NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Jun 2, 2012V-Clip Is Possible. Any way of adding it in so they cant V-Clip. They can only V-Clip Down.
-
View User Profile
-
Send Message
Posted Jun 2, 2012@Mayhem777
NoCheatPlus has a event based plugin API so it wont block plugins from modding actions for a player. I didn't test it with mcMMO but it should work I think.
-
View User Profile
-
Send Message
Posted Jun 2, 2012My players can't get out of a bed, i get "failed moving.bed.flying"
-
View User Profile
-
Send Message
Posted Jun 2, 2012@nhoclesnar
Do check if you have a plugin that makes fast block breaks like with the super-breaker skill from mcMMO :), in that case you should test to what violation level superbreaker (highest mining level) can get and maybe adjust to that.
-
View User Profile
-
Send Message
Posted Jun 2, 2012@sepukacheekray
Give them the proper permission node, or turn off that feature in NoCheat+.
-
View User Profile
-
Send Message
Posted Jun 2, 2012@BioRage
Usually hack client or mods will have much higher violation level (vl). So for no fall, below 5 or 10 is nothing. However, "FalconHD failed blockbreak.fastbreak: tried to break too much blocks. Total violation level 140" shows that FalconHD is probably using hack. What you should do is to run NoCheatPlus for a while then read the log. You will then see many low vl checks from many different players are logged. You can then conclude that those are actually lag and not a hack. You then can set your command: jail, cancel, kick, or ban depends on your server's situation.
-
View User Profile
-
Send Message
Posted Jun 1, 2012Quick question. I have a plugin that broadcasts player events through a players chat almost as if they typed it, with color messages, and nocheat is blocking the color messages and counting strikes against these players. Any way to make a bypass for this one plugin?
-
View User Profile
-
Send Message
Posted Jun 1, 2012Hey just wanted to let you know and I hope you can fix this with this plugin, But there is a new mod out there that allows a player to hit a player and track his coords...
-
View User Profile
-
Send Message
Posted Jun 1, 2012@NeatMonster
That sounds more like a 3.7 then :P
Also, I sent you a PM regarding testing and whatnot.
-
View User Profile
-
Send Message
Posted Jun 1, 2012@strontkever
Good point, RSP does of course not use reload but use the permission plugins API (or Vaults API), so that changes are applied to the players permissions while the player is online.
A simple way to test this is without RSP (positive way):
-
View User Profile
-
Send Message
Posted Jun 1, 2012u said some few posts below:
That would be region-specific permissions...
If you like to go through a little bit of not-too-simple configuration you could have a look at RSP which uses WorldGuard and permission groups for this task. It is slightly heavier by using permission groups, but uses enough optimization to make it fast enough for the most cases.
im saying:
i like this idea, and i would use RSP for it, though i want to say: when i take permissions to fly from a player (changing it then reloading pex), this person needs to relog in order to get blocked by flying..
so, does this work? (block fly in worldguard region)
strontkever
-
View User Profile
-
Send Message
Posted Jun 1, 2012@BioRage
I would not ban for such a log, as another commment showed there might still be bugs with landing on vines and such - so for such low VL values it hardly pays to ban.
On the other hand if there is a user that is often causing such alerts, you might have a look at what the user is doing, if possible.
Actually the fall damage alert means that the fall damage is applied to the player by NoCheatPlus, so the players do get punished.
If you use special plugins that use some super jumps there might also happen some alerts, though the damage might be canceled by that other plugin.
-
View User Profile
-
Send Message
Posted Jun 1, 2012@asofold
Hmm... So what of my pastie? do you think it's worth-while to ban.
If they are cheat-clients I disgust them. I am no fan of hackers, nor would I want them on my server.
Thanks for the information.
-
View User Profile
-
Send Message
Posted Jun 1, 2012@aphilosopher
Make a ticket for it, it is a bug i would assume...
-
View User Profile
-
Send Message
Posted Jun 1, 2012@asofold
my players are experienceing fall damage even when they land on vines or a ladder mid air, with no solid block below their feet
when this happen they also generat a "failed moving.nofall: tried to avoid fall damage" alert
so it sounds as though nocheatplus is considering vines and ladders to be a solid block, incuring fall damage when they should not be getting fall damage
-
View User Profile
-
Send Message
Posted Jun 1, 2012@BioRage
Avoiding fall damage often refers to inconsistencies of the client telling the server that the player would have firm ground under his feet while it is not the case. It seems pretty accurate, though server side flying plugins also can trigger it (more or less naturally).
Most cases are cheat clients by my experience, BUT it can often happen with a low VL, i.e. like once in between, because of lag, if i am not mistaken. The VL (violation level) will indicate how often the check was triggered / failed repeatedly.
-
View User Profile
-
Send Message
Posted May 31, 2012@NeatMonster
Sorry,
Here you are:
http://pastebin.com/0YvhTwMZ
If you could help me decipher I'd be forever appreciative, there's more, but this is just a sample of it..
@BioRage
-
View User Profile
-
Send Message
Posted May 31, 2012Could you explain this for me please?
Can't find a list of everything.
-
View User Profile
-
Send Message
Posted May 31, 2012I've had this plugin installed using this YML:
http://hastebin.com/soxigefemi.vbs
For several days. Today, this happened:
http://i.imgur.com/Sdu8E.png
http://i.imgur.com/PMqx5.png
Why was this able to happen? Did I do something wrong?
-
View User Profile
-
Send Message
Posted May 31, 2012@TheTylerDev
That would be region-specific permissions...
If you like to go through a little bit of not-too-simple configuration you could have a look at RSP which uses WorldGuard and permission groups for this task. It is slightly heavier by using permission groups, but uses enough optimization to make it fast enough for the most cases.