NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Oct 12, 2013@iiAtomiikzZ
It does not need as much updating as NCP, see the project site. Also mind development versions.
@bulby13
It is a somewhat temporary solution to present details in a compact way:
-
View User Profile
-
Send Message
Posted Oct 12, 2013What does the (n1a1m1) mean in /ncp info?
-
View User Profile
-
Send Message
Posted Oct 10, 2013Please update NoCheatCompat!
-
View User Profile
-
Send Message
Posted Oct 9, 2013@crunkazcanbe
nocheatplus.checks is the parent permission of all checks. Read more here: https://github.com/asofold/NCPDocs/blob/master/wiki/permissions/permissions.creole
-
View User Profile
-
Send Message
Posted Oct 9, 2013what is the permission to bypass all checks to give admins and me the owner ??
-
View User Profile
-
Send Message
Posted Oct 9, 2013@asofold
I also commented in "(set active to true of course to enable it!)" x.X.
-
View User Profile
-
Send Message
Posted Oct 9, 2013@asofold
Okay, thank you for letting me know. Time to search I guess :P
-
View User Profile
-
Send Message
Posted Oct 9, 2013@MyPictures
"active: false" :p
It also could work to just forbid "pt op" and "pt deop" and the other variations, though that can only work if essentials does not put through
"pt op"(with two spaces etc.).@Nickbbeezy
I don't think much can be done there, because NCP can not tp you to the ground underneath "somewhere", but back to where you jumped from. I regard that as a seperate issue at present.
@deleted_9935739
"Can happen" - it certainly can happen with any kind of tool, given heavy networking or client side lag. Question is if it happens all the time rather or not, and also if it happens to many/all players or only to few.
Concerning dirty tricks for SurvivalFly:
It is possible to set a higher default sprinting speed without altering the actions (just add "sprintingspeed: 110" to the survivalfly section for 10% more leniency).
-
View User Profile
-
Send Message
Posted Oct 8, 2013@MyPictures
Forgot I asked that fastbreak question. I don't use any plugins that would make block breaking faster. It can happen with an unenchanted stone pickaxe. I use 3.10.5-RC with Spigot.
-
View User Profile
-
Send Message
Posted Oct 8, 2013@MyPictures
No special abilities at all, at first I thought it was a connection problem and it was being picked up as lag but it happens to a decent amount of players that jump out over open areas.
I'll tweak the setting a little until a patch is applied, thank you. :)
-
View User Profile
-
Send Message
Posted Oct 8, 2013@chickenputty
@Nickbbeezy
Do you guys give those players special moving abilities? Speed potion? Speed boost of other kind? Seems they move faster then normally possible (on the video).
I and @asofold are trying to debug this issue and we already found some clue (could reproduce it): http://dev.bukkit.org/bukkit-plugins/nocheatplus/tickets/646-specimen-survival-fly-false-positive/
It seems the client is getting confused of those "complicated" and repeated jumps so it sends wrong moving data to the server which causes differences in heuristics of SurvivalFly. So at the end you get a false positive + cancel.
NoCheatPlus already implements a "lost on ground" method to predict failed/wrong movements made by the client and correct them but the prediction cant be 100% accurate.
You could alter the SurvivalFly actions to make a dirty workaround (not cancelling on low violations) for this problem until we find a good fix for this problem. You may also tweak around on SurvivalFly (disable Vertical accounting for example) and try out what works for you best. However be aware that such tweaks will make SurvivalFly less strict and in that manner it will also let some fly/movement hacking trough (wont block them).
Thanks for the feedback on this problem.
@wh0cares1
PowerTools of Essentials cast the OP command differently so NoCheatPlus cant know that. There is a however a easy fix for this:
Just add powertools and pt to your NoCheatPlus configuration file under the "command console only" section (asofold made some nice additions to that feature :)). Here an example how it may be used and look at the end: http://pastebin.com/QPKnKFW8 (set active to true of course to enable it!)
-
View User Profile
-
Send Message
Posted Oct 8, 2013idk if this was fixed in the new update but i have version...
version nocheatplus
18:56:13 [INFO] NoCheatPlus version 3.10.2-RC-sMD5NET-b620
and people can bypass the op command being for console only with essentials powertool with /pt op username
-
View User Profile
-
Send Message
Posted Oct 8, 2013Having similar issues as Chickenputty, except w/ mine when players jump out over nothing but air (I.E. from a tall building) it teleports them straight to the ground & they take no damage. Happens in my parkour world as well, teleports them straight into the void and they die.
-
View User Profile
-
Send Message
Posted Oct 8, 2013On our parkour server players keep getting flagged back if they continually jump through the course.
http://www.youtube.com/watch?feature=player_embedded&v=KABaJZlBeSA#t=21
(around 24 seconds)
Is there anyway we can prevent this from happening, or at least from happening so often?
-
View User Profile
-
Send Message
Posted Oct 8, 2013@matt729
You can either use world specific permissions or multi world configurations from NoCheatPlus: https://github.com/asofold/NCPDocs/blob/master/wiki/configuration/configuration.creole#world-specific-configuration
@dotapurex1
It blocks the side effects of it such as having a godmode hack while having freecam enabled and so on but freecam is mostly a client sided hack and cant be blocked by us because the server doesn't really see if a client uses a freecam hack or not.
-
View User Profile
-
Send Message
Posted Oct 6, 2013@matt729
Please check out THIS PAGE
-
View User Profile
-
Send Message
Posted Oct 6, 2013Does nocheatplus block out freecam?
-
View User Profile
-
Send Message
Posted Oct 6, 2013Hi, I was wondering if there is anyway to pardon a world from no cheat plus checking because I have a world for bending, and people always get kicked for doing things with it?
-
View User Profile
-
Send Message
Posted Oct 6, 2013@MyPictures
I think the plugin messages are meant to do the trick on side of Bukkit-API, however those need new "agreements" between client developers and plugin developers. The motd messages sent in chat are somewhat prehistoric, but some clients still use/allow them. I would be glad to switch to other channels...
-
View User Profile
-
Send Message
Posted Oct 5, 2013@crunkazcanbe
Thanks :) - Glad we could help you out with your problem.
That blank line problem wouldn't exist if the Minecraft developerss would use another method to let the server "control" their mods (custom packet would be pretty nice).