NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted May 3, 2013@Zbob750
No the exploit was already fixed in CraftBukkit 1.5.1 for that reason I wrote that you should install CB 2750 or higher to fix this exploit. All downloads can be found here: http://dl.bukkit.org/downloads/craftbukkit/
If you decide to run your server on 1.5.2 then you will need to use the latest NC+ version that you can get from our jenkins. The old version of NC+ will work as well but with limited features (BukkitAPI only).
-
View User Profile
-
Send Message
Posted May 3, 2013An issue in Craftbukkit got fixed which allowed players to drop modified items out of anvils without having to pay experience for them.
In order to fully fix this you must, as mentioned, update your server to the latest developer build, but you must also use an NCP build compiled against 1.5.2.
In other words you need to use the latest build available on this plugin's jenkins page. Several people and myself have confirmed that this is the issue, that the solution is to update it.
Thanks
-
View User Profile
-
Send Message
Posted May 3, 2013@MyPictures
Yea thats what i thought too, i have set login limit 1 user each 5 seconds but if some bot retard is persistan he could potentially prevent other players from entering, and thats where temp kick and later ban comes in action =), but it needs to be by ip cuz those bot retards change names constantly.
Hope youll consider this guys. Thx for reading.
-
View User Profile
-
Send Message
Posted May 3, 2013@craftovski
Yea might be good idea against multi account spammers.
-
View User Profile
-
Send Message
Posted May 3, 2013@NemesisMate
One could try to hide players with the invisibility potion effect with the vanish api too, but that would have other side effects. Might add that as an option to PlayersInCubes one day.
@craftovski
Theoretically some ip-analysis is possible.
-
View User Profile
-
Send Message
Posted May 3, 2013Hey guys i have a question. Is it possible to add an option with fast relog to look at IP's not only names so when you get attacked by spambot soon same ips would get temp banned, and if they continue to spam perm banned.
Thx
-
View User Profile
-
Send Message
Posted May 3, 2013@NemesisMate
Invisible by potion? That can be seen really easy. A plugin could fix that by hiding the player completely using the vanish api of Bukkit but you can't really prevent that at near distance on another way I fear.
@MattIPv4
Check here: http://dev.bukkit.org/server-mods/nocheatplus/pages/nocheat-plus-development/jenkins/
Latest development build supports it already.
-
View User Profile
-
Send Message
Posted May 3, 20131.5.2 Update??
-
View User Profile
-
Send Message
Posted May 3, 2013@MyPictures
The real problem I'm having with tracers is that users can fight better (so it's near distance) and attack invisible players really easy (that's the real problem and why I said to fake invisible users their near location). If it cannot be done, I'll live with that xD, it's not existential.
-
View User Profile
-
Send Message
Posted May 3, 2013@NemesisMate
You can ask for support on the Spigot community, nearly all plugins should work with it too. The problems with PlayersInCube is that it breaks /vanish and other plugins that make use of the VanishAPI.
Spigot simple doesn't send player locations if the players are too far away from each other which makes tracers kinda useless (It also saves some bandwidth) . You can also configure it at which distance it should start hiding players from each other.
-
View User Profile
-
Send Message
Posted May 3, 2013@MyPictures
I would like to use Spigot but the times I tried it there were any or other plugin that was doing the server don't work. I'll try with PlayersInCubes but if players are near, tracing it's working too doesn't it?.
Isn't there a way to ofuscate invisible players on server-side?, something like when player is invisible send false position, maybe change it a little bit so you see bubles a little bit "moved" from it original position (Even do not send invisible players position data).
-
View User Profile
-
Send Message
Posted May 3, 2013@NemesisMate
Tracers or radar hacks are client sided and cant be seen by the server. Use plugin PlayersinCubes or better the server mod Spigot to limit those kind of hacks.
@fireboy369
No you just need to deop and demote yourself because if you have "*" permissions or OP then NC+ will let you bypass all checks.
-
View User Profile
-
Send Message
Posted May 2, 2013Okay So I Downloaded the .jar file, i put it in the plugins folder and restarted the server. The plugin is installed but it doesnt detect hacks and it doesnt stop them either! D: Please help. I installed nodus and tried flying in survival and It doesnt stop me from moving. Is there anything else i need to install, If so, please reply. Thanks.
-
View User Profile
-
Send Message
Posted May 2, 2013Users can use tracer cheat with nodus.
I'm using Bukkit1.5.1-R0.2 with NoCheatPlus 3.9.0-RC-b488
-
View User Profile
-
Send Message
Posted May 2, 2013@asofold
yes were on the latest dev of NCP (507 at the time)
Let me know whatcha find :) I'm interested!
-
View User Profile
-
Send Message
Posted May 2, 2013@CraftySubZero
Please make a ticket for this issue with more information. I will still have a look at it and try to reproduce.
@NemesisMate
I'm still trying to reproduce this but i'm not able to, please provide us more informations on this ticket: http://dev.bukkit.org/server-mods/nocheatplus/tickets/487-unable-to-move-with-boats-because-of-survival-fly/
I'm interested in your researching of this.
@x_clucky
NC+ 506 and higher are compatible with MC 1.5.2, you can find them on our jenkins build server.
-
View User Profile
-
Send Message
Posted May 2, 2013A question and a notification:
Is there a jenkens build available for 1.5.2 yet?
My ticket: http://dev.bukkit.org/server-mods/nocheatplus/tickets/528-false-survival-fly-check-leads-to-death-by-fall-damage/
-
View User Profile
-
Send Message
Posted May 2, 2013Every time a player drive a boat is kicked by flying :S.
-
View User Profile
-
Send Message
Posted May 2, 2013Players are also getting teleported back when running and jumping through vines. OP's receive the survival fly notification. Is there anyway I could possibly resolve this as well :(? Thanks in advance.
-
View User Profile
-
Send Message
Posted May 1, 2013@LordKainzo
Thanks, i will have a closer look. It is intended to spam :).
@Delfofthebla
Just to confirm: You tested the setting for NCP build 507?