NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Dec 21, 2012@EricPickup
Download it here?
http://www.nocheatplus.org:8080/job/NoCheatPlus/
-
View User Profile
-
Send Message
Posted Dec 21, 20121.4.6 download leads to nowhere.
-
View User Profile
-
Send Message
Posted Dec 21, 2012Tested 3.8.7-b293 with craftbukkit-1.4.6-R0.1-20121221.164410-8.jar
seems everything but protection against Nodus forcefield is working
ticket created
Thx for all your hard work on this
-
View User Profile
-
Send Message
Posted Dec 21, 2012@asofold
Ticket here: http://dev.bukkit.org/server-mods/nocheatplus/tickets/338-prefix-cncp-f/
We got much notes now o.O
-
View User Profile
-
Send Message
Posted Dec 21, 2012@FurmigaHumana
@jjacobson
Thx.
@Tx707
Can't currently, there might be a ticket for it that you can upvote. If i find time i might add it.
@ninjaleon2
We are en vogue :)
Since NCP turned out to work again, people try their clients with it, and we left a couple of spots for them to exploit. The word "bypass" is clearly overused. Best example is "fastbreak bypass" which allows them to mine like 10% faster, or at most a couple of blocks instantly before being forced to pause or fall back to normal speed for quite a while. Back with NoCheat you could mine like 20-40 blocks per second, regardless what type of block.
Fighting hacks still hurt, though they should be limited by a good bit at present. You will find some hacks that still work, like moderate speeding, 3-block lifting, other. It is cat and mice play, unfortunately due to restructuring some initially fixed spots were unfixed in the recent past, also the interaction of several checks was used for creating real bypasses, like playing set-back of passable vs. set-back of survivalfly. Currently we should be at a good level of protection with the latest dev build, but given methods there will certainly be some new real or almost-real bypasses. The flying checks for instance had been coded relatively complicated (even disregarding special cases treatment), so i expect more bypasses there with time. I did not dare to really simplify them yet, because so far every bit seemed necessary for some special case at least. For the future it is planned to use a different modeling also allowing for more precision, but i can't tell if/when i can start on that.
-
View User Profile
-
Send Message
Posted Dec 21, 2012as a person that use to use hacked clients like weepcraft.tk or http://jclient.yawk.at/ i know that most clients are now being coded with nocheat bypases
-
View User Profile
-
Send Message
Posted Dec 21, 2012How do you change the prefix of NCP in the config? I don't see an option in the dev. build.
-
View User Profile
-
Send Message
Posted Dec 21, 2012Thank you for the quick update!
-
View User Profile
-
Send Message
Posted Dec 21, 2012@asofold
don't worry, quality is better than speed.
-
View User Profile
-
Send Message
Posted Dec 21, 2012@andrewkm
I was just going to say, that might be a candidate. Slipped past that recent pull request by oloflarsson, so it took longer than wanted, probably.
-
View User Profile
-
Send Message
Posted Dec 21, 2012http://www.nocheatplus.org:8080/job/NoCheatPlus/291/ :D
-
View User Profile
-
Send Message
Posted Dec 21, 2012@Code_Red11
One moment, more trouble. (Local version compiled well, Jenkins not, as it seems.)
-
View User Profile
-
Send Message
Posted Dec 21, 2012latest dev build not working for me either :( might be due to the fact we require cncp cuz we have mcmmo
-
View User Profile
-
Send Message
Posted Dec 21, 2012where is the dev build`???
-
View User Profile
-
Send Message
Posted Dec 21, 2012Dev build still doesn't work :S "Could not set up access to Minecraft API"
-
View User Profile
-
Send Message
Posted Dec 21, 2012NEW DEV BUILD IS OUT!!!!
-
View User Profile
-
Send Message
Posted Dec 21, 2012How long? Still waiting.
-
View User Profile
-
Send Message
Posted Dec 21, 2012update! then i give you a jowblob!
-
View User Profile
-
Send Message
Posted Dec 21, 2012@FurmigaHumana
WAITING FOR THE UPDATE ....PLEASE BE SOON
@FurmigaHumana
still waiting.
-
View User Profile
-
Send Message
Posted Dec 21, 2012@asofold
I want the update NOW or I will find where you live and look at you thru the window. ow, just kiddind.