NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted May 13, 2014@jet315
Your correct and incorrect at the same time. It alerts you so that you can take action as to how you see fit. I personally ignore 99% of the message because they are useless. use /ncp notify off to turn these notifications off. To elaborate on what you said NCP does stop people from hacking. For example NCP stops players from useing fly abilities if they dont have them. So it does stop players from hacking. Now to say that this plugin is useless is wrong. It is the plugins job to alert you of suspected hackers. It is your job to take action. Sometimes and this happened a lot players are not hacking they are lagging so if NCP banned everyone that was "hacking" It would ban lots of players that dont hack and are just lagging. It does take action by preventing spam and kicking players that do spam but if cannot do your job for you.
-
View User Profile
-
Send Message
Posted May 13, 2014Nooo why remove the doughnut logo :(
-
View User Profile
-
Send Message
Posted May 13, 2014Hi there,
could anyone advise me with regards to this plugin:
When I am logged in NCP often reports suspected messages to me however it doesnt do anything about it. Nobody has ever been kicked or banned for hacking, just constant messages to me when I am logged in about suspected knockback or suspected fly for example.
Is this as expected? And then me as an op should act upon NCP's warning? Or is something wrong? My reason for posting this is because it seems to be wrong, because if this is expected, NCP is rendered almost useless if an OP isnt logged in?
-
View User Profile
-
Send Message
Posted May 13, 2014@Asofold
ncp version gives the default ncp help page. Even in the console.
Edit: All ncp commands give the default ncp help page.
I have the latest version.
-
View User Profile
-
Send Message
Posted May 13, 2014@kompostak99
Development build 696 addresses this.
@Darknessorising
@FabioZumbi12
Do write "/?" including the quotes, ? is a special character in YML, as fr as i know.
-
View User Profile
-
Send Message
Posted May 12, 2014@Darknessorising
With me too, "/?" is converted to null?null on reload/reboot! Normal or bug?
-
View User Profile
-
Send Message
Posted May 12, 2014Ok So I am trying to block the command /? and I have it disabled in the permissions so they cant do it and it says "were sorry but you are unable to perform this command, please contact an adminastrator if you belive this is an error." So I was in the config for no chear plus and blocked several commands such as /op and /gm 1 (players dont have the ability but I just like to be safe) and when I add ? to the blocked commands list it shows up as null: null
The part of my config I need help with is in the link.
http://pastebin.com/AKa413sf
Not sure what is happening With it as I want my server to be more professional and dont want it to say "Were sorry but... is an error"
-
View User Profile
-
Send Message
Posted May 12, 2014@LordKainzo
Is the player trusted? This looks like a server error rather, because the other plugins have the same problem (and NCP is not able to change the result of Player.getLocation()) - so it might be players try to abuse a weakness in the mod to get NCP removed.
Edit: What's the output of the "ncp version" command ?
@StaNNiE0
We don't know if there is a (reasonably complex) way using the Bukkit API only. We could certainly do something with checking the networking traffic (e.g. depending on ProtocolLib). Recent hacks make us consider to add such...
Edit: What's the output of the "ncp version" command?
-
View User Profile
-
Send Message
Posted May 12, 2014Hey,
I have my own server and I just discovered a player with a hacked client named: Matix
He used the Regen hack for some sort of godmode?
Is there a way to fix this?
Greetings.
-
View User Profile
-
Send Message
Posted May 12, 2014Hey @asofold - getting this strange error when players attempt to join..
http://pastie.org/private/mhu4cv3thmfejgsp7mgig - the user that this was happening to stated that he had a gravel block fall on him, I believe this is causing issues somewhere. After I teleported him away, he no longer had an issue but every time he attempted to connect it would boot him until I quickly teleport'd him.
When I remove Nocheatplus - there is no issue.
-
View User Profile
-
Send Message
Posted May 11, 2014@fungreenfox
The knockback check is clearly affected by networking congestion/delay or client side lag. It could also be networking handling, but also might be related to the ctrl-sprint feature.
I could imagine that the current implementation of
knockbreakknockback might be obsolete, though that should already have applied to 1.7.5 and before anyway.The default delay is 10 ms short of 2 ticks with a default of 90 ms. If for instance the network handling leads to one more tick delay more often (actually, whatever amount), be it on server side or on client side, then this might be just the bit that's missing (in average?).
Speculating here, but both reports are not singular with 1.7.9 (and maybe even 1.7.x).
-
View User Profile
-
Send Message
Posted May 11, 2014After replacing with the newer 3.10.11, more ppl are making VL at 1 -2 regularly at fastbreak. I have adjusted this to 10 millisecs extra, worked all evening. Next day, ppl make VL 700-860 often at knockback. Have you changed something and should i adjust this by seeing a few ppl doing this? One of the users sword making this knockback at VL 800, is enchanted LOOT 3 and UNBREAKING 3. But an operator at same server has not been able to trigger this VL at the slightest, with these enchants at a normal alt character. One weird observation is, in mcmmo skills, the observed user triggering VL 800, has 0 in sword skill.
git-Spigot-1465 (MC: 1.7.9)
NoCheatPlusPlugin: 3.10.11-BETA-sMD5NET-b690 MCAccess: 1.7.8|1.7.9 / CB3043-DEV Hooks: Citizens2(cncp) 2.0 | mcMMO(cncp) 2.3-
View User Profile
-
Send Message
Posted May 11, 2014@Chester2000
Check out the actions entries for the survivalfly check. There is a cmd:kickflylong or a similarly named action, which means the kickflylong entry from the strings section (lower end of the config) is executed as a command.
In general we don't recommend auto-banning, because checks react very much different to lag on either side and violation levels as well as false positives differ by a lot, so without a little experience one can cause a lot of problems.
@kompostak99
Does NCP stop it? If not, then i don't know how you could :). We would need more information about versions both of NCP and the server, also if there are special plugins in use that alter bows or such.
-
View User Profile
-
Send Message
Posted May 10, 2014how can i stop fastbow ? fastbow work only on Resilience Client
-
View User Profile
-
Send Message
Posted May 9, 2014how to make it ban player when it reach cerentain lvl of violation?
-
View User Profile
-
Send Message
Posted May 8, 2014@TrendingGamer
What restrictions of WorldEdit/WorldGuard can be bypassed?
Currently there is no easy explanation "on it all" - checks use differing methods, which are affected in different ways by client-side and server-side lag, they measure completely different things and the violation levels grow in different ways amongst checks - so all in all it needs experience and/or a little bit of study to judge them.
The nocheatplus.log usually contains the medium-heavy to heavy violations rather. Do you have any specific questions on it?
-
View User Profile
-
Send Message
Posted May 7, 2014Hi,
Is it possible to make the nocheateplus.log more easy to understand what has happens. Also is there a possible way to block clients that have mods on them that can bypass restrictions for the use of World Edit/World Guard.
-
View User Profile
-
Send Message
Posted May 7, 2014@CoolKill3r
We do have CompatNoCheatPlus to allow some plugins to work with NCP, but it is not possible in general, because plugins actions can not be foretold by us. If you have a specific plugin in mind, you could tell us, maybe something can be done, in terms of either providing some compatibility hook/hack in CompatNoCheatPlus or by assisting the developer of the other plugin to hook into the NCP-API to make their actions work.
@ItalianSkillz
Glad we could help.
@sparts
Yes, blockbreak/noswing - maybe they decided a player does not need to swing the arm to lay fire, would be reasonable. I will provide a default workaround/fix soon.
-
View User Profile
-
Send Message
Posted May 7, 2014@SEGA_Q8
Aimbot is hard to prevent - basically they at least try to move like a player.
Concerning new versions of regen hacks (1.7.9) we are not yet sure what we can do, or if at all. Do you know if those work on 1.7.5 or lower?
-
View User Profile
-
Send Message
Posted May 7, 2014I am having a weird issue that I believe NoCheatPlus has something to do with. Default players can not use flint and steel to place fire. After a little bit of investigating, I figured out players with "nocheatplus.checks" permission can set fires with flint and steel and players with out it can not.
Plugins I use that could effect this are: griefprevention, worldguard, and essentials. I checked all the settings and it comes down to that one permission. What would cause this?
Setting Noswing to false under the blockplace fixed it. You guys are awesome!