NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Apr 18, 2013Anti FastBreak doesn't work on tools with Efficiency 3 and more.
Can you fix it?
-
View User Profile
-
Send Message
Posted Apr 18, 2013Does NoCheat block the ender pearls teleporting through walls glitch? I was considering making a plugin that did that, but I wanted to make sure there wasn't one that already did.
Edit: Nvm, found a different plugin that does this.
-
View User Profile
-
Send Message
Posted Apr 18, 2013@DyreCraft
Nothing to worry about and you don't have to read all those comments of course. By default NC+ will cancel the cheated knockback effected that a hacker tried to execute, It will simple force to use the vanilla rules of knockback. I have to say that the knockback check is pretty old and its wonky to check for it because its quite lag affected. It also throws out false positives here and there but overall it should be useable.
-
View User Profile
-
Send Message
Posted Apr 18, 2013I've read through several pages of comments, but honestly not all 400+ of them - so I am sorry if this is a duplicate question.. Is there a way to punish players that generate knockback errors? I have certain players that consistently generate these errors in CTF and swear that they do not have any hacks (yeah right), but all I see is the console error. Is there a way to punish them or negate the knockback effect in any way?
-
View User Profile
-
Send Message
Posted Apr 17, 2013@MyPictures
Re: intervalcreative/intervalsurvival
It sounds like it could use better naming and/or documentation. An interval refers to time, so this option sounds like it modifies the interval between block breaks. What you described is modifying the number of blocks that can be broken in an unmodifiable interval, which makes more sense for a check.
-
View User Profile
-
Send Message
Posted Apr 17, 2013@AlbertMarty
PlayersInCubes would just hide players with the vanish API, with side effects to other plugins / functionality that checks who sees whom. Not sure there is anything better than Spigot with the world-specific view distances, otherwise. It would be fun to extend the concept of PlayersInCubes to entities in general as an optional extension, but that needs too much bookkeeping to be fun to implement quickly (i would use ProtocolLib for best compatibility most likely).
-
View User Profile
-
Send Message
Posted Apr 17, 2013@Shadowpat123
Aren't permissions enough for this? It would be useful for fake players that come from mods such as ComputerCraft or RedPower but not sure.
-
View User Profile
-
Send Message
Posted Apr 17, 2013Just a suggestion: why not add something in the config where you can specify names that are allowed to cheat? That would be cool!
-
View User Profile
-
Send Message
Posted Apr 17, 2013@AlbertMarty
I think Reis minimap mod has changed the way it uses the motd. So if you send the motd now then it will enabled cave and entity rendering. @asofold has to fix that still but for now it should be fine if you give them NC+ permissions for Reis minimap.
You can use spigot or PlayersInCubes to prevent the server from sending entity locations that are too far away. This would kill all radar, tracers and "hacked" reis mods.
-
View User Profile
-
Send Message
Posted Apr 17, 2013@asofold
Hello again, Thank you for your replies! I have spoken to the users that have Rei's Minimap installed and they confirmed with me that they are unable to see Players or Entities on their minimap, so my concerns were invalid.
I have heard that some people modify their Rei's to force the entity radar to work, but so far everyone agrees there is little we can do about those people using a "hacked" version of Rei's Minimap. I'm fairly satisfied with the current functionality. I am curious about the specific functions of the allowclientmods checks and how they might help against those people with a forced version of Rei's, however out of security concerns I understand that it's best if you don't reveal any of that information. We all are collectively against cheaters and I fully support and thank you for your efforts! :)
-
View User Profile
-
Send Message
Posted Apr 17, 2013@NemesisMate
In the currently implementation you can't do that.
@MCGamer20000
We already adapt to server sided lag (check features list), for that reason we also added /ncp lag command. However its not completely finished yet for every check that could need it. I recommend to somehow get rid of your server lag by checking your plugins with timings or nolagg examine and maybe also update and check your server hardware/software.
-
View User Profile
-
Send Message
Posted Apr 16, 2013It returns false positives when the server is lagging. Can you make it check the TPS when checking for hacks?
-
View User Profile
-
Send Message
Posted Apr 16, 2013Couldn't it be configured to, when fastbreak is detected, break the block on normal time instead of cancelling it?, I configured the action on fastbreak like:
actions: cancel vl>2 log:fastbreak:3:5:cif cancel
but I'm having VL 2 and VL 1 logs... Is that normal? or I have to configure in other way?
-
View User Profile
-
Send Message
Posted Apr 16, 2013@AlbertMarty
Wait a second. It has nothing to do with motd-plugins. Just some people call it motd, because it often is sent with the motd of a server (....).
Point being that NCP should send the appropriate "hidden" message to the players to let them activate/deactivate those features if they are using such a client mod.
Might be that the message or scheme for rei changed, so NCP has to adapt.
-
View User Profile
-
Send Message
Posted Apr 16, 2013@asofold
I must apologize for possibly wasting your time. I realize, I have not confirmed specifically with the two users I have using Rei's Minimap that they are in fact able to see other players and entities on the minimap, so I need to ask those users more specific questions. I had only confirmed with them that the minimap was working for them in some general way. I'm very sorry about that. I will return with more specific information to confirm whether or not the unintended behavior of seeing players on their minimap is happening despite me having done nothing to enable it via an MOTD plugin.
Thank you again, my apologies.
-
View User Profile
-
Send Message
Posted Apr 16, 2013@asofold
Hello! Thank you so much for the fast response! :) Specifically I would like to block Rei's Minimap, as it seems to be by far the most common. I apologize for not pasting in logs or configs but will do so if that is useful. Primarily I am concerned with it's ability to locate other players unfairly in a pvp environment. I have seen some of the information about how to use the MOTD (or at least a login MOTD mod, not Notch 1.8 MOTD feature) to enable the use of Rei's features, however I was unable to find information about how to disable it. (using the &1&2.. etc)
Thank you again!
-
View User Profile
-
Send Message
Posted Apr 16, 2013@d3voo
No.
@jhonstop
@UnitedFactions
A higher ping means that packets are longer on the way to the user and back, it does not necessarily mean "bad connection" or irregular packet sending sequence. So unless there happens a lot of delaying it should not change too much. There might be some things for higher pings that might happen more often and possible adjustments, but i can't get into that right now, will comment on it later.
@NemesisMate
@wilsondc15
Need more info about plugins like mcMMO or skill-related...
@UnitedFactions
Is cncp up to date :p ?
@AlbertMarty
Please be more specific about what client mods. One can not technically prevent minimap, but some client mods allow disabling features with a special server-sent "motd"-message, but that is a mutual thing client-developers build in. So we need to know which clients conflict at present. Could be that it is impossible, could be that a client changed the motd necessary to prevent/allow use of a certain feature.
-
View User Profile
-
Send Message
Posted Apr 16, 2013Hello, I'm using version 3.9.0 b488 and I have allowclientmods set to false, but people without op are still reporting they are able use Rei's Minimap mod. Is there some way to correct this? I have heard people say they downgrade to a previous version of NCP but it looks like only 3.9.0 is designed for use with MC 1.5.1
Thank you!
-
View User Profile
-
Send Message
Posted Apr 15, 2013@NemesisMate
same
-
View User Profile
-
Send Message
Posted Apr 15, 2013@NemesisMate
Hi, superbreaker doesnt work so well anymore, with the latest build, and i have compactnocheatplus installed, but its pretty old? Maybe asofold should update it <3