NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Jan 1, 2014@CHarrisMedia
Basically it should/must be fixed by CB. I shall have a look at/if existing tickets / pull requestss...
-
View User Profile
-
Send Message
Posted Jan 1, 2014The walkspeed you told me to use worked for a little while but then according to our players has now made the issue twice as bad. I really need a fix to this bug and i'm sure many others do too that's why GontrollerPVP used a custom version to fix the issue.
http://www.gontroller.com/community/threads/sprint-issues-fixed.22611/
-
View User Profile
-
Send Message
Posted Jan 1, 2014@danyeye
What log alerts (ingame, console , nocheatplus.log) are there?
Do you run special plugins like mcMMO (or other skills) gun plugins, arenas etc?
@danmark2312
I don't see lag in that data. Also the number of events monitored is very low, so a reliable statement is not really possible.
Do you happen to have noticable lag on the server? Do players get set-back during moving?
-
View User Profile
-
Send Message
Posted Jan 1, 2014http://pastebin.com/N0ShqteM
Why am I getting the playermoveevent lag?
-
View User Profile
-
Send Message
Posted Jan 1, 2014Hello, I've recently got the Plugin. Right after getting it, Players could NOT attack mobs. Help? I've researched everywhere, NOTHING. Respond ASAP, I'm getting complaints from the players on my server.
-
View User Profile
-
Send Message
Posted Dec 31, 2013@asofold
Thanks for the ticket link. I 'upvoted' it, as you suggested.
-
View User Profile
-
Send Message
Posted Dec 31, 2013@ridddle
Yes it is noletter. Of course it also makes any other posts with non-letters more expensive, so it is a two-bladed thing. You can also increase the repeatself value, though that may be annoying for answering "yes" simply.
The other possibility for "slow" spamming would be to activate prefixes or against simple repetition the words engine for players (rather not global for this case). That would make repetition of several words more expensive, however it also raises the overall average level/cost for messages.
@Speedysnail6
Increase the limit parameter (normal and shortterm) for checks.chat.commands.
-
View User Profile
-
Send Message
Posted Dec 31, 2013How do I make it like 5 times not 2 for spamming commands?
-
View User Profile
-
Send Message
Posted Dec 31, 2013asofold:
How would I do that? Is it
checks.chat.text.message.words.noletter?And yes they had normal spaces.
-
View User Profile
-
Send Message
Posted Dec 30, 2013I fixed the dupe glitch by switching to Spigot. Apparently 1.7 Craftbukkit BETA has many many issues.
-
View User Profile
-
Send Message
Posted Dec 30, 2013@asofold
-
View User Profile
-
Send Message
Posted Dec 30, 2013@Hangar
Not yet supported. Best add to or upvote Ticket 629.
-
View User Profile
-
Send Message
Posted Dec 30, 2013I put 30% speed on some boots and gave them out to some players, but the speed check is causing them to not work well. Is there a way to exempt people who are wearing/holding speed items from those checks while they are wearing/holding them, or do you have any other advice about how to allow this but not allow flying?
Thanks :)
-
View User Profile
-
Send Message
Posted Dec 30, 2013@Red_Jay
Any more details like versions / plugins ?
-Latest development build contains something that might help, however i won't be able to test - so no guarantees on that. I'd be interested if anyone can a) reproduce with any build of NCP b) confirm/deny that the latest one fixed it.-
View User Profile
-
Send Message
Posted Dec 30, 2013@Red_Jay
Set relog.timeout to 15000 - it is in milliseconds.
-
View User Profile
-
Send Message
Posted Dec 30, 2013Players are duping items on my server by using a nodus client with a "Reconnect" button allowing them to dupe whats in their inventory and put it in a chest.
I need to lengthen the relog delay and make it take like 10-15 seconds for a player to relog.
How can I make it prevent people from reconnecting so fast?
-
View User Profile
-
Send Message
Posted Dec 30, 2013@CHarrisMedia
We are not yet sure if this is a bug on server side (sending the wrong events, or even a sprint-disable event too many).
So i am afraid the best you can do is to manipulate NCP to allow the same walking speed as sprinting speed, which can (roughly) be done by adding the entry "walkingspeed: 132" to the survivalfly section of the configuration.
I am not sure if this really does it, it allows "always sprint", but it might help (apart from telling players not to use ctrl).
-
View User Profile
-
Send Message
Posted Dec 30, 2013Okay, here is the issue people are going on about with the Sprinting. This is also known as Rubberbanding where a player gets hit and then try to sprint while in the air or instantly when they land, NoCheatPlus then teleports them to their previous position. When this happens frequently a rubberbanding effect appears. This is due to Survivalfly and here are some violations that appear
An easy way to manipulate this is to get hit with a knockback sword (Knockback has the worst affect) and then press the CTRL button to resume sprinting, you will have the effect providing you have the following enabled.
Here is an exact message that appears from the problem.
This is my Config
Could someone please help because this is quite a big problem, i do not want to disable Survivalfly otherwise people can use water / fly hacks.
Thanks :D
-
View User Profile
-
Send Message
Posted Dec 30, 2013@deleted_11279897
Ticket please :). You can allow faster running and similar but it does not help with "higher jumping problems", and probably also not with "jump effect 500 neat cacti" - we do need more info to even judge what actually happens internally.
@ridddle
You can already make numbers and special characters more expensive. Are the spaces ordinary spaces ?
-
View User Profile
-
Send Message
Posted Dec 30, 2013People started using some kind of client-side mod which allows them to bypass antispam measures: http://i.imgur.com/4UD3ycL.png (and it looks ugly). Can you add a way to force non-Unicode text with a whitelisted character set please and a kick when the check fails?
Also, please allow block interaction when on a horse. It breaks "reached too far" check when planting farms for example.