NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted May 7, 2014@asofold @MyPictures
thanks for your help... :) i clearly was lagging by the time.. :D
-
View User Profile
-
Send Message
Posted May 7, 2014I had a random question, or actually more a request, if possibe ofc. Isn't it possible to cancel the usage of nocheat during a plugin useage? For instance using a plugin that would normally be canceld by nocheatplus, put the plugin in some sort of whitelisted plugin list for nocheat so it woudnt do anything if u use the plugin? Just a stupid question.
-
View User Profile
-
Send Message
Posted May 6, 2014please how can i stop regen hack's ? or aimpot ?
-
View User Profile
-
Send Message
Posted May 6, 2014@MyPictures
Don't be too pessimistic :p - though it does apply here.
@ItalianSkillz
It's not an error, it's a false positive, provided you were not using cheats, which is what i assume.
The fight.knockback check is affected by network congestion and client side lag (mostly), so it actually applies here that a couple of violations are possible, just so.
250 is not a high violation level for the knockback check, however we don't know what level you reached on that other server, or say... what data they based their decision on.
If they can be talked to, i suggest you let them show and/or explain on base of what data you got punished there (Alerts or violation history? What check types involved? What violation levels within what time?). It's also possible to ask us here on BukkitDev (pm, ticket, main page) on specific data/outputs.
-
View User Profile
-
Send Message
Posted May 6, 2014@ItalianSkillz
We clearly said that NoCheatPlus cant be perfect:
"Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version)."
Its not our fault if neither you or that server owner want to read. So again:
YES! NoCheatPlus cant be always right and Minecraft itself isn't really designed to work smoothly with any AntiCheat plugin at all.
-
View User Profile
-
Send Message
Posted May 6, 2014THIS PLUGIN IS A REAL PAIN IN THE ASS...
I WAS HITTING COWS WITH MY ARM AND I GOT THIS ERROR :
http://gyazo.com/13029e58a0de36b748aad9ef99a09274
NOW I'M IN THE HACKER GROUP FOR NO REASON
~I need proof that I'm not cheating to get out and Get My [Helper] Rank back
-
View User Profile
-
Send Message
Posted May 5, 2014@MyPictures
Thanks
-
View User Profile
-
Send Message
Posted May 4, 2014@laserguy22
Yea you run on a outdated version, If you run on 1.7.9 you should update to NC+ 390. That should fix your problem.
-
View User Profile
-
Send Message
Posted May 4, 2014@MyPictures
Using spigot- 1456, ncp- 3.10.9 RC sMD5NET b673
-
View User Profile
-
Send Message
Posted May 4, 2014@laserguy22
Version of NoCheatPlus and CraftBukkit? Sounds like your NC+ is forced to use bukkitAPI only and cant properly shape all blocks.
-
View User Profile
-
Send Message
Posted May 4, 2014I believe there is a bug when a person stands on a block with an ironbar, fence, etc. gets marked are flying by NoCheatPlus, anyone else getting this?
-
View User Profile
-
Send Message
Posted May 2, 2014@ssrock101
That's where we need more information:
-
View User Profile
-
Send Message
Posted May 2, 2014@asofold
Thank you a lot for the reply! 1 More question, My players currently tped back when they are sprinting and attacking someone. What would I change in the config to fix this? Thanks!
-
View User Profile
-
Send Message
Posted May 2, 2014@sjoerdtim
Assuming the code of the instantbow check does not have serious bugs in it, then it should not be possible to bypass it with a special event-sequence, so i have to assume that events are not firing from the CraftBukkit side - it could be a bug on Minecraft side or CraftBukkit. Thus i also assume that we can't do much from the plugin side. Of course packet-level checking might allow preventing this, but we don't do such at present.
(Edit 1: I will re-check code on either side, to make sure once more.)
@ssrock101
The one with vehicles should be blocked. The one with the first moving event (vclip) can't be blocked fully (except with packet level checks), but NCP should detect it and teleport the player back (Edit 2: on the next move, or some actions).
@Favorlock
Yes and no. The violation history and player data are kept in memory, thus provide a spot where memory gets consumed with players joining the server. 214 is not a high number. You can set NCP to erase both player data and history a certain amount of time after player-logout, so the data could get erased. I would not bother unless you have 10000s of players joining per day/hour - even then you might be running on a lot of memory and might prefer to keep log-out positions and violation history in memory for checking. If your server is running for weeks without restart, then you might need it, at least for big servers. The maximum amount of memory for player data and violation history should be about constant per player.
@LordKainzo
Server bugs i say! Do you have more exceptions of similar kind ? Is there some "failed to handle packet" or similar exception right before/afterwards?
This seems to be related to a world being null for a player, which should not happen, as it would kill all plugins that use player locations on login.
Output of "ncp version" can help us to state something like "please update the server software" :p.
Related tickets:
-
View User Profile
-
Send Message
Posted May 1, 2014@MyPictures
http://pastie.org/private/4nvfchpwzbzcnyz9audk9a
Any thoughts?
-
View User Profile
-
Send Message
Posted May 1, 2014Not sure if this is truly a memory leak, but figured I would share since Plumbr happens to believe it is. And yes, plumbr is pretty good at detecting leaks ;P
http://puu.sh/8vFH7.png
-
View User Profile
-
Send Message
Posted May 1, 2014Does this block the tp hack from tping to any cords you want?
Thanks - SSR
-
View User Profile
-
Send Message
Posted May 1, 2014We're running NoCheatPlus, yet there are still people using this hack. It seems to be a new kind, as none of the protections stop it currently, could something for it be added?
The hack: http://youtu.be/9bXI3Hva4wk?t=21s
-
View User Profile
-
Send Message
Posted Apr 29, 2014@dannob123
Disable all NoSwing checks temporary. Currently there is a bug if you use one of the development versions of CraftBukkit with NoCheatPlus.
-
View User Profile
-
Send Message
Posted Apr 29, 2014My NoCheatPlus blocks players from lighting nether portals! I know it is this plugin for disabling the plugin and testing it for myself and it is this plugin that does this! Can anyone help me? on how to fix this issue