NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted May 6, 2012@Aangiix3
Remove NoCheat rather.
NoCheatPlus is building upon the code of NoCheat, while NoCheat is not being developed further.
-
View User Profile
-
Send Message
Posted May 6, 2012I have NoCheat and NoCheatPlus...should I remove NoCheat?
Or do I have to keep them both?
-
View User Profile
-
Send Message
Posted May 6, 2012As soon as I installed it it shut down my server.
-
View User Profile
-
Send Message
Posted May 6, 2012@drdeft I have this data from the CraftBukkit profiling option:
This does not show sort term lag spikes of course, but those appear in all handlers now and then, supposedly by IO and/or thread switching.
Still the above data shows that NoCheatPlus roughly uses 1/10000th of a second per PlayerMove event in average (not the fastest server @ 2.4 +.- GHz). Assuming it to use just a 1/10000th of a second per event, it would mean that at 100 players all moving the total time per tick will be around 10 milliseconds for all players which would still be a critical amount of time to be used for a plugin in average.
So yes... can it be optimized ? :)
-
View User Profile
-
Send Message
Posted May 6, 2012Nolaggexamine shows that NoCheat+ makes 55ms lags on server. Is it possible to optimise plugin?
-
View User Profile
-
Send Message
Posted May 6, 2012Do you think it's a good idea to have "arrivalslimit" and "nopwnage" enabled at the same time?
Don't you think throttling players might make nopwnage less effective? I'm not sure on this one...
Edit: Also, what is the 2:5 here mean? log:nopwnage:2:5:cf
-
View User Profile
-
Send Message
Posted May 5, 2012@VasVadum
That is something the client handles/controls, not server side, unfortunately. And the 'hack' he is using (that has those enabled) is Zombe's modpack, which even with anti-cheat, THOSE still work. You'll want to talk to Tanzanite (author of the mod) to move those into the "cheat" section.
-
View User Profile
-
Send Message
Posted May 5, 2012I have a cheat expert in my server who loves cheating it seems. Can we get a few more things disabled?
Players in range, enemy spawn dark area, the information hack is a bit annoying.
Convo;
[18:20] Vas: so all cheats are disabled now?
[18:21] ~~~~: Not the information
[18:21] Vas: what information?
[18:21] ~~~~: it tells me the following
[18:21] ~~~~: my co ords
[18:21] Vas: co-ordnates aren't cheats
[18:21] ~~~~: and any players within 100 blocks
[18:22] ~~~~: where my spawn point is
[18:22] Vas: that could theoretically be a cheat but eh, you can usually see their name.
[18:22] Vas: You are a minecraft cheater expert aren't you? >.>
[18:22] ~~~~: and where is so dark enimies can spawn
[18:22] Vas: I'll try to disable that one too but it's unlikely.
[18:23] ~~~~: along with all the information about the item i hold
[18:23] ~~~~: and the xp orbs ive collected,
[18:23] Vas: Most of those are all client side stuff anyway
[18:23] ~~~~: like i said, its information
[18:24] Vas: anything else?
[18:25] ~~~~: the age of the server
[18:25] ~~~~: and how foggy it is
-
View User Profile
-
Send Message
Posted May 5, 2012@Adrenalineq
lol why don't you use Orebfuscator? Also, check out this new anti x-ray plugin.
@Neat
Can you add an option to disable fastsign in the next version. Thanks.
-
View User Profile
-
Send Message
Posted May 5, 2012@extremebukkit
Agreed!, but maybe a separate plugin?
-
View User Profile
-
Send Message
Posted May 5, 2012I think NoCheatPlus should have an anti xray feature.
-
View User Profile
-
Send Message
Posted May 5, 2012Got a lot of spam in console: http://pastebin.com/gTK9i3P7
-
View User Profile
-
Send Message
Posted May 5, 2012Can you add so that players are only visible when looking in the direction of the player so that they can't use radar?
-
View User Profile
-
Send Message
Posted May 5, 2012Hi, I've noticed two false detections:
1) moving.nofall
Jumping from ladder on a top of the ladder causes violation:
http://www.youtube.com/watch?v=29N2nu1aozA
2) moving.flying
I didn't make a screencast, but if you try to jump on a cobweb you'll get a violation.
Can it be fixed in newer versions? Thanks.
-
View User Profile
-
Send Message
Posted May 5, 2012Just noticed that the op protection code is somehow preventing the /openinv command from working from another plugin.
This is what lishid (author of openinv) said about the issue: "If you can, please tell them that whatever they're doing is changing CommandSender into a non-Player type. i.e. (sender instanceof Player) is false."
Thanks for the help in this matter.
-
View User Profile
-
Send Message
Posted May 4, 2012Why is this getting through? I checked nopwnage and it has the captcha off. Commands were global ban, ip ban, and mute to be sure...
http://www.minecraftnation.org/threads/firepele-spaming.1782/
-
View User Profile
-
Send Message
Posted May 4, 2012We have had people using inv editors somehow....any plans on fixing it?
-
View User Profile
-
Send Message
Posted May 4, 2012@NeatMonster
For the longest time I could not figure out why minecarts would randomly break and drop boat stuff, then i narrowed it down to nocheatplus plugin and then asked in irc for help.
Found out whats wrong.
[ 1:10am] Lymia Jadedwolf, http://paste.strictfp.com/27500?key=444e9b258bb13a0e969b023928180159
[ 1:10am] Lymia This code in fr/neatmonster/nocheatplus/checks/moving/MovingListener.java appears to be the cause.
[ 1:11am] Lymia It drops boat materials without checking if the vehicle is actually a boat.
[ 1:11am] Jadedwolf_ So is there a permissions I can give to avoid that
[ 1:12am] Lymia It appears to check for the player sending more vehicle movement packets than usual.
[ 1:12am] Lymia It appears that the cause of that would be lag in most cases.
[ 1:12am] Jadedwolf_ nocheatplus.checks.moving.morepacketsvehicle
-
View User Profile
-
Send Message
Posted May 4, 2012I was wondering if there was any kind of api (where this plugin has events upon it blocking stuff) so other plugins could take actions based off of the events, I couldn't find anything like that.
-
View User Profile
-
Send Message
Posted May 4, 2012So how can I assign permissions per world from within the game?