NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Jun 5, 2013I try to use VoxelFlight's noclip feature.
It still prevents me from passing through walls (it just resets my position) but it wont log anything (it will if I remove myself from the exemption list). As soon as I disable NCP I can noclip without problems. I found out that as soon as NCP is active, VoxelFlight calls /noclip enabled and /noclip disabled commands (which don't exist).
What can cause this? Any help is appreciated.
Bukkit: git-Bukkit-1.5.2-R0.1-b2771jnks | NoCheatPlus: 3.9.2-RC-b520 | VoxelModPackPlugin: 10.0.0
-
View User Profile
-
Send Message
Posted Jun 4, 2013@eodomo
Sounds like a CraftBukkit/Minecraft bug. However your console should print out an error when this happens, could you please upload this on dropbox or use pastebin to give us more informations? We also need your Craftbukkit and NoCheatPlus versions.
@chopstick121
You cant fix this by using NC+s config file anyway. I'm still inspecting on your problem, you could support us if you would create a ticket for this problem. More Informations are always good :)
-
View User Profile
-
Send Message
Posted Jun 4, 2013I have spigot and lastest dev for ncp
-
View User Profile
-
Send Message
Posted Jun 4, 2013I started having a new problem recently. Whenever somebody is in Creative mode and they middle click on a block, it puts the block into their current inventory slot and another block in the slot that is 5 spaces to the right. If the player is already hovered over a space that is above the 5th slot, the person is kicked from the server with the message 'Internal Server error'. Also, if the player tries to use the block that goes into their current inventory slot, the block is placed, then immediately deleted, and the block is removed from the player's inventory.
-
View User Profile
-
Send Message
Posted Jun 4, 2013@xclucky
Cant see the video "video is private". You need to provide us more information anyway since the visible check changed a lot in the latest development builds.
-
View User Profile
-
Send Message
Posted Jun 4, 2013I keep failing the visable check. Here is a video documenting the issue: http://youtu.be/KyyZvkUg7ss
Would it be possible to fix this? Thank you.
-
View User Profile
-
Send Message
Posted Jun 4, 2013@asofold
60 FPS (V-Sync), same or better gear, critical hits and some vanilla fight experience seem to work pretty good against those bots ;P. It really depends on how you attack and fight a bot but I sometimes manage to kill a bot or take it down to to 3-2 hearts before dying. If 2 players fight against 1 bot the bot will most likely get beaten to ground (exempting autosoup servers or similar ones).
-
View User Profile
-
Send Message
Posted Jun 4, 2013@MyPictures
Can we claim "easy to kill" :p ? But certainly possible i guess.
-
View User Profile
-
Send Message
Posted Jun 4, 2013@xicheekx
Could it be related to this issue here: http://dev.bukkit.org/bukkit-mods/nocheatplus/tickets/554-memory-leak/ ?
@bernardopmbr
Is that cheating player strong or can he still get owned by other players? NoCheatPlus will catch the most OP fight cheat attempts for sure but smart aimbots that adapt to NoCheatPlus wont be that easy to detect (they mostly simulate a normal player and are easy to kill). You can keep yourself updated about here: http://dev.bukkit.org/bukkit-mods/nocheatplus/tickets/51-forcefield-aimbot-reach/
If we get a new idea against fight cheats we will most likely post on that ticket there.
-
View User Profile
-
Send Message
Posted Jun 4, 2013A new hacked client has started to ``infect`` minecraft servers, many people are starting to use it, it has a kill aura that can bypass nocheatplus, please, try to improve FIGHT Checks against that.
-
View User Profile
-
Send Message
Posted Jun 3, 2013@asofold
Kewl kewl just interested.. lol I have noticed the memory problem, we have 16GB so that isnt a problem.
Care to add my skype? xiCHEEKx And if you know any good graphics artists I will pay them :)
-
View User Profile
-
Send Message
Posted Jun 3, 2013@Puttemull
Yea in that case it would be better to make a ticket with more informations. If this really turns out to be true then its better if CraftBukkit itself is hopefully going to implement something against this.
-
View User Profile
-
Send Message
Posted Jun 3, 2013@o0Julia0o
Answer is here: Ticket 553
-
View User Profile
-
Send Message
Posted Jun 3, 2013@MyPictures
Thanks for the quick reply. It's a creative server but the players don't have access to /i or /give or anything similar to that. Should I create a ticket then?
-
View User Profile
-
Send Message
Posted Jun 3, 2013i get: "21:25:05 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (4 instead of 2)"
what does this mean.. it nocheatplus activ if i get this warning?
thx
Julia :)
-
View User Profile
-
Send Message
Posted Jun 3, 2013@Puttemull
Inventory's in Minecraft are server sided so a client cant simply spawn in items by using a mod. The server will deny that request and throw out "You don't have permissions for this..." (depends on the /give or /i plugin you use). Its possible to make NoCheatPlus block non vanilla enchantments or even make it remove all enchantments from any item but the problem here is that some servers need those custom enchantments for a special game style or whatever.
I would suggest to check your plugins and permissions to be sure that they don't allow any normal player to spawn in items or enchant them like this. If you still believe that its possible to spawn in items using "All-U-Want Inventory Editor" then you need to make a ticket for us which shows all steps on how to do it.
-
View User Profile
-
Send Message
Posted Jun 3, 2013I have recently been having issues with players applying custom enchantments using "NBTEdit" or "All-U-Want Inventory Editor". This has become a huge issue since there are swords with level 30 000 enchantments floating around on the server. Would it be possible to block these enchantments using NoCheatPlus or do you think I should look for help elsewhere?
Thanks, Puttemull
-
View User Profile
-
Send Message
Posted Jun 2, 2013@asofold
I have spigot and lastest dev for ncp
-
View User Profile
-
Send Message
Posted Jun 2, 2013@xicheekx
Some servers also add -XX:MaxPermSize=254M to their server start-up, not sure why but it may solve some PermGen issues? Really new to this issue...
-
View User Profile
-
Send Message
Posted Jun 2, 2013@xicheekx
I can't check it too deeply right now, but that NCP appears first just has to do with the event-priority-level a plugin has registered its listener for, apparently NCP is the one that gets the event first, but the other plugins fail too. Further even there are messages about plugin-enable events failing which is a very peculiar thing to happen. So at first glance this looks like "just out of memory somehow".
The permgen-space exception has been seen before with plugins that did generic stuff like ProtocolLib, but i can't really say if/how it happens. You might show this error to the ProtocolLib dev and ask if they have an idea about it. Though i don't know if it is related to ProtocolLib i am sure he/they know more about this one than i do.