NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Sep 13, 2012@rtcabooservb
Digging down leading to not mined blocks that are only gone client side but still present on server side happens without NoCheatPlus at least down to CB 2352.
I made a ticket to collect information there.
Jumping up might be the survivalfly check. Which build of NCP have you been using?
@codedonut
I Bookmarked it, though i think it should be blocked by NCP normally.
@zSwayz
Can you add information to the related ticket, such as CB, NCP versions and when it occurs ? We know that jumping into blocks can cause setting back.
-
View User Profile
-
Send Message
Posted Sep 13, 2012is there a way to add
http://www.minecraftforum.net/topic/1166218-132-just-fly/
to the list of the mods to be watched?
-
View User Profile
-
Send Message
Posted Sep 13, 2012@asofold
any idea when you guys may look into fixing the survival fly when run jumping? it pushed back all my players, and they assume its server lag, but its actually nocheat =/
-
View User Profile
-
Send Message
Posted Sep 13, 2012@selfservice0
Thank you very much :)
@rtcabooservb
I and @asofold had a little talk about this and its a strange bug, we are not even sure if NoCheatPlus is causing that bug. So no sorry it wont be fixable right now (maybe if @asofold finds something that fixes that ;) ).
-
View User Profile
-
Send Message
Posted Sep 13, 2012@asofold
I'm also experiencing invisible blocks when digging down and on rare occasion, building up really fast will drag you down inside the blocks. Any idea what is causing the issue and is it fixable right now?
-
View User Profile
-
Send Message
Posted Sep 13, 2012MinecraftSMP has given you a small donation.
I suggest other servers do as well.
-
View User Profile
-
Send Message
Posted Sep 13, 2012@zSwayz
It's configurable.
I am experiencing annoying block lag / blocks breaking late, staying invisible etc. both on CB 2365 and CB 2361, also without NoCHeatPlus, especially when digging straight down. That doesn ot seem to be related to NCP though. Happens wihtout it too, strange only that it just started this night.
Seems that digging "down" while flying (not creative mode) will not be a problem. If you experience problems with fastbreak, you can either disable it (WrongBlock and frequency protect against extreme nuking but not fast obsidian farming or similar), or you adapt the configuration, for instance set delay to 110 and add an entry "fastbreak: ... buckets: ... contention: 4000", see the links i have given below.
-
View User Profile
-
Send Message
Posted Sep 13, 2012is there a nocheatplus build out there for 1.3.1 that wont hog up my cpu, and still allow the /help command?
-
View User Profile
-
Send Message
Posted Sep 13, 2012miss your live stream <3
-
View User Profile
-
Send Message
Posted Sep 13, 2012@asofold
Yeah sry, before giving details I wanted to check if this is a known issue. It doesn't really bug me too much, as it still blocks Nofall hacks, but it's just a bit annoying. That's why I was asking^^
Somebody can be everybody. Falling doesn't ALWAYS give me a NCP message, but sometimes, making the Nofall hacking message absolutely useless. The server isn't laggy. I wouldn't say that they get more damage. I tested it and you could still fall 6 Blocks without being punished by NCP, even though it gave a message.
-
View User Profile
-
Send Message
Posted Sep 13, 2012@asofold
Build 88 might clean up some issues with the fast breaking false positives.
For reference check out:
http://dev.bukkit.org/server-mods/nocheatplus/pages/development/pinboard/#w-blockbreak-fastbreak
and
http://dev.bukkit.org/server-mods/nocheatplus/tickets/208-build-84-fastbreak-issues/#comments
-
View User Profile
-
Send Message
Posted Sep 13, 2012@levisn1
That should be an issue with the other plugin (Spam Protect). it can happen at any time during processing asynchronous chat events, that players get kicked by the main server thread, so during processing those events one can't rely on the player still being online, though that need'nt be related at all in this case...
-
View User Profile
-
Send Message
Posted Sep 13, 201222:43:14 [INFO] [NoCheatPlus] (CONSOLE) Kicked patrizio2 : Enter the captcha!
22:43:14 [SEVERE] Could not pass event PlayerChatEvent to Spam Protect
org.bukkit.event.EventException
at org.bukkit.plugin.java.JavaPluginLoader$1.execute(JavaPluginLoader.java:341)
at org.bukkit.plugin.RegisteredListener.callEvent(RegisteredListener.java:62)
at org.bukkit.plugin.SimplePluginManager.fireEvent(SimplePluginManager.java:477)
at org.bukkit.plugin.SimplePluginManager.callEvent(SimplePluginManager.java:462)
at net.minecraft.server.MinecraftServer.q(MinecraftServer.java:514)
at net.minecraft.server.DedicatedServer.q(DedicatedServer.java:213)
at net.minecraft.server.MinecraftServer.p(MinecraftServer.java:473)
at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:405)
at net.minecraft.server.ThreadServerApplication.run(SourceFile:539)
Caused by: java.lang.NullPointerException
at com.modembug.playerListener.onPlayerChat(playerListener.java:89)
at sun.reflect.GeneratedMethodAccessor168.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at org.bukkit.plugin.java.JavaPluginLoader$1.execute(JavaPluginLoader.java:339)
... 8 more
im on 1.3.2 r.01 b2365 last ncpv.3.7 b87 than it kick patrizio2 but i have this error in console..
-
View User Profile
-
Send Message
Posted Sep 13, 2012@ShakyTom
Question is if they should or should not receive the damage...
You could set the logging for vl>5 to get less messages. I can't look into that check at present, but it will be subject to .. checking again and again.
-
View User Profile
-
Send Message
Posted Sep 13, 2012@asofold
It says some are avoiding fall damage for over 10 blocks, but the VL is 0.
Others are around 5 with a VL of 2-3.
-
View User Profile
-
Send Message
Posted Sep 13, 2012@ShakyTom
At what vls? and alos do they receive unjust damage ? And randomly ?
If they receive not more than normal damage then you could put the logging to a higher vl simply, for the moment.
-
View User Profile
-
Send Message
Posted Sep 13, 2012@asofold
Another issue is NoFall - Literally every player seems to be triggering it.
-
View User Profile
-
Send Message
Posted Sep 13, 2012@ShakyTom
Wow, in that case the amount of network traffic (in additions to users with bad connections) can make it necessary to extend those settings.
You could remove the cancel from the actions and just let it log, so you get feedback about the settings. You might set delay to 150 and fastbreak.buckets.contention to 4000 and see if that gives less problems. But you migth also wait for build 88 with that, becuase i will check on some false positive reports and try to fix some aspects. With many players online they will use all sorts of combinations of tools and enchantments and blocks, some of which havent been fixed yet,m probably.
-
View User Profile
-
Send Message
Posted Sep 13, 2012@asofold
I run a 200 player server but tps isn't usually an issue.
What settings would you advise?
-
View User Profile
-
Send Message
Posted Sep 13, 2012@ShakyTom
Did you try to work with the contention and delay settings ? It may vary for server sizes, it still needs balancing. The delay may be set to 150 for testing (allowing 0.15 seconds faster for each break individually) and fastbreak.buckets.contention could be set to 4000 or even slightly more than the defautl 2000, which is the more striking setting for clients that have laggy connections or depending on server size maybe. The contention setting allows accumulating that amount of overtime (1000 = one second) before triggering a violation.