NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Dec 31, 2012A few users on my server are complaining that they're not able to attack NPCs. The NPCs can still damage the player, but the player cannot damage the NPC. This doesn't happen for all people. What do I need to change to fix this so that it's never a problem?
-
View User Profile
-
Send Message
Posted Dec 31, 2012@asofold
For now i have disabled fastbreak checks. I still would like to remove all or most kick functions from the configuration but i have no clue how to do that without breaking it. Seems to be okay for now though.
-
View User Profile
-
Send Message
Posted Dec 31, 2012@Cicadia
Over a dev.bukkit private mail would be good.
-
View User Profile
-
Send Message
Posted Dec 31, 2012I've found "bypasses" for NC+. How can I get them to you?
-
View User Profile
-
Send Message
Posted Dec 31, 2012@Chinwe
@Pr07o7yp3
There is no global switch for kick actions like with logging (though i have it in mind to add such actions, to allow filtering with a global switch). Some things rather need kicking though.
You would have to identify the checks that kick ("/ncp info playername" or logs or config) and remove the kicks from the actions list.
It is planned to automatically adapt some bounds for server-side lag.
@zSwayz
That makes sense, though we can't do too much for them. Some things might be adapted like some block breaking durations, but connection or client side delay is hard to tackle. I do have a concept in mind allowing for more tolerance for those (not using hard timing bounds but some heuristic accumulation), but those are not too close to being implemented, yet.
@DanceSC
I did not remove it, it does not work?
-
View User Profile
-
Send Message
Posted Dec 31, 2012Aww man, why did you need to remove "/ncp tell" :/
-
View User Profile
-
Send Message
Posted Dec 31, 2012@asofold
I am using Spigot with the 1.4.5 block break, and NC+ from this page. No lag at all. Network latency, and spec wise everything is good but this seems to only happen with people from Australia or other people with bad ping.
-
View User Profile
-
Send Message
Posted Dec 31, 2012@Chinwe
Some to me. :(
-
View User Profile
-
Send Message
Posted Dec 31, 2012I keep getting these random moments where NoCheat seems to go out of control, kicking and banning people for 1 minute, stopping people from breaking blocks because they're apparently hacking when they're not :c
How can I disable kicking/preventing block placing/breaking from happening? Do I need to go through the whole config and change the action for every check? :/
-
View User Profile
-
Send Message
Posted Dec 31, 2012@deaddude22
So is it one player or many? Vanilla client? Did you do "/ncp info PLAYERNAME" for such a case (can only do if you happen to be online within data expiration time or before server restart)?
@zSwayz
Can't reproduce axes for a normal environment. Shears seem to arrive a little late more often, though you need like 40 to 200 cobwebs with a little delay to get a violation, with lag it might of course be slightly different. Is that Spigot with the 1.4.5 block breaking thing?
Did you try setting blockbreak.fastbreak.strict to false? It would allow one fast block break after a pause always, but series of block breaks would be protected similarly to having strict set to true (Build 301 about, unfortunately jenkins is down).
-
View User Profile
-
Send Message
Posted Dec 31, 2012@asofold
shears + cobweb - shows as fastbreak
axes + wood or log shows as fastbreak
-
View User Profile
-
Send Message
Posted Dec 31, 2012@Adrenalineq
Yea its under maintenance sorry :(
-
View User Profile
-
Send Message
Posted Dec 31, 2012@asofold
I typed in and got this.
07:27:32 CONSOLE: [INFO] Lag tracking (roughly):
07:27:32 CONSOLE: 0%[1s] 0%[3.3s] 0%[270s]
07:27:32 CONSOLE: > 150 ms | 2 > 1000 ms | 3 > 5000 ms |
Also the player just reported to not have any lag. Ping was low and server was running excellent.
-
View User Profile
-
Send Message
Posted Dec 31, 2012@speedcam
Unlikely, for most such cases either you would have mismatching versions of CB and NCP, or you have bypass permissions (Op or permissions). Some hacks obviously "work", because you can turn them on, but for most what they can do should be severely limited. The fact that clients adapt to NCP means that the hacks attempt to stay within the limits set by NCP.
@nejcneo
Players... you can file a ticket if it is really a problem. One also has to be prepared to have players claiming they can't do their stuff, but not telling that they are using clients. So more information is needed, like versions, what checks alert for it, also useful are "/ncp lag" and "/ncp info PLAYERNAME" outputs, in case you can get them near the time of trouble.
@FourDowning
Please open a ticket for it to let us keep track of information better.
@deaddude22
Check "/ncp lag" and get player info with "/ncp info PLAYERNAME". Is it the morepackets(vehicle) checks that alert there?
@FreeGravel
Right now i don't see how that should be related to NCP.
@chrishillz
Best is to test out what levels you reach with a cheat client, i can't currently do that, though. The more subtle spammers might not reach too high violation levels, because they slowly spam and alter the messages, not sure if you can really distinguish them from "fools".
@MadeOke
Did you check with "/ncp lag" and "/ncp info PLAYERNAME" ?
@ms0244412
@Draxick
"A lot" ? Many cheats are very adaptive nowadays, so please check how much they actually can do. For PVP they are certainly pretty effective, still. The little bit of flying on getting hit might not be easy to fix. If i should happen to re-model the flying checks according to my taste, then it may be confined better, but currently i don't see that as too critical, if you box a player with knockback effect, he would also fly a couple of blocks in vanilla, of course vanilla does not allow to change direction during that.
@zSwayz
Chopping trees... did anybody check ncp+lag/info commands and what violation level the player reaches?
@Adrenalineq
Looks like jenkins is down right now.
-
View User Profile
-
Send Message
Posted Dec 31, 2012Jenkins don't work =D
-
View User Profile
-
Send Message
Posted Dec 31, 2012Still have a few issues with fastbreak when chopping tree's down. I just saw a player with a stone axe trying to cut a tree, and it refused to let him break logs with a stone axe
-
View User Profile
-
Send Message
Posted Dec 31, 2012@ms0244412
Yeah same here man
-
View User Profile
-
Send Message
Posted Dec 31, 2012A lot of cheats still work, like PvP fly, when someone gets hit, they can glide for a short time, and forcefield
-
View User Profile
-
Send Message
Posted Dec 31, 2012How exactly can i remove all the kick functions from the NC+ config? Last time i tried that it didn't work lol. I would rather block things than have them kicked. I have been getting a lot of false positives with some players but i don't know why. Looking into this now but removal of kick functions should do me some good for now.
-
View User Profile
-
Send Message
Posted Dec 30, 2012player cant kill mob and destroy block sometimes