NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Apr 30, 2013@NemesisMate
We don't have a tool for pinpointing the changes, yet.
This is the default config for build 502 (dev build): http://dev.bukkit.org/paste/7681/
Not sure which version you are using, the amount of changes depends on how old your config is - best get a default config from a local test server for comparison.
-
View User Profile
-
Send Message
Posted Apr 30, 2013On login I'm having the message: NCP: Your configuration might be outdated. Some settings could have changed, you should regenerate it!.
It means I have to delete the config file to have it regenerated?, Or there is another way to do it so I have all my changes being saved?
-
View User Profile
-
Send Message
Posted Apr 30, 2013@dotapurex1
Questions:
@andrewkm
That is shown for development builds at present, since the server does not seem to load the chunks the players are standing on in time. I might remove it soon.
@MyPictures
I would not disable it at present. If it is that big a problem, edit the jar (set DEBUG_LEVEL to 0 in BuildParameters.properties).
-
View User Profile
-
Send Message
Posted Apr 30, 2013@andrewkm
@asofold added this to fix a bug with the fly hover check that caused some false positives: https://github.com/NoCheatPlus/NoCheatPlus/commit/634ca39824dc1d4b1e3996e1d82f7cae6919c05a
You can disable it in your configuration file: http://dev.bukkit.org/server-mods/nocheatplus/pages/documentation/configuration/checks/moving/#w-loadchunks
Is the message very spammy?
-
View User Profile
-
Send Message
Posted Apr 30, 2013I keep seeing this after each players login: 2013-04-30 11:58:18 [INFO] [NoCheatPlus] Player join: Loaded 2 chunks for the world ecocitycraft for player:
Is this intentional? Build 504
-
View User Profile
-
Send Message
Posted Apr 30, 2013@dotapurex1
Other infos also please? Do you have passable ray tracing enabled in your NC+ config? You need that to prevent vClipping, the other stuff will be handled by SurvivalFly.
@LordKainzo
I and @asofold were hunting SurvivalFly and NoFall false positives and we found quite a lot back in this time. So @asofold started to work on some workarounds for some Minecraft bugs which caused SF to throw out false positives, which also required to change velocity handling of NC+ (difficult to handle).
Sorry if those changes render your plugin useless/buggy but we really need the new velocity handling to prevent some annoying false positives. We are willing to help you with making Heroes compatible with NC+ again but in a different way than having to completely roll back to the old velocity handling again.
Is this the heroes plugin we are talking about: http://forums.spout.org/resources/heroes.2/
Or do you use a private one? If its the public one I could have a test run on it and try to reproduce your problem together with some moving debug logs.
-
View User Profile
-
Send Message
Posted Apr 29, 2013@asofold
It peresisted on both Libigot / Spigot and Craftbukkit - the only time it got worse was when we updated to the later NoCheatplus builds.
I dont mind sharing source of the offending code - I'll try and get movement logs to you when I can - I'll have an admin get on it.
-
View User Profile
-
Send Message
Posted Apr 29, 2013I have NoCheatPlus 3.8.12-RC2-b472. And Craftbukkit: #2735 1.5.1-R0.1 Beta Build
-
View User Profile
-
Send Message
Posted Apr 29, 2013@dotapurex1
Version of CraftBukkit and NoCheatPlus? Version of NoCheatPlus config file (on the first line)? Have spout installed? Have permissions or /op that allows you to bypass all checks? NC+ should block all vclip attempts just be sure you have Passable and SurvivalFly enabled correctly.
-
View User Profile
-
Send Message
Posted Apr 29, 2013Can someone exactly tell me which plugin completely blocks out vclip? Other various popular servers has a custom made one, but this nocheatplus doesn't seem to block it.
-
View User Profile
-
Send Message
Posted Apr 29, 2013@KnifePlay
What is NCPC? Do you mean MCPC+ or something? NC+ does not have config for this or anything like that because by default NC+ won't interfere with /god or /afk plugins.
-
View User Profile
-
Send Message
Posted Apr 29, 2013After updating NCP and NCPC players have been losing hunger / dieing while AFK. I was wondering how to disable this or configure the settings? Also I apologize now if this is not the place to be asking this.
-
View User Profile
-
Send Message
Posted Apr 29, 2013@buckhunter316
If there is no violation entries then i don't see how NCP should prevent flying there.
I discourage giving creativefly, since it allows arbitrary speed - you should try without giving creativefly until you get violations at all before disabling checks. Even then you can set the speed limits to something reasonable in the configuration. But first you need to find out why flying does not work.
This looks like another problem, you should make a ticket and post a plugin list, server version again and also what version of client mods should be in use, so we can track this question further.
-
View User Profile
-
Send Message
Posted Apr 29, 2013@MyPictures
it just says no entries for [playername]'s violations. Do I need to give more permissions other than the check.survivalfly and check.creavtivefly?
-
View User Profile
-
Send Message
Posted Apr 29, 2013@jmarler
In the NCP configuration: set reporttometrics to false in the miscellaneous section.
To disable it for all other plugins as well, you can set opt-out to true in the configuration found in the "PluginMetrics" folder.
-
View User Profile
-
Send Message
Posted Apr 29, 2013What configuration option can be used to disable the MCStats.org check? I get these warnings quite often, and they are gumming up our automatic alerting:
-
View User Profile
-
Send Message
Posted Apr 29, 2013@asofold
No but if you setspeed together with /fly you will get creativeFly VLs but I guess we can skip that because @buckhunter316 says he also gave them creativeFly perm.
@Sheeperia
Please try out the latest development build (503) of NoCheatPlus which you can find in our jenkins. It should be already fixed there.
@buckhunter316
Hmmm. Do you get any NC+ alerts? Do you see something if you execute /ncp info <AffectedPlayerNameHere> on that user ?
-
View User Profile
-
Send Message
Posted Apr 29, 2013@asofold
nothing in the logs.
-
View User Profile
-
Send Message
Posted Apr 29, 2013A user posted this video from the server. http://www.youtube.com/watch?v=mtbSgLWEZmE
Apparently that happens all the time if you stand on top of stairs.
-
View User Profile
-
Send Message
Posted Apr 28, 2013@Delfofthebla
@werwew19
How ? If you have any details you can post them at:
http://dev.bukkit.org/server-mods/compatnocheatplus-cncp/
As far as i can judge it, the heroes devs know their own source code best, so the best way is for them to add compatibility with NCP. Our API has everything needed for that and i can assist in reaching compatibility. Without communication that won't work, neither will i start testing out Heroes on my own. If you are willing to help in testing you are most welcome and could make up for some of the value you are missing, i could give instructions what to do and how to test.
But i can't promise everything, since it is uncertain if Heroes allows pinpointing the skills from outside. Without source code access or without the Heroes developers providing basic ways to pinpoint skills, this will not be possible.
Alternatively the developers of Heroes could do it themselves, but i can't do anything if not asked.
@LordKainzo
Speaking of that...
I can't judge it without information, can you send a moving trace (develpment build with moving.debug: true). Also does that problem persist with CraftBukkit or regular Spigot or does it only happen on libigot?
As far as i can judge the moving checks have become more forgiving concerning latency and velocity in general, so i am surprised about the problems.