NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted May 21, 2013@asofold
That's what kind of car is on my server CPU: Intel Xeon E5-1650 3.8GHz (Cores: 6, Threads: 12) RAM: 64 GB DDR3 ECC Network: 200 Mbit / s SSD: 2xIntel SSD 320 Any delays or not. Tell me please, what do I change in the config file?
-
View User Profile
-
Send Message
Posted May 21, 2013@DmuTpuu
We will try to collect more overview and alternative config documents, but i can't promise it happening quickly. Basically the default configuration is an attempt to minimize false positives while being as hard on cheating as possible. Certainly more is possible but if we knew it it would already be the default configuration, it needs a good bit of testing. If your server does not focus on pvp and has lower latency player connections you might be able to go more strict though.
@flip284
We don't have a strict way to filter them out, but you can make them more expensive (set the repeatself weight higher, you could also activate the player/words option, though it needs a bit more memory). However those ways might also penalize similar messages, needs testing a bit (setting chat.debug to true will output some info to the console, might be useful for testing locally, not for production servers though).
@marubal21
Simple questions often are best :) - it might be no difference in fact, but in general server mods other than Spigot might change the obfuscated names for CraftBukkit or Minecraft internals, also the package names, such that if an access-module of NCP loads, despite it can not work on that mod, it can lead to trouble. Thus setting bukkitapionly to true for mods other than CB or Spigot is important to prevent that. The bukkit-api-only module ensures that only the Bukkit-API is used, which all the other mods implement to run Bukkit-plugins, so NCP should work with that one, though some features might be inaccurate or disabled. An overview page for this is still missing...
-
View User Profile
-
Send Message
Posted May 20, 2013@MyPictures
Thanks for the help earlier, and i apologize for the upcoming noob question, but could you explain the difference between running NC+ with bukkitapionly true and with it false on an MCPC+ server?
-
View User Profile
-
Send Message
Posted May 20, 2013Is there a way to make it so players cannot repeat messages in chat?
-
View User Profile
-
Send Message
Posted May 20, 2013@MyPictures
The default configuration disables beat players who are behind his back
-
View User Profile
-
Send Message
Posted May 20, 2013@MyPictures
I've seen it, I need a configuration that is set up, with minimal false positives
-
View User Profile
-
Send Message
Posted May 20, 2013@DmuTpuu
Here all the methods that currently NC+ has against forcefield hacks: http://dev.bukkit.org/server-mods/nocheatplus/tickets/336-forcefield-still-working-after-the-instalation/#c1
-
View User Profile
-
Send Message
Posted May 20, 2013@MyPictures
ForceField punches well if you look at a player only if the player is behind him Nocheatplus blocks
-
View User Profile
-
Send Message
Posted May 19, 2013@MyPictures
ok thanks, i'm doing it right now.
-
View User Profile
-
Send Message
Posted May 19, 2013@marubal21
Yea. Be sure to have bukkitapionly enabled in your config file: http://dev.bukkit.org/server-mods/nocheatplus/pages/documentation/configuration/compatibility/
With MCPC+ you can only run NC+ in forced BukkitAPI mode at the moment.
-
View User Profile
-
Send Message
Posted May 19, 2013@MyPictures I'm using MCPC+ 1.5.2 Build #439
-
View User Profile
-
Send Message
Posted May 19, 2013@marubal21
You seem to run a unsupported CraftBukkit version which limits some components and features of NoCheatPlus. Which server mod are you using together with NC+? (/version)? Spigot should work fine but other ones such as Libigot, MCPC and other require NC+ to only use BukkitAPI without NMS access.
-
View User Profile
-
Send Message
Posted May 19, 2013i just installed the plugin, and while testing i noticed this warning during server start. I'm not sure if it means anything important, and i'm hoping someone could shine some light on it. Thanks in advance!
[INFO] [NoCheatPlus] Enabling NoCheatPlus v3.9.1-RC2-b510 [WARNING] [NoCheatPlus] Could not set up native access for your specific Minecraft + server-mod version. [WARNING] [NoCheatPlus] API-only MCAccess: Some features will likely not function properly, performance might suffer. [WARNING] [NoCheatPlus] Check for updates at BukkitDev: http://dev.bukkit.org/server-mods/nocheatplus/ [WARNING] [NoCheatPlus] Development builds: http://ci.ecocitycraft.com/job/NoCheatPlus/ [INFO] [NoCheatPlus] McAccess set to: 1.4.6|1.4.7|? / Bukkit-API [INFO] [NoCheatPlus] Added block-info for Minecraft 1.5 blocks. [INFO] [NoCheatPlus] Version 3.9.1-RC2-b510 is enabled.
-
View User Profile
-
Send Message
Posted May 19, 2013@nejcneo
That should be done in xAuth itself or in CompatNoCheatPlus. Nothing we can fix here directly into NC+ because there is nothing wrong here, the player is technically floating in midair.
@DmuTpuu
The default configurations are pretty much optimal set for that. I gave you a link to that ticket because we discuss most of the forcefield stuff over there if we find something new against such hacks.
Did you do a 1 vs 1 fight between fight cheater and normal player? Was there a big advantage? By default NC+ will pretty much detect everything OP in fight hackingsuch as killing a player with 1 hit or dealing damage way over vanilla reach and other stuff that is clearly cheating. Aimbots simple "simulates" a normal player so its hard for us to distinguish it. NC+ also tries to account for lag which gives a lot less false positives for your players on lag.
@4lfalfa
NC+ forces all players to only place boats in water (prevents glitches with boats such as no clipping through walls and other). You can give them the nocheatplus.checks.blockplace.boatsanywhere permission which allows them to place boats everywhere.
-
View User Profile
-
Send Message
Posted May 19, 2013im useing the latest dev build and when i right click with a boat in the hand on a button, it cancels the event, is there any way to fix this?
-
View User Profile
-
Send Message
Posted May 19, 2013@asofold
I should kick for Angle, but not configured. I need to set it up without affecting the normal players
-
View User Profile
-
Send Message
Posted May 19, 2013Ignoring xAuth for 5 seconds after join? This will not kick players without any permission setting
-
View User Profile
-
Send Message
Posted May 19, 2013@nejcneo
We can't do much there i assume, since xAuth freezes players in-air. Does the plugin support special permission groups for before login or commands to be executed for after join of a player and after registration/authentication?
xAuth should set the players as flying or access anti hack plugins API to exempt the players temporarily.
@AgentTripleC
Most likely they can still see them by either typing them, or by using the help command or the tab-completion for commands. NCP does not override other plugins commands permissions (yet). I could add such an option but it needs accessing CraftBukkit internals and would not be activated by default because of the high annoyance potential with extra permissions needed.
-
View User Profile
-
Send Message
Posted May 19, 2013@DmuTpuu
What exactly do you want to protect against? Do you have a certain type of fighting-situation in mind?
Of course you can make some fight checks and the combined.improbable and the combined.yawrate settings more strict, but the risk is to get more false positives for normal players.
-
View User Profile
-
Send Message
Posted May 19, 2013I set my protect plugins top true, yet peopel can still view my plugins! Why is that?