NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Feb 18, 2013Issues with the Hover feature. Nothing stated in the configuration page. I'm seeing players getting kicked for Flying (or related) and when they attempt to rejoin, they are instantly kicked again, multiple times.
I've disabled that feature for now.
-
View User Profile
-
Send Message
Posted Feb 18, 2013@asofold
Yes players get violations even at 120 ticks. There's something not working correctly - can we have a toggle for this new feature?
-
View User Profile
-
Send Message
Posted Feb 18, 2013@alexandercitt
Delete the nocheatplus.jar, then make a full restart and check the log. If there is no trace of NoCheatPlus then you probably have some "stupid" auto-update feature with your hoster or a plugin that does such.
Do other plugins update correctly if you replace the jars?
-
View User Profile
-
Send Message
Posted Feb 18, 2013@alexandercitt
We cant help you any further with this issue at the moment. Your log shows that you are running a outdated version of NoCheatPlus and all we can do for you is post a link to the latest NC+ build: http://dev.bukkit.org/server-mods/nocheatplus/files/44-nocheat-plus-3-8-9-b353/
-
View User Profile
-
Send Message
Posted Feb 18, 2013@asofold
Didn't find anything.
@MyPictures
Redownloaded everything, still doesn't work. We do not run a changed craftbukkit.
-
View User Profile
-
Send Message
Posted Feb 18, 2013@Folas1337
We don't filter those explicitly. It likely will be Essentials or another plugin (not sure right now, something like: essentials.chat.url if you are running that plugin, best look it up in their docs).
-
View User Profile
-
Send Message
Posted Feb 18, 2013What's the permission that gives people the ability to post URLs/IPs? It's blocking all like "youtube.com" and turning it into "youtube com" or is that another plugin?
-
View User Profile
-
Send Message
Posted Feb 18, 2013@DarkRiddles
What do you mean with "latest". You should give us the exact version (/version NoCheatPlus). For 1.4.7 you need at least this build: http://dev.bukkit.org/server-mods/nocheatplus/files/44-nocheat-plus-3-8-9-b353/
-
View User Profile
-
Send Message
Posted Feb 17, 2013@asofold
I have the latest build it keeps giving me the error!
-
View User Profile
-
Send Message
Posted Feb 17, 2013@LordKainzo
Not sure at present, seems velocity works fine for just adding velocity (using testncp for instance). Could be lag/latency-related, though setting graceticks to 120 gives players way more time than the previous implementation. Do players get violations when jumping into air or just while on ground or both ?
@BLAST18
By default flying should be prevented by NCP.
@mlopezv
The problem with dupe exploits is, that they don't get "advertised", usually it is plugin bugs (multi-world inventory managers, Shop plugins, chest-manipulation plugins...). CraftBukkit development versions contain a fix that closes inventories on teleporting once again (could be related?).
I have not heard of a plugin that does heuristic checks on inventories. All i know of is logging plugins like LogBlock which might allow to keep track of what players have in their inventories for a start.
@MineCraftMyph
CompatNoCheatPlus
-
View User Profile
-
Send Message
Posted Feb 17, 2013How would I support the mcMMO abilities destroying blocks instantly, or taking no falling damage? Thanks.
-
View User Profile
-
Send Message
Posted Feb 17, 2013@MyPictures
No WorldGuard even installed, nothing reflected in console (it had to be clientside). Only reflected thing in console was that spawned diamond blocks were being sold in ChestShops.
But nvm, it only happened once, that had to be a real pr0 trying to do something.
Now I know NCP doesn't track any valuable resource, is there any configurable addon that does it?
Thanks in advance...again.
-
View User Profile
-
Send Message
Posted Feb 17, 2013How do i block it so people cant fly on my server?
-
View User Profile
-
Send Message
Posted Feb 17, 2013@asofold
Here's the code of the skill in question (and others are similar)
-
View User Profile
-
Send Message
Posted Feb 17, 2013@LordKainzo
If you set high grace ticks, it should allow more than before, but there might be other side-conditions.
Do you know what amount of velocity gets added (2,4,10)? Does it get added once or several times right after skill activation?
We did test a bit but there might be different side conditions.
-
View User Profile
-
Send Message
Posted Feb 17, 2013@mlopezv
Did that player have permissions to /stack command of WorldGuard? Anything in the console about that player? Plugin list?
NoCheatPlus currently doesn't do anything against item duping because there is no easy way to track such things. A dupe can come from everywhere and it should always be fixed in CraftBukkit or in the plugin that causes it.
@LordKainzo
Not sure at the moment :( I didn't try anything on this setting yet but if I'm not mistaken then higher grace ticks means = more allowance? @asofold needs to take a look at this.
@mikeymatou
Here: http://dev.bukkit.org/server-mods/nocheatplus/pages/documentation/configuration/#w-logging-section
I don't recommend you letting your players spam checks of NoCheatPlus, setback will need some resources of your server to perform (more false positives and cheat attempts = more work for NC+ to do). Those are not "error" messages btw. they are simple notifications to show you which player failed a check and so on.
-
View User Profile
-
Send Message
Posted Feb 17, 2013How do you stop all this NCP spam when your /op?
-
View User Profile
-
Send Message
Posted Feb 17, 2013I've had a player that managed to create items on his inventory (i've seen it in realtime), and spread them on my server (diamond bricks in this case). It just happened once and the items were tracked and deleted but I couldn't reproduce it anymore. He did not use a mechanic exploit like pistons or anything. I've seen him doing it in real time, standing on his foot.
How can I increase security against players generating bogus items? Is there any feature in NCP covering that related-issues? (In positive case, how can I configure it in order to get better security?)
Thanks in advance.
-
View User Profile
-
Send Message
Posted Feb 16, 2013also, I tested with changing the graceticks to 120 - and it still had the same issues. So something is definitely not allowing us to use velocity skills anymore. Will have to keep it at the other RB.
-
View User Profile
-
Send Message
Posted Feb 16, 2013@MyPictures
K - I'll revert more now... would Iw ant to increase the graceticks to something like 100 - or so?