NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Apr 21, 2013@Dasko222
NoCheatPlus already has advanced server sided lag adaptation for the most checks but we will never be able to fully ignore lag specifically the client sided one (because hackers would abuse this then). Which check specifically causes issues on lag? MorePackets will probably be the biggest one that is affected by lag and most of the fight checks also. NoCheatPlus and CraftBukkit version? Already tried to fight against that lag? (Upgrading server hardware, recoding timings or creating examine files to find faulty plugins).
@Pixiyo
NoCheatPlus doesn't ban by default settings, only the chat related checks to tempkicks/tempbans but permban are not delivered with the default configuration. What checks are exactly affected? /ncp info <checktype> command is possible and would make sense but /ncp top wouldn't be that effective at all because every check has its own style to use the VL system. We would have to completely change the VL handling of all checks (maybe us comans?). NC+ removes data by itself when it thinks its too old you can however also configure a scheduler that cleans all data on a specific time. More here: http://dev.bukkit.org/server-mods/nocheatplus/pages/documentation/configuration/#w-data-section
Could you possible explain your suggestion any better? I don't quite understand. sorry...
-
View User Profile
-
Send Message
Posted Apr 21, 2013@MyPictures
I don't really know how. But you should make it so it's only from 1 day because alot of users get banned in a day and it's very annoying if they are still in the top list
-
View User Profile
-
Send Message
Posted Apr 21, 2013Hello, Nocheatplus plugin has been working great for me and my server so far. Its been preventing fly hackers/speed hackers/ and more! Its worked great so far except that its sometimes too sensitive. My server occasionally has lag and it then just spams me that everyone is hacking even though they might not be. Is there a way to make it so nocheatplus is not really affected by lag and such? Or can this be put into a later build of nocheatplus?
Thanks.
-
View User Profile
-
Send Message
Posted Apr 21, 2013@Redletteredition
I will try to hop in when I'm back at home. Sorry.
@d3voo
For what? NoCheatPlus? @asofold made some progress on our development branch (Jenkins). What issue do you want to have fixed?
-
View User Profile
-
Send Message
Posted Apr 20, 2013Any Updates ?
-
View User Profile
-
Send Message
Posted Apr 20, 2013Hey MyPictures,
I sent you our IP for you to test the NoCheatPlus since we Could still use Nodus V-Clip on our server. Did you ever get a chance to investigate?
-
View User Profile
-
Send Message
Posted Apr 20, 2013@Tibo442
If you don't have any permissions for nocheatplus then NC+ will send back "Unkown command" which is the default message if that command doesn't exist. The TAB autocomplete is something that CraftBukkit should handle, with Spigot you can disable TAB autocompleting for the chat.
Editing config ingame? Well that possible but wouldn't that be a bit too much? It also opens up more security holes for users that accidentally give wrong permissions to the wrong players.
@Pixiyo
Thats possible but how should it be displayed? The /ncp info command shows advanced informations all VLs from a player so the list could get pretty long also some checks go a lot higher with VL compared to other ones. SurvivalFly for example can easily come up to 500 but for bed leave its really unlikely to go over 5
I was thinking that implementing something like this would be cool:
/ncp top: Shows highest VLs on the server
/ncp top <page>: Next page of that list
/ncp info <CheckName>: Shows a list of VLs that has been called for that specific check.
@Lautta
ingamechat: true shows you alerts over the ingame chat to all players that own the notification permission of NC+. At what level and with what message they show can be fully controlled over the actions and strings that you can find and edit in the config.yml of NC+.
-
View User Profile
-
Send Message
Posted Apr 20, 2013You can better add the commands with a permission node in the plugin.yml so they cannont type /nocheat [press tab] to see if there is npc on the server
and a option to edit the config ingame
-
View User Profile
-
Send Message
Posted Apr 20, 2013<<reply 1430768="">>
<- This is an awesome idea!
-
View User Profile
-
Send Message
Posted Apr 20, 2013@asofold
It actually works really well. I've had like two false positives in the several months that I've been using it. :)
-
View User Profile
-
Send Message
Posted Apr 20, 2013@asofold
Yeah but they all say ''yeah it was lagg'' and then i have no evidence.. You should create a /ncp top where the people are with the most violations.
-
View User Profile
-
Send Message
Posted Apr 19, 2013Good to see the plugin still going strong! Much respect to @asofold for sticking with the community!
-
View User Profile
-
Send Message
Posted Apr 19, 2013First thanks for answering. Second, I do not express myself well, what I meant is if you can "activate an option" to alert in chat something happens, because only alerts in the console and in the log as I have understood. Sorry again e.e
-
View User Profile
-
Send Message
Posted Apr 19, 2013@chrisk123999
http://dev.bukkit.org/server-mods/nocheatplus/tickets/512-cant-press-buttons-sitting-in-minecarts/
@LEOcab
I am not sure what method the plugin is using, last time i checked a plugin that fixed "it", the plugin was using a method that would give too many false positives in theory. But i might give it a quick try some time.
http://dev.bukkit.org/server-mods/nocheatplus/tickets/513-ender-pearl-abuse/
@Pixiyo
What do you mean with "unable to find"? I can't tell, but some clients are pretty adaptive and try to create few violations.
@Lautta
NCP reduces the fight cheating effects by a good bit, it can't be fully blocked in theory. I agree on it getting into focus again, though. If you get warnings it means that NCP blocked something.
For xray there are very good specialized plugins like Orebfuscator or statistics based plugins. Xray is a task for a whole plugin, adding something simple is possible as a fallback-solution, but many or even most people will still use specialized plugins, because they focus on xray as their "main job" and usually are much better than "part-time" checks.
@MyPictures
Set some tickets to "high" priority to indicate next topics.
-
View User Profile
-
Send Message
Posted Apr 19, 2013Hi, I think that pvp is a priority, cause the nodus is the most used cheat, and the forcefield, aim and that is not blocked by the Nocheat, only gives warnings, I think would be a great upgrade them to add these cheat blockers , also for the x ray would be very useful. A question... There are some settings to alert the moderators of the game if someone uses any of these things? Good luck and good work. Sorry 4 my poor english
-
View User Profile
-
Send Message
Posted Apr 19, 2013So much people hacking on my PvP server. Got a way to block this using NoCheatplus but i am unable to find any hackers, any idea how?
-
View User Profile
-
Send Message
Posted Apr 19, 2013@asofold
There's a plugin that solves the pearl "wallhacking" problem, it's called PearlFix. I've always wondered why NCP doesn't block that on its own, it's annoying as hell. XD
-
View User Profile
-
Send Message
Posted Apr 19, 2013People in moving minecarts can't press buttons when they are going by them. It just results in a out of line of sight warning.
-
View User Profile
-
Send Message
Posted Apr 18, 2013@Scyntrus
I would like to add something like that. Maybe you like to write/contribute a check for NCP? The problem i see with it is the parabolic curve of the ender pearl, so checking once the teleport event happens is a bit problematic, since you can throw it such that it lands behind a wall. The solution might be a preemptive thing on the player interact event, just doing a couple of blocks of ray-tracing and preventing it if there are blocks right in the way. The tools for ray-tracing are already there, that might be realistic.
@friforme
Can you be more specific ? What's the relation with "/ncp lag" or similar lag tools when this happens? Does it always happen? Which tool, which block to break?
@DyreCraft
They can easily have a "reliable" knockback hack instead of "instant", which produces less false positives (but more than normal humans). You can sprint and hit from almost standing, though if the cheat sprints without moving it would be detectable.
@MyPictures we could use short moving logs for normal sprint from stand and knockback hacks (client log with mirror too maybe). Might be that we could assume the player "not sprinting" if the speed increase is not within expected bounds (too few = not sprinting and prevent attack, too much = cheat and set back by sf).
-
View User Profile
-
Send Message
Posted Apr 18, 2013Thank you for such a prompt response MyPictures. I don't think my players' knockback is being canceled or maybe isn't being cancelled all the time? They hit players clear off platforms from standing positions and their error scores range from 50-500 in a single round of ctf. It's quite frustrating to opposing teams and then the chat floods with "hacks" - which is my problem.. but still ;( My config file has interval: TODO 50. Is that still correct? I'm sorry for bothering you - I just hate watching people cheat and ruin other people's fun.