NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Jan 9, 2013soit works with no cheat you need to install both?
-
View User Profile
-
Send Message
Posted Jan 9, 2013@Toxic__Waste
With CompatNoCheatPlus
-
View User Profile
-
Send Message
Posted Jan 9, 2013how do you allow mcmmo skills to be used
-
View User Profile
-
Send Message
Posted Jan 9, 2013@asofold
Lets keep it on our server for now and see how it goes :).
-
View User Profile
-
Send Message
Posted Jan 9, 2013Other topic, concerning Essentials/spawn issues:
We might use help if you know the Essentials implementation intimately, or if you are a java-guru or something similar. It appears that this is special to some plugins like Essentials, MobArena, MultiVerse. All i know is that what we changed is to instead of creating new objects for resetting set-back locations we just reset the location we stored, then once we need to use it, a defensive copy is made. Cloning the location does not seem to be the issue (tested without cloning). Essentials uses some WeakRef stuff with locations, which might or might not be related. My assumption is that those plugins either have some bugs about their WeakRef storage, or that they react weirdly on other plugins setting back users by teleportation. NCP does not change the worlds spawn, it works fine with "simple" plugins but not with Essentials. It appears to happen since build 304, but not before this commit.
(The versions you can download here at BukkitDev are not affected.)
Development build 311 might have improved the situation, testing for some time without any issues (reload, enderdragon, wither, cake). Can't be sure though, because of the special nature of this thing.
-
View User Profile
-
Send Message
Posted Jan 9, 2013@PuremineServer
mcMMO abilities do conflict, you might install CompatNoCheatPlus (linked above in the description), to make it compatible.
You can disable all in-game alerts in the configuration (logging: ... ingamechat: false).
-
View User Profile
-
Send Message
Posted Jan 9, 2013@asofold
I love this plguin, but I am confused on a few things.
All of my users are getting regular error messages, and none of them are trying to hack. Does McMMO special abilities conflict with this somehow? How do you prevent OPs or any players from receiving the console messages in game?
-
View User Profile
-
Send Message
Posted Jan 9, 2013lol @ all the nubs freaking out about 1.4.7 haha
-
View User Profile
-
Send Message
Posted Jan 9, 2013@MachetePanda
How are we getting behind :) ? 1.4.7 does not seem to pose a problem.
@FonkyShizuma
CraftBukkit is on 1.4.6, but there are statements that the server version 1.4.6 is compatible with 1.4.7 clients. We don't know about new issues due to 1.4.7, yet.
-
View User Profile
-
Send Message
Posted Jan 9, 2013Is this compatible with 1.4.7?
-
View User Profile
-
Send Message
Posted Jan 9, 2013Yikes, you guys are getting further and further behind. MC 1.4.7 is out now which means Bukkit will be soon. Is there anything I can help with?
-
View User Profile
-
Send Message
Posted Jan 9, 2013@Phaze_One
The default config already does that for you by using the "cancel" action. You can take a look at our configuration page, everything you need should be there :). Does a check not work properly for you properly? and what check exactly do you try to config?
-
View User Profile
-
Send Message
Posted Jan 9, 2013Hey, thanks for this great plugin! Is there a way in the config I can prevent the cheats without kicking the players?
-
View User Profile
-
Send Message
Posted Jan 9, 2013@Zierk
"compact NCP" ? If you mean "CompatNoCheatPlus", it is mean like "compat = compatibility", it is not a compact version, but adds some hooks for mcMMO and other. It is on the same jenkins in principle, click on the jenkins symbol it should lead to a page showing both projects, if that is what you are after.
-
View User Profile
-
Send Message
Posted Jan 8, 2013@Zierk
Yes 301 is the latest beta of NC+ for now. We recommend to use it for your 1.4.6 Craftbukkit server for now.
You can also get it here: http://dev.bukkit.org/server-mods/nocheatplus/files/43-nocheat-plus-3-8-8-b301/
@LEOcab Thanks. NoCheatPlus needs to use some resources of course because there is a lot of data that needs to be recorded and checked, every check needs to be fed with data to work :)
The PlayerMoveEvent will probably be used a lot because it gets called when ever a player moves and having a server with 300 players will be a bit insane but should still work fine if your server is strong enough to hold this player amount.
However its more of a "What do I want to block?" question. If you would ask that me I would say: Passable (Against NoClip) and NoSwing but all the other stuff I want to be blocked by NC+.
Most check are already explained here: http://dev.bukkit.org/server-mods/nocheatplus/pages/documentation/configuration/
However it actually doest really matter how much the PlayerMoveEvent gets called for all the time, its more inserting to know how much ms it needs for every tick. My tests show that the current NC+ seem to be pretty good in performance compared to NC+ 3.6.1. The rewrite from @NeatMonster for NC+ 3.7 helped a lot and also the performance tweaking from @asofold (permissions calling and some other) made it a lot smoother over all.
So feel free to send us some timings/NoLagg examines logs, its always helpful to know how NC+ is doing on big servers with performance. To @asofold and @MyPictures
-
View User Profile
-
Send Message
Posted Jan 8, 2013Hello NCP folks! I'm sure I've said this already but, THANK YOU for maintaining this amazing plugin. I would've given up on MC server hosting a long time ago had it not been for NC and NCP. :)
Now, a question. I ran some timings and it turns out that NCP is responsible for 33% of my server's plugin overhead, and NCP's PlayerMoveEvent is responsible for 85% of that. This is expected, of course. My question is: is there a check that I can safely disable to relieve this? I don't fully understand all of the checks so I don't want to take out something important. I know PlayerMoveEvent is responsible for checking for flight and stuff, but there's other checks that I associate with player movement that I don't understand. Thanks in advance ! :D
-
View User Profile
-
Send Message
Posted Jan 8, 2013@asofold
is the compact NCP jar at the http://www.nocheatplus.org:8080/job/NoCheatPlus/301/ link also the version that I should use as well?
-
View User Profile
-
Send Message
Posted Jan 8, 2013@Gary520
Thx :) We promote build 301 to beta and put it on BukkitDev, to be approved:
NoCheatPlus 3.8.8-b301 (beta)
@Zierk
Some things are just hard to notice, since clients do in fact adapt to the limits we set. That especially goes for fastbreak :). Not sure about the bounds for fastplace, they might allow too much for the taste of quite some people, but it can be configured. I could simply add "longterm" settings for some checks like fastplace in order to prevent spamming block-placing. Yet, some builders are really fast, so it might interfere, similar to the problems people had with the improbable check with mob grinding.
-
View User Profile
-
Send Message
Posted Jan 8, 2013@MyPictures
Thanks that helped. The plugin does not notice some hacks (Fastbreak, Fastplace) out of the box, but I am sure all it needs is a little tweeking. Thanks for the assist!
-
View User Profile
-
Send Message
Posted Jan 8, 2013The new version is really effective, thank you for your work!