NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Sep 2, 2012Which build should I use? I'm running 1.3.2-R0.1. I see all recommended NCP builds are for 1.2.5 and not for 1.3.2?
-
View User Profile
-
Send Message
Posted Sep 2, 2012@Acer_Mortem
In order to judge that we need the versions (+build number!) of
You might be running Orebfuscator (version?) ?
The configuration of NoCheatPlus also might matter, depending on version.
The latest versions of NoCheatPlus given the default configuration shopuld not be able to cause such, if you enable nomovedtooquickly there might be effects, but i am not sure if they only appear if you also have other plugins installed that are modifying networking stuff.
If you can't find the source, you might consider the plugin "No Void Damage" as a partly crude workaround.
@rfsantos1996
Thank you.
@wowlover687
Are you depending on 1.3.1 or can you update to 1.3.2, say the development build 2357 ?
The latest recommended builds / beta builds are also having issues, some of which were fixed somewhere on the way to or right in CB 2357. Besides i am not sure if mixing 1.3.1 servers with 1.3.2 clients is all fun.
@chrishillz
I am not sure what your configuration is, have you shown it already ?
If you want NCP to kick with delay, you can use the built in command "/ncp kick delay=0 [player] Don't spam!". You can use that instead of the server command. NCP has the same for kick, ban, tell (not ban-ip). delay=0 means that the kick is scheduled as soon as possible, otherwise it is a delay in server ticks.
If you did not touch the configuration, the actions list could also be outdated. You might just delete the actions entry and issue the command "/ncp reload". The up to date actions will be put in then.
-
View User Profile
-
Send Message
Posted Sep 2, 2012@asofold
I think MCBans kicks have a delay on some respects. So I think I'll have to add a kick command to make sure it removes the player completely. However MCBans kicks might also have a delay. You might want to add some default protections to make sure it actually removes the player. I did not change the configuration for the bans or kicks I don't think, only the text.
-
View User Profile
-
Send Message
Posted Sep 2, 2012Alot of my members have recently been falling out of the world, when they log out of the server and when they teleport. I heard it was being caused by this plugin. Has anyone else experienced this aswell?
-
View User Profile
-
Send Message
Posted Sep 2, 2012@asofold
Yeah, MyPic told me about the latest build with the "block" for this hack, i already tested, i made the video to show you the hack (;
-
View User Profile
-
Send Message
Posted Sep 2, 2012Does this work with 1.3.1?
-
View User Profile
-
Send Message
Posted Sep 2, 2012Anyone else having problems with the nocheatplus.checks.moving.nofall permission not working?
-
View User Profile
-
Send Message
Posted Sep 2, 2012@rfsantos1996
Thanks, that clarifies it for me. As MyPictures said NeatMonster is aware of that, and will probably do smomething about it. If it is not covered by the latest dev version(s) and if there is no active ticket about it, just open one, and please always state the version build number of NCP with reports :).
@Flameuh
We can not draw any information from your statement, please state which versions of NCP and CraftBukkit you are using and what the problem is. Include build numbers for versions, not just 1.3.1. you can check the CB version with /version and the NCP version with /version NoCheatPlus -. or you look them up in the server log.
-
View User Profile
-
Send Message
Posted Sep 2, 2012@rfsantos1996
@NeatMonster added a check for the stephack, as far as I know it should be included in the latest dev build of NCP. Neat made that check like "on the fly"
@Flameuh
What do you mean? The latest DEV version works with 1.3.2, why not update craftbukkit if you have problems?
-
View User Profile
-
Send Message
Posted Sep 2, 2012Please make a update , the dev version for 1.3.1 bug
-
View User Profile
-
Send Message
Posted Sep 2, 2012@asofold
Step hack is a movement hack from Nodus. Video: http://www.youtube.com/watch?v=sNK0tlvrAX8 - when you click the link, the video will be probably uploaded (i commented before the upload finished)
-
View User Profile
-
Send Message
Posted Sep 2, 2012@chrishillz
Are you running the latest build ?
You might have to regenerate the globalchat part of the chat section with it.
But the main point seems to be that your configuration of NCP only uses ban-ip, you should combine it at least with a kick command to be sure the player is gone. This could be another bug though, because the other plugins did also not kick the player?
We recommend the combination of ban ban-ip and kick for really getting rid of a player.
I have not built in a ban into the default actions of globalchat because it still is somewhat experimental, but it can be added for higher violation levels (subject to testing, which).
@liversnaprocks
Can't promise any of those get into the next versions:
http://dev.bukkit.org/server-mods/nocheatplus/tickets/187-sprinting-while-standing/
Not sure what you are refering to: 1. Players just place blocks under them and jump up quickly to escape fights? 2. Arrow invincibility is technically the case or due to delay, because people try to shoot a t a position where the player is not anymore due to moving fast up?
-
View User Profile
-
Send Message
Posted Sep 2, 2012Excellent plugin has nerfed many hackers on my server just 2 reccomendations. 1 detect sprint hacks: A massive amount of noobs use sprint hacks that let them sprint while in place and this could be detected by performing a check to see if the player is sending movement packets as well and if not it could log that. So when player send sprint packets check to see if they are moving if not cancel. Second: Step hacks: This auto steps up blocks and allows you to escape any combat situation and can also cause a bug thats gives invivncility to arrows for a bit. Please try to add these easily detectable hacks and improve this plugin.
-
View User Profile
-
Send Message
Posted Sep 2, 2012I don't know if you're aware of this, but I woke up and found that ironically anti-spam has spammed my server lol.
http://puu.sh/11kIe
http://puu.sh/11kNz
It does work sometimes, but this time it was a noob spam advertising his server with /me, but it didn't ban him and instead spam-banned him or something. It didn't understand that he was banned, but at the same time the commands were still getting through. It did not stop his chat thread.
-
View User Profile
-
Send Message
Posted Sep 2, 2012@Nickbbeezy
Thats the inbuilt fly check from Craftbukkit, try to fix this with CompatNoCheatPlus.
-
View User Profile
-
Send Message
Posted Sep 2, 2012Having trouble with figuring out why NCP is blocking me for "moving too quickly" when I'm OP with all the proper permissions and I'm only flying in creative mode.
EDIT: After a while, it randomly stopped checking and I was able to fly/walk again with no problems.
EDIT #2: Actually, it looks like it's a bug on my end. Lots of client sided delay for some reason.
EDIT #3: Eventually narrowed it down to orebfuscator causing the lag problems, false alarm.
-
View User Profile
-
Send Message
Posted Sep 2, 2012Is there a way to disable the auto update checking, or at least stop it from appearing in the motd after logging into the server?
-
View User Profile
-
Send Message
Posted Sep 2, 2012@asofold
They're one and the same. A censor that blocks all cuss words and replaces with "" sounds like a good idea. You could make it detect symbols and everything, and still censor it. Then you could apply that to their spam violation level, as cuss words are associated with griefers and spammers 90% of the time.
-
View User Profile
-
Send Message
Posted Sep 1, 2012@rfsantos1996
No, i am sorry :) - we have not built in a speed command, yet.
@chrishillz
censor: to prevent messages with certain words in it, or to replace words ?Like word blacklists could be added to the new globalchat check (or whatever it becomes with time), as it is aimed at annoying stuff.
-
View User Profile
-
Send Message
Posted Sep 1, 2012Yay I can tell you fixed the antispam on some level. Spam and random cussing is the most common type of problem on my server. If you could add a basic censor and treat it as a spam violation that would be awesome :o