NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Jan 3, 2016Is it possible to drop the checks down a bit for survivalfly? If so, how? @asofold
-
View User Profile
-
Send Message
Posted Jan 3, 2016asofold, thanks, it fixed. I do not quite understand the last question.
-
View User Profile
-
Send Message
Posted Jan 3, 2016@Sitmobedaf
Build 910 might fix this.
The version seems to show normal Spigot, is that right (not PaperSpigot)?
-
View User Profile
-
Send Message
Posted Jan 3, 2016asofold, http://sh-mc.ru/nocheatplus.log
-
View User Profile
-
Send Message
Posted Jan 2, 2016@Sitmobedaf
Then only a debug log can give more insight (https://github.com/NoCheatPlus/Docs/wiki/Debugging#on-the-fly-debug-output-for-individual-players).
Perhaps we have changed something so cross-plugin issues can arise under certain conditions, basically we simplified some things, though.
@Schneidertm
Detected as flying ~ with morepackets striking first? Could that be a major lag spike? You could at first check both NCP log file and the server logs for entries at that time, you might also check/get client logs of that time (note possibly differing time zones), could be players/mods who had been online have a client-side log. There you could examine if chat/other entries show some larger (unusual) gap.
Another source could be other plugins overdoing erasing/altering NCP data (not sure any do such). Multiple anti cheating plugins? I'd check logs for a spike first...
-
View User Profile
-
Send Message
Posted Jan 2, 2016I'm using NCP #906 and Spigot 1.8.8 (5f38d38-18fbb24). There are random freezes where the whole server is detected as flying. Nobody can move and there is no error. How I can detect what happens?
-
View User Profile
-
Send Message
Posted Jan 1, 2016Many people use the old AuthMe - they are the most stable! I'm using AuthMe 3.1.1 2 years. Developers have more than a year trying to make the stable version AuthMe. They promise that in a month will be the stable version, but I do not believe it ...
-
View User Profile
-
Send Message
Posted Jan 1, 2016@Sitmobedaf
That's quite odd, we might have to produce a debug log for this, in order to get more insight. Typically the plugins freezing players don't account for anti-cheating plugins, nowadays they'd probably set them flying until authenticated.
The screenshot shows a web link with "authme-recoded", which doesn't seem to exist on dev.bukkit.org by now. (On dev.bukkit.org, there is a ...reloaded plugin: http://dev.bukkit.org/bukkit-plugins/authme-reloaded/). Is the version you are using up to date and/or from a trusted source?I assume you are using this jar: http://dev.bukkit.org/bukkit-plugins/authme-reloaded/files/54-auth-me-3-1-1/
Is there a reason to use AuthMe (Reloaded) 3.1.1 instead of 3.4 or 5.x ? The plugin version is from november 2013 and could easily turn into a source of trouble on 1.7.10, also thinking of 1.8.9 clients connecting with a protocol-support build of Spigot.
-
View User Profile
-
Send Message
Posted Jan 1, 2016build 908 - the problem more acute. Bug occurs when the authorization. Check with two plugins.
https://youtu.be/rpcxD5-esso
-
View User Profile
-
Send Message
Posted Jan 1, 2016asofold, EssentialsX b-184. Well, I'll check.
-
View User Profile
-
Send Message
Posted Jan 1, 2016@Sitmobedaf
-
View User Profile
-
Send Message
Posted Dec 29, 2015asofold, i use 853. I can not precisely define at what assembly began bug. In 883 the bug is.
-
View User Profile
-
Send Message
Posted Dec 29, 2015@NewBest
Do update to the latest beta build of NCP for 1.8.8. Depending on issues it might also be feasible to use development builds (906, or 907), provided those fix something you need.
The issues with doors are in bukkitapionly mode only (outdated NCP, usually). We do intend to fix it some time, but right now updating should solve it.
@Sitmobedaf
Has that been different on previous builds of NCP (which one did you use last)?
-
View User Profile
-
Send Message
Posted Dec 28, 2015asofold, is still having problems (#907) Spigot 1.7.10 (with AuthMe ver. 3.1.1) The bug occurs after authentication. https://youtu.be/WghISNcmWTA
-
View User Profile
-
Send Message
Posted Dec 28, 2015Looks like there is a problem when players try to close doors if they are fitted inside a frame and they point at the front of the door (like in the image below). If they click the 3 pixels on the side of the door or if they go inside the frame, it will work normally.
http://imgur.com/4D89CMC
Another bug that my players told me about is that you can't sprint (pres LCTRL by default) while flying, no matter if you have /fly turned on or you are on creative.
/ncp version : http://imgur.com/Ur6sEOm
-
View User Profile
-
Send Message
Posted Dec 24, 2015@MarkElf2204
Build 906 would be the current references for 2-high ceiling.
-
View User Profile
-
Send Message
Posted Dec 24, 2015@asofold
Build 3.13.4-BETA-sMD5NET-b901 on 1.7.10. Let me know if you need any other information.
-
View User Profile
-
Send Message
Posted Dec 24, 2015@asofold
I fixed this asofold, thanks for your help.
Merry Christmas
-
View User Profile
-
Send Message
Posted Dec 24, 2015@InazumaTS
@tcarey2015
NPC plugins could interfere, if you fake players with the name of existing players. Could be combat-tag plugins. If the npcs lead to firing events with player-npcs taking damage, they might get registered in data somewhere. Shouldn't be an actual issue, if you suppress the warnings, since with spigot >= 1.7.10 NCP will not store any player instances anymore anyway. We will have to make NCP to detect NPCs better, to avoid creating/keeping data unnecessarily.
@MarkElf2204
Which build are you on? Recently some workarounds with 'head blocked' have been changed, and there will be follow up fixes. Currently i easily get set back after about 10-20 blocks with ice underneath but not with normal ground. You always have players who spam jump differently though.
-
View User Profile
-
Send Message
Posted Dec 23, 2015According to an individual who was having issues with survival fly, "when I run and spam space with a block above me" it began triggering false positives, is it possible to look into this for a possible solution to provent it?
Sorry for ignoring the last answer/question - it wasn't intentional.