NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Apr 28, 2013@XeonG8
Not implemented in NoCheatPlus but you can use region based permissions to make that possible: http://dev.bukkit.org/server-mods/rsp-region-specific-permissions/
-
View User Profile
-
Send Message
Posted Apr 28, 2013is there nocheat for WG regions, something that could just prevent flying in those regions?
-
View User Profile
-
Send Message
Posted Apr 28, 2013@Zifarglweagrs
As @asofold said: SurvivalFly isn't affected by lag. If a player has a ping of 30 or ping of 300 won't matter for SuvivalFly since its check method isn't affected by lag in any way.
However only because a check has a false positive doesn't mean that its automaticly super strict. We try to keep a good balance between strictness and false positives but thats a lot harder than you may think. If you don't agree with our "balance" then feel free to config NC+ to your likings or you can disable SurvivalFly completely. You can also use the vanilla fly check from Mojang if you search a less strict one.
Half slab issue comes most likely from spout: http://dev.bukkit.org/server-mods/nocheatplus/tickets/435-halfslabs-trigger-survivalfly-violations/
-
View User Profile
-
Send Message
Posted Apr 27, 2013@Zifarglweagrs
Thanks for advertising. There are false positive with survivalfly, most are "mostly normal". If you really want to get rid of those, you have to recode parts of the minecraft client and server and craftbukkit as well, which is not what i am up to right now. Alternatively do with less protection.
The survivalfly messages are not at all related to latency. If anything is related to latency then the fighting checks, since when you hit a player he has already moved on on the server side, which can lead to alerts, even without any networking/lag-specific delay. Delay can lead to events arriving in a bunch instead of distributed over time, which essentially can't be distinguished from cheating in all cases, while allowing bursts would allow any kind of first-hit-fast-kill force-fields to be much more effective.
I can't recommend to follow your advice.
But i can ask a question:
-
View User Profile
-
Send Message
Posted Apr 27, 2013This is a good plugin, but holy fuck is it sensitive. Regular players will routinely get punished due to latency issues. Only use this plugin if your players all have very low latency. It's almost not worth keeping this plugin installed. "NCP: <username> failed SurvivalFly" pops up every couple of minutes and no, that player is not actually flying or trying to. It happens when players run and jump or even walk across top-placed half-slabs.
-
View User Profile
-
Send Message
Posted Apr 27, 2013I'm on 815 of spigot, is it fixed with that?
-
View User Profile
-
Send Message
Posted Apr 27, 2013@fungreenfox
You have some plugin running that duplicates players ?
-
View User Profile
-
Send Message
Posted Apr 27, 2013@MyPictures
You have got a ticket for noswing in snow now.
-
View User Profile
-
Send Message
Posted Apr 27, 2013With 12 ppl online i got this in console:
15:50:12 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (20 instead of 18)
15:50:22 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (20 instead of 18)
-
View User Profile
-
Send Message
Posted Apr 27, 2013Yes it happenes with all versions. Created a ticket for this issue already. Tested it on several servers, gets printed on all of them.
And what do you mean by motd? Isn't it a plugin message?
-
View User Profile
-
Send Message
Posted Apr 27, 2013@HeIIsing
Does this also happen with NC+ 488, maybe its not fixable because that empty line could be the motd that gets sent to the client to disabled their mods.
-
View User Profile
-
Send Message
Posted Apr 27, 2013Could you please fix the empty line appearing when joining the server? I've tested it with the latest craftbukkit/spigot versions and the latest NCP version here and from Jenkins and all of them print an empty line to the connecting player.
And before you ask, it is NCP, cuz that's the only plugin I have on my testserver...
-
View User Profile
-
Send Message
Posted Apr 26, 2013@UnitedFactions
Thanks for the info, see tickets for reference.
-
View User Profile
-
Send Message
Posted Apr 26, 2013BUG: Tested with Spigot 815 (MC 1.5.1), 3.9.1-b499 CB 2691
- When you stand on a stair (type doesnt matter) and you try to break a block, it gives a lot of Fastbreak messages! with high VIOLATION LEVELS.
Default Minecraft, tested with 500+ Build. Please fix this! //
-
View User Profile
-
Send Message
Posted Apr 26, 2013@fungreenfox
So players who are standing on snow are triggering Fight_NoSwing? We need more informations such as CraftBukkit and NC+ version, also it would be pretty nice if you could open up a ticket for this issue.
-
View User Profile
-
Send Message
Posted Apr 26, 2013I have noticed some ppl chasing mobs, are triggering noswing all the time. But ppl not in snow are not triggering this. As soon i remove the snow around the player, the triggering "noswing" is gone.
-
View User Profile
-
Send Message
Posted Apr 24, 2013@MyPictures
I think the objective was to have a simple switch. Disabling in the config is more light-weight, but it takes more time and some things have to be done by permissions at present (place against air etc.).
I myself would prefer to use a world-config with savebackconfig set to false and individual checks disabled. That way all the details are in the main config and the world config contains only the minimally necessary entries - but that is more work to do.
-
View User Profile
-
Send Message
Posted Apr 24, 2013@Tsugaga
I recommend to do it over the NC+ world config file because its more lightweight for the server. If you use permissions to solve this NC+ will always ask stuff to your permissions plugin like: "Has player XY permission to bypass check YX?".
Here a little "how to" generate a world config file:
1. Create a new file called "WorldNameHere_config.yml" in your NoCheatPlus folder (without the "").
2. Go on your server or console and do /ncp reload
3. Now NC+ writs all the settings on this world config file you just created.
4. You can now enable, disable or change checks.
5. Reload NC+ again and you're done.
-
View User Profile
-
Send Message
Posted Apr 24, 2013The example derped since these comments change format, the idea anyway is to just add the permission to the world. If you don't know how then look up guides for whichever permissions plugin you use.
-
View User Profile
-
Send Message
Posted Apr 24, 2013Just add nocheatplus.checks to the world permissions where you want to disable checks in your default group. The below example makes it so anyone in "HackTopia" has checks disabled, using PEX anyway.
Example.
groups: Member: default: true permissions: - global perm list worlds: HackTopia: permissions: - nocheatplus.checks