NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted May 11, 2012Grrr I own 4 big servers. 1 Regular and 3 hunger games. Only regular people get banned and ip banned asap when they join and type a single word "hello"....not sure why this is but it started in the newest version. On my hunger games about 100+ players get stuck in air with each other and then they get kicked flying? It's quite annoying..
-
View User Profile
-
Send Message
Posted May 11, 2012does the no pawnage featur work cause im still gitting spamed ;\
and i didi enable the connect threshold thoe i left the setings to default
-
View User Profile
-
Send Message
Posted May 11, 2012Seems that all players can see the error logs of nocheatplus now.
All of the groups have the permission...
- -nocheatplus.admin.chatlog
They really shouldn't be seeing these!
-
View User Profile
-
Send Message
Posted May 11, 2012@asofold
With NoLagg's examine feature it checks what event's are taking the longest, and for NoCheatPlus, PlayerMove event is like 98% of the time/slow down :(
-
View User Profile
-
Send Message
Posted May 11, 2012@Xerati
The player info is grabbed multiple times and amongst some other similar things there should be a lot of optimizations possible. Though grabbing the player info in particular seemingly is "just" map lookups, which might not be the biggest point of optimization. But the repeated getting of stuff, especially if it involves object creation does cost a bit, certainly (if all summed up). I am not sure what is most expensive, there are a lot of checks that check multiple different block types as well, where i am not sure, It should be possible to use an array for block types and then compare bits of an integer (0x0 = fluid, 0x1=...) instead of using switch for 10,15 blocks each time, so that the from and to materials bit-sets can be set once for a moving check so that subsequent checks will just use these set integers instead - but one can easily start to optimize in the wrong spots ...
getBlock calls are rather expensivish as well, so all the API access should be minimized...
-
View User Profile
-
Send Message
Posted May 10, 2012I also have to say that optimizing it in someway would be nice.... I have a dual xeon e5450 server, 16gb ram, and I'm losing a ton of tick count - NoLagg has pointed out chunk loading from file (granted, it is going straight from hdd) and this plugin for the playermove event...
I haven't checked the source for this, but I was curious if it's grabbing the player info multiple times or if it's only grabbing it once, then doing multiple checks? The latter, obviously, would be less intensive...
-
View User Profile
-
Send Message
Posted May 10, 2012@Xerati
also having this
-
View User Profile
-
Send Message
Posted May 10, 2012Found another false positive/very glitchy one. Ladders between 4 blocks (N S E W) going down vertically through water (like ocean). This causes a lot of weird issues and waterwalking alerts
-
View User Profile
-
Send Message
Posted May 10, 2012@MyPictures
Yay, the attacking without limited speed isn't an issue in the latest version.
I'm still getting a plethora of false positives (especially waterwalking D:) but it's definitely more manageable. I'm tweaking the config to help autoban certain things, and I'll report back with any good/relevant info.
Thanks!
-
View User Profile
-
Send Message
Posted May 10, 2012Any chance you can add a check on players autoequipping armor using the Inventory Tweaks mod? Player hits "R" and it instant equips best armor in their inventory to being worn. Could probably just set some sort of time check- "player equipped full suit of armor in under 0.1 seconds".
-
View User Profile
-
Send Message
Posted May 10, 2012http://pastebin.com/BRJzJcUN
Also this is NOT invalid: http://dev.bukkit.org/server-mods/nocheatplus/tickets/29-huge-flaw-with-nc-ncp/
-
View User Profile
-
Send Message
Posted May 10, 2012@Xerati
Ok try with the new NCP version and report here again please.
<<np98765>>@Evenprime explained that all:
http://www.evenprime.at/2012/04/why-i-published-the-minecraft-force-op-hack/
But I think minecraft fixed it now or something, it should now request also the e-mail. I don't know. Lets see if someone have more infos :)
-
View User Profile
-
Send Message
Posted May 10, 2012Another bug, the waterwalk always goes off when someone is standing in flowing water and jumping, and possibly with blocks above their head.
-
View User Profile
-
Send Message
Posted May 9, 2012Hey,
What is this ForceOP and SessionStealer thing I've been hearing about on the interwebs?
These things have always been around, downloading viruses on to the computers and such... But recently there's been a huge spike in the number of new videos made on these!
What's the deal?
-
View User Profile
-
Send Message
Posted May 9, 2012I have a a feature request...that we be able to change the "warning" message, the one that says "Our system has detected unusual bot activities coming from you..."
-
View User Profile
-
Send Message
Posted May 9, 2012@MyPictures
Not the one from yesterday (I'm updating it now)
On that note, a false positive I noticed is the 'fastbreak' one triggering on shears+leaves.
-
View User Profile
-
Send Message
Posted May 9, 2012@jack1342
It will most definitely stop quite a lot of hacks! Huge plus no doubt ;) Although depending on your plugins or any issues you run into, you may need to tweak setting here and there. The default settings are pretty good so not everyone may need to change them. I would say change them if you feel the need to, but from my own experiences just get hacked clients such as Nodus etc... and test to make sure they are stopping / notifying.
Now if you need to edit the config it is really nothing too difficult, as far as punishments go.. You will need to add like kick or a ban punishment. Never really actually went that route myself because some plugins can give false NC+ notifications. Although then again, I do not know what plugins your run or if you've not encountered fake ones. If in this case then no doubt try the punishment system ;)
-
View User Profile
-
Send Message
Posted May 9, 2012@Xerati
Witch version of NCP do you use?
-
View User Profile
-
Send Message
Posted May 9, 2012Once I install the plugin, will it stop all the hacks it should stop, no configuring? Or will I have to configure it. (once I install it will it stop the hack but no punishment or will I have to configure it to stop hacks)
-
View User Profile
-
Send Message
Posted May 9, 2012Has anyone had the issue where when NoCheatPlus is loaded, combat against an un-armored person has no limit on speed?
Example: User A vs B, both completely naked - A can kill B in about 1-2 seconds...
It only happens when NoCheatPlus is loaded, and I can't tell why? Using an actual weapon (wood sword) makes death almost instant if they aren't wearing armor....