NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Jun 8, 2012@jellewie
Back with NoCheat it used to be players that use a fly.mod, telling the server to have firm ground under his feet. Usually it should be possible to jump into water.
Was it just some player or a tester of whom you know that he was not using any mods?
-
View User Profile
-
Send Message
Posted Jun 8, 2012when a player jumps in water he is getting hurt? is that a bug? or could I turn it off somewhere
-
View User Profile
-
Send Message
Posted Jun 7, 2012THIS IS GREAT, exactly what I was trying to find, thank you and though I may not be able to fund you, I gladly support you and this plugin :D
-
View User Profile
-
Send Message
Posted Jun 7, 2012@Matiast
It is in your instructions.txt file.
https://github.com/NeatMonster/NoCheatPlus/blob/master/Instructions.txt
Read line 118 through 434.
-
View User Profile
-
Send Message
Posted Jun 7, 2012Permissions?
-
View User Profile
-
Send Message
Posted Jun 7, 2012@Kiwz
Sorry, I was using RB, not dev - and have since updated.
Thanks for confirming it doesn't work lol
-
View User Profile
-
Send Message
Posted Jun 7, 2012@Xerati
What CraftBukkit builder are you using?
Here are a list of all the builds:
http://dl.bukkit.org/downloads/craftbukkit/
Edit: I logged in and checked it myself, you are on #2216
The bug should have been fixed.
I highly recomend you to alert the bukkit team.
Edit (again): I was not able to dupe items on your server, so there must be a third way then.
-
View User Profile
-
Send Message
Posted Jun 7, 2012@Kiwz
It's not patched. I updated the moment it was supposedly patched. The next day, a brand new player duped 800 diamond blocks on my server, flooding the spawn with them. It is not fixed, or at least there is another one that works as well.
-
View User Profile
-
Send Message
Posted Jun 6, 2012I don't think the relog check is working, I tested it and it simply is not working...
Oh and same for command spam..
-
View User Profile
-
Send Message
Posted Jun 6, 2012We also have issues with players sending 4 more packets than expected' and sometimes 6. Total violation level 4' when they are teleporting to a world through Multiverse. We are running the 'Survival Games' plugin on our server, can it be the cause?
-
View User Profile
-
Send Message
Posted Jun 6, 2012Hi, can you please add compatability with World Guard. Whenever a player interacts with a World Guard Protected Region - all of our Admins and the console get spammed with NoCheat messages. This is causing our server to lag massively, can you please disable these error messages for when a player is interacting with a world guard protected region.
Here are some of the error messages we're getting when players interact with a World Guard protected region:
07.06 03:16:07 [Server] INFO NCP: Poison_Dart_Frog failed fight.knockback: Tried to do a knockback but wasn't technically sprinting. VL 13058 07.06 03:16:18 [Server] INFO NCP: Poison_Dart_Frog failed fight.knockback: Tried to do a knockback but wasn't technically sprinting. VL 13556 07.06 03:16:17 [Server] INFO NCP: PrpleMonkeylovr failed fight.knockback: Tried to do a knockback but wasn't technically sprinting. VL 442 07.06 03:16:33 [Server] INFO NCP: Poison_Dart_Frog failed fight.knockback: Tried to do a knockback but wasn't technically sprinting. VL 13756
There are also lots relating to blockbreak.noswing VL 3 along with several others.
-
View User Profile
-
Send Message
Posted Jun 6, 2012Is there any known way to stop the "world downloader" mod. Four servers have now copied my spawn and its getting old =(
-
View User Profile
-
Send Message
Posted Jun 6, 2012@Darkwater124
Might be worth a ticket...
-
View User Profile
-
Send Message
Posted Jun 6, 2012When you get knocked back by multiple mobs on the same position (eg. from a mob farm), you get a huge knockback which is probably a bug in Minecraft. NoCheatPlus doesn't like that as my chat is now getting spammed with the player failing the moving.running check. Is this known?
-
View User Profile
-
Send Message
Posted Jun 6, 2012@kermitoo
Uppdate your bukkit to the latest dev and try again.
-
View User Profile
-
Send Message
Posted Jun 6, 2012It is possible to ensure that players can not take the contents of a chest at one time? Some players can do this with cheats. Great plugin anyway.
-
View User Profile
-
Send Message
Posted Jun 6, 2012@rasnyderiii
This is not possible on servers who are upptodate :D
Use CarftBukkit #2213 or newer.
Read this thread:
http://forums.bukkit.org/threads/problem-duping-items-in-1-2-5-r1-0.76714/#post-1148825
If you still are able to dupe items, plz, let me know how. I sent you an pm with my server ip.
-
View User Profile
-
Send Message
Posted Jun 5, 2012Nodus - Dupe Hack.. Works everywhere.
I checked many pages but did not see this mentioned or addressed. It is possible to dupe on every server I have tested with this. Feel free to PM me @Neatmonster if youre not aware of this. I don't want to give out too much to any script kiddies who read these forums.
-
View User Profile
-
Send Message
Posted Jun 5, 2012@MyPictures
This mod should containt a key, and this key should be possible for a server owner to change now and then.
And this night I was dreamin (lol) about a feature to add to this, how about password protect the minecraft.jar after the auto-install of this new mod was completed.
If it was possible to password protect a .jar file it would be hard to get into it after the install to get out the key.
This would atleast stop a noob or a 10year old to use nodus.
But ye, there would at some point be developed a kind of hack that would listen to the packet a client was sending to a server, thus getting this key.
But hey, why not add a 256bit encryption to it?
In my head this would be a great feature, it just needs a developer who has the time.
-
View User Profile
-
Send Message
Posted Jun 5, 2012@selfservice0
This is the 1,000,000,000 (exaggerated) time people asking this type of questions.
Have you ever seen this line in your life?