NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted May 19, 2013Last version does kick all players while they are trying to Login via xAuth. "Flying or related". I get about 3 players report per day.
-
View User Profile
-
Send Message
Posted May 19, 2013@asofold
Is there a setting that better protects than the default?
-
View User Profile
-
Send Message
Posted May 19, 2013@DmuTpuu
Force field can not be completely blocked in theory. NCP limits the effects of force fields by a good bit, though. Is there a specific problem with it?
@lst96
The permission is: nocheatplus.checks.chat.color
The color check might not be needed for normal CraftBukkit though.
Permissions page: http://dev.bukkit.org/server-mods/nocheatplus/pages/documentation/permissions/
-
View User Profile
-
Send Message
Posted May 18, 2013I'm trying to give players ability to use colors. I gave them (with groupmanager/essentials) essentials.chat.color. I looked when they tried to send message and it threw up warning blocking the color. Then I looked through ncp permissions and tried adding nocheatplus.chat.color to bypass the check and it still blocked the chat color. How do I fix this?
-
View User Profile
-
Send Message
Posted May 18, 2013@MyPictures
There is nothing written about the solution to my problem. Maybe there are extenuating setting the force field?
-
View User Profile
-
Send Message
Posted May 18, 2013@NemesisMate
Doors are considered to be like air. The reason is that given latency, doors triggered by buttons and similar would be almost impossible to get through for high-ping players.
Also blocks that don't have full bounds are considered to be ok for interacting through, for both simplification and not to create too many false positives.
So players might in fact be able to hack-move through doors. To make chests more safe behind doors, they have to be far enough from the door (not sure: 6 blocks ?) or the must not be accessible in a roughly straight line from behind the door. Placing glass blocks so the player would have to "boomerang around" those to access the chest might be a (crude) workaround for chests that are to remain visible from outside the door.
-
View User Profile
-
Send Message
Posted May 17, 2013@MyPictures
Players can steal from chests without problems through solid walls (stone/wood/etc) but is really random. Sometimes the blocks can be broken sometimes not, sometimes nocheat doesn't allow to open the chest sometimes it do. All other cheat controls are working great.
Edit: Ok, they can open chests if a door is in between the chest and the player. Maybe is because of the not full blocks, I'll do more tests. Is this being blocked too or is a Minecraft limitation?.
My config file is: http://pastebin.com/c9LGcVEy I'm using NoCheatPlus 3.9.1-RC2-b510 and Bukkit 1.5.2-R0.1. (Using ProtocolLib 2.4.3 too)
-
View User Profile
-
Send Message
Posted May 17, 2013@NemesisMate
@asofold
Don't forget the versions of NoCheatPlus and CraftBukkit also list your NC+ config file of something like pastebin or similar. Do the other checks of NoCheatPlus work as they should (Prevent fly etc..)? if not you might have damaged it somehow. As @asofold say the Visble check together with the direction check will prevent cheaters from interacting through walls.
-
View User Profile
-
Send Message
Posted May 17, 2013@NemesisMate
They should not be able to steal from chests "well hidden behind walls", due to the interact-visible check.
If however the "wall" is not solid enough, for instance mixed with diagonal air blocks or not fully solid blocks, then it might get through the check.
Can you describe how the setup looks like for which it works with NCP installed?
Concerning freecam: What players do in freecam usually either is fully client side with no way of detection in theory, or it means some action that is not possible with a vanilla client and which might get prevented by checks. Any "actions" mean that the client sends something to the server, so we have to indirectly detect if the action is allowed or not, we can't look inside of the client, we just get what Minecraft/CraftBukkit make of what the client sends to the server.
-
View User Profile
-
Send Message
Posted May 17, 2013Players can steal from chests with Freecam.
They break the wall that they normally have restricted with freecam, goes to the chest, steal it and is done. (Wall is not really broken but they don't see it till they relog)
Is there a way to control this? maybe forcing all actions done by a client be associated to the players running that client?
-
View User Profile
-
Send Message
Posted May 17, 2013@iltkamil
Okay. Yea SurvivalFly also prevents spider hacks. Seems to be another issue because you're NC+ and CraftBukkit version seem to be fine. I would recommend to create an ticket so we can keep track of your issue and hopefully solve it.
@DmuTpuu
More infos here: http://dev.bukkit.org/server-mods/nocheatplus/tickets/51-forcefield-aimbot-reach/
NoCheatPlus will detect it at some point.
-
View User Profile
-
Send Message
Posted May 17, 2013How to block a force-field Nodus ?
-
View User Profile
-
Send Message
Posted May 16, 2013@MyPictures
I have version 3.9.1-RC2-b510. and craftbukkit 1.5.2. I have people on my server who can spider? A searched my config and there is no spider protection unless it goes with survivalfly and such.
-
View User Profile
-
Send Message
Posted May 16, 2013@Shevchikden
No not yet. If you mine something with an unknown item that NC+ will throw out FastBreak alerts because FastBreak doesn't know that tool that the player used. FastBreak will allow instant breaks for unknown blocks where the data is missing.
-
View User Profile
-
Send Message
Posted May 16, 2013Another one question for mods compactability.
Is there a table in which i can define a breaking speed of material with item_id in hand?
(For example i want to set breaking speeds for bronze pickage)
-
View User Profile
-
Send Message
Posted May 16, 2013@iltkamil
What version of NoCheatPlus and Craftbukkit do you have? Do you have OP or bypass permissions maybe? Changed something on the configuration file? What version does your config file have (first line /plugins/NoCheatPlus/config.yml)?
-
View User Profile
-
Send Message
Posted May 15, 2013Hey for some reason it wont block spider... Any fixes or where I can fix this?
-
View User Profile
-
Send Message
Posted May 15, 2013@stickerking
No currently we only have a check that prevents hackers from exploiting signed books blabla.. but the freecam dupe has been fixed by Craftbukkit since long time ago, so nothing to worry about I guess?
-
View User Profile
-
Send Message
Posted May 15, 2013Does this mod somehow prevent item duplication such as the one done with freecam
-
View User Profile
-
Send Message
Posted May 15, 2013@asofold Thx for explanation.