NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Jan 28, 2014@Welite
Yes. NoCheatPlus implements NoPwnage by Evenprime and add a couple more handy checks against login/relogin spam. Please also make your sure your connection thorttle isnt disabled: http://wiki.bukkit.org/Bukkit.yml#connection-throttle
@DarkSkript
NoCheatPlus only cancels bukkit event. We don't touch anything related to sound. Please make a ticket with a full plugin list and CB + NC+ versions. Do yo use Spout or other client side mods?
-
View User Profile
-
Send Message
Posted Jan 28, 2014Hi, can this plugin stop bot attacks ? I have problem with some hacker, there are about 100 different bots with different IPs are trying to connect my server (100 connections per second or even more), server cannot handle it and the attack ends up in server crash.
-
View User Profile
-
Send Message
Posted Jan 27, 2014I have noticed there is sound lag, Mobs, Opening doors, chests. The sound will cut short.
-
View User Profile
-
Send Message
Posted Jan 26, 2014@henk131313
Health regeneration ticks are server-sided since MC 1.7.x so there is no need to protect them anymore. However NoCheatPlus already has a FastHeal check which does this.
-
View User Profile
-
Send Message
Posted Jan 26, 2014I'm not a programmer so I dont know if its possible, but maybe you could replace the natural regeneration with a custom one, to prevent peqple from regenerating faster with naturalregeneration
-
View User Profile
-
Send Message
Posted Jan 24, 2014@Phascinate
Some servers seem to already use a modified CraftBukkit version which fixes this issue.
-
View User Profile
-
Send Message
Posted Jan 24, 2014@MyPictures
It appears the server Daegonner PVP figured out how to fix that. So apparently it's possible. Maybe you can investigate?
-
View User Profile
-
Send Message
Posted Jan 24, 2014@dotapurex1
Some users report that CraftBukkit has issues with handling the new CTRL sprinting in MC 1.7.2. If that's true then we would need to wait for a fix in CraftBukkit but still investegating on this one
-
View User Profile
-
Send Message
Posted Jan 24, 2014Has the rubber banding back been fixed while sprinting?
Example: When someone is sprinting in PvP, it will sometimes teleport them back a few blocks.
-
View User Profile
-
Send Message
Posted Jan 23, 2014@chrishillz
Are all commands referenced in actions defined in the strings section?
Can you paste your config(s)? Do you have world-specific configs? Are there other plugins adding actions?
-
View User Profile
-
Send Message
Posted Jan 22, 2014@asofold
I still see nothing related to an undefined command...
https://www.dropbox.com/s/fnt5cnweni7stcg/Screenshot%20from%202014-01-23%2001%3A35%3A26.png
-
View User Profile
-
Send Message
Posted Jan 22, 2014@asofold:
Thank you for your reply. I did look at older messages. @Prominentc said he had a simple solution, but didn't post what it was, and he's not responding to my private message. I guess I'll raise the VL level for fight.angle and turn off strict for fight.direction.
-
View User Profile
-
Send Message
Posted Jan 22, 2014@chrishillz
One of the action lists has a "cmd:" without command specified i assume.
You could search for "cmd: " <- with space, in full text search, maybe you are lucky and find it directly.
@zzienzz
It seems that CraftBukkit does not report sprinting correctly, so our plugin can't know if players are sprinting or not when using the ctrl-feature. This is one of the main reasons for staying on "beta" for us. So one could advise players not to use it (inconvenient) or allow faster moving in general by adding a "walkingspeed: 160" to the survivalfly section in the configuration. Not claiming that value is enough, but it would allow players to move faster and of course do more speeding when not sprinting (also inconvenient).
-
View User Profile
-
Send Message
Posted Jan 22, 2014SurvivalFly seems to proc an awful lot on my server.
Was fine until we updated to 1.7, something with the ctrl-sprint probably has sent everything out of whack.
How do I tone it down a notch so it's less sensitive? I DON'T want to disable it, I just want to turn it down because the amount of false positives is overwhelming.
-
View User Profile
-
Send Message
Posted Jan 22, 2014I recently receive this when a player joins the game and walks around a bit. This started when I was nearing completion on the configuration setup.
-
View User Profile
-
Send Message
Posted Jan 21, 2014@flip284
That happens with latency. Best set fight.direction.strict to false at first. We will alter the default settings or adapt some parts of the check otherwise with the next release.
@NicoTinie
Can't... it looks like a permission problem. Avoid wildcards and op...
@Bobcat00
There have been several posts about fighting checks, maybe it pays to have a look. I can't judge if it pays to kick for those violation levels - for sure direction violations are possible with latency (no need for lag itself), because the positions of the players on the server-side are different than to what the players are on client-side. SO also here i suggest at least to set fight.direction.strict to false.
@topdog707
You can disable it in the configuration in the logging section, or if you want to turn it off temporarily, you can also use "ncp notify off", permissions should be up to date on the permissions page.
@rayblon
I want to push a new release soon, since there have been / will be some fixes. We might still keep it on beta, because of the issues with ctrl-sprint-feature with the recent (and current?) versions of CraftBukkit.
@Acer_Mortemo
I have to discourage use of that method for players as damagers, because it fires damage events that indicate "close combat" - NCP has no way to interpret those events in another way but that the player is doing something like punching others.
So my suggestion is to either use custom damage events and not use that method at all, or throw an event with a special DamageCause other than EntityAttack and not use damage(int, Entity), instead just use damage(int) - area damage seems closer to magic than punching.
If you want to hook into NCP you can of course exempt the player from checks before dealing all the damage, and afterwards unexempt him. That's also possible via commands (less hooking, but probably less nice looking).
-
View User Profile
-
Send Message
Posted Jan 20, 2014Hello!
I'm trying to make a plugin where it for loops through a list of nearby entities, and then damages each entity for so many hearts using "entity.damage(4, player)" Unfortunately, Nocheat flags this, and only allows 1 hit to be made. I have disabled Speed under Fight in conig, reloaded the server and tried again, yet I still have the same problem. Any idea on how to stop this? Thanks!
I am sure it is NoCheat causing this problem, as when I remove NoCheat from the server, the error is resolved.
-
View User Profile
-
Send Message
Posted Jan 20, 2014@Bobcat00
"BETA release, for minimal compatibility with CraftBukkit for MC 1.7.2"
It's a beta build, so you were gambling more false positives and errors the minute you installed it. Odds are, though, your server was lagging and erroneously kicked him, unless, of course, he really was hacking.
-
View User Profile
-
Send Message
Posted Jan 20, 2014My Admins are getting annoyed by the text spam by the nocheatplus how do you turn off the text spam please respond right away
-
View User Profile
-
Send Message
Posted Jan 20, 2014What are good VL's that avoid false positives for fight.angle and fight.direction? I kick people for VL above 250 for angle and 50 for direction. Someone got mad yesterday because he got kicked for angle but says he wasn't hacking. Is ping or lag a problem? (Since he was in combat, the kick caused him to combat-log and he lost his stuff.) I'm using 3.10.7-BETA.