NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Jul 16, 2013@GodWar101
No "latest" please - just the output of "ncp version" :).
Edit: Also make sure your Essentials version is up to date, they are in development phase and might still adapt.
-
View User Profile
-
Send Message
Posted Jul 16, 2013Any ideas about the following error (I'm using the latest NCP jar): http://pastebin.com/7sU4SqH9
Seems to be related with Essentials /heal command (every time you type this command NCP drops this error).
-
View User Profile
-
Send Message
Posted Jul 15, 2013@asofold
XD
-
View User Profile
-
Send Message
Posted Jul 15, 2013@MyPictures
Sure...
-
View User Profile
-
Send Message
Posted Jul 15, 2013@asofold
I highly doubt those things being caused by NoCheatPlus because NC+ would throw out an alert if godmode or xx check would do something. The invulnerability right after joining I would doubt also because those 2 guys seem to have this issue after xx time of having joined. I think we should always ask for /ncp version and /ncp info <player>.
-
View User Profile
-
Send Message
Posted Jul 15, 2013@MyPictures
There are some things that get modified by NCP, such as invulnerability right after joining the server or with godmode checks, fall damage. I also prefer to see plugin lists and output of /ncp version for those.
There have been reports about similar in 1.5 already, i suspected other plugins/mods at that time.
For normal damage dealt that leaves more than half a heart to the damaged player a one hit kill should not be possibly be caused by ncp.
If we stretch a little, the god mode check could due to a (slightly far-off) bug be capable of keeping players vulnerable so that fast-clicking or cheating attacks might land multiple hits within very short time, thus allowing to kill "instantly". I do not have reason to believe such bugs are possible, but you can check the damaged and killed player with "ncp info PLAYERNAME". If godmode is shown it might indicate that it could be involved, and we would have to investigate (vl output, really related to that incident or a false positive or even plain cheating).
-
View User Profile
-
Send Message
Posted Jul 15, 2013@Nickshelton80
@SkeetEmUp
NoCheatPlus doesn't modify actions, all it does is cancel player actions if it detects cheating. Does this issue happen every time or is it quite rare? Versions of CraftBukkit and Minecraft? Was the sword modified with a special enchantment maybe? Could also be a bug in CraftBukkit or Minecraft.
-
View User Profile
-
Send Message
Posted Jul 14, 2013@Nickshelton80
Im getting the same issue. Every since 1.6 people can get this glitch and be OP.
-
View User Profile
-
Send Message
Posted Jul 14, 2013There's this weird glitch on my server (And I believe I've seen reports on a few others) Some users including myself have gotten this glitch where you can one hit kill a person with a sword. I know it's not a hack because well the glitch happened to me. I have no plugins that modify damage to items to my knowledge, (I asked the mcmmo developers if it was them). This never happened until 1.6 and above. So I'm not sure what it is but I was thinking maybe nocheat had something to do with it. D:
-
View User Profile
-
Send Message
Posted Jul 13, 2013@Red_Jay
Yea you can remove that in the action config of SurvivalFly. More here: http://dev.bukkit.org/bukkit-plugins/nocheatplus/pages/documentation/configuration/#w-how-actions-work-an-overview
-
View User Profile
-
Send Message
Posted Jul 13, 2013On my server players are repeatedly getting kicked for "flying" from using boats or getting hit with knockback. Because they get kicked, Combatlog kills them and they use their stuff. Is there any way to make it so players don't get kicked from NoCheatPlus or from "flying"?
-
View User Profile
-
Send Message
Posted Jul 13, 2013@sharqman
Still unique i guess :p...
@blazzzer213
The chat.commands check is responsible for command spam. However the normal monitoring range is like 5 seconds only, so the normal limit goes for that five seconds.
The shortterm limit covers the number of ticks specified (in 1/20th of a second). Due to lag commands can always arrive in bunches like /balance + /pay notch 0.05, typed quickly and with some networking delay or lag on either side they may arrive in the same tick. So setting the shortterm limit too low might pose problems for normal players.
The command spam system is not that flexible to sort out certain commands with a higher weight or so. Not sure what scenario you have in mind (certain commands?).
@ledhead900
Spigot has parts of Orebfuscator built in, though the plugin does not run slower but has more protective features (according to @lishid).
-
View User Profile
-
Send Message
Posted Jul 12, 2013@asofold
Actually he may better of using Spigot.
-
View User Profile
-
Send Message
Posted Jul 12, 2013Hello. How do I configure so that people can't spam commands a lot of time? Like, spam 3 commands and then wait for like 5 secs?
-
View User Profile
-
Send Message
Posted Jul 11, 2013someone likes doughnuts :P
-
View User Profile
-
Send Message
Posted Jul 11, 2013@Aqelius
Click that "Jenkins" button and get a development build of NoCheatPlus.
-
View User Profile
-
Send Message
Posted Jul 10, 2013Когда обновление под 1.6.1 ?
-
View User Profile
-
Send Message
Posted Jul 10, 2013@pacnik123
What versions are you using of nametags and tagapi? That was an old error due to colour prefixs making players names too long. Update and check config for option to not change names that are already 16 characters.
-
View User Profile
-
Send Message
Posted Jul 10, 2013@Poebatfire
Not built into NCP - i suggest you consider having a look at Orebfuscator (link in the text above).
-
View User Profile
-
Send Message
Posted Jul 10, 2013I love it! anti exray??