NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Feb 5, 2014You really need to do something for the NCP bringing you back, since the new Ctrl-Sprint Button. It is really anoying if you play, for example, PvP on the Overcast Network (oc.tc). Is this possible? (PS I read the Known Issues, but did not see this on there)
-
View User Profile
-
Send Message
Posted Feb 3, 2014@matagin
Best practices is to first find out which checks are too sensitive for your taste, then configure accordingly if possible.
Typically one would need to somehow isolate a situation.
If you have dedicated testers and a test server or a low player-count phase (really low) then you could go for in-depth logs and such, but i assume you will want to go for an online production server strategy, because installing extra plugins
thisis more like what an official "NCP-tester" would do, e.g. install TestNCP and create debug outputs etc.So the best practices is about isolating the issue "as good as possible" - you have players that claim it does not work, the following steps:
(Optional for the not-lazy: configure NCP to output more or any-at-all violation logs and do another iteration of the above).
Rather test a couple of times, e.g. during a tournament do "ncp remove (...)" and "ncp info (...)" and just dump the output to a file or copy from log/client-log later. Also include the nocheatplus.log entries for the time of testing and maybe the server.log, depending on what is turned on. Do remove/change ips and player names if you want so.
Just pm or "present" us the logs for a quick look.
One thing you can directly: set checks.fight.direction.strict to false (it seems too strict).
We are having fight checks in focus right now, so some default config and even implementation might change soon.
-
View User Profile
-
Send Message
Posted Feb 2, 2014Do you guys have any advice or best practices on specific checks to modify so that PvP combat is not affected too much? I'm trying to find the right balance for my players.
-
View User Profile
-
Send Message
Posted Feb 2, 2014@arnofrutos
The pvp hacks do "work" and gain some advantage, but they should be limited by a lot, so at least a skilled fighter stands some chance to win.
So the interesting thing is how much they can do. We will try to reduce false positives for fight checks first, then we will advance towards making them more effective.
-
View User Profile
-
Send Message
Posted Feb 2, 2014@MyPictures
Most hacks that are used on my server are pvp hacks like killaura.
-
View User Profile
-
Send Message
Posted Feb 1, 2014@arnofrutos
Velocity is handled on the client side so effectively preventing it is close to impossible, the client has the upper hand here. What are the other hacks you are talking about except that knockback back? Maybe we can do something.
-
View User Profile
-
Send Message
Posted Feb 1, 2014Lot of hacks are still not blocked :'( for ex. antiknockback
-
View User Profile
-
Send Message
Posted Feb 1, 2014@GodsDead
Please elaborate on the terms "absolute" and spam-fest. What are your expectations? What is the matter (players spam, alert messages)? What plugins that might conflict do you have installed, like mcMMO , other skills/weapons/moving-features?
You can turn off notifications ingame with "ncp notify off" or by permission (see permissions page, nocheatplus.notify, nocheatplus.command.notify) or in the configuration. If you have a high player count, you might want to alter the configuration to notify less (configuration page), or turn it off - at least reduce file logging by focusing on either console or file or none of both.
-
View User Profile
-
Send Message
Posted Jan 31, 2014Fresh new server, its an absolute spam fest with NCP, absolutly impossible to play, what do you suggest?
-
View User Profile
-
Send Message
Posted Jan 30, 2014@asofold
Video: http://www.youtube.com/watch?v=crHtui_4Dhs
-
View User Profile
-
Send Message
Posted Jan 30, 2014@Shevchikden
Not that it need to be related, but your version of NCP is clearly outdated, i suggest to switch to the current development branch, like "mostly stable" build 655.
Concerning the issue, i doubt that CoordMap.put can hang your server, more likely seems to be a deadlock caused by ... other plugins + Spigot.
(Technically it seems that the SimplePluginManager from Bukkit is waiting on a monitor during some event is about to get fired, while NCP is processing an event in the main thread (unless some nasty plugin fires a projectile-launch-event asynchronously, which would then be the culprit) - so probably the WorldSaveEvent is fired asynchronously with Spigot, which then could lead to trouble, in case plugins and/or PluginManager are not prepared for it.)
We will keep an eye on such of course, but currently i can't see a cause on side of NCP.
@theIgloo
Ok, i see. Creative mode + tnt - It mainly launches the player upwards?
@szebi1999
Thanks. Why do you think it lags your server?
-
View User Profile
-
Send Message
Posted Jan 30, 2014Plugin good,but laggs server :( Pls..Bugfix... Thanks
-
View User Profile
-
Send Message
Posted Jan 30, 2014@asofold
http://prntscr.com/2nzki7 The dispensers have TNT in them so when I push the button it places and sets off TNT. You would stand on the fence so when the TNT explodes it sends you flying off, however with NCP on it just pulls you back. You'd be in creative mode when using this. I can upload a video of it if it's really needed.
-
View User Profile
-
Send Message
Posted Jan 30, 2014@MyPictures
Nope. I just got a sudden cras and thats all.
-
View User Profile
-
Send Message
Posted Jan 29, 2014@Shevchikden
Did you use SimplePluginManager to reload NoCheatPlus? Please always use /ncp reload for now. Its a known issue that Plugin Managers cant reload NoCheatPlus properly.
-
View User Profile
-
Send Message
Posted Jan 29, 2014@MyPictures
@Welite
I wouldn't reference "NoPwnage" too much, in fact. We do implement the checks for the message itself and more, but we don't implement the proxy-lookup, which is what NoPwnage was centered around, unless i am mistaken. The chat checks should not cost you much extra.
@Stevensaurus
That's interesting - i think there is a ticket for that already: Can you add a comment on 684? I am interested in the output of the "ncp version" command, what kind of slabs, i.e. occupying the upper or lower part of a block, and if it can be reproduced without the ctrl-sprint feature.
@Shevchikden
Does your server crash more often? Does this very log repeat?
@theIgloo
Can you be more specific? Are players in urvival mode or creative mode? You are using pistons? Any other special blocks involved ?
If you are using pistons, Ticket 364 should be related. Problem with pistons is that it needs monitoring pistons "a lot", i.e. all, and keep it in memory in order to allow for latency (...) - then again it might need adaptions for all the flexibility then with the on-ground checking. Not impossible but certainly not simple to implement and not likely to come very soon.
-
View User Profile
-
Send Message
Posted Jan 29, 2014I like the plugin, however I'm obsessed with redstone contraptions. I made one to launch mobs pretty far and high, but NoCheatPlus stops it. You go like 4 blocks out and 2 up then you get pulled back. Could you please fix this false positive? Getting thrown by TNT shouldn't count as flying.
-
View User Profile
-
Send Message
Posted Jan 29, 2014Got this crashlog
http://pastebin.com/VukqNgwi
[13:00:15 INFO]: ---- Version information ----
[13:00:15 INFO]: #### Server ####
[13:00:15 INFO]: git-Spigot-1279 (MC: 1.7.2)
[13:00:15 INFO]: #### NoCheatPlus ####
[13:00:15 INFO]: Plugin: 3.10.7-SNAPSHOT-sMD5NET-b646
-
View User Profile
-
Send Message
Posted Jan 28, 2014First, let me say than you for making this awesome plugin.
Now, with this plugin I get very few false positives. But there is one thing that has been consistently happening when sprint-jumping on half slabs. If a user tries to sprint jump on half slabs, then they are teleported backwards just like if they tried to use a fly hack. This only happens on half slabs.
I have also tried this on a local server and still got the same results, so it's not a lag issue. Thanks in advance for your help.
-
View User Profile
-
Send Message
Posted Jan 28, 2014@MyPictures
And does not have it destructive effect ? If the server is overloaded because of too many connection wont this checking function cause even more lag ?