NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Jan 20, 2014Thank you for the response. I just want to prevent flying in the server. Even if your Owner rank. I hope this helps. I can't be more specific.
-
View User Profile
-
Send Message
Posted Jan 19, 2014Someone on my server is able to do a glitch.. they can hit someone but as long as they keep running the person they hit cant hit back.....
I'm using NCP 3.10.7 on spigot 1253
-
View User Profile
-
Send Message
Posted Jan 19, 2014@MyPictures
@DerekZil
Also consider this section for further details: https://github.com/asofold/NCPDocs/blob/master/wiki/development/dev-pinboard.creole#compatibility-section
@thedjshow
That looks like another plugin or your permissions setup are doing something that allows players to bypass NCP checks in one world - that should be checked...
-
View User Profile
-
Send Message
Posted Jan 18, 2014@asofold
I see now that you can't fly at all in the other world i have "PlotWorld" but in the normal "World" they can is there anything in the config i should change?
-
View User Profile
-
Send Message
Posted Jan 18, 2014@DerekZil
Minecraft Forge and non Forge mods are in most cases difficult to support for us. You could use block flags to try and make custom blocks more compatible: http://dev.bukkit.org/bukkit-plugins/nocheatplus/tickets/435-halfslabs-trigger-survivalfly-violations/#c14
What exactly is the issue with that mod? Which checks get triggered (/ncp info player).
-
View User Profile
-
Send Message
Posted Jan 18, 2014@asofold
I use the newest version NoCheatPlus 3.10.7-BETA.
The mod is called Crafting Dead: Cure.
Do you think you can help create a working version for the mod and PM me?
-
View User Profile
-
Send Message
Posted Jan 17, 2014@asofold
ok, could be an enderpearl, but in that case, he has just used the last one, because he doesnt have any in his inventory.
-did not check while he was jumping ahead.
-
View User Profile
-
Send Message
Posted Jan 17, 2014@fungreenfox
interact.speed is just clicking blocks / air !
Could be he used ender pearls? Did you check the inventory of the player?
-
View User Profile
-
Send Message
Posted Jan 17, 2014Caught by me, at my own server.
It looks like a blend of flying and jumping. The cheater jumps usually 10 up and 20 meters ahead, never actually keeps on flying.
It cought my attention, since ncp kicked him several times for speeding, but not the jumping.
[19:16:39] [Server thread/INFO]: Player lost connection: You interacted too fast!
[19:16:39] [Server thread/INFO]: Player left the game.
[19:16:39] [Server thread/INFO]: [NoCheatPlus] (CONSOLE) Kicked Player: You interacted too fast!
[19:16:39] [Server thread/WARN]: [mcMMO] A valid mcMMOPlayer object could not be found for Player.
-
View User Profile
-
Send Message
Posted Jan 17, 2014@fungreenfox
Caught by what/whom? What is "superjump" supposed to do? The moving checks in NCP are mostly generic, so i can't tell from the label of a cheat...
-
View User Profile
-
Send Message
Posted Jan 17, 2014ppl are often catched for using a kind of "super jump", but not by NCP?
-
View User Profile
-
Send Message
Posted Jan 17, 2014@NicoTinie
I can't exactly know what you mean with "disable". Can you be more specific about the context ?
To disable the checks (i.e. allow players to speed/fly), you have to change the "enabled: true" entries for the check sections to "enabled: false", but i am not sure if oyu want to disable the check or flying.
If you want to prevent use of the give command, i suggest not making people ops and not giving them wildcard permissions ("*") in the first place. You can add it to consoleonly under protection.commands to prevent ingame use, but there still is creative mode and probably other plugin commands that will pose trouble.
So please be more specific on what you want to be prevented for what kind of player (or want to be allowed).
@levisn1
Vanilla allows to hit at around 3 blocks distance in a situation without any moving. Due to latency we have to set a higher value in SMP because it would to often be impossible to hit when players are moving, so "survivaldistance" is set to 4.4 in order to allow hitting at all. This also allows hacks to hit at that distance, so NCP further adds the "dynamic range", i.e. dynamically reducing the maximally allowed distance if a player hits on a "long distance", to prevent hacks always hitting on long range. The reduction is done up to a maximum amount (reducedistance) and is done in steps (reducestep), if you hit on "not long distance" the dynamic maximum distance is increased by step up to survivaldistance. A hit on a bigger distance than survivaldistance will trigger a violation, applying the attack penalty (milliseconds). A hit between dynamic max. and survivaldistance will have a silent cancel.
4.4 - 0.9 is already 3.5, i think there is not much more room for reducing. The step value could be set higher to allow faster reduction and also faster regain. The penalty could be set higher (e.g. 1000). I am not sure myself what to do here, if it was simple to make it "better" without causing more false positives, we would probably have already done so.
@DerekZil
You won't believe it, but i need the output of "ncp version" or "version nocheatplus" to also know the version of NoCheatPlus that you are using (please not "latest") ;). If you employ one of the later versions of ncp please do try "ncp version", because the also displays some hooks infomation, if there are any. A plugin list (pm or paste) could be useful.
The self-hit check is not known to do anything related to water, we also have not had any reports concerning tekkit - it might however be that that's related to to one of your plugins. If the server reportes the player is hitting himself, NCP will trigger a violation, simply, not much thinking involved :).
@ha11oga11o
Please update Spigot and ProtocolLib and report back if it still happens. All NCP is doing is kick a player from within a scheduled task - that is about the most harmless thing that one can do with a plugin at all.
@Tyzun
Hacks work? What hacks "work"? What does "work" mean, what can they do? What version of the plugin?
-
View User Profile
-
Send Message
Posted Jan 17, 2014Some hacks began to work!!! It means that time to update plugin!
-
View User Profile
-
Send Message
Posted Jan 17, 2014Is this NCP broken and crashed server? I actually cant read this, but i see lots of NCP is there. Please can someone check it If soo, then NCP overflow can crash server.
Cheers :)
http://hastebin.com/fehaloleju.vhdl
-
View User Profile
-
Send Message
Posted Jan 16, 2014I have a DayZ type server and when they run out of water they begin to die.
This plugin thinks they hit themselves and kicks them. :(
1.5.2 Tekkit server if the matters.
-
View User Profile
-
Send Message
Posted Jan 16, 2014@asofold
Hello, i was looking to make some modification to the "reach" value and reduce the effects of kill-aura. Atm i'm using the default values. Which values you advice me to modify to start? And which values i don't have to touch?. Thanks.
-
View User Profile
-
Send Message
Posted Jan 16, 2014Hi, I want to disable creattive and survival fly, also /give. But how does that works? I changed the config, still nothing happens. I use Essentials and Groupmanager , any help?
-
View User Profile
-
Send Message
Posted Jan 15, 2014@xDefcon
(See below.)
@stgram
This. Also networking with certain kinds of connections can lead to double chat messages on occasion, so "one violation = kick" is a slight risk.
@Red_Jay
I think i pointed out in the last message, that you can alter the actions (see there).
-
View User Profile
-
Send Message
Posted Jan 14, 2014@asofold
No none were cheating. How would I fix the critical hits?
-
View User Profile
-
Send Message
Posted Jan 14, 2014@xDefcon
I would not recommend that, even the slightest lag sometimes causes false positives, and you dont want to blame innocent players, because they turn into angry players. But every section of the anticheat has a config, where you could adjust everything. Take a look. :)