NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Sep 16, 2013@mat41997
Not sure. Have to think about this one yet but I disagree with it because it may cause a high load on player join.
@Tombula77
Rubix uses player simulation for its aura, so it basically tries to simulate a real player (advanced bot). Have you tries real player vs Rubix aura yet? Do they have a big advantage with that aura cheat (if any)? We will try to improve our fight checks at some time: http://dev.bukkit.org/bukkit-plugins/nocheatplus/tickets/51-forcefield-aimbot-reach/
-
View User Profile
-
Send Message
Posted Sep 16, 2013The Rubix client can use all sorts of Aura hacks without being detected by NCP. Is any way to block this?
-
View User Profile
-
Send Message
Posted Sep 15, 2013add pleas this plugin: http://dev.bukkit.org/bukkit-plugins/anti-proxy/ on nocheatplus
-
View User Profile
-
Send Message
Posted Sep 13, 2013@DjSmeXhy
The statistics service is not run by us, all we/you can do is turn it off for the moment. Usually statistics help us to judge some things (mostly number of players/servers and which versions of the plugin and server software are in use), but if the service is down then just disable it.
-
View User Profile
-
Send Message
Posted Sep 13, 2013@MyPictures
Thanx and when you repair it? ...in new update?
-
View User Profile
-
Send Message
Posted Sep 13, 2013@DjSmeXhy
Its nothing that harms your server. It just tells you that NoCheatPlus failed to connect with mcstats to share statistics: http://dev.bukkit.org/bukkit-plugins/nocheatplus/tickets/630-metrics-403-error-forbidden-http-access-error-code/
-
View User Profile
-
Send Message
Posted Sep 13, 2013Hi, why I have this error? :
-
View User Profile
-
Send Message
Posted Sep 12, 2013@Noumpas13
What alerts do you see?
-
View User Profile
-
Send Message
Posted Sep 12, 2013they are put on their inventories. There is no world guard there. and i see the alerts too.
-
View User Profile
-
Send Message
Posted Sep 12, 2013@Noumpas13
I would rather assume WorldGuard flags or something similar to conflict there. I don't see what NoCheatPlus does to this - what makes you think that NCP alters anything on that? Are there any check alerts? Are items put into players inventories or dropped onto the ground?
-
View User Profile
-
Send Message
Posted Sep 12, 2013I have an issue with the NoCheatPlus with other plugins. Like mob arena. I give upgraded items and rewards after some levels on mob arena, but nocheatplus reads this as a spawn item, and they dont get their rewards. Can i somehow bybass nocheatplus in certain areas or for certain plugins?
-
View User Profile
-
Send Message
Posted Sep 12, 2013@Mike10221999
Search for the text "cmd:kick" that should find kick actions, remove the action (e.g. cmd:kickfly). However i would rather increase the level to kick for ten fold than removing it completely.
@MyPictures
I think it is just the new client behavior to allow the client to move after falling through the floor and still move. Due to latency the moves then are very big because the client has not yet received/processed the teleport back to where he joined.
-
View User Profile
-
Send Message
Posted Sep 11, 2013@Mike10221999
There is unfortunately no global "kick" setting because each check runs with its own actions which differ a lot. Remove cmd:kickfly from "actions: log:flyshort:3:10:f cancel vl>100 log:flyshort:0:10:if cancel vl>400 log:flylong:0:5:cif cancel vl>1000 log:flylong:0:5:cif cancel cmd:kickfly" of the SurvivalFly Moving section and this check wont kick anymore. However that behavior is rather unusual to us. What does that player do? Does it happen to all players or only specific ones? SurvivalFly kicks only if VL is 1000 or over is reached and this level is actually quite high for SurvivalFly. Versions of CraftBukkit and NoCheatPlus?
-
View User Profile
-
Send Message
Posted Sep 11, 2013Hello,
Sometimes player will join my server, they will be on for 5 secs, then I will get a complicated message form NoCheatPlus, usually about Survival fly, then the player gets kicked. When they try to rejoin the same thing happens until they give up. I want to universally disable kicking with NoCheatPlus in the config. Is this possible without going down to every single command? Or is there something else I can do to fix this problem?
Thanks!
-
View User Profile
-
Send Message
Posted Sep 11, 2013@Exagerate
I recommend to ask support on the developers of your ChatManager plugin. Seems a little strange here but such mistakes are mostly caused by wrong Permissions or other plugins conflicting with that ChatManager plugin. Good luck!
-
View User Profile
-
Send Message
Posted Sep 11, 2013I disabled nocheat and the colours still dont work, so sorry for false accusations! Someone else told me that their server had problems owing to nocheat, but this clearly isnt the same for me. Colours stopped working randomly for no reason when they used to for us, but this isn't your problem. Thanks for the response!
-
View User Profile
-
Send Message
Posted Sep 11, 2013@Exagerate
Are you sure its caused by NoCheatPlus? Do you use EssentialsChat? Permissions set right? CraftBukkit version? NoCheatPlus version? Minecraft once had a old vulnerability where you could type in colors without having permissions to do so (I believe that's fixed now but not sure). You can try disabling this check by setting color: active: true to false in your NoCheatPlus configuration file. Do you see something special if you do /ncp info <player>? NoCheatPlus will nearly always create a violation alert if it blocked something.
-
View User Profile
-
Send Message
Posted Sep 11, 2013This plugin has broken essentials chat colour (players being able to use &6 in chat for example). Please provide information on how to fix this.
-
View User Profile
-
Send Message
Posted Sep 10, 2013@Fr33stylerhd
We can't change the default command, that should/must be done by the server software.
We can only alter individual commands behavior, to adapt to how they react to permissions not being present.
-
View User Profile
-
Send Message
Posted Sep 9, 2013@asofold
I was think this plugin change default unknown command, maybe in your next version to add this feature please :)