NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Jul 10, 2013@pacnik123
Possible. Maybe the full stack trace gives us more clue about this.
-
View User Profile
-
Send Message
Posted Jul 10, 2013@asofold yes it wasn't anti cheat. I am currently trying to figure out which plugin is causing me this. I am not really big expert in this but do you think it might be possible someone used Name Tag for horses and named his horse with to long name and now this error started to occur?
-
View User Profile
-
Send Message
Posted Jul 10, 2013@pacnik123
It is very likely related to one/both of the plugins you mentioned (or a plugin using those), but i don't see how NCP should be related to this.
Did you update anything else as well? It looks like a color + long name tried by some plugin, ending up in something too long to send (bug/mal-configuration of some other plugin).
Edit: Can't say much though with this little information.
You should...
-
View User Profile
-
Send Message
Posted Jul 10, 2013Ever since i installed NoCheatPlus on my server im getting errors such as: internal exception: java.io.IOEXCEPTION: RECEIVED STRING LENGHT LONGER THEN MAXIMUM allowed (18>16)
Could it conflict with Name Tags or TagAPI?
-
View User Profile
-
Send Message
Posted Jul 9, 2013Great work. keep it coming :)
-
View User Profile
-
Send Message
Posted Jul 9, 2013@Xaybiance
We have compatibility with 1.6.1 in our development builds and 1.6.2 is on the doorstep.
So if you run development builds of CraftBukkit, please be prepared to also use development builds of plugins, just for fairness :).
@BeastsMC
No way for that at present, except to exempt people from fly checks completely. We will certainly add support for individual player speeds based on the walk/fly-speed API, later.
-
View User Profile
-
Send Message
Posted Jul 9, 2013Is there any way to adjust speed limits per player or rank? Say I have Rank1, Rank2, and Rank3. Using a plugin, the players can set their fly and walk speeds. Rank1 can set it to x2, Rank2 can set it to x3, and Rank3 can set it to x4. If client mods didn't exist, I could just set the horizontalspeed to 400 so none of the groups would violate it but only the top group could go that fast. However, since they do exist, if a player from Rank1 had a client mod to fly x4, NCP would allow it. I looked through everything I could find and couldn't think of a way to do this. I figure the authors know the features better than anybody, so is there anything I can do to set this up?
-
View User Profile
-
Send Message
Posted Jul 8, 2013NoCheatPlus & Compat are 2 of the 19 plugins I used for meh server. They're also the ONLY two plugins in my list that don't have compatibility for 1.6.1
Please hurry guys, griefers and hackers are at meh doorstep! (outside meh safezone)
-
View User Profile
-
Send Message
Posted Jul 8, 2013@lenis0012
Will update as soon as CraftBukkit pushes out a compatible build out for Minecraft 1.6.2. Currently the development builds on our Jenkins CI support 1.6.1 and below but we had some little issues with that new "health handling change" which pushed us back a little from releasing a recommended build for MC 1.6.1.
However a development build of NoCheatPlus that supports 1.6.1 already should also work fine on a 1.6.2 server (bukkitapionly).
-
View User Profile
-
Send Message
Posted Jul 8, 2013How is 1.6.2 support going?
Edit: I see the latest build works fine :)
-
View User Profile
-
Send Message
Posted Jul 8, 2013@Sirse
I see. Players that are not online :), technically more will be necessary to fix that. Might add something to cncp or NCP to be able to do this.
-
View User Profile
-
Send Message
Posted Jul 8, 2013@Aqelius
http://ci.md-5.net/job/NoCheatPlus/
-
View User Profile
-
Send Message
Posted Jul 8, 2013Когда под 1.6.1 будет?
-
View User Profile
-
Send Message
Posted Jul 7, 2013@asofold
If i'm OP [BuildCraft], all machines can grief in player's regions.
On ncp exempt [BuildCraft] i'm get message about that the player is not online, even if I turn on the authorization for fakeplayers.
-
View User Profile
-
Send Message
Posted Jul 7, 2013@Aangiix3
We putted those links as they wanted us to put them in. I will try to contact them again and see if they have any suggestions. Thanks
-
View User Profile
-
Send Message
Posted Jul 7, 2013The second Sponsor doesn't exist anymore. It's been down like 2 months.
-
View User Profile
-
Send Message
Posted Jul 7, 2013@Sirse
They can't be op? Not sure what can be done with them safely, but after all fake players modeled with "real" Player implementations are problematic by nature and nowhere near a "clean" technique. I don't know any working replacement for them for the tasks that they are used for typically, though.
You could execute the command "ncp exempt [BuildCraft]" (or whatever name those have) for each of the general bot players after start-up, that might do for the most things.
We might add some general exemption / command settings so people don't need extra plugins for such.
-
View User Profile
-
Send Message
Posted Jul 7, 2013@MyPictures
ProtocolLib spam like this:
[ProtocolLib] INTERNAL ERROR: Player hook NETWORK_SERVER_OBJECT failed.
EhBans spam like this:
[SEVERE] Could not pass event PlayerLoginEvent to EhBans v0.6.7.4
-
View User Profile
-
Send Message
Posted Jul 7, 2013@Slappygilmore
This has already been fixed in the latest CraftBukkit and Spigot version, update your server to fix this. Also this dupe would be way too critical to be only handled by NoCheatPlus.
@dotapurex1
Do they give us control over a special MOTD or something in the plugin channel? Otherwise you can use Spigot to limit the distance at which players can see each other.
@rtcabooservb
Already investigating on this one together with the Essentials team to find a solution. You can keep yourself updated over this ticket: http://dev.bukkit.org/bukkit-plugins/nocheatplus/tickets/580-heal-1-6-abstract-method-error-entity-regain-health/
@Sirse
What do they spam? We can inbuilt fakeplayer support that simple because the permissions plugin on your server doesn't seem to even treat the fakeplayer as a player. It doesn't fire permissions checks so NC+ doesn't know if that fakeplayer is allowed to bypass something or not. Enable fake logins and give all fake players permissions to bypass plugin stuff [BuildCraft], BuildCraft [RedPower] and so on .
-
View User Profile
-
Send Message
Posted Jul 7, 2013@MyPictures
If i'm enable fakeplayer login, many plugins start spam.
Please, add inbuilt fakeplayer ignoring.