NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted May 9, 2013@asofold
Any luck with this? *Hopes*
-
View User Profile
-
Send Message
Posted May 9, 2013@MyPictures
Ohai.
-
View User Profile
-
Send Message
Posted May 9, 2013Hey herpingdo or something.
-
View User Profile
-
Send Message
Posted May 8, 2013@LordKainzo
Not yet, but since the 1.5.2 version is out i will soon try to fix this.
@ShadowKillerx
Do you have more details?
-
View User Profile
-
Send Message
Posted May 8, 2013@server075
No, I'm not a cheater (I had never understood how players like to cheat, is boring and it breaks the game at all) but I like to think on all cheats that could be because to do something well you have to think bad :D.
-
View User Profile
-
Send Message
Posted May 8, 2013@MyPictures
Thanks for your help, it doesn't seem to be Jobs fault because of it doesn't use LoginEvents and it always happens after one.
I'll try on bukkit forum.
Oh, thread removed because of: "We do not support offline (cracked) servers."
That's really disappointing.
-
View User Profile
-
Send Message
Posted May 8, 2013Today i saw someone with working flyhack on my server.
I have NoCheatPlus 3.9.1-RC2-b510 for 1.5.2
-
View User Profile
-
Send Message
Posted May 8, 2013Any luck with the movement/velocity stuff for Jump skill?
-
View User Profile
-
Send Message
Posted May 8, 2013@asofold
Do you mean the KeepAlive sniffer by that? I guess its also possible to avoid damage with other methods but not 100% sure.
-
View User Profile
-
Send Message
Posted May 8, 2013@kukelekuuk00
That is because they do nothing. If they interacted with anything (attack, blocks. ..) they would become vulnerable soon due to the godmode check. So the use for actual cheaters is very limited (can't move, attack etc.).
I could make it so that chat and command times also get checked for guessing activity, but they could just sit there and not even chat. To really make them vulnerable we would have to access obc/nms internals, it is prepared but not yet implemented.
-
View User Profile
-
Send Message
Posted May 8, 2013People using minechat (stupid/broken iOS app for chatting on MC) are able to completely ignore damage being dealt to them, they don't take damage and the server doesn't apply damage either, they're simply in godmode.
While this means that MineChat is broken, this also means there's an exploit that allows for people to completely ignore damage, this would be bad in the hands of hackers. I request this to be fixed ASAP, seeing as this is a rather serious bug for any pvp server.
using build 510
-
View User Profile
-
Send Message
Posted May 8, 2013@jack588
No problem it seems all very clear. It seems the time to investigate if the player is using a client - it can also happen if he is using a cheat client in deactivated state, because some clients are in fact not using all-vanilla behavior even if deactivated.
So two things next:
-
View User Profile
-
Send Message
Posted May 8, 2013@asofold
currently its happen only player with the same IP (2 account). this happen everytime he's mining and digging, sometimes his VL is upto 5000. btw i removed the cmd to kick the player, but now the log is flooding my chat @.@
sorry if i spelled wrongly and you dont understand, english is not my native language
-
View User Profile
-
Send Message
Posted May 8, 2013@jack588
Only to random players that are lagging or to certain players?
From my logs i only see very few interact-speed violations and those are from one distinct player plus few players that probably only joined once shortly, all in all very seldom. We do use mcMMO and it should happen much more if it was a bug, though there can be bugs that only happen under certain circumstances.
It is really hard to trigger interact/speed, because it allows much more than block breaking, so either the player had a connection-delay or extreme client side lag, or it is a special client in use that (be it cheating attempts or not) sends more/other events.
How often does it happen (how many players online in average, how many times per day)?
-
View User Profile
-
Send Message
Posted May 8, 2013@asofold
only happen to player that lagging
-
View User Profile
-
Send Message
Posted May 7, 2013@x_clucky
I planned the weekend differently since file approval was pending (including re-upload).
Of course we are looking at your ticket. See there for further discussion.
-
View User Profile
-
Send Message
Posted May 7, 2013Thx NemesisMate,
its good to know that lots of tings are blocked. (and i know that it works)
for the rest i love this plugin i wish it came as default option like a update in mc servers
Cheating is for noobs! and if your a cheater you know iam right.
if you like ill set a link to this page (or your website) on my site. at plugings i use. (no page made yet for plugins)
-
View User Profile
-
Send Message
Posted May 7, 2013So nobody is ever going to look at my ticket? http://dev.bukkit.org/server-mods/nocheatplus/tickets/528-false-survival-fly-check-leads-to-death-by-fall-damage/
-
View User Profile
-
Send Message
Posted May 7, 2013@NemesisMate
Seems NC+ is not involved in that crash. Does the Jobs plugin store player data asynchronously to mysql db? Do you use any special CraftBukkit mod or something? You probably get better support on the Bukkit forums.
@server075
NC+ currently will allow players to speed hack (onGround only) a tiny bit (they lose more hunger and it doesn't work forever anyways), currently we have no solution to completely solve this.
Forcefield isn't = Aimbot. Forcefield hacks tend to automatically hit players that are near the hack execute while aimbots tend more to just "aim/look" to a player. Don't worry too much about it. NC+ will catches the worst forcefields/aimbots on your server (kill players with 1 hit and OTHER ).
-
View User Profile
-
Send Message
Posted May 7, 2013i meant to say nodus, thx for pointing out my misspelling. me have never cheated so didn't know the correct name.
so people can walk speed 1.1 and use aimbots and hit people out of range? i use the default NoCheatPlus. Games: Survival Games and Islandworld.
ps, i dont get it?
What steps will reproduce the problem?
1. Download Nodus or another hack client of choice.
2. Turn on forcefield hack.
3. Win every PVP fight by hitting people out of range.
"translated with google"