NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Dec 22, 2013@kubson97
Hi, I had the same problem as you. My server kept freezing. I have concluded any plugin or anti-spam that involves kicking a player off the server will freeze it. I am currently testing it out, and it seems to be true.
-
View User Profile
-
Send Message
Posted Dec 21, 2013@samasaurus6
I think the reason why it was marked as broken was a crash involving horses which got fixed in the next beta. Could be anything of course. Both NoCheatPlus and CraftBukkit are in the beta phase for Minecraft 1.7.2 so there is a risk using them for public servers.
@skypanther27
Could you do a /ncp info <AffectedPlayerName> and post the output here (or better in a new ticket). Does it happen to you also (Can you reproduce it)? Are you sure the player isn't hacking and trying to make you lower your security? Does it happen to a couple of players or just to one? Do you see anything in your console or server.log when it happens?
-
View User Profile
-
Send Message
Posted Dec 21, 2013The player will be moving forward and he get tp'ed back to a previous spot. there is nothing that shows up in chat and it seems to happen randomly.
-
View User Profile
-
Send Message
Posted Dec 21, 2013@kubson97
Isn't Craftbukkit 1.7.2-R0.1 labelled as "Broken" by Bukkit on the downloads page? It even says a warning when you're using it. Idk if that's the cause, but try it again on the 2nd Beta Build :)
-
View User Profile
-
Send Message
Posted Dec 21, 2013@skypanther27
I am not sure which kind of "lag-back", we do need more details (what exactly happens, what distances are involved, any alerts, "ncp info PLAYERNAME" before and after it happens, "ncp version" output).
@kubson97
I don't know what this could be, more information should be needed on plugins and maybe more of the server log around when this happens (pm or ticket is best for this).
For the moment i can just imagine two attempts to keep the chat checks enabled:
-
View User Profile
-
Send Message
Posted Dec 20, 2013There is something wrong. I'm using Craftbukkit 1.7.2-R0.1 and NCP 3.10.7.BETA. The problem is when Text (in chat section) is enabled(true). Server just crash when a player spam. There is no log, everything normal on console, server just freezes and after some seconds it lost connection, nobody can't join server but the server is still running. The last message on console is [NoCheatPlus] Kicked player_name : You're not allowed to spam in chat!
Solution is to restart server, but same story when someone spams, so I just disabled that feature (text) and now it works as it should, but now I need some plugin anti spam. If you need more info please say so.
-
View User Profile
-
Send Message
Posted Dec 20, 2013So is there any way to stop the lag-back?? other servers with NCP don't have it as bad as this.
-
View User Profile
-
Send Message
Posted Dec 19, 2013@asofold
thank you. I'll try some of this plugins.
-
View User Profile
-
Send Message
Posted Dec 19, 2013@titanrat
I'm afraid we can't help with pistons. Allowing pistons would demand to monitor all piston moves, store them to allow latency with players moving, implement temporary bypasses for moving speed and passing through blocks in certain directions based on that data. In short, it is quite complicated to add, though not as complicated as making doors safe in a fool-proof way. I have not come across any ideas for a simplistic workaround on the programming side, yet.
Concerning workarounds on server side, the only thing i can think of is to allow flying etc., preferably only for the region the lift is on. Some plugins are able to add permissions based on a region (zPermissions as a real plugin, RSP as a hacky but powerful add-in plugin).
An "indirect workaround" would be to get rid of piston based lifts and use sign-based lifts or water based lifts instead. Some might rate such "lame", though.
-
View User Profile
-
Send Message
Posted Dec 19, 2013Hello.
Players without OP, can not use piston vertical lift. But console and log doesn't contain any information. I try to calibrate and turn off "SurvivalFly" but it doesn't help.
Can you help me with this problem?
-
View User Profile
-
Send Message
Posted Dec 19, 2013@EddyThePro
Ticket 676 is about this kind of issue, you can add to that by upvoting and by adding minimum info ("ncp version" command output + if possible details about "ncp info PLAYERNAME" from before and after having someone reproduce this.
-
View User Profile
-
Send Message
Posted Dec 18, 2013Players using the new 1.7 sprint are pulled back constantly while pvping. I am using the latest build 651. Also, you guys should add a new feature where it lets you get alerts but doesn't actually pull back the players if they are flying or using any type of hacks. So basically, detection, not prevention.
Edit: I will be using tickets from now on. Sorry about that.
-
View User Profile
-
Send Message
Posted Dec 18, 2013@skypanther27
There are two kick-actions in the default configuration, in the actions list of the checks.chat.commands section. Maybe you only removed the cmd:tempkick1 one?
-
View User Profile
-
Send Message
Posted Dec 18, 2013people are still getting kicked for spamming commands. and is there a way to tone down the NCP?
-
View User Profile
-
Send Message
Posted Dec 18, 2013@FightManiac
I'm afraid the other plugin does not do much more than you would reach by disabling the fight checks, so i can't recommend it as a "fix", not stating about usefulness on any other account.
@tomaste
What permissions plugin do you have?
-
View User Profile
-
Send Message
Posted Dec 18, 2013Currently all users on the server can see NCP violation messages. I'd like only OPS or a specific permission group to see these.
Is there a way to do this?
-
View User Profile
-
Send Message
Posted Dec 18, 2013Hey i see you cant fix the godmode bug while flying
This plugin fixes( you can hit the player while he is flying : http://dev.bukkit.org/bukkit-plugins/pvp-tag/
Maybe you coudl integrate it to NoCheatPlus?
-
View User Profile
-
Send Message
Posted Dec 17, 2013@skypanther27
Consider a full-text search for "commands" in the configuration, there are several entries, you will want the "commands:" check section in the chat group.
Every check section has an "actions" entry, which is what you want to check for. There should be a "cmd:..." action that triggers the kick. The actual command is shown in the strings section, but the action has to be removed from the actions list, might be "cmd:tempkick1" in this case.
-
View User Profile
-
Send Message
Posted Dec 16, 2013Where can i disable kicking for spamming commands, its sooooooo annoying! I looked through the config. I guess i missed it.
-
View User Profile
-
Send Message
Posted Dec 16, 2013@Bodyash
No? We cant spend 24 hours working on this plugin of course but we will try to make it as good as possible. A compatible 1.7.2 build is already out.