NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Aug 27, 2012@asofold
I tried enabling proxy and then did /ncp reload and then I relogged but I'm still being pulled down.
-
View User Profile
-
Send Message
Posted Aug 27, 2012@LordKainzo
The current documentation state is a little bit mid-air, unfortunately.
the log:... is just the log action, 3 and 5 just refer to something like delays in seconds to not completely spam with the same messages.
The f part means file you can have cif for console ingame chat and file logging.
The way to make actions violation level dependent is to make use entires like VL>100, so everything to the right can only be executed if the violation level is greater than 100.
So if you want to get all ingame you should alter the first log entry to "log:flyshort:3:5:if" or remove the "f" and just have it be "i" to only log the low levels to ingame chat.
-
View User Profile
-
Send Message
Posted Aug 27, 2012I'm trying to grasp and understand how some of the new log/cancel features work. It's a little confusing.
I'm seeing several people fail the survivalfly check so I want to up the amount of what is being logged and what is cancelled... by default it is shown as.
survivalfly:
active: true
actions:
log:flyshort:3:5:f cancel vl>100 log:flyshort:0:5:if cancel vl>400 log:flylong:0:5:cif cancel
is the 3 in the log:flyshort:3:5:f indicating that they must have a violation of at least 3 to be logged?
Seems very confusing ... and hoping other larger servers could touch base on how they configure it.
-
View User Profile
-
Send Message
Posted Aug 27, 2012@asofold
I posted a ticket
-
View User Profile
-
Send Message
Posted Aug 27, 2012@ShakyTom
The level seems to be the minimum suspicion / violation level a player must reach for any actions to take place.
@wiedzmin137
Concerning kicking:
You might prevent players getting kicked by removeing the cancel from the nopwnage actions list. Because that is an extra kick action.
Further you can control what exactly is done for which violation level with the actions list.
That may be subject to testing for what level to set banning and what to set level to in such a setup.
One could try to remove the cancel and add a VL>700 before the cmd:... parts. (cmd:kick) should kick the player anyway).
It might need some balancing to work both with captcha and chat well, but i think this will be subject to changes in the near future, some more flexibility needed for actions on captcha.
@LordKainzo
Is InstantEat a problem with skill use ?
SuperJump: You plugin at least knows when the jump starts, so you could throw a custom event ? If it is difficult to say when the jump ends, a simple solution would be to assume a time for which to exempt the player from certain checks, given the activation event. That would allow for moderate cheating, but still skill related for the simple solution attempt.
-
View User Profile
-
Send Message
Posted Aug 27, 2012@asofold
The checks we can handle are fall damage (Safefall skill and a few others) Speed gain (this is done via the potion packet so shouldnt be an issue if you're allowing potion packets) InstantEat (Allows players to regen hp only when eating) SuperJump (players can launch themselves into the air... this isn't easy to fix and may be broken no matter what.
-
View User Profile
-
Send Message
Posted Aug 27, 2012In the nopwnage check what does level mean?
The old config had warnlevel and banlevel, I don't understand what level on it's own does.
-
View User Profile
-
Send Message
Posted Aug 27, 2012@wiedzmin137
The ncp from this page does not help :) we need the version as in the server.log at startup or shutdown or with /vrsion NoCheatPlus.
But you want to prevent players being kicked when failing the captcha ?
That is not yet individually controllable only for captcha.
It is worth a ticket, i think, to add captcha specific actions.
@matagin
Not really built in, you could try to work with permission groups / ranks that either add or remove (or negate) tthe nocheatplus.admin.notify permission.
Could be worth a tickt for a new feature to toggle such by a command.
@Bimmr
More details?
Build number of NCP? any check failure messages? CraftBukkit build number / spigot/CB + +?
-
View User Profile
-
Send Message
Posted Aug 27, 2012NoCheatPlus is messing up essentials teleporting, is there any way to fix? And i know its no cheat because i removed it for a day and it never happened, i re-installed and it started again.
And by messing up teleporting, it teleports them below the selected area. So if i /tphere <Name> the player gets teleported below me.
-
View User Profile
-
Send Message
Posted Aug 27, 2012what program do you use for streaming? I found it entertaining :)
-
View User Profile
-
Send Message
Posted Aug 27, 2012Is there a way to toggle alerts in-game?
-
View User Profile
-
Send Message
Posted Aug 27, 2012I'm using NCP (and CNCP) from this page to 1.3.1
When he spam commands, he received the command to enter and got a kick Chapta.
I want him to getting Chapt not kick, so what do I do?
-
View User Profile
-
Send Message
Posted Aug 27, 2012@wiedzmin137
You can disable checks for players with permissions.
For instance the spam checks with nocheatplus.checks.chat.nopwnage , that should also prevent the captcha check.
The other parts i did not understand fully... which version where you using (including the build number) ?
-
View User Profile
-
Send Message
Posted Aug 27, 2012Is there a command to remove doubt for a player who certainly does not have hacks?
I have a problem with some players who commands everything possible to repeat some Chapt a second later kick. When I entered the server had to sign in the command, Chapt kick but logged on, later the entrance he could not move but when he wrote anything - kick
-
View User Profile
-
Send Message
Posted Aug 27, 2012@Melodicaxe On the top you have 2 links. 1 for 1.2.5 and 1 for 1.3.1 Use 1.3.1 and everything will work again
-
View User Profile
-
Send Message
Posted Aug 26, 2012Doesnt work everyones is hacking on my server people flying speedhacking not even one warning from nocheatplus keep it going!
-
View User Profile
-
Send Message
Posted Aug 26, 2012@457undead
"Build number 40" at http://www.nocheatplus.org:8080/job/NoCheatPlus/. It is not always easy to judge which was best if later builds are instable for some reason on some constellation. But it seems you can try build #46. We have one user reporting that players are not taking fall damage, but that seems not to be not the general case. The user was having build 40 working for his constellation, still 46 should be preferrred if it works out.
With a little experience one can try to judge by the recent changes list on jenkins how crucial changes might have been, though with NoCheatPlus that might be a little difficult at present.
An indicator for older versions could also be the metrics output http://mcstats.org/plugin/NoCheatPlus/ , it seems that build #40 is used a lot in comparison, but of course that is not a proof that it is most stable or "best".
-
View User Profile
-
Send Message
Posted Aug 26, 2012@asofold
What do you mean some people use 40 ?
-
View User Profile
-
Send Message
Posted Aug 26, 2012@457undead
Ok thank you. That should be fixed in newer builds, it seems some people use 40, but the latest build (46) might be better on some aspects.
-
View User Profile
-
Send Message
Posted Aug 26, 2012@asofold I found it. this is the build: v3.7-b28 Please keep me updated . Thanks !