NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted May 31, 2013what is the problem here:
"14:05:55 [WARNING] [NoCheatPlus] DataMan inconsistencies: missing online players (1) | changed player instances (1)"
thx
-
View User Profile
-
Send Message
Posted May 31, 2013@MasterGabeMOD
@RobotFire2
Eh don't exaggerate, it's not like we get a general "block this client it has xyz" every day, it's ok to make us aware of client-mods names in time :). Also i would not claim that there does not exist some sort of flying or almost-flying bypass in theory (not trying to lure client devs into finding "it", though).
@kingfan65
Thx, good to know :).
-
View User Profile
-
Send Message
Posted May 30, 2013Thanks this really helped me to stop hackers :D
-
View User Profile
-
Send Message
Posted May 30, 2013@asofold
Excuse my server admin @RobotFire2 for trying to grab into this conversation.
The kinky client is a "replacement" of nodus. You can find it on the nodus forums.
1: I already told you about the exploit in creative mode to allow any level enchantments.
2: No, it cannot bypass NoCheatPlus survival fly, it bypasses AntiCheat.
If there's any bypasses for NoCheatPlus, I will report it to you guys with proof.
-
View User Profile
-
Send Message
Posted May 30, 2013@HOUSEMASTERR
http://dev.bukkit.org/server-mods/nocheatplus/pages/documentation/configuration/#w-size-18px-blockbreak-subsection-size
It depends on what actually happens, though. If you have faster-block-breaking skills like with mcMMO you have to do something completely different. On low tps or bad client connections (ncp does adapt to tps, but seemingly it does not help here), you can increase the grace setting first (double it) and check what happens. Increasing the delay is also possible, but it gets subtracted from every singly block break, while grace is the amount of time a player is allowed to mine faster monitoring a period of roughly 2 minutes.
-
View User Profile
-
Send Message
Posted May 30, 2013With default generated settings, when TPS is below 20 at even 19 or 18, everyone is failing the block breaking check constantly which is making blocks constantly re-appear and mining becomes pretty annoying. What can I change to reduce the check failing with slightly lower TPS?
-
View User Profile
-
Send Message
Posted May 30, 2013@RobotFire2
1. Spawning items in creative mode i assume.
2. We are nocheatplus :) - they most likely can not fly. I won't believe it until i see it.
3. "bypasses" tend to be adaptions these days.
Did you try the client? It could easily be a scam to get your password.
We need more specific input on if you actually can do anything without being in creative mode or op or having bypass permissions.
@flip284
We don't yet filter exact repetition messages. But you can check out the chat.text section of the configuration link above - increase the repeatself weight (at the cost of 'yes' and 'hi' being penalized) - and you could also enable the words engine in the player section for chat.text (this will penalize word repetition within short time checking each player individually not global, so repeating whole sentences is most expensive).
So you can do something, but repetition is not yet fully covered.
-
View User Profile
-
Send Message
Posted May 29, 2013@MyPictures
Ok thank you an I have posted comments in the ticket's I did
-
View User Profile
-
Send Message
Posted May 29, 2013Can someone explain to me what i need to put to make it so spammers cant repeat sentances?????
thanks..
-
View User Profile
-
Send Message
Posted May 29, 2013I found this dumb hacking client called Kinky that bypasses tons of Nocheat stuff. It lets you spawn items over the usual in enchantments,. You guys need to fix this out. Many servers are suffering (over 100)! WE NEED YOUR HELP!
-
View User Profile
-
Send Message
Posted May 29, 2013@howy7214
This message simple says that NC+ failed to connect here to output anynmous statistic data. You can prevent that by setting reporttometrics to false in your config file. However this won't crash your server because metrics are collected on another thread and not on the main one. Got any crash logs, server logs or anything. NoCheatPlus and CraftBukkit versions?
-
View User Profile
-
Send Message
Posted May 29, 2013Hi your plugin is crushing my server it does not work with PermssionEX so I change my permission system to essentials group/Manager an its still crushing the server
2013-05-29 19:52:44 [WARNING] [NoCheatPlus] Metrics error: ERR (SocketException): Unexpected end of file from server
I Will send the error that crushes the server with permssionEx in a ticket because it is a huge error an there is an error when starting the server Please look into it Thank you
-
View User Profile
-
Send Message
Posted May 29, 2013@MasterGabeMOD
Hope also. Should be possible to implement something in NoCheatPlus which protects against such things but @asofold is currently working on some other parts. You could make a ticket to remind him ;P
-
View User Profile
-
Send Message
Posted May 29, 2013@MyPictures
I do hope they try preventing this, the enchantment exploits are as powerful as Tim The Enchanter. One hit kill, player dead.
-
View User Profile
-
Send Message
Posted May 29, 2013@YLivay
Yes you can do that. There are two ways to do it API-wise:
A tiny bit of introduction to this can be found on the page describing the API, linked in the "downloads and more section in the description above. We will certainly re-structure this overview page some time not too distant in the future, also planning on slightly better structured and more detailed docs.
-
View User Profile
-
Send Message
Posted May 29, 2013Hi. Can I programatically (temporarily) allow an action that NCP would normally detect as a violation? Or can I request NCP to run a manual check on an action the player did and getting an lv on it? Even false positives?
Is there a documentation for an API or should I just go through your repo?
-
View User Profile
-
Send Message
Posted May 29, 2013@MasterGabeMOD
Minecraft basically allows to spawn, enchant, ... everything in creative game mode. You can even spawn primed TnT over mob eggs by using a cheaty client and the server will simply allow this. The Bukkit team is aware of this (made a ticket long time ago) but I guess they don't see a need to prevent this in any way.
-
View User Profile
-
Send Message
Posted May 29, 2013@Slappygilmore
More details needed, make a ticket and show us some log entries and maybe server console output of the time when such happened. Please provide output of the "ncp version" command with it. A plugin list can help too (pm if not public).
@MasterGabeMOD
We are aware of it and are considering to add something.
You allow items from creative mode to be used in survival? That's pretty dangerous, there are/were also exploits around with mob spawn eggs. I can not recommend allowing to mix creative and survival into the same world, it doesn't feel like exploits are getting less with time.
-
View User Profile
-
Send Message
Posted May 28, 2013I'm not sure if you guys are fully aware of this, or can do anything to stop this, but there's a hack client that allows you to create level 1000 items. Here's a screenshot of the exploit:
This hack client is called "Kinky", and there's some new functions you're able to do with NoCheatPlus or AntiCheat bypass. The level 1000 exploit is only possible through creative, however, it's very annoying as this is one hit kill situation, and seems to spread across my servers. I'm not sure if this is something the bukkit team would have to patch or if this is something the NoCheatPlus team could stop.
EDIT: The whole screenshot did not come through. You can view the whole thing here: http://i.imgur.com/f42fShe.png
-
View User Profile
-
Send Message
Posted May 28, 2013My players keep glitching through the ground into the void & into suffocation. I deleted the previous folders regenerated everything; tried everything I can do... Any suggestions?