NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Apr 8, 2013@ Mypictures so we tested vclip with new version and it still works on our server. Is there a way to tweak the configs to make it work, or i mean stop people from being able to do it?
-
View User Profile
-
Send Message
Posted Apr 8, 2013Hey MyPictures,
I did it again and the config was perfect and the Raytracking line was there. Thanks. Did you say that this update would also prevent force field too?
-
View User Profile
-
Send Message
Posted Apr 8, 2013I'm running into a problem where I have a Command Block that gives players /effect jump (really high jump). The high jump is intentional, and used for a game, but NoCheatPlus keeps busting them for flying and kicking them from my server when they go to play that game. Anyway to fix this?
-
View User Profile
-
Send Message
Posted Apr 7, 2013@rasnyderiii
Did you already take a look at our configuration page?: http://dev.bukkit.org/server-mods/nocheatplus/pages/documentation/configuration/
If you still have questions I can show you some examples, basically you just need to know how actions and strings work make this work. However I don't recommend banning on NC+s judgement, checks could have false positives.
@Syhlo
NC+ does not support parent nodes anymore (since NC+ 3.6) because of performance drop on those. You need to give yourself "nocheatplus.checks.*" to bypass all checks.
All permissions can be found here: http://dev.bukkit.org/server-mods/nocheatplus/pages/documentation/permissions/
Or in the plugin.yml inside of your NoCheatPlus.jar
@Redletteredition
Hmm strange. Did you download NC+ from the right source? I just tested again and it does generate with the right version for me. Does your server hoster have something like a "auto-updater" for plugins? Could we get a output of /ncp version from your server?
-
View User Profile
-
Send Message
Posted Apr 7, 2013@ Mypictures
We deleted the config before we installed but when I look at the config now it says # Configuration generated by NoCheatPlus 3.8.9-b353. Although the version shown in game is 3.9.0. RC b488 So that line is not in the configs?? Should I add it or uninstall reinstall?
-
View User Profile
-
Send Message
Posted Apr 7, 2013What's the permission node for Passable? I used nocheatplus.checks to exempt myself from all the checks, but Passable's still checking for me.
Edit: Nevermind, found it: nocheatplus.checks.moving.passable.
-
View User Profile
-
Send Message
Posted Apr 7, 2013kickfly: ncp delay ncp kick [player] Kicked for flying (or related)
Could I have an example please that would instead ban and broadcast globally that this player was banned.
-
View User Profile
-
Send Message
Posted Apr 7, 2013@englishkiwi
What client do you use? Are you in creative or have /fly? Do you have Essentials permissions "savelogin" (or something like that)? CraftBukkit and NC+ version? Config please? Better make a ticket.
-
View User Profile
-
Send Message
Posted Apr 6, 2013@MyPictures
I have no idea, I just know that I've tested and none of the CJB Rebirth Mods seem to be stopped by NCP.
We've installed Orebfuscator which helps with the xray side of things, but Fly still appears to be bypassing NCP checks.
-
View User Profile
-
Send Message
Posted Apr 6, 2013@MegaMind666
We already have a ticket for this but not sure yet. We already have a ticket here: http://dev.bukkit.org/server-mods/nocheatplus/tickets/474-suggestion-anti-ping-spam/
@UnitedFactions
As @asofold said: NC+ has a TickTask which does important stuff in the background all the time, theard switches, gc and other could cause some load.
@englishkiwi
As long as the author does not change the motd messages everything will be fine. Did he change the motd message that the server sends to the client?
@Redletteredition
NC+ 488 should prevent V-clipping with the new Passable check. Just be sure you have those set to true in your config:
If it still doesn't detect it then please make a ticket. The vClip check is kinda still experimental, with that did you test it on? How much blocks do you vClip? Up or Down? Is the position after executing vClip onGround or inAir? Permissions are setup right? Do you use CompatNoCheatPlus or Spout? NC+ and CraftBukkit version?
@TechN9ne123
The text spam check you can disable by setting
active to false and commands spam checking you can disable by setting:
active to false. You can also exclude commands or maybe mess a bit with the level (setting it higher).
@Hulipill
You can? If you don't like the NC+ chat checks you can disable them in the configuration file. The NC+ chat checks are based on "weight of letters" so if a player repeats or uses CAPS in his message he will most likely alert the text chat check earlier.
@kahlilnc @kahlilnc
Hmmm?
-
View User Profile
-
Send Message
Posted Apr 6, 2013@englishkiwi
Everyone uses nodus now...
-
View User Profile
-
Send Message
Posted Apr 6, 2013@Hulipill
Kewl
-
View User Profile
-
Send Message
Posted Apr 6, 2013Yeah sorry but I want to use a better plugin ONLY for the spam protection like CC CleanChat
-
View User Profile
-
Send Message
Posted Apr 6, 2013Can i disable some parts? like the Spam because my Players are getting kicked for commands that are bound to items so when they click alot it will send alot of commands out and they get kicked.
-
View User Profile
-
Send Message
Posted Apr 6, 2013Hey guys, We were hoping this version would prevent the v-clip and force field. We loaded it and tested it on our server but those things can still be done. Do I have to tweak the configs to get that to work?
-
View User Profile
-
Send Message
Posted Apr 5, 2013CJB has released his 'CJB Mods Rebirth'. Will this also be blocked by this plugin. Thanks.
CJB Mods Rebirth
-
View User Profile
-
Send Message
Posted Apr 5, 2013a task is running constantly. Do mind the possibility of thread switches, gc, jit.
-
View User Profile
-
Send Message
Posted Apr 5, 2013Dear MyPictures,
I have a question regarding to NCP. ;)
I have made a few timings reports, and what I see is that NCP, has a large lag / slow down on this: The bad thing is, that this timings report is made, with absolutly noone on the server, and perhaps 1 join! And the run time is a hour or 2 or so!
So that means with players online, it would be even worse.
As you can see there these are the NCP timings:
NoCheatPlus v3.9.1-b489Total: 0.594 s Pct: 0.01%
Pct Total Pct Tick Total Avg Count Vio Event
0.01% 0.01% 0.521 s 0.0054 ms 97.17k 0.00% Task: interval 1
0.00% 29.24% 0.044 s 14.6208 ms 0.00k 0.00% Task: Single
0.00% 0.09% 0.023 s 0.0469 ms 0.49k 0.00% Task: interval 200
0.00% 0.51% 0.005 s 0.2571 ms 0.02k 0.00% PlayerTeleportEvent
0.00% 0.06% 0.001 s 0.0282 ms 0.03k 0.00% PlayerLoginEvent
Full report:
http://aikar.co/timings.php?url=5681376
Why is NCP checking things, and doing things when there are no players online at all? Is it doing something? And second, please see the timings for proof:
-
View User Profile
-
Send Message
Posted Apr 5, 2013I'm having another issue now that is not directly related to NoCheat, but I'm wondering if it can stop it. Someone joined my server the other day and started spamming "This is now on the weepcraft blacklist!" I don't know what weepcraft is, but ever since this happened I have been getting spammed with this about 10 times a second:
[INFO] /24.211.98.120:53522 lost connection [INFO] /216.114.97.43:62932 lost connection [INFO] /84.139.172.88:53457 lost connection [INFO] /95.89.4.218:61505 lost connection INFO] Disconnecting /178.41.89.214:1237: Took too long to log in [INFO] /68.40.168.105:58837 lost connection [INFO] /24.76.232.82:62262 lost connection [INFO] /99.8.94.115:51685 lost connection
What is this and can NoCheatPlus stop it? Its been going on for several hours now and is really lagging the server.
-
View User Profile
-
Send Message
Posted Apr 5, 2013@LEOcab
Yea this bug seems a bit fishy, I'm still investigating on it and try to reproduce. If someone can show me how to reproduce this, then feel free to poke me over PM or just over the NC+ comments.
@saxons12
Please make a ticket about this error. @asofold will take a look ASAP.
@bloodless2010
No sorry... There isn't really a possible way to detect AutoFish because its simple a bot that finishes like a normal player. With NC+ we could maybe do a statistic based check but that depends if @asofold agrees implementing such a thing. You could however make a ticket for us so we can keep track of your issue.
@watertrooper
This error always shows up if your server fails to connect to mcstats.org for whatever reason (mostly because mcstats.org is down). You can however ignore this, it won't do any damage or unneeded load on your server.
@TheFitSoldier
Both together is a bad idea ;P. Test both and use that one that fits your needs and expectations.
@hotshot0101
Its really hard to check for this because velocity is highly affected by lag, @asofold made some progress on it but currently we have nothing against that kind of hack.