NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Feb 21, 2014@MyPictures
so do i set these permission for default users.
nocheatplus.checks.blockinteract
nocheatplus.checks.blockbreak
-
View User Profile
-
Send Message
Posted Feb 21, 2014@Nikkolo94
Is that the info of the player who can not be hit for some time?
It could be related to Ticket 705, but it could also be latency. To judge latency we would have needed the info of the attacking player who can't hit. If you can systematically reproduce it removing data of the involved players before testing (or all) could help.
Usually with people moving that much i would suspect latency, also because the other player in the video is moving in an "optimized for checks" way, however the violations you show rather look like the moving players violations. If he had a clean sheet before that fight, it could indicate an issue as with ticket 705.
-
View User Profile
-
Send Message
Posted Feb 21, 2014Thanks for update
-
View User Profile
-
Send Message
Posted Feb 21, 2014@MyPictures
BungeeCord: #846
Spigot: 1312
NCP+: 3.10.8-RC-sMD5NET-b664
MCAccess: 1.7.2 / CB2922-DEV
NCP: Displaying Ibbux97's violations...
NCP: [17:34:41] moving.passable VL 24 (n24a1m1)
NCP: [17:34:37] moving.survivalfly VL 1105 (n13a85m502)
NCP: [17:33:18] fight.direction VL 2 (n2a1m1)
NCP: [17:27:20] blockinteract.visible VL 2 (n2a1m1)
NCP: [17:23:36] fight.critical VL 0 (n1a0m0)
-
View User Profile
-
Send Message
Posted Feb 21, 2014@Nikkolo94
do /ncp info <AffectedPlayerName here> and post the output. We also need your NC+ and CB/Spigot version and if you use Bungee then also bungees version.
@StreetkillnHD
nocheatplus.checks more infos here: https://github.com/asofold/NCPDocs/blob/master/wiki/permissions/permissions.creole#checks
-
View User Profile
-
Send Message
Posted Feb 21, 2014hey :)
i would like to know if the bug appear on this video http://www.youtube.com/watch?feature=player_embedded&v=WozsGKx5VxE if maybe is caused by NCP, the player is unable to attack, and it happen a lot of time on my server
-
View User Profile
-
Send Message
Posted Feb 21, 2014@StreetkillnHD
This means that the player clicked on or interacted with some block, without actually being able to see it, because something is in between. There are rare cases of false positives (short edge of door), and there are issues with latency (e.g. players using a sign-based lift with multiple clicks). It can also happen that with very fast block breaking the client does not receive or process a cancelled block break and will assume there is no block somewhere (ghost block), in this case they might try to break the block behind which is not accessible.
Maybe the log messages are not configured right by default, because they lead to too frequent messages, you could just remove the log action from the actions list for blockinteract.visible .
-
View User Profile
-
Send Message
Posted Feb 20, 2014Is there a permission node that contains all the commands like nocheatplus* which would just let the group bypass nocheatplus?
-
View User Profile
-
Send Message
Posted Feb 20, 2014CAN SOME ! TELL ME WHAT THIS MEANS! ITS SPAMING MY CHAT! http://puu.sh/74fJK.png
-
View User Profile
-
Send Message
Posted Feb 20, 2014@eHealings
What is a lot? 3 out of 500, 20 times each?
Speed II is some information we can use in order to try to reproduce it. Can you fill in a ticket for "set back with speed II" or so, stating "ncp version" output?
@WFloydBoy
That's also worth a ticket, as this is a standard problem.
NCP would also cancel chat until captcha is input. Because NCP is using chat to input captcha, this might conflict with muting-features of other plugins.
You can not do anything about it except for disabling captcha or not muting people (impracticable).
I can think of three "solutions".
I think the last one could be a solution.
-
View User Profile
-
Send Message
Posted Feb 19, 2014This question might sound stupid but what do you recommend I do with players who get muted (Through Essentials) and have the captcha to type out? They are unable to type anything but the captcha because of NCP but essentials doesn't allow the user to type the captcha. Any fix besides disabling the option to have captcha's?
-
View User Profile
-
Send Message
Posted Feb 19, 2014Hello,
A lot of players have been reporting to me that they are getting "pulled back" in combat. They are stating to me that they are chasing someone with a speed II on and they periodically get pulled back a few blocks every couple seconds. I believe that this may be NoCheat thinking that they are going to fast. Any way you could fix this?
-
View User Profile
-
Send Message
Posted Feb 18, 2014curious if you can block this disgusting client hack... will PM to keep kiddies out the loop
-
View User Profile
-
Send Message
Posted Feb 17, 2014@GodsDead
Other message? Such information is crucial - if it does not match the nopermission nor nocommand messages in the NCP configuration for protect/commands, then it is not NCP, this should be simple to check.
The permission would either be the default permission of the command, for the case that it was set before NCP running post-enable, or it would be nocheatplus.filter.command.ignore, all provided the command label is ignore and that the command is configured to be protected in the configuration of NCP. Note aliases...
-
View User Profile
-
Send Message
Posted Feb 17, 2014@asofold
I cant tell if its NCP overriding the /ignore command as, if it is, it isnt listed on the commands or permissions page, The error I get isn't the same error message from essentials when a permission is denied, All players have the essentials.ignore set by default, but it looks like another plugin is taking over the role of ignore from essentials, I would only assume NCP as I dont have anything else close that would need to! If so, what permission do I need to add to let players ignore again?
-
View User Profile
-
Send Message
Posted Feb 17, 2014@Siggi89
Questions:
You can configure NCP for alert-frequency and also leniency for block breaking, but i don't know of issues with just efficiency 5, so i assume there is some other problem.
-
View User Profile
-
Send Message
Posted Feb 17, 2014I hand out rewards to players who:
a) Donate
b) Play a lot
The rewards are virtual currency, and can be used to buy these two powerful items that spam my chat:
Super Pickaxe, and Super Shovel.
(Both are Fortune II and Efficiency V)
Every time someone goes mining using those very powerful items, it spams my chat with NCP warnings. Please fix that! Either by detecting the enchanted item, or by limiting the number of warnings it sends in a short period of time!
-
View User Profile
-
Send Message
Posted Feb 16, 2014@lIndependentl
I am pretty sure that NCP does not just allow flying, though there is always oddities to be expected with Minecraft/CraftBukkit/plugins.
So we need more of the blabla part that you are leaving out - plugin list could come in handy (pm if not public), text of kick message (yes, i want it). Please also check the log for any error or severe entries since startup. Output of "ncp version" is also needed, so we can exclude some pitfalls with running incompatible or buggy server or NCP versions.
-
View User Profile
-
Send Message
Posted Feb 16, 2014@asofold
Ok i'll do that, but nothing did that plugin, kick message where from CraftBukkit. And any alert that, Player is flying blabla.. Thanks ;)
-
View User Profile
-
Send Message
Posted Feb 16, 2014@asofold
Thank you, asofold. :) Maybe you can take a look at this post? http://dev.bukkit.org/bukkit-plugins/nocheatplus/tickets/633-long-delays-during-after-startup/#c10