NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Jun 22, 2013@MyPictures
@asofold
Thanks, but yep, this is what has been confusing me. The default settings do not stop people from flying for me. Any ideas as to why that might be? I allow people to fly with the usual essentials.fly permission.
-
View User Profile
-
Send Message
Posted Jun 22, 2013@Michael_Nolan
I would like to see more details on these, though. The setting back would be survivalfly, the fall damage would be nofall (as explained by @MyPictures). Could use a ticket for this, to see if it is a general thing.
@Konsider
By default all checks are enabled. So you would have to give permissions to bypass a check to allow flying usually, or you would deactivate the check for one world. So i am not entirely sure how you set up your other worlds with flying enabled (!?).
-
View User Profile
-
Send Message
Posted Jun 22, 2013@Konsider
For Survival-Gamemode you just set this in your configuration file:
And that will activate the SurvivalFly check on that world, be sure your permissions are set right also. Also enable the hover check if you want to prevent players from hovering around in midair.
-
View User Profile
-
Send Message
Posted Jun 22, 2013Great plugin! :D
I wish to disable fly in the "wild" world, so I have made the wild_config.yml. Now I am confused as to what I have to do to the "survival fly" section in order to completely stop flying. I don't wish to kick people, just to completely stop them flying. Can you advise me how I can do this please? Thanks!
-
View User Profile
-
Send Message
Posted Jun 22, 2013@xicheekx
Set reporttometrics: to false in your NoCheatPlus configuration file to prevents NC+ from sending anonymous NC+ statistics to mcstats.org. More here: https://github.com/asofold/NCPDocs/blob/master/wiki/configuration/miscellaneous.creole
However its impossible that statistic collection is lagging your server because those are done in a completely different thread than main one so I fear your latency issue is coming from somewhere else. I recommend to record timings or nolagg examines which probably would show the lag causer.
@Michael_Nolan
To prevent some nasty cheats we account for fall damage (by default) even if SurvivalFly catched an illegal movement and teleported the player back because of that. You can control this behaviour in your NC+ configuration file with:
Reset means that NoFall removes all the data it counted of a player if x happens on player. Be aware that this will allow some cheats to work on your server. You could also open up a new ticket if you would like to do so, maybe there is an issue in SurvivalFly or something.
-
View User Profile
-
Send Message
Posted Jun 22, 2013[WARNING] [NoCheatPlus] Metrics error: ERR (ConnectException): Connection timed out
What can i do to stop this error?
It lags the server out..
-
View User Profile
-
Send Message
Posted Jun 21, 2013@asofold
Ty sooo much, the last thing I have a question about is sometimes when people are falling down ladders or jumping and get hit they will Tp back to where they were, and take damage if they hit the ground, but they are back to where they were. Is this nofall or something else?
-
View User Profile
-
Send Message
Posted Jun 21, 2013@nintendorichard
Might depend on your permissions plugin - did you configure it to not use op-default permissions?
nocheatplus.* is not a permission defined by NCP, rather try nocheatplus.checks, but if ops are checked then your permissions plugin is configured/working differently rather.
@jb_aero
Relayed this to: Ticket 568
Please refer to the ticket for further discussion.
-
View User Profile
-
Send Message
Posted Jun 21, 2013@MyPictures
@asofold
Updated to latest and had the same issue, even with login checks turned off. With NCP removed, logins are instant. Those tests were with only 5 players online, just now I tried with 20 and all of them got kicked, even though I still wasn't able to log in.
-
View User Profile
-
Send Message
Posted Jun 21, 2013NoCheatPlus is not allowing the operators to use hacks. I've double-checked that they are operators, and I've even added the nocheatplus.* permission to them manually. How do I fix this?
-
View User Profile
-
Send Message
Posted Jun 20, 2013@njbsaid
NoCheatPlus only supports permissions for group handling and no other ranking systems. However if you don't want to take advantage of a permissions plugin you can use "OP permissions" which simply means that OPed (/op <PlayerName>) players have all admin permissions and wont be checked for cheating but all players without Operator rights will be checked for cheating. We wont support any other ranking system and its possible that hivemc.eu and mcsg.in changed the NC+ sourcecode to fit their needs.
-
View User Profile
-
Send Message
Posted Jun 20, 2013@asofold
I do not want a permissions plugin that is what im trying to say. I have a ranking system amongst all my databases and stats and I want the servers to have 2 plugins. the core game and then nocheatplus. I have a ranking system within my database. Column names: Username, admin(int), mod (Int), vip(int), donator(int) then I set the int to 0 or 1 and my server does the rest, besides the nocheat permissions :(
-
View User Profile
-
Send Message
Posted Jun 20, 2013@njbsaid
You have to assign the permissions to players that hold that rank. Usually ranking / permissions plugins provide such features.
-
View User Profile
-
Send Message
Posted Jun 20, 2013Got any suggestions on how I can make this plugin check if a player is a certain rank in a database instead of permissions. Perhaps how hivemc.eu and mcsg.in do it?
Thanks
-
View User Profile
-
Send Message
Posted Jun 20, 2013@jb_aero
Is that a random test or does it happen on real servers with many players at all?
Could be the hard drive froze on logging to console or whatever, can't judge with that data. Did the delay happen on every single login?
-
View User Profile
-
Send Message
Posted Jun 20, 2013@jb_aero
Please update your NoCheatPlus and try again.
-
View User Profile
-
Send Message
Posted Jun 20, 2013What are you doing in PlayerLoginEvent o.o http://aikar.co/timings.php?url=5783060
I am unable to join my server usually, and everyone else gets timed out when I try to log in. The issue is much more pronounced when the player logging in has check bypasses. It's not much better with checks.chat.relog and checks.chat.logins disabled: http://aikar.co/timings.php?url=5783058
-
View User Profile
-
Send Message
Posted Jun 19, 2013@therennon
That's high expectations!
It is not possible to detect a modified client for the general case. We can only try to find actions that a vanilla client could/would not allow. Most cheats should be covered to a certain extent by NCP, so they can't use all cheats, at least they will be limited to something reasonable.
-
View User Profile
-
Send Message
Posted Jun 19, 2013Hello,
people can enter using Nodus ... and I have NoCheatPlus installed, I do?
thanks
-
View User Profile
-
Send Message
Posted Jun 19, 2013@marubal21
Let's continue discussion by pm then :).
@Ivanpro
Can you specify what you mean with "bypass" - how much faster do they heal with that method, or say how many hearts per second or 10 seconds?