NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted May 28, 2013@machanicdude
@MyPictures
Continue discussion at cncp please :) - seems some parts of current MachinaCraft might not be covered - need more details...
-
View User Profile
-
Send Message
Posted May 27, 2013@machanicdude
Use CompatNoCheatPlus together with NoCheatPlus: http://dev.bukkit.org/server-mods/compatnocheatplus-cncp/
It will make the machinacraft stuff compatible with it so they don't throw out anymore false positives. "break out of sync" is the frequency check which prevents players from placing/breaking multiple blocks at the same time.
-
View User Profile
-
Send Message
Posted May 27, 2013I've been using this plugin for a while.... and i would like to give my donators the permission to use http://dev.bukkit.org/server-mods/machinacraft/ but..... NoCheatPlus says block break out of sync when they try to use the drill... Could some one please tell me what permission it is to get it to work for my donators? Most of the machines work, like the planter and the hover pad but i want them to beable to use them all. Please, help!
-
View User Profile
-
Send Message
Posted May 27, 2013@FQuimson23
This is getting confusing. Could he take a look to your permissions file please? You can open up a ticket and we will take a look for you if the problem still isn't resolved.
-
View User Profile
-
Send Message
Posted May 27, 2013@asofold
WorldBorder did the trick though. By setting an over-sized border and then trimming it, it deleted all the extra .mca files since they would always appear to be out of whatever border you set.
-
View User Profile
-
Send Message
Posted May 27, 2013@MyPictures
ok here's what I have setup already, command permission nodes for admin and above and opOverrides set to FALSE. Its still letting me do hacked client stuff unlike when i demote my self to moderator it says something about the hacked client. I just need that to happen on admin and above. (I know i shouldn't trust strangers but one of my friends NEVER stops using a hacked client so I want to teach him a lesson of what are the consequences of having a hacked client)
EDIT: Now I have All of the permission nodes (thanks to mozilla firefox for selecting all the i needed).
-
View User Profile
-
Send Message
Posted May 27, 2013@FQuimson23
Are you OPed? If you have /op then GroupManager will give you - "*" by default (you can change that in the configuration file of GroupManager).
-
View User Profile
-
Send Message
Posted May 27, 2013@DelphiCraft
Can't do much for them. Minechat needs to implement some more moving heuristics to be compatible with anti hack plugins. I assume they just let the player move downwards forever to prevent the "floating too long" kicks by Minecraft itself, but of course anti hack plugins can't let players move through stone etc.
What you can do is to remove the logging from the passable check, so NCP sets them back silently.
@FQuimson23
You should describe what you want more precisely: a) what do you want b) what is the problem?
Please be specific about what group should be able to do what and what not...
@PrinceDeo
The files are as real as files can be when letting the server load a specific chunk. There might be implications with other plugins, if any plugins read the chunks and modify them or put stuff into databases. Also if a world generator generates maps in chests for instance, then they might get stored globally. Should be no problem to remove the files, should also be no problem to keep them (depending on taken disk space).
-
View User Profile
-
Send Message
Posted May 26, 2013@MyPictures
I worried simply because there is a difference between having naturally generated .mca region files from exploring and having a plugin generate fake/bugged .mca files for no reason/not intended just spamming my region folder.
-
View User Profile
-
Send Message
Posted May 26, 2013@MyPictures
I need help to set it up on Essentials Group Manager. I tried everything but when I reload it, It still lets me (using a hacked client for testing purposes ONLY) highjump, waterwalk, etc. AS AN Owner / Co-Owner / Supreme-Admin / Admin. And No I didn't feel like typing in the WHOLE permission nodes (too much for me).
-
View User Profile
-
Send Message
Posted May 26, 2013Hai.
Minechat users are tripping Passable flags.
-
View User Profile
-
Send Message
Posted May 26, 2013@NemesisMate
AuthMe is freezing players in mid air which causes SurvivalFly to think that the player is flying (well he/she is basically flying). The NoCheatPlus "core" won't support any other plugins over a API or something else. You need to ask AuthMe for support to use the NC+ API and exempt players that are in pre login or you can ask on CompatNoCheatPlus for support. If the authme plugin allows to give special permissions BEFORE a player logged in then you can also give bypass permissions for a short time which could fix your issue also.
-
View User Profile
-
Send Message
Posted May 26, 2013When users are logging-in with Authme they have a false SurvivalFly... maybe can be there added to don't check survival fly before the user is logged-in? If you don't support logging-plugins I understand it... but It could be great (Not priority... I think that isn't a problem for the player, only an annoying thing for admins :D)
-
View User Profile
-
Send Message
Posted May 26, 2013@FQuimson23
Hacked clients can't auto promote themselves because the permissions system is completely server sided and there is nothing the client can do about it. If you also want to check Admins, Owners or other staff groups you simple have to take away the NC+ bypass permissions. - "*" will allow them to bypass all checks and more so remove it or put a negative NC+ permission under it like: "- -nocheatplus.checks.*" for example. However you also need to take away their permissions to edit your permissions file with ingame commands (permissions nodes can be found on the permissions plugins dev page).
Anyways Admins should be trusted so giving OP or - "*" to unknown/untrusted peoples is insecure and can massively harm your server, so choose wisely and don't trust strangers.
@PrinceDeo
Yea but if you allow them to walk far away as they want why do you even worry about the mca files? I mean someone could just take a boat and sail off trying to reach the far lands which probably bugs out your server (hope not). Server owners that have a border set can simply trim it again to get rid of those chunks that got loaded wrongly by previous NC+.
@killermanaa2
We have some docs about it: http://dev.bukkit.org/server-mods/nocheatplus/pages/documentation/configuration/#w-how-actions-work-an-overview
Some checks such as SurvivalFly or BedLeave will kick if xy VL is reached so you can take those as example. If you still need help feel free to poke me or @asofold for more detailed help.
-
View User Profile
-
Send Message
Posted May 26, 2013Is there a way to kick someone after a certain amount of violations? Please tell me i am a newbie so yea
-
View User Profile
-
Send Message
Posted May 26, 2013WorldBorder trim feature does get rid of all the extra mca files. The only risk is I have to find the right coordinates to create a border otherwise it winds up deleting regions it shouldn't. Other than that, I might just leave them there, although seeing as the extra mca files are all so easy to distinguish I might just go ahead and delete them myself. After all, any region file that is 20 KB can't have much of anything.
EDIT: Nevermind, all I had to do was create an overly sized border (10000x10000 for example) and use the trim command. Seeing as those mca files will always appear as being generated outside of the border, they will always get deleted by WorldBorder.
-
View User Profile
-
Send Message
Posted May 26, 2013@MyPictures
I don't use WorldBorder. I could give it a try on my test server though and see what it does.
-
View User Profile
-
Send Message
Posted May 26, 2013I need help, I want nocheatplus to actively check all ranks including owner and everything i have above admin because i have 2 ranks other than owner (Co-owner and Supreme-Admin). I need to be sure that hacked clients won't get to Supreme-Admin.
-
View User Profile
-
Send Message
Posted May 26, 2013@PrinceDeo
Not sure but doesnt the WorldBorder trim command get rid of those or does it just set them to 0 kb? However you won't notice any difference with performance because the chunks are unloaded there anyways, you simple have more mca files now.
-
View User Profile
-
Send Message
Posted May 26, 2013@PrinceDeo
It does mean a little overhead on the disk, but there should hardly be any impact of a few never-loaded chunks.
@rasnyderiii
So the log file shows new violation entries, though file logging is turned off ?