NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Dec 30, 2012@asofold
Hey what's a good configuration for anti-spam if I want it to ban the spammer as soon as it can, BUT making sure it's a confirmed spammer. So something that's sensitive but will also not ban good players.
-
View User Profile
-
Send Message
Posted Dec 30, 2012Also trying to sneak by holding the shift button does not show your character sneaking. But my packet one does >.>
-
View User Profile
-
Send Message
Posted Dec 30, 2012When riding in a boat or traveling down/fall at a high speed it will kick the players for flying. I have not touched my config and i installed in correctly.
-
View User Profile
-
Send Message
Posted Dec 30, 2012@asofold
At this point, I'm pretty sure it's NCP. We average around 60-70 players and hit the low 90s at peak. No, we don't run any NPC plugins.
Heres my NCP config file: http://pastebin.com/8udivXrs
-
View User Profile
-
Send Message
Posted Dec 30, 2012Players are saying: We dropping stuff all the time, You die if you fall from 2 blocks, You can't kill mobs...
-
View User Profile
-
Send Message
Posted Dec 30, 2012this plugin does not work for me. i tested it with nodus on my server and it let me fly and do every thing.
-
View User Profile
-
Send Message
Posted Dec 30, 2012@FourDowning
I'll keep looking out for what it might be, but it could also be another plugin or even CB, for the case a plugin does something specific it might show up (at least i saw one report about similar trouble without NCP, recently). How many players are on / coming through? Do you have citizens or other npc plugins? [One might put this into a ticket...]
@iTzTito
That is known.
@LordKainzo
That is the fight.angle check (latest dev builds contain a fix for it), it is activated in your config, might show up with area attacks. For checks (de-) activation "/ncp reload" should do.
@LordDWT
@Cmdu76
Be sure to test without OP and without having the bypass permissions. Also check your NCP and CraftBukkit versions, check the startup logs for errors. If those match (CB 1.4.5/1.4.6 + NCP 3.8.7-beta-b294 or above), then nodus should not do that much, though they certainly adapted some things.
-
View User Profile
-
Send Message
Posted Dec 30, 20121.4.6 doesn't work also for me
-
View User Profile
-
Send Message
Posted Dec 30, 2012The 1.4.6 version does not work for me at all. All Nodus hacks work.
-
View User Profile
-
Send Message
Posted Dec 30, 2012@LordKainzo
Have you rebooted?
-
View User Profile
-
Send Message
Posted Dec 30, 2012Despite disabling all of the checks, I still see a lot of warnings popping up. Any reason for that?
I still see "tried to hit multiple entities" etc.
Here's the config.
http://pastie.org/private/jlegud3jxcerxmjyleow
-
View User Profile
-
Send Message
Posted Dec 30, 2012With the hack pringles, there is an option (auto swim) that is not detected also the critic fails to find and automatically jumping Sorry for my bad english
-
View User Profile
-
Send Message
Posted Dec 30, 2012@asofold
Didn't work :(
-
View User Profile
-
Send Message
Posted Dec 29, 2012@asofold
Okay, I put that on. I'll see how it goes.
-
View User Profile
-
Send Message
Posted Dec 29, 2012@Jleeevinnn
More details?
spider = 2 blocks?
flying = ?
(waterwalk = dolphin?, though there may be better exploits for that at present)
@libraryaddict
Thanks for debugging and info, projectiles are one of the old problems with really hiding players :) . I pushed an experimental build allowing for smaller y-bounds if the players length is set small (build 301).
-
View User Profile
-
Send Message
Posted Dec 29, 2012People are still about to fly about and waterwalk/ spider with Nodus even though I have the latest NCP for 1.4.6
-
View User Profile
-
Send Message
Posted Dec 29, 2012@FourDowning
Set data.expiration.duration to something like 60 minutes.
This is actually somewhat documented on the config page:
http://dev.bukkit.org/server-mods/nocheatplus/pages/configuration/#w-data-section
-
View User Profile
-
Send Message
Posted Dec 29, 2012@asofold
CB Build: R01 NCP Build: Latest Dev, 299 currently I think.
Where abouts in the config is it, and what's it proper name?
-
View User Profile
-
Send Message
Posted Dec 29, 2012@asofold Btw, heres my plugin list: (41): WorldBorder, HideStream, PlugMan, AlphaChest, WorldEdit, MotdManager, TagAPI, dhmcDeath, CCLogger, SimpleSort, Vault, PermissionsEx, PlayerHeads, LogBlock, WorldGuard, boosCooldowns, ModReq, AutoMessage, OreRatio, NerdMessage, CraftBookCommon, CommandHelper, Deadbolt, WhatIsIt, NoLog, BanManager, KitchenSink, FreeFall, Herochat, mcMMO, Essentials, floAuction, Factions, MobCatcher, CraftBookMechanisms, EssentialsSpawn, VanishNoPacket, Enjin Minecraft Plugin, CompatNoCheatPlus, NoCheatPlus
-
View User Profile
-
Send Message
Posted Dec 29, 2012@ritonda66
As FourDowning said, it might be aimbotting and force-fielding, but it could also be wild clicking onto mobs into a mob grinder (continue clicking even if attack is cancelled). Long term inventory manipulations can also lead to it (lots of changes over longer time).