NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Apr 12, 2013@MyPictures
Permissions plugin is groupmanager.
Plugin list: http://pastebin.com/GVAvHLzs
version: CraftBukkit version git-Bukkit-1.4.7-R1.0-94-g141dcf0-b2735jnks (MC: 1.5.1) (Implementing API version 1.5.1-R0.1)
NC+ version: NoCheatPlus 3.9.0-RC-b488
I can't provide a screenshot because I removed it from my server since he couldn't possibly play. I did /ncp exempt playername and it told me the player had been exempt from all checks yet he still couldn't fly faster :/
-
View User Profile
-
Send Message
Posted Apr 12, 2013@asofold
Yea why not ;P. So basically something like short and long term?
-
View User Profile
-
Send Message
Posted Apr 12, 2013@Hulipill
@MyPictures
Exact speed is tricky, since players can theoretically have lots of factors that change the maximally allowed speed a lot within short time, such as sprinting, sneaking, potions, ice, bunny-hopping, pistons, altered frequency of packet sending, CraftBukkit, Minecraft. Velocity (knockbacks) might be one of the smaller problems, since for those one can exempt the players from the more strict checking.
I would like to make it more precise, but introducing more false positives would also not help. Might try something with keeping track of medium/short range distance covered along with sort of medium the player went through. For horizontal speed it might be easier, since we don't have the possibility of such high entry speeds as with players falling into water or onto ladders.
Actually i will copy and paste this into the ticket. :p
-
View User Profile
-
Send Message
Posted Apr 12, 2013@Hulipill
This isn't really an exploit because NoCheatPlus allows to walk around 20-30% faster than possible. Not sure if @Evenprime and @NeatMonster did that on purpose but we have a ticket for it already, so @asofold will take a look at this later.
-
View User Profile
-
Send Message
Posted Apr 11, 2013There's an exploit with sprint in Nodus, You can sprint in either normal or fast mode 1. Enable sprint 2. Hit "u" then type "sprint mode fast" 3. It gives you the ability to sprint really fast, thus a hack or cheat!
-
View User Profile
-
Send Message
Posted Apr 11, 2013@tubelius
Can not reproduce this issue. Does it happen after every block break or after like 20-40? Did you already reload/regenerate your NC+ config (a old config might have wrong values for fastbreak)? Does that player lag? Did you test it by yourself and could you reproduce it?
@mormaii2
What's your permissions plugin? Could you provide us a plugin list? CraftBukkit and NC+ versions? Could you post us a screenshot of /ncp info AffectedPlayerNameHere ? nocheatplus.checks.* lets you bypass all checks (except the mod ones).
@dogbig
Do you have high latency on your server? What happens if you disable the Passable check temporary?
@CoolKill3r
They will collide with each other yea. You will also notice some other bad side effects such as performance drop or false positives. So only use one.
-
View User Profile
-
Send Message
Posted Apr 11, 2013What will happen if i both put this and anticheat on my server? Would it colide with each other or cause for more protection?
-
View User Profile
-
Send Message
Posted Apr 11, 2013@MyPictures
build is #489 and bukkit #2744. w/o NCP it does not appear. Simply, time to time when pl logs in, then get stucked, cannot move (like using flyhack). Also when pl has creative on logon and disables fly (using spacebar) then slowly falls down. Sometimes their coords shows y:-1.
-
View User Profile
-
Send Message
Posted Apr 10, 2013I gave a player this permissions: - nocheatplus.checks.* - nocheatplus.mods.rei.* - nocheatplus.mods.rei.radar.* - nocheatplus.*
Yet he can't even set his fly speed on creative mode and it gives him violations level too. What am I doing wrong?
-
View User Profile
-
Send Message
Posted Apr 10, 2013Got false positives again. A player was breaking wood planks with diamond axe (efficiency 4 unbreaking 3 fortune 3).
2013-04-10 20:23:21 [INFO] [NoCheatPlus] HumanMole failed FastBreak: tried to break blocks (5) faster than possible. VL 1. 2013-04-10 20:23:25 [INFO] HumanMole lost connection: disconnect.quitting 2013-04-10 20:23:25 [INFO] Connection reset 2013-04-10 20:23:32 [INFO] HumanMole[/90.208.118.253:50916] logged in with entity id 1821564 at ([world] -2597.2257130361295, 68.0, 1785.4349621229373) 2013-04-10 20:23:34 [INFO] [NoCheatPlus] HumanMole failed FastBreak: tried to break blocks (5) faster than possible. VL 3. 2013-04-10 20:23:39 [INFO] [NoCheatPlus] HumanMole failed FastBreak: tried to break blocks (5) faster than possible. VL 5. 2013-04-10 20:23:46 [INFO] [NoCheatPlus] HumanMole failed FastBreak: tried to break blocks (5) faster than possible. VL 5. 2013-04-10 20:23:56 [INFO] Connection reset 2013-04-10 20:23:58 [INFO] [NoCheatPlus] HumanMole failed FastBreak: tried to break blocks (5) faster than possible. VL 4. 2013-04-10 20:24:57 [INFO] [NoCheatPlus] HumanMole failed FastBreak: tried to break blocks (5) faster than possible. VL 3. 2013-04-10 20:25:05 [INFO] [NoCheatPlus] HumanMole failed FastBreak: tried to break blocks (5) faster than possible. VL 4.
2013-04-10 20:50:57 [INFO] This server is running CraftBukkit version git-Bukkit-1.4.7-R1.0-94-g141dcf0-b2735jnks (MC: 1.5.1) (Implementing API version 1.5.1-R0.1) 2013-04-10 20:51:02 [INFO] NoCheatPlus version 3.9.0-RC-b488
-
View User Profile
-
Send Message
Posted Apr 10, 2013@dogbig
How do they get stuck in ground? That is a serious bug and player could exploit that to go through walls. Passable will prevent players to go through blocks by using noclip hacks on your server. Please give version numbers and not "latest".
-
View User Profile
-
Send Message
Posted Apr 10, 2013Sometimes players get stucked in ground... NCP sometimes reports issue about moving into non-passable blocks... using latest build + latest CB
-
View User Profile
-
Send Message
Posted Apr 10, 2013@gamemoe
Looks like CNCP and NC+ are outdated on your server but I need a lot more infos here. Version of NC+, CraftBukkit and CompatNoCheatPlus would be a good start.
-
View User Profile
-
Send Message
Posted Apr 10, 2013http://pastebin.com/vxjxJAjJ
-
View User Profile
-
Send Message
Posted Apr 9, 2013@Redletteredition
Can you PM me your IP? I would like to compare my local server with your public one. We also used Nodus (and some other) to check vClip and for us it was detected without problems.
@n00bsaus
Yea. Well thats the only idea that may work for you. You could also disable the SurvivalFly check in that world or region but that would allow fly hacks of course. You can follow research and developer of this issue here: http://dev.bukkit.org/server-mods/nocheatplus/tickets/344-potion-effects-higher-levels/
@xion87
You should make a ticket for CompatNoCheatPlus, @asofold could use the NC+ API to make this CraftBook feature compatible. Anything else that CraftBook makes issues with?
For now? ;P Haha Thanks :)
CNCP is here: http://dev.bukkit.org/server-mods/compatnocheatplus-cncp/
-
View User Profile
-
Send Message
Posted Apr 9, 2013Cheatplus block "hight jump" with "Bounce" piston of CraftBook plugin http://wiki.sk89q.com/wiki/CraftBook btw i think this is the better anticheat plugin for now :)
-
View User Profile
-
Send Message
Posted Apr 8, 2013I don't suppose it's so easy as a check for 'jump effect' on player of any level, then disregard flight checks?
-
View User Profile
-
Send Message
Posted Apr 8, 2013Nodus Client tested on non OP or admin user was still able to clip up to 9 layers. Tested today. Also Should we update CNCP with NoCheatPlus?
-
View User Profile
-
Send Message
Posted Apr 8, 2013@n00bsaus
We already have a ticket for this but we aren't quite sure how to fix this the best way. @asofold is working on this already but may take some more time to implement. Atm you can only use the NC+ API to exempt them for SF while doing that jump or something similar: http://dev.bukkit.org/server-mods/nocheatplus/pages/documentation/api/
@Redletteredition
It has some more improvements against forcefields but NC+ always detected and prevent super OP forcefields that could kill you with 1 hit (or something like that).
@Redletteredition
What client/cheat do you use to execute vClip on your server? Do you have permissions to bypass the NC+ checks? Maybe you found something new that we didn't know about yet.
@Redletteredition
For mcmmo (super breaker and all the other) you need to use CNCP. You can get it here: http://dev.bukkit.org/server-mods/compatnocheatplus-cncp/
-
View User Profile
-
Send Message
Posted Apr 8, 2013Mypictures also superbreaker is not working could NoCheatPlus be the cause?