NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Oct 30, 2012@midnightfang22
@doggyroc
@chrishillz
How about updating your plugins with a CraftBukkit update. Please always consider that CraftBukkit development builds might also lead to plugin updates as development builds that are compatible to CraftBukkit development builds, but plugins might not yet release it on BukkitDev. It has only been a couple of days since 1.4.2 / CB updates.
Get NCP dev builds here: http://www.nocheatplus.org:8080/job/NoCheatPlus/
(Users of cncp bookmark this rather: http://www.nocheatplus.org:8080/)
Do mind that some updates have been backports, so don't just blindly donwload something, click on the build number for releases, if they match your server version. Doing this as an admin for a server that runs plugins, you get a more stable result and also spare us and yourself a good bit of time of asking back and trial and error. Same goes for BukkitDev downloads actually, if it does not match your server version you might be best off asking if it works with 1.4.2, for instance.
How are we supposed to release "stable" plugin builds for instable and still changing CraftBukkit-development-builds...
-
View User Profile
-
Send Message
Posted Oct 30, 2012@chrishillz
Orebfuscator is disabled right now...Its not that for me xD
-
View User Profile
-
Send Message
Posted Oct 30, 2012@midnightfang22
Yes I had this, but it was fixed once I deleted the Orebfuscator cache since I added a new world. I disabled the cache since it does not work with 1.4 yet. I regenerated the config too. One of those seemed to fix the issue.
-
View User Profile
-
Send Message
Posted Oct 30, 2012@midnightfang22
Hmm... I second that.
@MyPictures
"bukkit dev build 2429"
-
View User Profile
-
Send Message
Posted Oct 30, 2012@midnightfang22
What your CraftBukkit version? Better make a ticket with such stuff.
-
View User Profile
-
Send Message
Posted Oct 30, 2012getting this spammed in the console and logs using bukkit dev build 2429 and nocheatplus build 201... http://puu.sh/1kFYR Full stack trace: http://pastebin.com/NPjWwPM0
-
View User Profile
-
Send Message
Posted Oct 30, 2012@Liger_XT5
Version of NCP? Better create a ticket...
@levisn1
I made a ticket for it: http://dev.bukkit.org/server-mods/nocheatplus/tickets/301-invnetory-click-exception-1-3-2-b-191/
-
View User Profile
-
Send Message
Posted Oct 30, 201221:44:39 [INFO] This server is running CraftBukkit version git-Bukkit-1.3.2-R2.0-3-gcb9cb15 (MC: 1.3.2) (Implementing API version 1.3.2-R3.0)
21:45:21 [INFO] Plugins (26): WorldEdit, NoCheatPlus, SimpleFly, Buycraft, SaveItems, Vault, Multiverse-Core, PermissionsEx, CombatTag, WorldGuard, BorderGuard, AuthMe, Announcer, WhatIsIt, StealthLogin, NoSpawn, KillsPay, Essentials, floAuction, Citizens, EssentialsProtect, EssentialsSpawn, VanishNoPacket, EssentialsAntiBuild, EssentialsChat, Factions
2012-10-30 21:05:00 [SEVERE] Could not pass event InventoryClickEvent to NoCheatPlus v3.7.9-RC-b191
org.bukkit.event.EventException
at org.bukkit.plugin.java.JavaPluginLoader$1.execute(JavaPluginLoader.java:341)
at org.bukkit.plugin.RegisteredListener.callEvent(RegisteredListener.java:62)
at org.bukkit.plugin.SimplePluginManager.fireEvent(SimplePluginManager.java:477)
at org.bukkit.plugin.SimplePluginManager.callEvent(SimplePluginManager.java:462)
at net.minecraft.server.NetServerHandler.a(NetServerHandler.java:1143)
at net.minecraft.server.Packet102WindowClick.handle(SourceFile:29)
at net.minecraft.server.NetworkManager.b(NetworkManager.java:282)
at net.minecraft.server.NetServerHandler.d(NetServerHandler.java:111)
at net.minecraft.server.ServerConnection.b(SourceFile:35)
at net.minecraft.server.DedicatedServerConnection.b(SourceFile:30)
at net.minecraft.server.MinecraftServer.q(MinecraftServer.java:561)
at net.minecraft.server.DedicatedServer.q(DedicatedServer.java:213)
at net.minecraft.server.MinecraftServer.p(MinecraftServer.java:474)
at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:406)
at net.minecraft.server.ThreadServerApplication.run(SourceFile:539)
Caused by: java.lang.ArrayIndexOutOfBoundsException -1
at java.util.ArrayList.elementData(Unknown Source)
at java.util.ArrayList.get(Unknown Source)
at net.minecraft.server.Container.getSlot(Container.java:107)
at org.bukkit.craftbukkit.inventory.CraftInventoryView.getItem(CraftInventoryView.java:65)
at org.bukkit.event.inventory.InventoryClickEvent.getCurrentItem(InventoryClickEvent.java:52)
at fr.neatmonster.nocheatplus.checks.inventory.InventoryListener.onInventoryClick(InventoryListener.java:152)
at sun.reflect.GeneratedMethodAccessor95.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at org.bukkit.plugin.java.JavaPluginLoader$1.execute(JavaPluginLoader.java:339)
... 14 more
why i have this problem? i use b191 of NC+
-
View User Profile
-
Send Message
Posted Oct 30, 2012Note: I haven't updated to MC 1.4 due to CB and Spout.
We recently installed Sign Bank, http://dev.bukkit.org/server-mods/sign-bank/ , and started noticing players are warned about chat spam when they type in the amount they want to withdraw, deposit, or transfer.
-
View User Profile
-
Send Message
Posted Oct 30, 2012@euQsei
Did you read the 1.4 note or any other of the messages here?
Get it here: http://www.nocheatplus.org:8080/job/NoCheatPlus/
-
View User Profile
-
Send Message
Posted Oct 30, 2012ERROR IN 1.4.2
2012-10-30 05:33:46 [SEVERE] Could not pass event PlayerMoveEvent to NoCheatPlus v3.7.9-RC-b191 org.bukkit.event.EventException at org.bukkit.plugin.java.JavaPluginLoader$1.execute(JavaPluginLoader.java:341) at org.bukkit.plugin.RegisteredListener.callEvent(RegisteredListener.java:62) at org.bukkit.plugin.SimplePluginManager.fireEvent(SimplePluginManager.java:477) at org.bukkit.plugin.SimplePluginManager.callEvent(SimplePluginManager.java:462) at net.minecraft.server.NetServerHandler.a(NetServerHandler.java:218) at net.minecraft.server.Packet10Flying.handle(SourceFile:136) at net.minecraft.server.NetworkManager.b(NetworkManager.java:282) at net.minecraft.server.NetServerHandler.d(NetServerHandler.java:111) at net.minecraft.server.ServerConnection.b(SourceFile:35) at net.minecraft.server.DedicatedServerConnection.b(SourceFile:30) at net.minecraft.server.MinecraftServer.r(MinecraftServer.java:569) at net.minecraft.server.DedicatedServer.r(DedicatedServer.java:215) at net.minecraft.server.MinecraftServer.q(MinecraftServer.java:486) at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:419)
-
View User Profile
-
Send Message
Posted Oct 29, 2012@uplusion23
Did you read the 1.4 note or any other of the messages here?
Get it here: http://www.nocheatplus.org:8080/job/NoCheatPlus/
-
View User Profile
-
Send Message
Posted Oct 29, 2012@asofold
I updated to the most recent build, But I get tons of 'could not pass player move event' errors. About 5 a second. Is it only me?
-
View User Profile
-
Send Message
Posted Oct 29, 2012@FuRiouSOne
As MyPictures said, in principle it is impossible.
It is not completely impossible, because all clients usually use some patterns for their cheats, but once you do this the clients will update and change their pattern. Still i think focusing on the cheats rather than trying to detect what client people use is far more rewarding for an open source plugin.
@navbarry
Thank you for updating.
-
View User Profile
-
Send Message
Posted Oct 29, 2012When players on my server are sprinting and jump nocheatplus teleports them back. It tells all the ops that the player is survival flying. Edit: Build 196 works, so far the issue has not occurred.
-
View User Profile
-
Send Message
Posted Oct 29, 2012@Jns20
Emm if you use CB for 1.4.2 then 191 will be broken with it. Update to the latest version: http://nocheatplus.org:8080/job/NoCheatPlus/
If you still get problems make a ticket with all info's we need.
@FuRiouSOne
Emm no Punkbuster isn't for Minecraft ;P. The problem is that the MC server (in this case Craftbukkit) doesn't know anything about the client and it also cant check if the client is modded or not. For such stuff you would have to ask Mojang but over a bukkit plugin its impossible to make.
-
View User Profile
-
Send Message
Posted Oct 29, 2012Would be really nice is someone could just come up with a way to detect if a client is using nodus or any other hack mod and not allow them to join the server. Punkbuster anyone?
-
View User Profile
-
Send Message
Posted Oct 29, 2012I was having some issues with players sprinting and jumping and being teleported back to where they were (caused by survivalyfly, which I have disabled and working fine. I just hope people don't start flying around Q_q)
I am still getting spam in the console of some nocheatplus.utilities.BlockProperties or something along those lines.
http://pastebin.com/k8NuXc87
You can view it there
Help would be much appreciated.
-
View User Profile
-
Send Message
Posted Oct 29, 2012@MyPictures
Yea i know i forgot i had Survival fly disabled since it was preventing players to jump normally without any cheats hacks in some special circumstances like parkour tower, etc. but i see that is fixed now, its not happening anymore.
Thx for fixing it .
-
View User Profile
-
Send Message
Posted Oct 29, 2012@craftovski
That may be an issue with zombe mod for 1.4.2, NC+ basically just sends a motd to the client and if the zombe mod sees that message it disables itself automatically.
Anyways. SurvivalFly check should block that anyways since zombe mod uses traditional fly "hacks".