NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Jul 29, 2012@Juliui
Sorry to hear that, be well then.
-
View User Profile
-
Send Message
Posted Jul 29, 2012@Juliui
Perhaps before the project is over, can the latest dev version / coded version / code changes, that came together while in the Nocheatplus Live stadium, be published on Github so new developers can move in and take over, without having to redo this work that Neatmonster did so well, but never finished?
Thanks!
-
View User Profile
-
Send Message
Posted Jul 29, 2012Hi people,
I just had a talk with NeatMonster. As you may know, he has gone through some problem in his real life. Right now, it's almost finish... But he can't find motivation to continue NoCheatPlus after this problem... So, it's official:
The NoCheatPlus adventure is now over.
There will be no more update of NoCheatPlus, and we will not offer any support anymore. If you want to continue NoCheatPlus, just take the source and made your own under another name.
I'm really sorry and sad about this news...
-
View User Profile
-
Send Message
Posted Jul 29, 2012@UGuang
It seems Acru has not been in for months - so kind of.
If you check out the Forum pages (114+ or so) for Lockette you will find a link to a Lockette version that is being maintained by ElgarL, which means it will be better compatible with towny etc.. I am using my own adaption of Lockette but that is not so much official and not on bukktidev either (remove features rather than add, no fixes for towny). Another alternative might be Deadbolt, but i dont know about their project state ...
-
View User Profile
-
Send Message
Posted Jul 29, 2012I use the Nocheatplus , but lockette pluging is fail ?
-
View User Profile
-
Send Message
Posted Jul 28, 2012@EvilJackCarver
I meant that ncp detects lag after it happens so in case of short lag spikes the lag occured before the first message, due to the next ticks being in time again ncp will very shortly after lag detection state that lag has gone. this might be th case if it is just short lag spikes that happen once in in a minute but not persist over a longer period.
But i havent programmed it so i am not 100% sure, in any case the time you seem to have estimated is the total time that has passed from detection of lag till lag is gone. If i remember right EvenPrime had added the lag detection to cont over an interval of a second or so.
What one can see form the log is the "can't keep up" messages from the server corresponding to the ncp lag messages, so i assume the lag detection of ncp is pretty ok, though it may be a little stricter or more verbose than the bukkit/minecraft one.
-
View User Profile
-
Send Message
Posted Jul 28, 2012@asofold
However, there's [for the most part] a less-than-one-second interval before it re-enables. In a 24-hour period between 04:00 [GMT-5] 27.07.2012 and 04:00 [GMT-5] 28.07.2012, the server log indicated 265 presences of the phrase that NCP uses when it indicated server lag. Of these, 255 (96.22641509%) were less than 2 seconds long.
And I'm serious about this too, this is the link to that one server.log spanning the 24-hour period that has had user IPs edited out.
-
View User Profile
-
Send Message
Posted Jul 27, 2012@UnitedFactions
Let's check it out :)
Spikes are sudden, potentially seldom lag occurences that do not last long but lag once heavily... actually the stats dont say anything about hose ;)
But we can see some things...
Most events are in green area except for the most critical one : PlayerMoveEvent
It has 100000 nanoseconds in average which is .... horrible :)
For a 100 slot server that means 100 times 100000 nanoseconds which adds to ten miliseconds per tick, which is a critical amount of time taking into account that a server tick only has 50 of them.
For smaller servers it might not matter that much, but hosted servers tend to have less cpu time so one never knows...
Block place and block break are pretty heavy too but faster than worldguard on my server (which might be less powerful than yours, so i can not really judge) but for those events are vomparably seldom this is not that much critical (still several plugins using 100000 each on vlock break can also add up to a millisecond , which then can matter if many installed plugins do heavy stuff - an mcMMO superbreaker can then lead to a lag spike indeed... ).
-
View User Profile
-
Send Message
Posted Jul 27, 2012@asofold
Asofold, NCP makes servers lag spike ;)
This is off a full 12 hours Nocheatplus run:
NoCheatPlus v3.6.1
PlayerChangedWorldEvent Time: 6429626 Count: 1356 Avg: 4741
PlayerJoinEvent Time: 71500312 Count: 2657 Avg: 26910
PlayerJoinEvent Time: 396520296 Count: 2657 Avg: 149236
PlayerQuitEvent Time: 54047269 Count: 2612 Avg: 20691
PlayerMoveEvent Time: 1160025021553 Count: 12609711 Avg: 91994
PlayerMoveEvent Time: 2388253525 Count: 12609711 Avg: 189
PlayerInteractEvent Time: 978800444 Count: 752567 Avg: 1300
PlayerInteractEvent Time: 1613228558 Count: 752567 Avg: 2143
PlayerInteractEvent Time: 4338581035 Count: 752567 Avg: 5765
PlayerInteractEvent Time: 694074133 Count: 752567 Avg: 922
BlockDamageEvent (and others) Time: 229271964 Count: 182370 Avg: 1257
BlockBreakEvent (and others) Time: 3282758851 Count: 39189 Avg: 83767
PlayerChatEvent Time: 260769347 Count: 9341 Avg: 27916
PlayerCommandPreprocessEvent Time: 313050994 Count: 11618 Avg: 26945
PlayerLoginEvent Time: 541165384 Count: 2673 Avg: 202456
PlayerRespawnEvent Time: 5137623 Count: 1068 Avg: 4810
BlockPlaceEvent Time: 3188525304 Count: 54240 Avg: 58785
BlockPlaceEvent Time: 961224063 Count: 54240 Avg: 17721
EntityDeathEvent (and others) Time: 31717182 Count: 5747 Avg: 5518
EntityDamageEvent (and others) Time: 30960816157 Count: 1356237 Avg: 22828
EntityDamageEvent (and others) Time: 5623269023 Count: 1356237 Avg: 4146
FoodLevelChangeEvent Time: 577504060 Count: 20115 Avg: 28710
PlayerToggleSprintEvent Time: 4543155361 Count: 327111 Avg: 13888
PlayerToggleSprintEvent Time: 251366093 Count: 327111 Avg: 768
PlayerAnimationEvent (and others) Time: 2058098880 Count: 1401918 Avg: 1468
PlayerAnimationEvent (and others) Time: 993032043 Count: 1401918 Avg: 708
SignChangeEvent Time: 1677839 Count: 71 Avg: 23631
ProjectileLaunchEvent Time: 129960303 Count: 23390 Avg: 5556
EntityRegainHealthEvent Time: 704684553 Count: 39108 Avg: 18018
PlayerDropItemEvent Time: 164068389 Count: 20213 Avg: 8116
EntityShootBowEvent Time: 379910251 Count: 13731 Avg: 27668
PlayerBedLeaveEvent Time: 124328 Count: 4 Avg: 31082
PlayerVelocityEvent Time: 687186574 Count: 88944 Avg: 7726
PlayerTeleportEvent Time: 267968623 Count: 42818 Avg: 6258
PlayerPortalEvent Time: 710160 Count: 116 Avg: 6122
PlayerBedEnterEvent Time: 61799 Count: 4 Avg: 15449
VehicleMoveEvent Time: 2397231065 Count: 1842852 Avg: 1300
Total time 1229120902964 (1229s)
-
View User Profile
-
Send Message
Posted Jul 27, 2012@EvilJackCarver
I think it is not that excessive, if it is lag-spikes - then lag is detected once for a spike (thus ncp might skip some checks and tells), and shortly afterwards the lag is gone (normal tick rate) so the checks are back at normal.
So the warning is refering to the time before itself, and the time stamps show like one spike per minute, roughly.
-
View User Profile
-
Send Message
Posted Jul 27, 2012I'm getting a warning that lasts - in most cases - less than a second saying that it's detected server lag.
Doesn't this seem a bit... excessive? And if you don't get what I mean, take a look at the timestamps.
(Debug notifications are on.)
-
View User Profile
-
Send Message
Posted Jul 27, 2012Forcefield nodus client dont get alert message? wtf
-
View User Profile
-
Send Message
Posted Jul 27, 2012I have Nocheat+ with the default config and everything works fine but hackers are able to move through blocks under them and maybe even through them. Not sure how deep, but atleast they manage to fall through 2 high blocks if there is a hole under it. Is there a setting to disallow them to do so or some other plugin that helps against it?
-
View User Profile
-
Send Message
Posted Jul 26, 2012@Nutiler Do you have more deatils on "can use nuker" ?
How effective is it, what kind of blocks does he break how fast and with which tool?
-
View User Profile
-
Send Message
Posted Jul 26, 2012Hi, I have the default settings on which has speed breaker and direction and noswing and one of my players can still use his Nuker, any ideas on how to stop this?
-
View User Profile
-
Send Message
Posted Jul 25, 2012@selfservice0
They are in instructions.txt
-
View User Profile
-
Send Message
Posted Jul 25, 2012Why aren't the permissions documented?
-
View User Profile
-
Send Message
Posted Jul 25, 2012@MyPictures
Now it is, thank you so much!
-
View User Profile
-
Send Message
Posted Jul 25, 2012@KevinEssence
allow-flight have to be set to true, if you have it to false the server will kick everyone that trys to fly (vanilla fly check sucks I know, lol). So set it to true and it should be fixed.
-
View User Profile
-
Send Message
Posted Jul 25, 2012@asofold
Yes