NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted May 25, 2013The latest update fixed the bug with the chunk loading issue. However by now one of my maps has around 20 extra .mca region files generated from that bug. I can probably guess which ones are those, but I run the risk of deleting actual functional regions. Do they do anything at all? Could I just let them sit there since after all they are not over 30 KB each or do I have to get rid of them?
-
View User Profile
-
Send Message
Posted May 25, 2013@MyPictures
logfile. Sorry it was unclear as I thought - /ncp info name - only meant that.
-
View User Profile
-
Send Message
Posted May 25, 2013@rasnyderiii
Why would you want to turn logging completely off? NoCheatPlus counts how many times a player failed something and executed actions based on that "level". For example if player tries to move 10 blocks in 1 sec then run xy action on him. You can only turn off notifications in-game, console and on logfile but VLs can't be disabled completely because that would make all check unusable for your server (logging is basically counting).
@x_clucky
Yes a hacker could basically inject code in Reis minimap to make it ignore the motd from the server. I recommend to use Spigot which will limit how far players can see each other and no the name tags are rendered client side, all what you can do is hide the player locations based on distance (Spigot). Its possible to make somewhat of an advanced "hiding" system that for example could hide players/mobs from other players that stand behind a wall or something similar but that probably will impact performance of your server.
-
View User Profile
-
Send Message
Posted May 25, 2013@MyPictures
So if a player knew what they were doing and made a hacked version of Rei's Minimap, could they technically ignore the motd and show the map anyway?
Also, do you have any idea of a way to block mods that highlight the names above a player's head when squatting? The only idea I had that came to mind was to not send the player's packets if they are squatting behind a wall, but somehow make them not appear as "offline" as VanishNoPacket does...
-
View User Profile
-
Send Message
Posted May 25, 2013NoCheatPlus 3.9.1-RC2-b510.
I have all logging set to false yet /ncp info name seems to show increasing reports. Is there a new way to turn of ALL logging? (i did regenerate config)
-
View User Profile
-
Send Message
Posted May 25, 2013@saxons12
How can they make traps with freecam? And how can they tpa in denied areas with freecam? Because if a player uses freecam then his body will stay and not move for the server. Its basically client sided movement. NC+ prevents freecam cheaters from interacting through walls and also prevents exploiting godmode with it.
@NemesisMate
Okay I wrote you back. Will take a look together with @asofold and try to solve this.
-
View User Profile
-
Send Message
Posted May 25, 2013@MyPictures
Ok, I did a video showing the problem, I send it to you by pm, I don't want to show cheaters how to cheat more :D.
-
View User Profile
-
Send Message
Posted May 25, 2013I don't think this has Anti Free Cam? My players can use freecam during pvp or to make traps. They can send /tpa request in a denied area with freecam and thus lure others.
Can this be implanted? Or is there a plugin for it?
-
View User Profile
-
Send Message
Posted May 25, 2013@marubal21
Yea we need to find some free time where we can finally do that but at the moment we are both pretty busy. Glad we could help out.
-
View User Profile
-
Send Message
Posted May 25, 2013@MyPictures
Thanks for the help, it seems to work pretty good. You guys should bring configuration page up to date. Nonetheless great plugin.
-
View User Profile
-
Send Message
Posted May 25, 2013@MrChunga
./ncp exempt command can only be executed by those that have the permission to execute it and we mostly have that implemented for testing or if you need someone temporary not checked by something of NC+.
-
View User Profile
-
Send Message
Posted May 25, 2013@MrChunga
You can configure NCP to not send any ingame notifications (logging -> ingamechat: false). You could also either turn off file logging or console logging (or both).
-
View User Profile
-
Send Message
Posted May 25, 2013How to make that NCP doesn't tell me when someone hacks. I just want it to block them from hacking. ( I don't want him to alert me when someone is hacking. Just block him ). And I don't want /ncp exempt bcs he can hack again then
-
View User Profile
-
Send Message
Posted May 25, 2013@x_clucky
NC+ sends a motd to the client which enabled or disabled a mod on it. Currently its not possible to do this over worlds because the client only checks motd on login (if I'm not mistaken). Is still under testing by me and @asofold but yea, you would have to try and see what happens.
@killermanaa2
Thats all about actions: http://dev.bukkit.org/server-mods/nocheatplus/pages/documentation/configuration/#w-how-actions-work-an-overview
Here an little example for the noswing check: actions: cancel vl>10 cmd:kick cancel
This would kick a player that throws out a VL over 10 "vl>10"
@marubal21
Yea it does. NoCheatPlus 510 and higher implements a check for enderpearl (I recommend to use 520).
-
View User Profile
-
Send Message
Posted May 25, 2013With this plugin is there way to prevent Ender Pearl glitching through walls? Such as in these vedios : http:www.youtube.com/watch?v=1E0u5Hq5-qc, http:www.youtube.com/watch?v=XHsT9L1Iodg, http:www.youtube.com/watch?v=chFzWz_-kt4
-
View User Profile
-
Send Message
Posted May 24, 2013Thanks mypictures, Just another question, since i am not that good with configs, How can i make players get kicked after a certain amount of violations? Help would be appreciated :)
-
View User Profile
-
Send Message
Posted May 24, 2013How does this plugin block client mods such as Rei's MInimap? And using PEX can I make this per-world, or would it cause issues?
-
View User Profile
-
Send Message
Posted May 24, 2013@killermanaa2
No. At the moment it will mostly prevent player movement stuff. For AntiXray I suggest to use Orebfuscator or an statistic based antixray.
-
View User Profile
-
Send Message
Posted May 24, 2013Does this block xray?
-
View User Profile
-
Send Message
Posted May 24, 2013@metalhedd
Not yet but might come in the future.
@NemesisMate
Would be really cool if you could find some time to do it and yes WG and Factions should not interfere with it but you never know.