NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Dec 30, 2013@asofold
Hmm okay, isn't there something I can change in the config? Like putting a value a little bit higher so it allows the potion effects?
-
View User Profile
-
Send Message
Posted Dec 30, 2013@deleted_11279897
We already take potion effects into account, however there can be problems with high levels / certain situations. Also the information sent by the client is not 100% sufficient to validate moves, even without potion effects at times.
I have no idea what your command blocks do, so best make a ticket filling versions and commands used, potion effect levels and if possible violation logs.
-
View User Profile
-
Send Message
Posted Dec 29, 2013@asofold
Yes they get flagged as speeding and flying, I would suggest maybe adding a check for potion effects and command blocks?
-
View User Profile
-
Send Message
Posted Dec 29, 2013@deleted_11279897
That would be disabling NCP - we don't have extra checks for potion effects, your players get flagged as flying/speeding?
@rangewonk
This has been around like "ever since", that's why we add notices like "Do not download from any other source, do not use jars other people send you." to the description above. We might address it once more, though.
@Hulipill
I want the report from a pure 1.6.4 or 1.7.4 server rather, the mixed mode servers can have any imaginable kind of problems.
-
View User Profile
-
Send Message
Posted Dec 29, 2013@asofold
Also, the server that this is happening on somehow accepts 1.6.* and 1.7.* users, the plugins don't seem to me updated to the most recent version, could this be a reason? I'll PM you on the name of the client. (I saw a video on YT about this hack)
-
View User Profile
-
Send Message
Posted Dec 29, 2013put out a warning, alot of people going around trying to get people to download "no cheat plus plus" which is force op. saying theres a bug with ncp and saying its a chat
-
View User Profile
-
Send Message
Posted Dec 29, 2013In my Hub I use command blocks and pressure plates to give a player Speed Boost or Jump boost, how do I disable NCP checking on the potion effects the command blocks give to the player?
-
View User Profile
-
Send Message
Posted Dec 28, 2013@XxOlivacarxX
Are you using ProtocolLib ? Please update it (build 188 or higher)!
-
View User Profile
-
Send Message
Posted Dec 28, 2013my server bukkit 1.7.2 R0.01 crash whit this plugin :( please fix it
-
View User Profile
-
Send Message
Posted Dec 27, 2013@skypanther27
Some lagging back happens without influence of NCP (happens with bypass permissions as well). Specifically after joining the server or long range teleports.
Could also be that it is specific to CraftBukkit, Spigot, Orebfuscator, or just Minecraft.
@LaughNgamez
Do you run ProtocolLib? Please ensure to update it, since there has been a deadlock fix a short while ago. If not please state plugins and versions (also server)!
-
View User Profile
-
Send Message
Posted Dec 27, 2013when someone spams chat on my server it crashes because of ncp.
-
View User Profile
-
Send Message
Posted Dec 27, 2013nothing comes up in chat after the lag-back and there is nothing different when i do /ncp info {player}
-
View User Profile
-
Send Message
Posted Dec 25, 2013@matteoblazevic
@Hulipill
For permissions it slightly depends on what you want. For an all-out admin a wildcard permission should work, though it is not provided by NCP, but has to be a feature of your permissions plugin. Otherwise you can give nocheatplus.admin for all administrative commands (including inspection and data removal etc.) and nocheatplus.bypass to bypass all checks.
@Hulipill
NCP already expects falling speed to increase, however it can't be too accurate, because that would need implementing a new velocity handling, otherwise the false positives to be expected with velocity (e.g. hits) would be inacceptable.
Since we have horizontal velocity tracking, not getting knocked back might be detectable for stronger abuse, but it is more complex to implement it in a way that does not create too many false positives due to being stuck somewhere.
So on these there are no quick fixes to be expected.
-
View User Profile
-
Send Message
Posted Dec 25, 2013@matteoblazevic
make sure you have nocheatplus.* on you group not default, user or member, it should be on admin or owner. and make sure you are op
-
View User Profile
-
Send Message
Posted Dec 25, 2013I found an exploit on some servers like SkyWars where a player isn't knocked back by a snowball or egg, and when hit they dont fall down the void instead they sort of sink down slowly and find a location to land. Would it be possible to add this check? To make sure they fall at a fast speed and not slow?
-
View User Profile
-
Send Message
Posted Dec 24, 2013@Shevchikden
Thanks, that might be it. I could not reproduce with/without ProtocolLib, but it's been a small server.
-
View User Profile
-
Send Message
Posted Dec 24, 2013@asofold
That's actually a protocllib issue.
http://www.spigotmc.org/threads/that-crash-where-server-thread-doesnt-print.8993/
-
View User Profile
-
Send Message
Posted Dec 23, 2013@matteoblazevic
You need the proper permissions to get exempted by the command protection of NoCheatPlus: https://github.com/asofold/NCPDocs/blob/master/wiki/permissions/permissions.creole
-
View User Profile
-
Send Message
Posted Dec 23, 2013If I do /nocheatplus I get Unknown command...
-
View User Profile
-
Send Message
Posted Dec 22, 2013@pacmanlikespie
NCP should be kicking from a scheduled task within the main thread. So if this was the cause of trouble, any kicking from scheduled tasks (or from the main thread!?) should be able to freeze your server !?
Are there plugins hooking into NCP? Maybe some meta-ban-manager or so?