:29 [WARNING] * MISSING 149(REDSTONE_COMPARATOR_OFF / IGN_PASSABLE GROUND GROUND_HEIGHT)
14:06:29 [WARNING] * MISSING 150(REDSTONE_COMPARATOR_ON / IGN_PASSABLE GROUND GROUND_HEIGHT)
14:06:29 [WARNING] * MISSING 151(DAYLIGHT_DETECTOR / SOLID IGN_PASSABLE GROUND GROUND_HEIGHT)
14:06:29 [WARNING] * MISSING 152(REDSTONE_BLOCK / SOLID GROUND)
14:06:29 [WARNING] * MISSING 153(QUARTZ_ORE / SOLID GROUND)
14:06:29 [WARNING] * MISSING 154(HOPPER / SOLID GROUND)
14:06:29 [WARNING] * MISSING 155(QUARTZ_BLOCK / SOLID GROUND)
14:06:29 [WARNING] * MISSING 156(QUARTZ_STAIRS / STAIRS SOLID GROUND HEIGHT100 XZ100)
14:06:29 [WARNING] * MISSING 157(ACTIVATOR_RAIL)
14:06:29 [WARNING] * MISSING 158(DROPPER / SOLID GROUND)
-
View User Profile
-
Send Message
Posted Mar 19, 2013@dotapurex1
What version of NCP ? What version of CraftBukkit?
Should not be possible with recent versions.
-
View User Profile
-
Send Message
Posted Mar 19, 2013Vclip still works, please block that!!!
-
View User Profile
-
Send Message
Posted Mar 19, 2013@Salamantis
Thank you for the details (I opened a ticket based on this).
-
View User Profile
-
Send Message
Posted Mar 19, 2013I get the cart bug as well, but it doesn't seem to be NCP's fault.
Without even using NCP, it seems that players will suffer from visual glitches related to minecarts, including teleporting all over the place when exiting one. It seems as this isn't purely visual, as NCP will kick someone for SurvivalFly with this alert:
After some testing, it seems that it only occurs when the player moves up on the track (exiting at a higher altitude than he started on), which triggers NCP to believe he is flying. The cart exit glitch still happens when you go down or straight, but NCP will not throw any alerts. It also seems that it doesn't matter how high up you go, it will report the same "0.08" distance (approximately).
Now, if you go down in altitude compared to where you entered the cart, you take damage upon exiting the cart but don't get teleported anywhere. This again makes sense because NCP will think you tried avoiding fall damage and inflict it back onto you.
It doesn't seem to matter if a same track goes up and down, what matters is the difference in altitude between where the player entered the cart and were he exited. Also, if the VL of either of these alerts is high enough (altitude delta is high enough), then the player may be kicked depending on the configuration.
I hope this helped in clearing up a few questions anyone may have, as it was certainly puzzling to me and players on the server.
Testing was done using the following versions:
-
View User Profile
-
Send Message
Posted Mar 19, 2013@Brocodo
@MyPictures
http://dev.bukkit.org/server-mods/nocheatplus/tickets/476-libigot-throws-many-errors/
(same solution)
@CoolStudio
We can't reliably detect client mods - for the general case it is impossible, since clients don't tell who they are.
We will not add auto banning to the default configuration, but it could be added to the actions manually, however i can't really recommend auto banning. If flying detection was so simple and fool proof, the vanilla version would be better and detect faster as of now.
-
View User Profile
-
Send Message
Posted Mar 19, 2013Can you add a feature where it could check the persons minecraft version and if it isn't 1.4.7 but for example is Nodus 1.4.7 it would auto ban them? Also another feature where if they try to fly they also get auto banned?
-
View User Profile
-
Send Message
Posted Mar 19, 2013@Brocodo
Looks like you're running a modded server, try the latest development build on our jenkins and give us some info about your server software (Craftbukkit?).
-
View User Profile
-
Send Message
Posted Mar 19, 2013Every time someone walks he gets teleported back, except for those who can bypass.
This is the error message logged: http://pastebin.com/23RLjhtk
Thanks! :)
-
View User Profile
-
Send Message
Posted Mar 19, 2013@MCCharlieCraft
We need version of NoCheatPlus and CraftBukkit to help you.
-
View User Profile
-
Send Message
Posted Mar 19, 2013Any suggestions on how to set my settings to not kick players or reset them back to where they started when using a boat or minecart?