NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Oct 7, 2014@DaGLiMiOuX
Do you have any command on the server that works with [Prefix] !?
-
View User Profile
-
Send Message
Posted Oct 7, 2014@asofold
For kicking and banning we are using BAT (Bungee Admin Tools), but on config is configured with ncp kick:
Furthermore, I tried to use /npc kick manually and it kicks you from the server perfectly, but with same result:
And the only one that I think it could use the Vanilla kick command, its HubKick, that sends you to hub when server was stopped. Hope you can help me to find a way and thanks for your fast response =P
Regards,
DaGLiMiOuX
-
View User Profile
-
Send Message
Posted Oct 7, 2014@DaGLiMiOuX
You already altered the correct strings entry in the configuration. However to make kicking work with all custom messages you should set that by a command that supports those. I am not sure if with your other plugin it would already work using the vanilla kick command "kick ..." instead of the default "ncp kick ....".
-
View User Profile
-
Send Message
Posted Oct 7, 2014Hi there!
We are using your plugin in our server and I would like to ask you something. I have translated to Spanish all your messages for our server, even BungeeCoord messages for kicks/bans, but if for example I spam on chat, your plugin kicks me saying:
Our goal is to get this:
I was searching for too long and I came here as last resource, because I don't know where to keep looking. Where I can change that message? =S
Also, we are using a plugin in our server called "HubKick". On its config, it has a "prefix" parameter to use for messages. Why your plugin is the only one getting that "prefix" for his messages? I mean, seems that HubKick changes something on spigot for prefix on server messages (?). Will you add a "prefix" config or something? It's pretty annoying that I can not change the prefix for NCP messages xD
Thanks in advice for your time.
Regards,
DaGLiMiOuX
-
View User Profile
-
Send Message
Posted Oct 5, 2014@sexyrussian
Do you mean "ordinary" ender chests with echests?
I don't know what "essentials.enderchest.others" enables, but it looks like it is a permission that i would not give to players, because it appears to have to do with other players ender chests.
-
View User Profile
-
Send Message
Posted Oct 5, 2014People have been complaining to me about their echests being wiped. There is a guy on my server with like 30 stacks of gaps in his alpha chest with everyone's heads. Even my own. In the logs that same guy has viewed the echest of a butt ton of people, the list includes echests of many players whom reported losing their echest. I have reason to believe a player has found a way to take other player's echests. I haven't confronted him about it. first thing I did was check permissions and ops list. There is no one opped and the only echest perms that player has are perms inherited from his donor ranks, it's an essentials command to use your own echest on the go, and to check the contents of other players echests. Is it possible for a hacked client to use some kind of ether an exploit, or an unhanded method to remove stuff from an enderchest? Here are the donor permissions that majority of donors have. - essentials.enderchest - essentials.enderchest.others
So what do you think, is there a client that does this? or other ideas?
-
View User Profile
-
Send Message
Posted Oct 2, 2014@asofold
ah i found out it was because i was using PlugMan to load and unload the plugins. Thanks for the help :D
-
View User Profile
-
Send Message
Posted Oct 1, 2014@KevinEssence
1.8 enchantments are not supported, as they are not contained in the Bukkit-API, so that's likely a problem.
@Golumpa
Do you use a plugin-managing plugin? Did you check you don't have two NoCheatPlus jars loaded, possibly renamed (check your startup log too)?
-
View User Profile
-
Send Message
Posted Oct 1, 2014Hello, i am trying to use the latest version on the latest version of the spigot 1.8 hack and i seem to get this error alot... any ideas why?
http://dev.bukkit.org/paste/10701/
-
View User Profile
-
Send Message
Posted Oct 1, 2014@asofold
You know what I think it was, unlootable enchantment in 1.8 added depth strider, making you walk faster in water if on 1.8. I removed it for now, probably conflicted with ncp.
-
View User Profile
-
Send Message
Posted Sep 28, 2014@DanSpedey
Too early to state, but we are keeping one or two eyes on that Sponge.
-
View User Profile
-
Send Message
Posted Sep 28, 2014Will this plugin be ported to Sponge??
-
View User Profile
-
Send Message
Posted Sep 27, 2014@VizionStudiosMc
Can you post the full output of "ncp version" ? We could use more info on server version + if there are any special hooks.
Can you give more information on "simply vclip into bases" as well? What kind of blocks are between, can it be excluded that a player made it in otherwise and just teleported others, anything else ?
-
View User Profile
-
Send Message
Posted Sep 27, 2014I'm on NoCheatPlus 3.11.1-RC-sMD5NET-b743 and no i did not use Admin Perms to test it.
http://pastebin.com/kPN4F1RE
(If you can tell me anything i should change to make the plugin work better)
-
View User Profile
-
Send Message
Posted Sep 27, 2014@KevinEssence
Thanks for the input, can't confirm yet - do you have any change on the "ncp info playername" command from before to after reproducing the issue (and if so which changes...)?
@VizionStudiosMc
What version ("ncp version" command) are you running?
What's your config for the passable check?
Edit: You didn't test with admin perms nor op, did you?
-
View User Profile
-
Send Message
Posted Sep 26, 2014Hi everyone!
So i found out today after a little incident that nodus users can simply vclip into bases on my server?
Any ways to stop this?
Thanks
(And can you guys add auto update next update)
-
View User Profile
-
Send Message
Posted Sep 23, 2014Latest spigot patch + latest jenkins ncp, players and myself are having issues swimming in water, as in it glitches a player when swimming back. Same with flying with the new fly speeds. No bad outputs or anything. Anyway I could fix this in the config?
-
View User Profile
-
Send Message
Posted Sep 22, 2014@DanSpedey
It should work fine, at least i don't know of problems with that one.
Latest release (same as on Jenkins):
http://dev.bukkit.org/bukkit-plugins/nocheatplus/files/70-nocheat-plus-3-11-1-rc-smd5net-b743/
-
View User Profile
-
Send Message
Posted Sep 22, 2014@asofold
So if I installed the Spigot 1.8 protocol hack then there would be no problems?
-
View User Profile
-
Send Message
Posted Sep 22, 2014@DanSpedey
No and somewhat. We don't use UUIDs for storing player data (yet), however the history/data of NCP is only kept until restart, so the risks that name changing pose are strongly limited. The actions can already now be changed to use [uuid] instead of [player], if desired, though the player name should be correct while the player is online.