NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Feb 13, 2014@Wizel603
Thanks that's interesting to know.
@ghosttractor
I assume that this will be issues with creativefly + velocity mainly. Nothing we can quickly mend.
@minejaxmc
We can not set such low values, because players are able to click much faster. You could set it to 3 per second or similar in the configuration.
Killaura is not detected as "killaura" but it it limited in what it can do. Certainly not perfect but somewhat effective. The fighting checks are in focus of development at present - first we will reduce false positives for certain situations, then we will try to harden it against cheating further.
-
View User Profile
-
Send Message
Posted Feb 13, 2014Y U NO ANSWER??
-
View User Profile
-
Send Message
Posted Feb 13, 2014Alright, I tested out KillAura on a NoCheatPlus server, and it didn't detect it. You shouldn't be able to register more than 3 hits per second. I think that will stop KillAura on NCP servers. Please take this in to mind, or at-least find a way to stop KillAura.
-
View User Profile
-
Send Message
Posted Feb 11, 2014@asofold
I use magic plugin:http://dev.bukkit.org/bukkit-plugins/magic/
Which has a spells that makes you fly/fling/jump VERY HIGH
And it says:
14.02.11 23:30:53 [INFO] Clerk9 failed CreativeFly: tried to move unexpectedly. VL 139.
14.02.11 23:30:58 [INFO] Clerk9 failed CreativeFly: tried to move unexpectedly. VL 394.
14.02.11 23:30:59 [INFO] Clerk9 failed CreativeFly: tried to move from 1039.43, 82.52, -49.75 to 1039.43, 84.91, -49.75 over a distance of 2.39 block(s). VL 439.
14.02.11 23:31:04 [INFO] Clerk9 failed CreativeFly: tried to move from 1037.39, 82.52, -49.94 to 1037.21, 84.91, -49.97 over a distance of 2.40 block(s). VL 462.
14.02.11 23:31:06 [INFO] Clerk9 failed CreativeFly: tried to move unexpectedly. VL 349.
14.02.11 23:31:11 [INFO] Clerk9 failed CreativeFly: tried to move unexpectedly. VL 257.
14.02.11 23:31:13 [INFO] Clerk9 failed CreativeFly: tried to move from 1045.42, 82.52, -52.63 to 1045.42, 84.91, -52.63 over a distance of 2.39 block(s). VL 438.
14.02.11 23:31:28 [INFO] Clerk9 failed CreativeFly: tried to move unexpectedly. VL 278.
14.02.11 23:42:04 [INFO] Clerk9 failed CreativeFly: tried to move unexpectedly. VL 139.
14.02.11 23:42:07 [INFO] Clerk9 failed CreativeFly: tried to move from 1029.50, 81.52, -62.63 to 1029.50, 83.91, -62.63 over a distance of 2.39 block(s). VL 426.
14.02.11 23:42:12 [INFO] Clerk9 failed CreativeFly: tried to move from 1029.50, 81.52, -62.63 to 1029.50, 83.91, -62.63 over a distance of 2.39 block(s). VL 563.
14.02.11 23:43:51 [INFO] Clerk9 failed CreativeFly: tried to move unexpectedly. VL 139.
14.02.11 23:43:55 [INFO] Clerk9 failed CreativeFly: tried to move from 1031.82, 81.52, -59.38 to 1031.90, 83.91, -59.29 over a distance of 2.39 block(s). VL 431.
14.02.11 23:43:57 [INFO] Clerk9 failed CreativeFly: tried to move unexpectedly. VL 353.
14.02.11 23:45:40 [INFO] Clerk9 failed CreativeFly: tried to move unexpectedly. VL 139.
14.02.11 23:47:16 [INFO] Clerk9 failed SurvivalFly: tried to move unexpectedly. VL 183.
14.02.11 23:47:17 [INFO] Clerk9 failed SurvivalFly: tried to move from 1041.06, 79.00, -60.09 to 1041.06, 81.52, -60.09 over a distance of 2.52 block(s). VL 417.
14.02.11 23:47:31 [INFO] Clerk9 failed SurvivalFly: tried to move unexpectedly. VL 98.
14.02.11 23:47:33 [INFO] Clerk9 failed SurvivalFly: tried to move unexpectedly. VL 131.
-
View User Profile
-
Send Message
Posted Feb 11, 2014Seeing an occasional "Block breaking out of sync!" in latest build. Using bukkit build 3019. Not doing any reloads at the times either, I should add.
EDIT: might have been someone farming and overloading the server at the time. disregard.
-
View User Profile
-
Send Message
Posted Feb 11, 2014@ghosttractor
First let's check out what "this" is in particular. What plugin are you using for flying?
-
View User Profile
-
Send Message
Posted Feb 11, 2014I use a plugin that makes people fly in survival but i can't while ncp is in the way!
How do i remove this??
-
View User Profile
-
Send Message
Posted Feb 9, 2014@Wizel603
Similar things have been proposed before, consider upvoting and adding to Ticket 376. Since that would be a quite simple to integrate variation of regex, it might actually happen.
-
View User Profile
-
Send Message
Posted Feb 8, 2014@asofold
Only about half a dozen people were connected at the times. I wonder if there was some high disk I/O latency at those moments which caused ncp timings to be thrown off when it went to rewrite its config. No, I don't announce any reloads. :)
I have an unrelated request for a feature to add to the Text Frequency section. A regex check against a configurable string list, which if there's a match will add a configurable weight.
-
View User Profile
-
Send Message
Posted Feb 7, 2014@asofold
I assume me ment the velocity switch under the moving checks?
-
View User Profile
-
Send Message
Posted Feb 7, 2014@timgeel
@MyPictures
What is "strict check" or "disabled strict check"?
-
View User Profile
-
Send Message
Posted Feb 7, 2014@timgeel
Yes could be. Set strict to true again and try to test it out.
-
View User Profile
-
Send Message
Posted Feb 6, 2014@SuperPyroManiac
Version of CraftBukkit and NoCheatPlus (please update to dev since it includes a fix for end portalframes and hover check)? What is that player actually doing? You can remove the kick action of SurvivalFly in the config.yml if you don't want them being kicked for having high VLs.
-
View User Profile
-
Send Message
Posted Feb 6, 2014For the past few months (With updates) my users sometimes just keep getting kicked by nocheat for "Flying or related" until I give them permissions to bypass that check. The second I remove the perm, the issue comes back.
-
View User Profile
-
Send Message
Posted Feb 6, 2014@SydMontague
NoCheatPlus should support walkspeed modifications by bukkitAPI. Do you use that or do you really do it over NMS? I recommend to create a ticket and explain it better there. We can also better keep track of your issue over a ticket then over those comments.
@timgeel
Can we have more information's? What does NC+ show with /ncp info <Player>? Do you see any moved too quickly logs in your console with that players name? I recommend to always create tickets to explain issues.
-
View User Profile
-
Send Message
Posted Feb 6, 2014The survivalfly check does bug sometimes on my server with dynamic walkspeed values.
In my case the players have a reduced walkspeed (0.16 and 0.18) and get "caught" by NCP from time to time, especially if they're jumping.
Would be cool if your checks would work better with the MC internal walkspeed values. :)
-
View User Profile
-
Send Message
Posted Feb 6, 2014@Wizel603
Hard to tell, it is a big server? I would expect a violation but not going up till kick level. You don't happen to announce "ncp reload", do you?
@dotapurex1
You deactivated morepackets - don't do that :). It's peculiar that it is possible to deactivate it at all, with creativefly or survivalfly activated.
-
View User Profile
-
Send Message
Posted Feb 5, 2014Is NCP broken on build #565? For some reason, hackers are able to run at super speeds?
This is how my config is looking: http://pastebin.com/bshNtU3Y
Thanks!
-
View User Profile
-
Send Message
Posted Feb 5, 2014Running b656. Almost every time I "/ncp reload", some random player gets kicked with "WrongBlock: broke another block than clicked".
-
View User Profile
-
Send Message
Posted Feb 5, 2014@karstvgl
Please see here: Ticket 676