NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Dec 14, 2012Some of the cheat checks start acting up after my server has been running for a few hours. I'm always running the latest dev builds and currently using Spigot #249, which is equivalent to the latest CB beta. No one can place or break blocks (related to frequency/fastplace - I disabled them both and everything was back to normal), and no one can hit entities.
-
View User Profile
-
Send Message
Posted Dec 14, 2012@Luzitano
Does CPU burn or do your tps drop (or both) ?
NCP uses a lot of resources, given a specific setup one could disable parts, in any case you might use the global switches in the logging section to disable some of the logging (only file or only console for instance). It was planned to do take one more go on efficiency, but CB2512 kind of stopped that for the moment. Currently we have to rule out other issues rather.
Might use more info (Verisons of CB, NCP, other plugins such as Citizens, mcMMO)...
-
View User Profile
-
Send Message
Posted Dec 14, 2012@zSwayz
The command is in build 273 and above. If you run CB2511 (without the "refactor" change) or lower, you should stay at 274 or 271, or whatever you are using.
-
View User Profile
-
Send Message
Posted Dec 14, 2012@MyPictures
I have logging enabled, and keep everything default values like always. I like to monitor everything while i sit in the server. /ncp lag does not seem to work at all. I use essentials for /fly, and /sethome.
-
View User Profile
-
Send Message
Posted Dec 14, 2012This plugin makes my server CPU Burn :x
-
View User Profile
-
Send Message
Posted Dec 14, 2012@mrchasez
That problem with mcMMO occurs with every plugin that cancels a BlockBreakEvent [Towny, Factions, WorldGuard, ...] (If its called like that). Do you use CompatNoCheatPlus already? If you have mcMMO or/and Citizens 1/2 installed then you should install CNCP also to prevent false positives with those plugins.
-
View User Profile
-
Send Message
Posted Dec 14, 2012@asofold
It happens with Zombe mod. Also i was notified of a NoCheat / MCMMO dupe.
The trick is this: NCP/nocheat collides with SuperBreaker skill from mining. It's really weird, if you use it it breaks the first block but not the rest.
Now the trick is. You get an iron pickaxe. You place silktouched diamond ores and gold ores. You do superbreaker skill. Start hitting gold and as soon as it breaks you hit the diamond. The diamond won't break but it will drop diamonds.
-
View User Profile
-
Send Message
Posted Dec 14, 2012@zSwayz
What check exactly spikes the CPU? Could you provide timings or an examine for us? Do you have NC+ logging disabled? What your NC+/CB version? What plugin do you use for /fly? Did you do "/ncp lag"? More info = Better support/help
I would recommend to make tickets for such issues @zSwayz, otherwise it will just get lost under all those other comments.
-
View User Profile
-
Send Message
Posted Dec 13, 2012@MyPictures
From what i can see, When a player does come in with a hacked client they somehow cause NC+ to spike the cpu, and from there it just goes wild. Players start getting kicked for /home or my mods get kicked for using the /fly command. I have been looking into this for about 3 weeks now.
-
View User Profile
-
Send Message
Posted Dec 13, 2012@zSwayz
Yea everything should be possible to do in the config.yml of NoCheatPlus. Look out for cmd:kick actions.
However, what check is annoying for you? I and @asofold decided to make HighVL kicks because it could get very annoying of you have logging off. Every event that has to be canceled costs a bit of server performance so its not smart to let them spam VLs on checks.
-
View User Profile
-
Send Message
Posted Dec 13, 2012Is there a way to remove all or most of the kick functions?.
-
View User Profile
-
Send Message
Posted Dec 13, 2012@Zeokon
Jenkins now has the newest dev builds available (project has just been adapted, so there might still be side effects, but it seems to compile fine at first glance). The newest build can be used under 2512 but i recommend using the stable build on Bukkitdev or the 274 on jenkins, because the changes coming with CB2512 mad me update in a rush, adding the changed project structure, some things might have been bugged by this, still investigating ....
-
View User Profile
-
Send Message
Posted Dec 13, 2012@asofold
is the new dev build in the ci for under #2512?
-
View User Profile
-
Send Message
Posted Dec 13, 2012@Zeokon
NCP build ? (Current, to be approved: http://dev.bukkit.org/server-mods/nocheatplus/files/40-nocheat-plus-bridge-mc_1_4-y2-dev/)
What kind of attacks (mob grinder with many mobs, just normal low hit rate pvp, ....)?
Anything else ? What does /ncp lag show?
-
View User Profile
-
Send Message
Posted Dec 13, 2012@asofold
Using over build #2512 and pvp is very choppy, it's only PvP due to nocheatplus attacks are coming 10 seconds delayed.
-
View User Profile
-
Send Message
Posted Dec 13, 2012It is a bug if commands are not replaced. Will upload a fix (though with new CB2512 compatibility design).
To be approved: http://dev.bukkit.org/server-mods/nocheatplus/files/40-nocheat-plus-bridge-mc_1_4-y2-dev/
-
View User Profile
-
Send Message
Posted Dec 13, 2012Is this because I use it with craftbukkit 1.4.5 R0.2 ?
I know reloads are bad, this occurs also during stop.
14:49:59 [INFO] [NoCheatPlus] Disabling NoCheatPlus v3.8.4-RC-b271 14:49:59 [SEVERE] Error occurred while disabling NoCheatPlus v3.8.4-RC-b271 (Is it up to date?) java.lang.NullPointerException at fr.neatmonster.nocheatplus.NoCheatPlus.onDisable(NoCheatPlus.java:349) at org.bukkit.plugin.java.JavaPlugin.setEnabled(JavaPlugin.java:219) at org.bukkit.plugin.java.JavaPluginLoader.disablePlugin(JavaPluginLoader.java:400) at org.bukkit.plugin.SimplePluginManager.disablePlugin(SimplePluginManager.java:400) at org.bukkit.plugin.SimplePluginManager.disablePlugins(SimplePluginManager.java:393) at org.bukkit.plugin.SimplePluginManager.clearPlugins(SimplePluginManager.java:434) at org.bukkit.craftbukkit.CraftServer.reload(CraftServer.java:549) at org.bukkit.Bukkit.reload(Bukkit.java:183) at org.bukkit.command.defaults.ReloadCommand.execute(ReloadCommand.java:23) at org.bukkit.command.SimpleCommandMap.dispatch(SimpleCommandMap.java:186) at org.bukkit.craftbukkit.CraftServer.dispatchCommand(CraftServer.java:502) at org.bukkit.craftbukkit.CraftServer.dispatchServerCommand(CraftServer.java:494) at net.minecraft.server.DedicatedServer.al(DedicatedServer.java:258) at net.minecraft.server.DedicatedServer.r(DedicatedServer.java:223) at net.minecraft.server.MinecraftServer.q(MinecraftServer.java:493) at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:426) at net.minecraft.server.ThreadServerApplication.run(SourceFile:856)
-
View User Profile
-
Send Message
Posted Dec 12, 2012@aroeira
You need not install the beta version if you use CB 2511 or below.
For CB2512+ try this: http://dev.bukkit.org/server-mods/nocheatplus/files/39-nocheat-plus-bridge-mc_1_4-y1-dev/
(To be approved)
-
View User Profile
-
Send Message
Posted Dec 12, 2012When players join on my server, they see this colored "ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ" ? admin: http://i.imgur.com/q2zVX.jpg normal players: http://i.imgur.com/9wmeT.jpg
-
View User Profile
-
Send Message
Posted Dec 12, 2012@mrchasez
You do it with a vanilla client? It is Minecraft game mechanics (not on ground = slower digging), if it happens with a vanilla client then it is a bug.
@Intangir
No not yet, i am not sure it can be prevented 100% from plugin side. I could consider adding something checking the async pre login events to test if that does it.