NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Jul 29, 2015@asofold Server:
git-Spigot-6c9b0a1-de5c621 (MC: 1.8.8) *Just updated to 1.8.8 today* (detected: 1.8.8)
NoCheatPlus:
Plugin: 3.12.1-SNAPSHOT-sMD5NET-b831 MCAccess: 1.8.4-1.8.7 / Spigot-CB-1.8_R3
The only plugins I'd think cause issues would be McMMO but 99% sure it isn't that. A lot of the errors showing up are showing low violations like (VL 10.) etc.
-
View User Profile
-
Send Message
Posted Jul 29, 2015@xXGrammar_NaziXx
What's the server version (best just paste the output of /ncp version)?
What other plugins do you use, that could have to do with moving/appearance (disguises, skills, similar)?
-
View User Profile
-
Send Message
Posted Jul 28, 2015Hi.
For some reason, my players are being flagged for very simple things like walking and hitting mobs while moving etc. I've upgraded to the latest Dev Build (#831) and this issue still exists. I have deleted the NoCheatPlus configs and let it reload but I am still having this issue.
I also have CompactNoCheatPlus (using the latest version that was updated 3 hours ago.) Maybe that is causing the issue?
Thanks.
Edit: Forgot to state that what I mean by flagged is that I'm getting the notification and they are being teleported back etc. Many of the players are reporting lag issues but it's just NoCheat+ stopping them from doing anything.
-
View User Profile
-
Send Message
Posted Jul 28, 2015@martini002
Please tell us the exact version of NoCheatPlus and your server. Did you see if they got hit before they flew away (by another player)?
-
View User Profile
-
Send Message
Posted Jul 28, 2015Im using the last dev version but there is a lot of hackers flying around :/ How can i stop it?
-
View User Profile
-
Send Message
Posted Jul 16, 2015I maybe think it is multiverse inventories, there does it
i have a creative world, and a not creative world
When people is in creative, they can do something, so they stay in creative, when they come to the normal world
Something where they just scrolling on the mouse and keep pressing q, so they drop a thing https://www.youtube.com/watch?v=DSYTA5iSRmU
And when they come to spawn, they still have creative
They are are not "online" more, but they are still on the server, and can do anything, and theres the npc message comes ;)
-
View User Profile
-
Send Message
Posted Jul 16, 2015@Flarupspige
You can suppress the warnings (search for supress in the config of NCP).
Is the other world on another server? What other plugins are there?
-
View User Profile
-
Send Message
Posted Jul 15, 2015@asofold
It happens when go to another world and back again
but can i take it off? :)
-
View User Profile
-
Send Message
Posted Jul 14, 2015@Flarupspige
Usually it means that a plugin has created fake players, but it could also indicate a problem. Do you have any combat logging or npc plugins installed?
@miki88mouse
We need more information on how TNT and jumping is involved and how players "can't". We also need server + plugin version (e.g. just paste the output of the "ncp version" command).
-
View User Profile
-
Send Message
Posted Jul 12, 2015WARN]: [NoCheatPlus] DataMan inconsistencies: wrong number of online players (4 instead of 2)
i get this error
minecraft version: 1.8.7 Ncp version: #826
-
View User Profile
-
Send Message
Posted Jul 11, 2015@fr233
It uses CPU and RAM, roughly scaling with the number of players (...). I don't have an estimate for RAM usage, the CPU usage might come close to 2%-5% average in certain cases due to the complex moving checks.
@comniemeer
We have not received any update on that, we also don't know the exact server and plugin versions (...). The only thing we know is that the video shows a modded client, which can also be the source of "lag back", either by cheating or some "optimization" the client may performs or just because it handles moving and packet sending differently to the (up to date?) vanilla client.
There will be fixes following for the moving related checks, so if those issues are still there, things might change soon-ish.
-
View User Profile
-
Send Message
Posted Jul 11, 2015@KevinEssence
What happens now with this?
-
View User Profile
-
Send Message
Posted Jul 11, 2015good plugin！i want to ask how many ram and cup usage would ncp use?
-
View User Profile
-
Send Message
Posted Jul 8, 2015@ceagle2
I'll open a new ticket for spigot for it.
@Kixot14
We currently can't support pistons well, see Ticket 364.
@chrishillz
Hard to tell - it also depends on what actual extra protection our packet level checking actually provides, which we can't 100% tell. At least one fighting related check is still missing, which might be worth considering, because we can't really check that on Bukkit side anymore.
Currently main pointers should be:
Packet level checks won't become less with time. Biggest reason to have them probably is to intercept moving packet spam (many unwanted effects, afaik it#s not been "fixed" on server side, not stating that anyone else than Mojang can do anything about it).
-
View User Profile
-
Send Message
Posted Jul 7, 2015Would you guys recommend ProtocolLib for the sole purpose of blocking the few checks that NCP does not detect? Not sure if it's worth the expense of such a large plugin.
-
View User Profile
-
Send Message
Posted Jul 7, 2015NCP blocked jumping when i tried to jump with piston and slime block
http://i.piccy.info/i9/62724bed10bcf152f03511292c6c9668/1436283120/282599/925511/2015_07_07_18_23.jpg
-
View User Profile
-
Send Message
Posted Jul 5, 2015@asofold Good thing you found that out - thank you for that and in general for being so public with all those more or less internal things. :-)
If also Slimeblock elevators were detectable more easily for NCP, so SurvivalFly wouldn't stop them from working (I absolutely understand that it's hard to detect, since you've explained it to me before), I could finally put SurvivalFly back on active duty. :) We just recently had a few people who love their slimeblock elevators, and they even wondered why slimeblock elevators actually work properly on our server. It's just that they trigger 12k SurvivalFly VLs with them, which is confusing at times. ;-) But well, everything else works perfectly fine, so... NCP is excellent the way it is. :-)
-
View User Profile
-
Send Message
Posted Jul 5, 2015@ceagle2
I can confirm the problem is on Spigot/CraftBukkit side built a moment ago - it's the "to" location of the PlayerTeleportEvent and the "last location" used for the "from" location of a PlayerMoveEvent. Those are set wrongly - the Minecraft entity is set to the correct location. Just plugins using the location of the teleport or checking the moving event (from .... to) have an issue here, in vanilla you could just move normally.
-
View User Profile
-
Send Message
Posted Jul 5, 2015@asofold
Whoa, that's the issue then. And it's probably a Mojang-sided issue - because when bukkit:tp was still part of Spigot, it worked flawlessly, even though it lacked rotation parameters. I wonder... is it the same with the latest Vanilla server software? I don't really have the means to test that without any plugin at all.
-
View User Profile
-
Send Message
Posted Jul 5, 2015@ceagle2
With my tests, the command
"tp @p ~ 255 ~"would teleport an opped player (!) to the y coordiante 255 leaving x and z as is, while it would teleport to 0, 255, 0 if you are not OP. With 1.8.7 Spigot - clearly a bug.