NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Nov 27, 2013@dotapurex1
I don't know yet, what in-game alerts do you get for using the plugin skill?
@FabioWidmer
thx :).
-
View User Profile
-
Send Message
Posted Nov 27, 2013Image Removed
I love this plugin!!!!
Thanks.
-
View User Profile
-
Send Message
Posted Nov 27, 2013Which part in the config should i reduce to allow the usage of this plugin?
http://dev.bukkit.org/bukkit-plugins/leaper/
-
View User Profile
-
Send Message
Posted Nov 26, 2013@dotapurex1
This is opposite of what i thought.
There is three main points: 1. Did you try setting the fight.direction.strict flag to false, yet?
2. Did you in addition try to set the fight.reach.reducedistance to 0? This gives kill auras more leverage, but they are still confined to 4.25 distance on server side.
3. For fighting situations with players moving a lot, latency might be a problem: the players are not close enough to hit on server side, but appear so on client side, thus the reach check prevents the hits, because NCP can only see the server side. This will be addressed in the next development iteration.
-
View User Profile
-
Send Message
Posted Nov 26, 2013@asofold
Not sure about the alerts, but players won't be able to exactly hit the target unless they are standing on the same block or 1 block away from the player usually. Basically if you're about 2-3 blocks away from the player you won't be able to hit them, but you should be able to.
The only time that you're 99% guaranteed to hit the target is if you're standing on the same block as they are.
-
View User Profile
-
Send Message
Posted Nov 24, 2013@FlOppythp
I don't know what you have been trying to see if NCP is there ... assuming you have been using the latest version of NCP available at BukkitDev, i would still like to know what kind of cheats you tried, just chat spamming?
Please be aware that we always need the version of the server (e.g. CraftBukkit) and of NCP in order to be able to judge things. Whenever someone is testing if NCP blocks anything, one has to make sure that the checks are activated for the tester:
Can't ask less...
-
View User Profile
-
Send Message
Posted Nov 24, 2013@dotapurex1
I am not quite sure about that analogy, can it be expressed in "block distance"?
What kind of alerts are logged for these cases?
For very-close-combat problems:
This likely is the direction check in the fight-section. Setting the strict flag to false might improve the situation.
-
View User Profile
-
Send Message
Posted Nov 23, 2013@asofold
It's happened for along time, players would have to be like standing on the same block as the player there standing on trying to hit them... Basically be right up in their ass before the attacks register.
-
View User Profile
-
Send Message
Posted Nov 23, 2013@dotapurex1
I don't have enough information. Can you fill in a ticket? ncp version ... does it suddenly appear or has it been like that for longer time ? What kind of pvp situations does this happen for?
-
View User Profile
-
Send Message
Posted Nov 23, 2013How do i fix the hitbox detection on players? The attacks dont seem to be registering?
-
View User Profile
-
Send Message
Posted Nov 23, 2013@FlOppythp
Of course the plugin works.
Two things to start with:
Another question is on what server version you run which version of the plugin, so please also provide the output of the "ncp version" command.
-
View User Profile
-
Send Message
Posted Nov 22, 2013@chris752w
You can register a hook that implements IStats (similar to what TestNCP does). However you might only want to receive violations for which violation handling has not been cancelled by another hook, so you would also implement ILast to ensure your hook is called late (see hooks package). You can register the hook to only receive input for specific check types.
If you want to cancel violation handling (actions) for some reason, then you must not implement IStats, and probably need not implement ILast.
This gives you input about violations for checks that have actions.
@Jleeevinnn
I can't tell. What is your server size / player number? Do you have logging to file/console activated ?
-
View User Profile
-
Send Message
Posted Nov 21, 2013Receiving tons of NCP notifications of players "hacking" (false positives) especially in pvp the server begins to lag immensely for anyone.
Using Spigot 1.7, lags the whole server terribly, wondering if this is a possible fix.
-
View User Profile
-
Send Message
Posted Nov 21, 2013Is there a way to use the NoCheatPlus API to get when a player violates a check?
For my usage I would like to see when a player violates survival fly, get the player, violation level, etc.
-
View User Profile
-
Send Message
Posted Nov 18, 2013Saw antiflood, immediately sealed the deal lol. New favorite plugin right here :)
-
View User Profile
-
Send Message
Posted Nov 17, 2013@Mr360zack
An extra plugin would be overkill, since it would receive similar tickets and roughly doubles the work to maintain.
You could start here with your issue: https://github.com/asofold/NCPDocs/blob/master/wiki/configuration/checks%2Fchecks.creole#how-actions-work-an-overview
Configuring NCP to do such is not exactly equivalent to what you want, but can come pretty close. However it needs testing concerning which violation levels are reached without cancelling actions. We can't really test all cases out on ourselves, so you will need to do some balancing, though not cancelling ever means a lot of rampage happening, so we suggest to apply that idea only to checks where you really need it. The next major version of NoCheat(Plus) might contain designs to make such easier, though.
-
View User Profile
-
Send Message
Posted Nov 17, 2013I'd like to request a different kind of NCP version... view the following (PVP SERVERS WILL LOVE THIS)
Plugin category: Anti griefing
Suggested name: HackNotify
What I want: A plugin, with the same checks as NoCheatPlus, HOWEVER, instead of stopping the players from hacking, it sends admin a message. There would be two messages;
'&c&o[player] is probably hacking! {HACKTYPE}'
'&4&l[player] is hacking! {HACKTYPE}'**
Ideas for commands: /hn reload /hn notify <on/off>
Ideas for permissions:
hacknotify.notify hacknotify.toggle hacknotify.reload hacknotify.bypass.{CHECK}
When I'd like it by: ASAP
Again, maybe even a fork of NoCheatPlus just remove the code that blocks the hacking!
(Like kNoHax :p)
-
View User Profile
-
Send Message
Posted Nov 16, 2013I probably won't bring in too much for Spigot in the near future, especially not for the 1.7 hacks, but i might do some adaptions that will make NCP work at alll. If it helps transition to 1.7.2 CB then it is even better. Developing for the Spigot API might happen with a new design on the next major version, if it is useful or even needed to implement certain features that otherwise would not be possible without a plugin or some magic..
-
View User Profile
-
Send Message
Posted Nov 16, 2013@bukkitCensoresComments
Development build 646 should prevent NCP future crashes on 1.7.x due to LOCKED_CHEST.
-
View User Profile
-
Send Message
Posted Nov 16, 2013@FightManiac
Likely you can not fix "it", but you could fill in a ticket and give us some more information, so we can attempt to find out what "it" is and if/how it can be fixed.
Specifically we need: