NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Oct 27, 2012@Mannik8
Already done: http://dev.bukkit.org/server-mods/compatnocheatplus-cncp/
Just install that plugin with NC+ and it should work fine.
-
View User Profile
-
Send Message
Posted Oct 27, 2012Please, can you add a support for mcMMO? Thanks.. It´s very bad, becouse it showing me a errs for fastbreaking and fire arrows etc...
-
View User Profile
-
Send Message
Posted Oct 27, 2012@chopstick121
The logging settings ? Those would only disable the ingame messages, but not the rest of violation treatment. So hacks would still be blocked.
-
View User Profile
-
Send Message
Posted Oct 26, 2012if i disable ingamechat will it disable anti hack?
-
View User Profile
-
Send Message
Posted Oct 26, 2012@madmonkeystudios
Version of NoCheatPlus? There are still quite some servers running very old versions at present.
@linwetalion
Fall damage: interesting.
Config: you could let the cancelling for survivalfly.actions start at a higher vl, like "vl>100 ...", not sure how much flying that would allow though.
-
View User Profile
-
Send Message
Posted Oct 26, 2012@CubieX
same problem. ncp sometimes pushes player back when he runs forward&jumps. At the moment I'm trying to fix it by lowering the values in movement section of the config.
-
View User Profile
-
Send Message
Posted Oct 26, 2012No falling damage in 1.3.2. Posted a ticket. Thanks.
[SOLVED]
Problem is in player permissions. The cause looks to be in absent modifyworld.* for users.
After adding it fall damage returned to normal.
Once again sorry for falseticketing!
-
View User Profile
-
Send Message
Posted Oct 26, 2012I have noticed that on servers with NocheatPlus, when I pillar up, NCP teleports me into the block I pillared up on and I die. Annoying :)
-
View User Profile
-
Send Message
Posted Oct 26, 2012@LordKainzo
@asofold
Yes tested again and this happens if a MC 1.4 client is pining your server
-
View User Profile
-
Send Message
Posted Oct 25, 2012@LordKainzo
Might be 1.4. Did you update anything else as well ? Also if using cncp the version should match, still that should not have anything to do with this. Are any users reporting that they can't connect with a 1.3.2 client?
@Riverdon
Thanks.
-
View User Profile
-
Send Message
Posted Oct 25, 2012@MyPictures
I have just updated to be sure to have the latest version so will let you know if it keeps happening.
Regards Riverdon.
-
View User Profile
-
Send Message
Posted Oct 25, 2012@asofold I just updated to latest build and I'm seeing a lot of "Reached end of stream" after I did. http://pastie.org/5114554 - sample of the log. Heres my config http://pastie.org/private/y3ny9lofqyy0xq7yydgsgw
Was this some debugging code left over? Note, this appeared after I updated Nocheatplus (nothing else was updated or changed)
I just realized it could be due to the 1.4 update as well, maybe I'm just crazy.
-
View User Profile
-
Send Message
Posted Oct 25, 2012@Johnny_Bravo0_0
Well your opinion... Every server owner is free to choose what he/she wants to install and what not. Its not like we force you to use NC ;P.
Anyways, not every hack is easy to see with your eyes. A player could reduce fall damage or cheat in pvp/pve modifying the hit speed and all and much more...
NoCheat+ wont block anything of course but I think it does a pretty good job by blocking such game breaking cheats.
Just so you know: You can also config NoCheat+ to only notify you if someone hacks/cheats, you're not forced to block those cheats if you don't want to.
-
View User Profile
-
Send Message
Posted Oct 25, 2012crappy plugin dont help me anything, it only give hacker a warning to not hack. It do not block it...
-
View User Profile
-
Send Message
Posted Oct 24, 2012@LordKainzo
I will try to identify suspicious parts in the code. Could not find anything yet (foggy: damage immunity, rather something different: fight.godmode - the latter i will attempt to check if it is needed at all.)
Edit: i removed an older remainder of the godmode part - not sure this is related, awaiting approval. Still rather suspect the modified clients to get out of sync too easily with certain moving events getting reset (pretty wild guess).
@Riverdon
Which version of NoCheatPlus are you using?
-
View User Profile
-
Send Message
Posted Oct 24, 2012Hello.
I am having problem on our big minecraft server. The problem is that people if people jump up while placing blocks below them the plugin pushes them off the block.
Tried to give different permissions but cant seem to find the right one.
Pleased to hear.
Best regards Riverdon
-
View User Profile
-
Send Message
Posted Oct 24, 2012@twisted067
NoCheatPlus actually removes the damage immunity on log in for certain damage types (by default only fall damage).
As it seems what the plugin does seems very much similar to what NCP does.
-
View User Profile
-
Send Message
Posted Oct 24, 2012I've seen the "ghosting" glitch happen a few times on my server... Does nocheatplus detect someone logging off while falling to prevent fall damage? We have a plugin for this (gravitysucks) but if nocheatplus does this then we can get rid of that plugin
-
View User Profile
-
Send Message
Posted Oct 24, 2012@MyPictures
@LordKainzo
I don't see how NCP should cause ghosting in any way by itself, I would rather suspect any plugin manipulating packets directly or overriding the NetServerHandler, such as Spout, DisguiseCraft, Orebfuscator.
Now to narrow it down we would have to relate the rubberbanding and the desync with anything else that happens or appears in any logs (server log, nocheatplus.log, ingame alerts).
All provided you are not using a config with build 156 or before that still activates the nomovedtooquickly option.
So for NCP does not override networking stuff that should not be a problem. What we did encounter (MyPictures reminds me of it after all) is that this occurred with a cheat client while testing out spider hacks. So position resetting + special client might lead to that (matches rubberbanding + question for SpoutCraft) or NetServerHandlerOverriding (does not seem to match here).
Some clients do "optimize stuff", and desyncing can be intricate and delicate, even small changes can lead to strange things as with the digging down bugs, so i assume that special clients are in packet stuff).
-
View User Profile
-
Send Message
Posted Oct 24, 2012@LordKainzo
Be sure you use the latest NC+ and CNCP. Because @asofold disabled the NetServerHandler completely in the latest versions of NC+ (by commenting it out). It could also be an issue with spout but not really sure... I only remember that this "ghost bug" came up when Neat was experimenting with the custom NetServerHandler.