NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Feb 16, 2014@lIndependentl
Please open a ticket so we can keep track of information better. We need the outpout of "ncp version", and a description of what hacks you tried and what the alerts and kick messages were!
-
View User Profile
-
Send Message
Posted Feb 16, 2014@GodsDead
I am not sure if i have enough information to judge this, we would need to know about the command protection configuration in use (pm would be good, if not public).
NCP should not override permissions for plugin commands unless you specify so. The only case this should happen from side of NCP is, if you added the essentials command to the protected (permission message) list of commands in the configuration of NCP - however if you gave yourself the permission of the essentials command, then the only way it can by NCP would be if the essentials command does not have a default permission set but checks that one only in the command handler. Unless there is a real issue with a command or you want to remove the alias from tab completion or want to hide a (not so difficult to detect in other ways) plugin like essentials, i would not recommend to add commands to the protection lists.
If ncp overrides the permission, for the case the command is added to the protection list, the permission would be like nocheatplus.filter.command.commandname with commandname being the lower-case command name (seems the wiki shows the wrong permission, actually).
-
View User Profile
-
Send Message
Posted Feb 16, 2014@asofold
No i don't have permission, I used my friends account, that has no permission, only user rank (the default one). Help please. Thanks ;)
-
View User Profile
-
Send Message
Posted Feb 16, 2014Im getting permission errors for users using /ignore the essentials permission is set, does nocheatplus override this? If so whats the permission? I cannot see it on the perms page.
-
View User Profile
-
Send Message
Posted Feb 16, 2014@Bronzeteufel
Please continue adding to Ticket 633, so that we can keep track of details.
We would appreciate you adding a comment with the output of "ncp version" and if this always happened or often or randomly with tile entities, also how many times you tested (roughly).
-
View User Profile
-
Send Message
Posted Feb 15, 2014@asofold: Yes, tile entities. There are some Commandblocks and a lot of chests at spawn. Enabling ncp takes 2 minutes + 1 minute for "Post-enable running". Just by accident I moved the world spawn in the level.dat to an empty swamp .. and ncp started within 3 secs .. that was very freaky. I noticed the same issue with Multiverse Portals. The only solution for me is to move the world spawn to an area with no tile entities. I'm running the latest spigot dev build with a good CPU.
edit: There's the same issue if the world spawn is in another place with much tile entities. So .. it's not because of a corrupted chunk. ;)
-
View User Profile
-
Send Message
Posted Feb 15, 2014@EricPickup
Are you sure the player in the video did not have a fastbreak hack or some modified client?
-
View User Profile
-
Send Message
Posted Feb 15, 2014The bvisible check seems to be having a lot of issues with false positives. Check out this video, I recorded the guy with the logs in the chat: http://www.youtube.com/watch?v=E8r8k3EkawQ This is happening randomly to most of my players.
-
View User Profile
-
Send Message
Posted Feb 15, 2014@Bronzeteufel
Any more details? I am not sure how exactly tiles (tile entities?) are related to the startup time of NCP, but details would be interesting...
-
View User Profile
-
Send Message
Posted Feb 15, 2014ncp starts extrem slowly (2 min) if there were 1k+ tiles in the spawnchunks .. any solutions? :(
-
View User Profile
-
Send Message
Posted Feb 15, 2014@lIndependentl
Maybe you have bypass-permsisions (e.g. wildcards '*'), or you are op?
-
View User Profile
-
Send Message
Posted Feb 15, 2014Doesn't work, i used my minecraft with hack, and i can fly, it kicks me from server, not from the plugin. Why?
-
View User Profile
-
Send Message
Posted Feb 15, 2014@legofreak1999
Just remove the template questions and fill in what i asked below, we will ask back if we need to clarify anything.
-
View User Profile
-
Send Message
Posted Feb 15, 2014i dont understand what they are asking in the tiket
-
View User Profile
-
Send Message
Posted Feb 15, 2014@legofreak1999
More details are needed...
Please make a ticket like "Compatibility: Traincarts". Please provide the requested information such as "ncp version". We also need more information on what happens (restate) and also what violation messages show ingame or in the logs.
We also could use a link to the plugin project or source code page (BukkitDev plugin?).
-
View User Profile
-
Send Message
Posted Feb 15, 2014i need help i am using plugin traincarts on my server and i am editing then the speed of the minecart to make the rollercoaster more realistic only wenn that happens your plugin thinks you cant go that fast in a minecart so they will droped out of the cart how to fix this
-
View User Profile
-
Send Message
Posted Feb 15, 2014@sacha220899
We do try to provide an optimum by default, the next release will contain some configuration changes, but there is no optimum that covers all different types of servers.
If there was a much better "optimal config" that fits all, we would not dare to have a "default config" that is not optimal.
What i can think of is to link configurations of live servers (or parts of those), optimized for certain contexts. That would need server owners sending in their configurations, though.
-
View User Profile
-
Send Message
Posted Feb 15, 2014Can you please set an optimal config? So we haven't to set up it.
-
View User Profile
-
Send Message
Posted Feb 14, 2014@ghosttractor
I can't suggest much of use right now. We will have to reproduce this somehow and see if we can fix it or not.
If the other plugin allows executing commands on activation or deactivation of the spell, it would allow pinpointing exemption. Maybe it is possible to add something to cncp to do so, but i would need to have a closer look.
-
View User Profile
-
Send Message
Posted Feb 14, 2014@asofold
so what do i do??