NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Aug 12, 2013@asofold Nevermind we have the outdated version of NoCheatPlus.
-
View User Profile
-
Send Message
Posted Aug 12, 2013@Hulipill
Not sure. I'm trying to reproduce the boat issue but its really rare and hard to track for me. Not sure if lag or other plugins are playing a role in it. Did you find out anything to that?
@deleted_9935739
It allows you to turn on/off support for the new inventory management that was introduced in Minecraft 1.5 and higher. If you turn that off then fastclick will throw out false positives every time someone uses a inventory trick that only works with 1.5 or higher.
-
View User Profile
-
Send Message
Posted Aug 11, 2013What does "tweaks1_5" under fastclick in the config mean?
-
View User Profile
-
Send Message
Posted Aug 11, 2013Wait, what if ProtocolLib is responsible for the boat fly bug? It handles player movement and it says plugins that appear compatible: NoCheatPlus on it's dev bukkit page
-
View User Profile
-
Send Message
Posted Aug 11, 2013@TypoKign
It means "violation level". The levels vary a lot amongst checks though, i hope we can update the docs soon to make them more explaining on that aspect.
-
View User Profile
-
Send Message
Posted Aug 11, 2013What does VL (number) at the end of each violation mean?
-
View User Profile
-
Send Message
Posted Aug 10, 2013@chris752w
Not slowing down is a known issue. Vclip down is working in survival mode?
We can't judge this without knowing the output of "ncp version", things change with time, so we need to know if it concerns the current versions.
-
View User Profile
-
Send Message
Posted Aug 10, 2013@MyPictures
I was using the client "Kinky" I had the latest version of NoCheatPlus and Spigot on my server. The only VClip that was flagged is when you would vclip upwards not downwards.
Also I haven't tested this with or anything, but in 1.6.2 if you have a consumable item in your hand and right click on a fence it will consume the item but not slow you down. That could possibly be used to allow players to run and consume items that normally slow you down.
-
View User Profile
-
Send Message
Posted Aug 10, 2013@MGbeenieboy
Crafting? Other plugin? Not sure what you mean :) ...
@greaperc4
I think i wrote it below, search for "overrideflags" in the configuration and add the entries into that section - for reference about block ids you could have a look at: http://www.minecraftwiki.net/wiki/Block_id
Seems like it would be "slabs", i.e. id is 44.
That should do for slabs (step). You can also write "44" but i think 44 should do, in any case check the console after reloading ncp (ncp reload should suffice).
-
View User Profile
-
Send Message
Posted Aug 10, 2013@asofold
this is what I meant.. I don't understand any of the config from NCP.. so I don't know Where to put it in the Config ..
could you tell me where you need to put it?
Thanks
-
View User Profile
-
Send Message
Posted Aug 10, 2013i test it again with 2.8 and i can craft them!
-
View User Profile
-
Send Message
Posted Aug 9, 2013@marubal21
Not sure, depends on if the clients accepts some way of communicating it, will have to investigate further...
@greaperc4
I linked it below: dev pinboard/overrideflags.
Basically you add entries for the block ids of step to the compatibility.blocks.overrideflags section in the configuration. The entries could be like
ID: GROUND|GROUND_HEIGHT|IGN_PASSABLE|XZ100|HEIGHT100
While ID would be the block id for step, might be several entries to make for different ids, not sure right now if step is that unique.
-
View User Profile
-
Send Message
Posted Aug 9, 2013@asofold
Tell me how to add the configuration? because I don't know where to put it.. and how
Thanks, Greaperc4
-
View User Profile
-
Send Message
Posted Aug 9, 2013I see that this stop Rei's Minimap mod from displaying entities on SMP, any chance it also stops Zan's Minimap from doing the same, or would you need to add support for this separately?
-
View User Profile
-
Send Message
Posted Aug 9, 2013@speaw
Maybe!
@greaperc4
Yes, then you might have to adapt the configuration of NCP to allow the block, because one of the plugins (likely SpoutPlugin) is changing the blocks internally, such that it breaks the default behavior. I am considering to add something to force default behavior for steps, but currently you have to fix it by configuration.
-
View User Profile
-
Send Message
Posted Aug 9, 2013@asofold
yes I am running SpoutPlugin for Orebfuscator (anti xray)
and a top half slab is a normal block. it's just a slab on the top half of a block
-
View User Profile
-
Send Message
Posted Aug 9, 2013''A new cheat is found. "Auro" cheat. If attacker pounch to victim, victim is lost 4 heart. They can hit 10 hearts while stone sword. NoChatPlus b601 is working but can not blocking this cheat. Can you working on this? This cheat came with Minecraft 1.6.2''
-
View User Profile
-
Send Message
Posted Aug 9, 2013@MyPictures
We will provide one eventually, though i don't think that that would help with the gates. Some time NCP might be able to keep track of "recently changed blocks" and uses that to allow passing through within a certain time-frame. Then we can adapt to block-based gates. Before that people will need to have long enough opening durations to pass through, taking into account the latency.
@BadDog8891
You can use permissions or a world-specific configuration file. There is no simple switch to turn all checks off for a world.
@greaperc4
You run a block changing plugin or mod (likely SpoutPlugin)?
In that case you can use the overrideflags option to make the block "playable": dev-pinboard / overrideflags
(Might be your browser does not navigate to the section right away, so you can select the address a second time once loaded and it should jump there, otherwise scroll down.)
-
View User Profile
-
Send Message
Posted Aug 9, 2013Hi there, I love your plugin but there is 1 problem, you can't walk on top-slabs and when jumping on them you get kicked for flying (or related) .. could this be fixed..
thanks, Greaperc4
-
View User Profile
-
Send Message
Posted Aug 9, 2013Is there a way to exempt a world from NCP? I have a creative world and when people try to fly it don't let them.