NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Jul 23, 2013@WoZo
That is due to the Essentials /heal command.
This would be Ticket 598.
You could post your Essentials version there as well as the output of the "ncp version" command, that would be helpful for reference.
I hope it is worked around in the development builds from NCP, probably fixed on Essentials side too. I am still lacking a bit of feedback. We are planning to push another release to BukkitDev, soon.
-
View User Profile
-
Send Message
Posted Jul 23, 2013Getting this Health error: http://pastebin.com/f4mMx2yb
-
View User Profile
-
Send Message
Posted Jul 22, 2013@bulby13
You can remove all the cancel entries in the action lists for the survivalfly check (and maybe morepackets.).
Be sure to have the allow-flight setting enabled in the server-properties, otherwise players get set back by Minecraft/CB.
-
View User Profile
-
Send Message
Posted Jul 22, 2013How do I set it so it only logs violations, not knock back the player(e.g: when you fly, you get knocked back to the ground)?
-
View User Profile
-
Send Message
Posted Jul 22, 2013@bigcubemc
Please fill in a ticket stating the output of the "ncp version" command, what the warp plugin is, what alerts show up, what happens instead of warping.
-
View User Profile
-
Send Message
Posted Jul 21, 2013I installed nocheatplus and now it wont let my users /warp.
Says they have no access??
-
View User Profile
-
Send Message
Posted Jul 21, 2013@craftovski
As stated on IRC, we don't have something that can catch the fast fishing (yet). The interact checks are meant to catch extremes and have to still allow things like using shears with pretty high frequencies. Could use a check, probably...
-
View User Profile
-
Send Message
Posted Jul 21, 2013Is there a check that prevents too fast clicking for example fishing?
Thx
-
View User Profile
-
Send Message
Posted Jul 20, 2013Ticket 598 is about this kind of issue.
Please provide output of the command "ncp version" there. There is a little more information on what might be done in the comments there.
-
View User Profile
-
Send Message
Posted Jul 20, 2013How can i fix this error? http://pastie.org/8158382
Occurred when /heal command was used.
-
View User Profile
-
Send Message
Posted Jul 19, 2013Very nice plugin, always updated. Unlike other plugins...
-
View User Profile
-
Send Message
Posted Jul 18, 2013@Sirse
Currently NCP only checks the block-id.
So only one entry for the id is necssary (/possible).
-
View User Profile
-
Send Message
Posted Jul 18, 2013@asofold
Hmm... For example - GregTech mod contents very many blocks with one ID and different metadata (ex. Macerator 3154:1 and Furnace with ID 3154:1). NCP checks all blocks with one ID, or i'm need manually set all data?
-
View User Profile
-
Send Message
Posted Jul 17, 2013@MyPictures
Thanks.
-
View User Profile
-
Send Message
Posted Jul 17, 2013@uvbeenzaned
Of course there can be false positives, 3rd person view is probably not even tested much, can't say if it has much influence though, unless opponents stay in one spot each. In any case the question is on what kind of evidence they did the banning. Do they share logs about that? Inspecting those could tell more.
That playing style might trigger checks more, especially with latency in situations where players seem to halt for a while, though they do not. One should know that they already have moved on the server side, so hits might trigger checks. This is why it would be interesting what they base the banning on (actual logs, thresholds). Some server owners might consider using 3rd person view with the near.instant turning rather as cheating, though.
@DeanUKMC
No nice way for it (could/should make a ticket, since rolling files and such things would make sense, clearly).
-
View User Profile
-
Send Message
Posted Jul 17, 2013Hey, quick question:
Is there a quick/easy way to delete the .log file? Should I just delete the actual file or is there a command to do it in a nicer way?
Thanks.
-
View User Profile
-
Send Message
Posted Jul 17, 2013Hello devs. I am coming here to ask a few questions about this plugin. I would like to know if this plugin can at all give inaccurate readings on whether a player is cheating. My brother plays on Iceycraft Kit PVP and they use this plugin and they say that he is hacking all the time like with aimbot. The thing is, I sit beside him in the same room every day watching it all and he has never hacked. He simply turn so fast to get other players behind him because he uses 3rd person view. So now they want to ban him off the server. Is there anything I can do to give them proof about this plugin or something that he isn't hacking? Thanks! Love the plugin still!
-
View User Profile
-
Send Message
Posted Jul 17, 2013@Sirse
There is no simple magic on this! You have to override the flags of the modded blocks manually.
If you know what the block does you can try to set flags same as those of similar blocks, in order not to allow too much. The flags of normal blocks get dumped if you set the checks.blockbreak.debug flag to true manually.
If you want to quickly make the blocks playable and don't mind players being able to cheat a little with those blocks (pass through, "fly" through), then you can override the flags with the same flags (in the section: compatibility.blocks.overrideflags):
Set entries like "ITEM_ID": GROUND+IGN_PASSABLE+GROUND_HEIGHT
ITEM_ID would be the number or the bukkit name of the material.
If the blocks still pose problems you can override them with:
ITEM_ID: GROUND+IGN_PASSABLE+GROUND_HEIGHT+XZ100+HEIGHT100
That would force NCP to ignore the block size the server tells but to assume the block to be "full size".
-
View User Profile
-
Send Message
Posted Jul 17, 2013Can i'm enable ignore flyhack check if player stay on blocks from mods without editing config section ignorepassable?
Могу ли я включить игнорирование проверки на флайхак и прочие читы, если игрок стоит на блоках из модов, без внесения оверврайтов модов в ignorepassable?
-
View User Profile
-
Send Message
Posted Jul 16, 2013Nice plugin!