NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Jun 20, 2012@asofold
NCP is the leader of anti-cheat plugins. With the future new functionality we have planned (Like web interface, etc.) and Essentials integration it will be THE anti-cheat plugins. So I think McMmo and other plugins have to think about integrating NCP... By the way I'm thinking to an easiest way for developer. I have some basic knowledge in Java, and I hope Neat will teach me during my holidays more about Java to help him with NCP. I can't say you more, but if it's a success NCP will integer a bunch of new "user" oriented features.
@Manuestaire
Use permissions.
@basicsensei
Didn't understand everything in your explanations, but I don't think it have to be done like that. By the way I am aware of 5 blocks thick wall bypass, and I don't think we need to block it it's a part of the game in my opinion, but never see a 20 blocks teleportation. I should do some test and search on the web. If it's possible we will add some checks about the enderpearls.
@jmars213
It stop hacking and cheating, not the client himself. Currently it's not even possible.
-
View User Profile
-
Send Message
Posted Jun 20, 2012Does it stop hack clients?
-
View User Profile
-
Send Message
Posted Jun 20, 2012@zonedabone
Actually no :) - i have no idea how to define levels for definitive cheating, and i did not change the configuration too much (except for disabling some things). What i did is check out what output some cheats would generate and guess some limit at which it pays to kick the player for some time. It did work well for the dumb forcefield attacks, but nowadays some hacks are becoming so adaptive :9.
@basicsensei
I don't know how exactly ender pearls are launched, and if there is much abuse potential, but i am sure that the interaction methods are a bit difficult because usually the enderpearls react to gravitation like arrows so normally checking teleport vs player would not make much sense.
What i could imagine is, that one tries to check the situation at launch of the ender pearl, i thought that is like arrows pretty much server side, so i would not have thought there to be too many hacks (especiall not "20 blocks vertically throuzgh solid blocks"), but that impression might change with more knowledge about the protocol of minecraft.
-
View User Profile
-
Send Message
Posted Jun 20, 2012I heard that people can teleport through (like 20) solid blocks with ender pearls, but what I don't know if they can only do it vertically or also horizontally. I was on a server on which they could not have done it vertically because I was on y=5 with no holes under, and they could've only done it horizontally, therefore unless they abused admin powers (which is quite possible), I would assume they could teleport through 5 block thick walls horizontally, and as they said later they can do it through 20 blocks (but didn't specify if they had to be vertical or horizontal)
My question is: Does nocheatplus prevent this kind of thing in any way ? If not, maybe it could be coupled with the same code that would detect if you tried to open chests through walls (ie. chests not seen due to wall obstructing), such that if (event.getCause() != PlayerTeleportEvent.TeleportCause.ENDER_PEARL) then the check could be done between event.getFrom() and event.getTo() and event.getPlayer().getEyeLocation() for pitch/yaw BUT as i just noticed now while writing this there is: event.getPlayer().getLineOfSight( transparent, maxDistance ) which could be getting all the blocks in the line of sight of the player (assuming l.o.s. here means from crosshair into the screen and not all blocks seen by player... yeah it would mean the former because player can have different fov on client so the latter wouldn't make sense) and thus you can see if there are any blocks from player to the destination block which is gotten by event.getTo().getBlock()
Ok so in other words, unless I'm missing something here, we can check if upon ender pearl teleport, there are any solid (non transparent - which is configurable in the "transparent" parameter to getLineOfSight) blocks between from and to locations and if they are just event.setCancelled(true)
Please tell me it's as simple as this, and if so, can you implement it?
EDIT: @Juliui
thanks for your previous reply(/ies)
-
View User Profile
-
Send Message
Posted Jun 19, 2012@asofold
Awesome, thanks. Any suggestions for a good threshold violation level for definitely cheating?
-
View User Profile
-
Send Message
Posted Jun 19, 2012How do I allow some action like using Rei's Minimap???
-
View User Profile
-
Send Message
Posted Jun 19, 2012@Juliui
Yeah, but one mcMMO dev said they would avoid "dependencies", so the future on that is still uncertain.
-
View User Profile
-
Send Message
Posted Jun 19, 2012@asofold
Amazing man. By the way it would be great if McMmo hook inside NoCheatPlus.
@Sileos
I didn't have a value exactly but you should up the actual value by 10%, and try. If doesn't work up by 15% or 20%...
@GrillGuth
Glad you love NoCheatPlus. But I'm sorry we can't actually hook up into every plugins. I'll take a look after my exam, to see if there is an easy way to correct that, but you should consider asking the Citizens dev' to hook up inside NoCheatPlus :).
-
View User Profile
-
Send Message
Posted Jun 19, 2012@Juliui:
Hi, I am using your awesome plugin together with Citizens 2 and its working perfect. But now I want to use the Citizens 2 addon "Sentry". The problem is whenever a NPC tries to attack he attacks so fast that NoCheat+ blocks him... is there a way to avoid that? I tried to give the NPCs the permission "nocheatplus.checks.*" what didn't worked... May you can contact the Citizens 2 developers for more information about how Citizens is working. If you need further information you can also send me a PM.
Greetings
-
View User Profile
-
Send Message
Posted Jun 19, 2012Hello, I was wondering if any one help me understand something. I have players who are being kicked from the server for harvesting Sugar Cain and wheat. Most of the time when you harvest these items you will go through 4 or 5 at a time if you line up correctly.
I get the Block break and No swing noticed that spam my screen.
Does anyone have a good setting to place block break so that this does not kick people that are harvesting or using one of the abilities provided by mcMMO
-
View User Profile
-
Send Message
Posted Jun 19, 2012@Juliui
HI, i was fooling around with compatibility questions: http://dev.bukkit.org/server-mods/compatnocheatplus-cncp/
It is not complete, but it redues the mcMMO block breaking trouble clearly and might be a direction or a platform to build on for other devs.
-
View User Profile
-
Send Message
Posted Jun 19, 2012@zonedabone
CheckEvent is thrown whenever a check fails.
Further there are specialised events for the individual checks.
-
View User Profile
-
Send Message
Posted Jun 19, 2012@zonedabone
I never take a real look at the API but I think she can help you. Else it's a good idea, I'll add it to the NeatMonster todo list.
@Kane_Hart
NCP is only an "engine" wich do calculations, and eventually punish the players. We doesn't want to interfer with the Vanilla Gameplay or to hook up directly with plugins. Your idea is good, but shouldn't be a part of the core functionality of NCP. But the API can help you to develop a such functionality as an other plugin.
@Johannah296
Are you sure ? In my latest test NoFallDamage where blocked. If Nodus bypass it, we will need to do an update. Sorry, I don't have time to test since I have my exams today and tomorrow.
@nhoclesnar
Yep, we never think to block step hack. I think it will be easy, we'll add it soon ! It's a long time since we want to block aimbot but this is very complex and it's need a lot of calculations. We'll working on it after the performance update. But I can't promise you anything.
@VasVadum
You have a serious lag problem / corruption problem. I have see NCP running without any problems on a bunch of server. BTW this is not possible if you delete everything in your config about punishments that your player actions continue to be rollbacked. And like nhoclesnar says, just raise te punishments to a higher VL. It will working fine.
@basicsensei
Nodus freecam is fully client-side and can't be blocked. For the chest I think it's will be added in a new update, NCP already block people from destroying blocks that are not visible.
@aphilosopher
We are aware of the performance issue, and it's will be corrected in less than a week. I never test AntiCheat but I think in front of his functionality NCP will be the faster cheat detection plugins never made right after the update.
-
View User Profile
-
Send Message
Posted Jun 18, 2012@basicsensei
im gonna have to give anticheat a try NoCheatPlus works well with exception to:
i never realized how badly it is lagging the players since i had the nocheatplus.* perm it didnt check me, when i logged in with a different account without that perm, nocheatplus checking my acctions lead to alot of lag/response time to block changes even in movement or server response, it may be related to mcmmo not working well with nocheatplus since everytime a player uses an ability like superbreaker it sets of nocheatplus with tons of alerts.
hopefuly anticheat plugin will work better in this regard, to many players are complaining about this lag
-
View User Profile
-
Send Message
Posted Jun 18, 2012@Johannah296
don't forget about nodus' freecam allowing you to open chests that are within 5 blocks, even through walls, right? this isn't detected also, if I understand it right Although, I've to admit that I didn't try this myself, but I did hear about it (hi SmellyHobo101)
-
View User Profile
-
Send Message
Posted Jun 18, 2012No one is banned, punishments are turned off. It just keeps freezing people in mid air, stopping people from moving, stopping people from attacking, etc.
-
View User Profile
-
Send Message
Posted Jun 18, 2012@VasVadum
You can change it in the config. Just raise the punishments to a higher VL.
Btw Juliui, is there a way to prevent the 'step' hack? It lets you move on a higher block without having to jump. Beside, can you block aimbot as well? Like detecting when a player turn around very fast and hit something or swing their arms.
-
View User Profile
-
Send Message
Posted Jun 18, 2012@zonedabone
Nice idea. You can try making a plugin like that, using NoCheat+ API.
@Johannah296
Are you sure about that? Make sure you are not OP before testing NoCheat+.
-
View User Profile
-
Send Message
Posted Jun 18, 2012The ONLY hack that is server side that NoCheatPlus does NOT block is the "NoFallDamage" on Nodus client that I have found, but that is not very significant. All others it will catch and block. I have not tried other clients.
-
View User Profile
-
Send Message
Posted Jun 18, 2012This is a strange request but more and more people are using Bukkit Port with Forge and such. You can see how big its getting here: http://mcportcentral.co.za and this is whats ported: http://mcportcentral.co.za/wiki/index.php?title=Ports_for_1.2.5
Anyways one the biggest requests and maybe simple maybe hard I don't know but a way to ignore certain warnings if a user is wearing a certain item. So rather then a permission it be neat to actually have in the config file if user is wearing this then ignore this warning/action.
Long shot I know but I thought I throw in the request.