NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Apr 3, 2014@asofold
Here is an example of one player who is having issues as well as the lag info http://pastie.org/8991919
I don't really know how to decipher this. I see a FAQ, commands descriptions, permissions list, etc, but I can't find a link to the page that tells you how to interpret these findings.
Where can I find what these numbers mean and what they should be?
-
View User Profile
-
Send Message
Posted Apr 3, 2014@pookshuman
Basically one has to examine what checks alert (if any !) and also try to estimate if it could be a systematic event, or rather happens randomly.
It can be the blockbreak.fastbreak or blockbreak.frequency checks in case of client side or networking delays/lag - there frequency might even be worse with lag, because fastbreak already assumes some amount of lag by default.
-
View User Profile
-
Send Message
Posted Apr 3, 2014I have installed NCP and players are complaining of block break issues with enchanted tools. How can I tell if this is a false positive or players with lag or something?
-
View User Profile
-
Send Message
Posted Apr 2, 2014@ridddle
The fastclick check is the only check that could do this. There is a historic check for enchanted written books (not enchanted books), but those would be changed as well.
So likely this is due to something else (client bug or another plugin or server), if you have disabled fastclick.
@SquareManStudios
You can PM a link to a paste so we can have a look ...
-
View User Profile
-
Send Message
Posted Apr 2, 2014@asofold Everything was fine untill i installed NoCheatPlus permissions were working then after i installed it none of the permissions were working like no prefixes all names are just white do you want me to link my log? let me know there are some other bugs in the log too but they were there before i installed no cheat plus. I just can't seem to find anything going on with NoCheatPlus in it. Im also not the best with bug fixing and stuff like that.
-
View User Profile
-
Send Message
Posted Apr 2, 2014@asofold: There is nothing in
ncp info <Player>, there are two issues:Both of those issues are such: people trigger InvTweaks action, items will move for a second and revert as if cancelled by… something.
That might be just vanilla or Bukkit, I’m not sure. Just need info if there is anything related to inventory and clicking / item movement I might want to disable.
-
View User Profile
-
Send Message
Posted Apr 2, 2014@SquareManStudios
NCP disables permissions? Are you sure this is not a bug in PEX? Can you be more specific on how NCP changes things or what exactly happens?
@ridddle
Are there any alerts of any checks? What are the complaints... are hoppers involved, anything specific?
-
View User Profile
-
Send Message
Posted Apr 2, 2014MyPictures:
I have this
I thought that setting
activetofalsewould do the trick but people still reported problems. My config version is670.-
View User Profile
-
Send Message
Posted Apr 1, 2014I am having an issue with this plugin. It disables my permissions all together i am using PEX can someone tell me what i should do to fix this? thanks in advanced.
-
View User Profile
-
Send Message
Posted Apr 1, 2014@rhaegals
You could ...
@PrimoHighDefinition
We are not in too much of a hurry, yet. Because we don't store long term data, changes are not as massive for NCP.
-
View User Profile
-
Send Message
Posted Apr 1, 2014@ridddle
The fastclick check.
@rhaegals
Sorry I don't know what your issue was again, hard to keep up in comments. You could open up a new ticket and talk there.
@PrimoHighDefinition
ÖÖÖÖÖÖÖ xoxoxoxo
-
View User Profile
-
Send Message
Posted Apr 1, 2014Which checks should I disable to allow Inventory Tweaks to work on my server?
-
View User Profile
-
Send Message
Posted Apr 1, 2014Nothing helps... Yes, I have plenty of plugins. Would be easier if we chat via skype? Please add rhaegals-nest
Thank you.
-
View User Profile
-
Send Message
Posted Apr 1, 2014@asofold
PLEASE UPDATE FOR UUID SYSTEM
http://forums.bukkit.org/threads/psa-the-switch-to-uuids-potential-plugin-server-breakage.250915/
Sorry for caps... :(
-
View User Profile
-
Send Message
Posted Apr 1, 2014@Shooty_
@MyPictures
A typo? The damage amount is calculated on the server-side, but clients can get more critical hits. Forcefield is reduced, though probably being able to reduce it further, it can't be fully orevented.
@MyPictures
@rhaegals
If ...motd.active is set to false, NCP should not send anything. Could be another plugin (otherwise a bug).
-
View User Profile
-
Send Message
Posted Mar 31, 2014@rhaegals
Did you also set allowall to true? I need to take a look at this and check if its broken or not. Whats your NoCheatPlus and CraftBukkit version? Have any other plugins that might disable mods over motds?
-
View User Profile
-
Send Message
Posted Mar 31, 2014Hello,
I keep getting empty line after someone log ins. Despite I turned Motd's active to false. Can someone help me please?
-
View User Profile
-
Send Message
Posted Mar 31, 2014@Shooty_
Removed? Forcefield hack is server sided and doesn't need/have any server sided dependencies.
Here some links for more information's about fight checks:
- https://forums.bukkit.org/threads/anti-forcefield.111895/#post-1431419
- http://www.spigotmc.org/threads/tons-of-hackers-anti-hacking-solution.15088/#post-150873
- http://dev.bukkit.org/bukkit-plugins/nocheatplus/tickets/51-improve-fight-checks-aimbot-reach/
-
View User Profile
-
Send Message
Posted Mar 31, 2014How the hell this plugin isn't removing forcefield ? (or the cheat that permit to deal more damage ) O.o
-
View User Profile
-
Send Message
Posted Mar 31, 2014@LordKainzo
Did you try removing the kick command from the survivalfly actions list?
Not sure we can do much more right now, because without a reliable way to reproduce it or at least a full moving debug trace (others reproduce it with tracing on) we won't get much closer to really solving it. Could be that it is due to latency, similar to problems with teleporting (server teleports the player, but some moving packets of the player arrive at the server, after the teleport but before the player/client has received any notice of it, thus having a big leap move on special occasions).
@Red_Jay
The chat checks could be configured to do such, but are you sure you want that? It could be very annoying to players..
You would configure the checks.chat.text section of NCP. There you set all weights in the message section to 0, also all enginges in the player and global section must be deactivated. Then you set the limit in the shortterm section to 5 times the minimum setting (shortterm covers 5 seconds roughly). Test that.... Not sure, but you might also think about if you want to keep kicking/tempbanning for spamming and also about sending a warning to the player. There might be more alterations necessary to make it a sound concept (action list, warning config).