NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted May 24, 2013@MyPictures
I don't think so it's another plugin interfering on that, the only possible are worldguard and factions (And I'm pretty sure is not it fault). I'll create a ticket one of these days with more info and pictures.
-
View User Profile
-
Send Message
Posted May 24, 2013is there a maven repo for plugins building against NCP?
-
View User Profile
-
Send Message
Posted May 23, 2013@o0Julia0o
Hello Julia. Yea you simple need to drop the NoCheatPlus.jar into your plugins folder and start up your server and it should work without problems. Users don't need an additional permission to be checked, you might want to add nocheatplus.admin.notify and nocheatplus.admin.info to your moderators (or similar) group to give them more control about NC+.
NoCheatPlus mostly uses permissions to let players/groups bypass some checks (for example if they want to use a fly hack and you want to allow that). All permissions can be found here: http://dev.bukkit.org/server-mods/nocheatplus/pages/documentation/permissions/
For problems feel free to write here or better create a new ticket for us.
-
View User Profile
-
Send Message
Posted May 23, 2013how do i install it for a standard? just copy the NoCheatPlus.jar in the plugin-folder and the server is save(r) against cheater? I am using PEX. The admin uses *.-node. Do any other groups need to have some nodes from this plugin needed?
thx
julia :)
-
View User Profile
-
Send Message
Posted May 23, 2013@rourke750
Hmm we have SurvivalFly and Passable that normal should take care of this but not sure how they react on minecarts. Worth a try.
-
View User Profile
-
Send Message
Posted May 23, 2013@MyPictures
Yes, also https://github.com/erocs/Humbug/blob/master/src/main/java/com/untamedears/humbug/Humbug.java#L836. This fixes a bug where players can use mine carts to get under un reachable places in bedrock.
-
View User Profile
-
Send Message
Posted May 23, 2013@rourke750
We will give credits to you and your team if we get something from you and thanks I will take a look at it. However you can also do pull requests for NoCheatPlus if you have any ideas/suggestions for some new checks or bug fixes.
"Fixes a rail duplication bug." - Is this that dupe bug with pistons involved?
-
View User Profile
-
Send Message
Posted May 23, 2013@MyPictures
Like I said before doesn't matter, I just thought it would of been cool if we had contributed and it was a miscommunication between one of the developers and me. We will probably remove our code and I pasted it here so if we have a certain feature you may want you can add it in.
-
View User Profile
-
Send Message
Posted May 23, 2013@asofold
It depends on how @IwuvMineCraft25920 wants to have it. If he wants every player to be able to /setspeed then its probably better to do this over the configuration file. If he however only wants a specific group of players to be able to do this then its better to just let them bypass the whole fly checks.
And yea I think it was this plugin that a lot of our users recommended to take a look at: http://dev.bukkit.org/server-mods/pearlfix/
But its entirely coded from scratch yea.
@rourke750
I guess it was simple a misunderstanding because neither I nor @asofold knew everything about "Humbug" back in the time when we made and tested the "enderpearl fix" for NC+. You can however disable the enderpearl check of NC+ if you prefer to use your own one, should work without any problems.
@NemesisMate
Could you please open up a new ticket for us with some screenshots and more infos? I can't reproduce your problem. Could possibly be another plugin or something else that interferes with the visible check?
-
View User Profile
-
Send Message
Posted May 23, 2013@asofold
I tried it again and yes, they can steal without problem through blocks. The scenario I tried is with chests next to the wall I break (touching the wall), I put freecam, I break the blocks being far from it so I can break it(If I am on a distance when I can normal break It it is not broken) and I come near enough to see the chest and open it. The block within the chest and I is shown again but the chest is opened and NoCheatPlus isn't blocking it.
Bukkit 1.5.2-R0.1 NoCheatPlus 3.9.1-RC2-b510
-
View User Profile
-
Send Message
Posted May 23, 2013@asofold
Here is the source code: https://github.com/erocs/Humbug/blob/master/src/main/java/com/untamedears/humbug/Humbug.java#L146
-
View User Profile
-
Send Message
Posted May 23, 2013@MyPictures
I would not lightly give bypass permissions. In fact you can edit the speeds for the creativefly check and you can edit the speedingspeed for the survivalfly check and just give the speeding bypass permission, for the case you want more fine grained control.
@Enrux
That is only necessary if you want ingamechat notifications sent to a non-player with the notify permission (some plugins might provide such a thing).
@rourke750
@MyPictures
The implementation is entirely from scratch, we just had a look at another plugins description. Our checks combine some methods some of which have been implemented for the passable check (not really inside of that) - i don't know if it works better or same as yours, would be interested in your opinion :).
-
View User Profile
-
Send Message
Posted May 22, 2013@MyPictures
Never mind, Its a plugin we use on a server which has all our small fixes, everything is open source, and we added some code to stop people from pearling through walls and doors. I noticed that nocheat did this too and I emailed everyone saying that we should remove ours so no conflicts occur and one of the main developers said that maybe someone from here asked to borrow the code. But a few minutes later he replied saying that it was just the owner of MinerAp asking. sorry for the trouble. Also no problems would of arisen, I just thought it would of been cool.
-
View User Profile
-
Send Message
Posted May 22, 2013@rourke750
Who is humbug (link to account pls)? The "cancel ender pearl if not shoot in air" was inspired by another plugin but the other (big) part of the ender pearl fix was completely developed by @asofold and is now implemented in the Passable check.
-
View User Profile
-
Send Message
Posted May 22, 2013For the anti pearling through doors and walls did you take that from humbug?
-
View User Profile
-
Send Message
Posted May 22, 2013@IwuvMineCraft25920
setspeed compatibility is not implemented yet so you have to give them bypass permissions for survival and creativefly check. For mcmmo you have to use CompatNoCheatPlus.
-
View User Profile
-
Send Message
Posted May 21, 2013Does this thing essentials and mcMMO as a hack? Because Essentials can set speed and mcMMO if you rank in mining you can break blocks maybe a little bit faster...not sure about that though
-
View User Profile
-
Send Message
Posted May 21, 2013@Enrux
Yea it was a little pull request of Cobi: https://github.com/NoCheatPlus/NoCheatPlus/pull/14
-
View User Profile
-
Send Message
Posted May 21, 2013What is the utility of usesubscriptions ? I didn't found it in the documentation.
-
View User Profile
-
Send Message
Posted May 21, 2013@DmuTpuu
It doesn't matter on what hardware/network speed you have on your server, if a player has a bad PC/Internet He/She will still lag out and cause NC+ to throw out false positives.
Documentation is somewhat available for this (still needs work): http://dev.bukkit.org/server-mods/nocheatplus/pages/documentation/configuration/checks/combined/
http://dev.bukkit.org/server-mods/nocheatplus/pages/documentation/configuration/checks/fight/
If you really want to make the checks stricter you need to spend a lot of time on try and error.