NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Apr 23, 2013I sent you a PM with details. Also, giving players the node "nocheatplus.checks" will exempt them from everything?
-
View User Profile
-
Send Message
Posted Apr 23, 2013@finamenon
Full disabling does not (yet) have a config switch.
It should be possible to give the nocheatplus.checks permission to exempt all players from all checks.
A relatively compact config can be made with world-configs setting savebackconfig to false, and then only set the active flags.
Why do you need to fully disable NCP in one world? Are there many players in?
-
View User Profile
-
Send Message
Posted Apr 23, 2013@asofold
There is a global setting now to disable it in the world? That is what I am asking for. I don't see it. Do you have to set every single node to false or can I just disable it on a per world basis? The latter is what I want and need :D
-
View User Profile
-
Send Message
Posted Apr 23, 2013@Tiel424
They download it, decompile it (its open source and on github anyways but they still prefer to decompile of course) and adapt to the checks as much as possible. They aren't 100% protected with NC+ but as @asofold said, NC+ protects against quite a lot and we will also try to keep up with the new hacks/bypasses. Same goes for Orebfuscator and other AntiCheat plugins.
@asofold
The majority of the "NC+ bypass coders" just understand cheese if they see the source code but there are some talented one of course.
@Nickshelton80
Yea. I just said that hackers will love this list too but thats okay.
-
View User Profile
-
Send Message
Posted Apr 22, 2013@finamenon
You can disable it with world-configs/permissions.
@hotshot0101
It can not really be blocked, but we might be able to detect it with the recent changes to the velocity handling.
-
View User Profile
-
Send Message
Posted Apr 22, 2013Have you guys added the option of disabling this in worlds yet?
-
View User Profile
-
Send Message
Posted Apr 22, 2013we have been waiting for anti knockback block for ages
-
View User Profile
-
Send Message
Posted Apr 22, 2013@Nickshelton80
It's ok to ask that, maybe we make a list.
@Tiel424
I am not entirely sure what you mean with what you hate. This protects quite a lot, so it probably is somewhat ok to assume some basic protection to be there, though one should never be too sure and keep an eye open. If you want to address people that do what you wrote you hate, you probably have to keep looking, since the great majority of comments here are about asking for information or reporting bugs and other issues.
NCP is open source, so people can just look it up at GitHub to find potential bypasses.
-
View User Profile
-
Send Message
Posted Apr 22, 2013Just a question, how does this work? Do hackmakers just download the jar, decompile it, and figure out workarounds? I'd just like to know, absolutely hate it when admins stick this in their plugin folder and think they're automatically 100% protected against exploits.
-
View User Profile
-
Send Message
Posted Apr 22, 2013@MyPictures
I didn't want to seem like I was doing anything malicous, I wanted a list so when a user posts a ban request saying "<name> is using "<hack>". I could just say, Well NoCheatPlus blocks that hack. :D
-
View User Profile
-
Send Message
Posted Apr 22, 2013@saxons12
I wrote you back, your lag seems to come from another plugin(s). NoCheatPlus looked mostly fine on those examine and timings you sended me.
-
View User Profile
-
Send Message
Posted Apr 22, 2013@ChilleCharlie
Thanks for reporting to us, this is interesting.
Just three things:
This is your ticket now:
http://dev.bukkit.org/server-mods/nocheatplus/tickets/516-dataman-inconsistencies-warnings/
Please keep to tat one for further discussion of this issue.
-
View User Profile
-
Send Message
Posted Apr 22, 2013@MyPictures
I am sending a link for the reports to you via PM.
Thanks!
-
View User Profile
-
Send Message
Posted Apr 22, 2013Hi, i really like this plugin, but i am close to looking at alternatives... This thing is spamming my console full and making the console unreadable, not to mention making the console really terrible to work in and growing insane large log files. There are times where this is spamming more then once a second and there are times where it comes up every few minutes. I expect that is might have something to do with combattag because that is the only thing i can think of that is putting more players on the server than there actually are, the strange thing is that when i check if there are NPCs on the server and it says there are none this problem is still there. I might be wrong though, it could just be a issue with spigot as well, really i have no clue.
My server is dedicated, not VPS Operating System Info: root@KingSize:/home/chillecharlie# uname -a Linux KingSize 2.6.32-5-amd64 #1 SMP Mon Feb 25 00:26:11 UTC 2013 x86_64 GNU/Linux root@KingSize:/home/chillecharlie# cat /proc/version Linux version 2.6.32-5-amd64 (Debian 2.6.32-48squeeze1) (dannf@debian.org) (gcc version 4.3.5 (Debian 4.3.5-4) ) #1 SMP Mon Feb 25 00:26:11 UTC 2013
Java Runtime Environment: Java(TM) SE Runtime Environment (build 1.7.0_17-b02) Java HotSpot(TM) 64-Bit Server VM (build 23.7-b01, mixed mode)
Current Bukkit (Spigot) version: (have used multiple versions, issue stayed even with non-spigot) 2013-04-22 12:32:54 [INFO] This server is running CraftBukkit version git-Spigot-764 (MC: 1.5.1) (Implementing API version 1.5.1-R0.2-SNAPSHOT)
Current nocheatplus: (tried multiple versions as well) 2013-04-22 12:34:05 [INFO] Version information 2013-04-22 12:34:05 [INFO]
Server2013-04-22 12:34:05 [INFO] git-Spigot-764 (MC: 1.5.1) 2013-04-22 12:34:05 [INFO]NoCheatPlus2013-04-22 12:34:05 [INFO] Plugin: 3.9.1-b489 2013-04-22 12:34:05 [INFO] MCAccess: 1.5.1 / CB2691-DEVOther Plugins: (many of these has been updated a couple of times since the issue started) 2013-04-22 12:33:42 [INFO] Plugins (55): SignRank, TuxTwoLib, IPCompare, JOPHWarn, CCLogger, Buycraft, Vault, SimpleHelpTickets, Multiverse-Core, RemoteToolkitPlugin, dynmap, AutoMessage, AutoKick, SpaceBukkit, LimitedOps, ProtocolLib, Votifier, mcMMO, BlockThatName, MobArena, CleanroomGenerator, Citizens, MultiInv, WorldEdit, NoCheatPlus, TagAPI, Multiverse-NetherPortals, War, PetNames, PermissionsEx, CombatTag, Paintball, LWC, WorldGuard, SignEdit, CoreProtect, AntiXRay, AntiCaps, AdminPrivateChat, Modifyworld, EntityAdmin, LikeSigns, GriefPrevention, SuperSpleef, Essentials, WorldBorder, Multiverse-Portals, DisguiseCraft, xAuth, EssentialsChat, EssentialsSpawn, IslandWorld, Factions, MobDisguisePVPControl, SafeCreeper
I have this problem since about a month now, have tried multiple versions of bukkit and spigot, and updated nocheatplus about once every week or so. This stuff just keeps going on endlessly, with or without players on my server and it seems like the longer the server is running the more it starts producing this. Can this be disabled or fixed somehow? It seems like everything is functioning normally, cheating is not possible on our server at least the plugin does its job...
Oke now to get to the real issue, here is some stuff from our console :)
2013-04-22 12:21:03 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (37 instead of 32) 2013-04-22 12:21:13 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (38 instead of 33) 2013-04-22 12:21:23 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (39 instead of 34) 2013-04-22 12:21:33 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (39 instead of 34) 2013-04-22 12:21:43 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (39 instead of 34) 2013-04-22 12:21:53 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (39 instead of 34) 2013-04-22 12:22:03 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (39 instead of 34) 2013-04-22 12:22:13 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (39 instead of 34) 2013-04-22 12:22:23 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (40 instead of 35) 2013-04-22 12:22:33 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (40 instead of 35) 2013-04-22 12:22:43 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (40 instead of 35) 2013-04-22 12:22:53 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (39 instead of 34) 2013-04-22 12:23:03 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (39 instead of 34) 2013-04-22 12:23:13 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (39 instead of 34) 2013-04-22 12:23:23 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (39 instead of 34) 2013-04-22 12:23:33 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (39 instead of 34) 2013-04-22 12:23:43 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (39 instead of 34) 2013-04-22 12:23:53 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (39 instead of 34) 2013-04-22 12:24:03 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (39 instead of 34) 2013-04-22 12:24:13 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (42 instead of 37) 2013-04-22 12:24:23 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (41 instead of 36) 2013-04-22 12:24:33 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (41 instead of 36) 2013-04-22 12:24:43 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (41 instead of 36) 2013-04-22 12:24:53 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (43 instead of 38) 2013-04-22 12:25:03 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (43 instead of 38) 2013-04-22 12:25:13 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (43 instead of 38) 2013-04-22 12:25:23 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (43 instead of 38) 2013-04-22 12:25:33 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (43 instead of 38) 2013-04-22 12:25:43 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (43 instead of 38) 2013-04-22 12:25:53 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (43 instead of 38) 2013-04-22 12:26:03 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (43 instead of 38) 2013-04-22 12:26:13 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (43 instead of 38) 2013-04-22 12:26:23 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (43 instead of 38) 2013-04-22 12:26:33 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (43 instead of 38) 2013-04-22 12:26:43 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (43 instead of 38) 2013-04-22 12:26:53 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (42 instead of 37) 2013-04-22 12:27:04 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (42 instead of 37) 2013-04-22 12:27:14 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (42 instead of 37) 2013-04-22 12:27:24 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (42 instead of 37) 2013-04-22 12:27:34 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (42 instead of 37) 2013-04-22 12:27:44 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (41 instead of 36) 2013-04-22 12:27:54 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (41 instead of 36) 2013-04-22 12:28:04 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (41 instead of 36) 2013-04-22 12:28:14 [WARNING] [NoCheatPlus] DataMan inconsistencies: wrong number of online players (41 instead of 36)
-
View User Profile
-
Send Message
Posted Apr 22, 2013@Nickshelton80
Nope. We don't know what's possible to exploit in CraftBukkit/Minecraft so its hard to tell but we could make a list of the hacks/exploits that we are aware of. However hackers would love to have such a list of course ^^
-
View User Profile
-
Send Message
Posted Apr 21, 2013I doubt this but, Does there happen to be a list of all hacks that NoCheatPlus does not block?
-
View User Profile
-
Send Message
Posted Apr 21, 2013@saxons12
We would love to improve performance somehow, could you share the examine file with us? That would help alot.
@Pixiyo
Hmm okay. I have a think and make a ticket about this, something like this could be useful.
-
View User Profile
-
Send Message
Posted Apr 21, 2013NoCheatPlus uses too much resources when 400 players are online with Spigot. It is the 4. plugin causing most of the lag at my server. Could you do some performance echantments?
Here is the report from NoLagg examine:
Total duration: 1248.083 ms / 6000 ticks Average duration: 0.208 ms/tick Selected task: Task #94 Plugin: NoCheatPlus Location: fr.neatmonster.nocheatplus.utilities.TickTas
-
View User Profile
-
Send Message
Posted Apr 21, 2013@MyPictures
It would be cool if there would be a toplist. Maybe people with the highest VL or just the most VL? Like this; 1. Name1 - VL 10000 2. Name2 - VL 200
And after 24 hours the stats must reset because they might have been banned and it's annoying is there are banned people in the toplist.
-
View User Profile
-
Send Message
Posted Apr 21, 2013@MyPictures
I think some servers simply add banning to their configuration.