NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted May 13, 2013Can you remove the first blank line at join?
-
View User Profile
-
Send Message
Posted May 13, 2013@asofold
Yes... I know about PlayersInCubes and the distance view of Spigot but I would like to have a large distance view but limit those with cheats. You say here the need of ProtocolLib so you don't want to depend on it but you could do it and remain it like an option if ProtocolLib is installed too so many servers could take advantage of this. Is one of the biggest problem now that isn't blocked with NoCheatPlus and I think it would be a really good step for an cheat control plugin if it could control this combat-invincible (and finders) cheats.
-
View User Profile
-
Send Message
Posted May 13, 2013@x_clucky
Yea this sadly can't be fixed from the server side. The Minecraft client moves even without having any chunks loaded at all. @jeb made the "fall move" slower on login but that surely can be done better. I will try to open up a new ticket (or update the old one), maybe Mojang could do something against this.
-
View User Profile
-
Send Message
Posted May 13, 2013@MyPictures
I went ahead and did that too, and since, I have not seen any false detections other than moving into a block occasionally on login (which we have discussed and determined it is due to the minecraft client) and some SurvivalFly, generally due to laggy clients.
-
View User Profile
-
Send Message
Posted May 13, 2013@navbarry
What are the alert messages?
@Zilacon
We need more information:
@Anthony071611
As lenis0012 stated you can give them the bypass permission for the projectiles. Pinpointing exemption by the plugin in question would be better, though.
@lenis0012
Thanks :).
@NemesisMate
In fact Minecraft does that too for mob targeting for a part, creepers don't blow up behind walls for instance. But they don't check that every server tick for every nearby player+mob to determine visibility, since that would cost huge amounts of performance.
Another problem is that it needs packet-level manipulations which we can't do in a reliable way without using an external plugin like ProtocolLib, also having in mind plugin compatibility.
So the "best" that one might have is to hide all that is too far away.
It is tempting to try to calculate this stuff in real-time (with tricks and simplification and on-purpose-inaccuracy) but it certainly is pretty complicated to implement in a way that would make it perform well.
-
View User Profile
-
Send Message
Posted May 13, 2013Couldn't you don't send players data if they are invisible or shifted when they aren't visible to the player you are sending data?. Citizens (with Sentry) use some kind of obstacle visibility to make the NPCs see a user so target him or not.
-
View User Profile
-
Send Message
Posted May 12, 2013@Anthony071611
In my server with the plugin i coded for shooting with guns i make all players bypass fast projectile checks.
Have a look at the permissions ;)
EDIT: try 'nocheatplus.checks.blockplace.speed'
-
View User Profile
-
Send Message
Posted May 12, 2013Ok, im a youtuber. My server has 300 players average. I also have guns on my server. So when players shoot them it tells me they are throwing projectiles too fast. How do i disable it telling ops and everyone else about all of this stuff. Nocheatplus is a reliable plugin. I hate it when someone gets stuck in a block and it screams. How do i turn off the message alerts. For example. (Noob) *Trys to fly* NCP: Noob failed survival fly! How do i turn those messages off? Thank you sooooo much! If its hard to explain, can you reply with a config file that turns it off.
-
View User Profile
-
Send Message
Posted May 12, 2013Any way to prevent false positives like this? Cause it is pissing my players off:
14:00:48 [INFO] <[Player]FudgeHog19> z
14:00:48 [INFO] [NoCheatPlus] FudgeHog19 failed Text: acted like spamming (IP: 207.6.160.85). VL 1.
14:00:48 [INFO] [Player]FudgeHog19 Has left the server.
14:00:49 [INFO] [NoCheatPlus] (CONSOLE) Kicked FudgeHog19 : You're not allowed to spam in chat!
He didn't say anything at all before saying "z" and he got kicked for spamming.
-
View User Profile
-
Send Message
Posted May 12, 2013For some people, when they join they get instantly kicked for survival fly
-
View User Profile
-
Send Message
Posted May 11, 2013@JustinFatalx
Ok cool. Looks like you downloaded a damaged file.
-
View User Profile
-
Send Message
Posted May 11, 2013You was right. I was using NoCheatPlus 3.9.1-RC2-b510 and it just would not load.
But now I am using the latest dev build from Jenkins and its working again.
-
View User Profile
-
Send Message
Posted May 11, 2013@x_clucky
Did an update of the config file fix it?
-
View User Profile
-
Send Message
Posted May 11, 2013@MyPictures
You figured it out :) Protected field
-
View User Profile
-
Send Message
Posted May 11, 2013@asofold
I think he had version 39 for CompatNoCheatPlus.
-
View User Profile
-
Send Message
Posted May 11, 2013@JustinFatalx
The error indicates that you have an older jar somewhere or that the download was damaged.
If you have CompatNoCheatPlus, make sure it is updated as well.
-
View User Profile
-
Send Message
Posted May 11, 2013@JustinFatalx
Yea but it seems CraftBukkit is loading up another NC+ instance from somewhere, could also be possibly damaged download. Try an alternative download link (our jenkins or devBukkit) and be sure that you only have 1 NC+ installed. Also delete CompatNoCheatPlus and try again.
-
View User Profile
-
Send Message
Posted May 11, 2013@JustinFatalx
You can rename any of your plugins to whatever.jar and it will still work.
-
View User Profile
-
Send Message
Posted May 11, 2013@asofold
No it was just named that because I downloaded the version again when there was already one in my downloads folder. It has nothing to do with the name.
It does not matter what you name the file.
-
View User Profile
-
Send Message
Posted May 11, 2013Hi,
Could you add RELOG to the exemption list please?