NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Apr 19, 2012Got it. Disable this option in the config:
I have no more issues with people getting damaged by walls etc..
5) UNPUSHABLE:
This check is designed to prevent players from being unpushable. It'll handle "pushs" server-side instead of letting the client calculates them for the server.
active: Should players be checked for this kind of cheating. If you are not interested in players that cheat that way, set this to false. It is a good idea to have this active, because players won't be able to stay on a block and to do not fall when pushed by other players.
-
View User Profile
-
Send Message
Posted Apr 19, 2012@erdrickk
I am having a similar issue. However, it seems to be that I am the only one that can actually push players into walls. I will note that I am the only OP on the server as well as the only player not checked by NoCheatPlus. I can push people into almost any block I tried as well as push them completely through glass panes and corners of buildings.
-
View User Profile
-
Send Message
Posted Apr 19, 2012Does this plugin cause weird player collision behaviors? since yesterday afternoon one of my plugins causes people the ability to push each other in such a glitchy way that they can push people in to walls and shit like that cause them to suffocate.
Just trying to narrow down the plugin causing this.
Thanks!
-
View User Profile
-
Send Message
Posted Apr 19, 2012@KJanar
Xauth have LOGGED IN FROM ANOTHER LOCATION poblem =/
@NeatMonster
With XAUTH plugin, player can DUPE item EASY, put item in CHEST, use another client for loggin in same account, account 1 get: LOGGED IN FROM ANOTHER LOCATION and account 2 login, Itens stay in CHEST and INVENTORY :(
If u block this kick by LOGGED IN FROM ANOTHER LOCATION, bug stop.
-
View User Profile
-
Send Message
Posted Apr 19, 2012@deleted_7554077 @Poopfish @graveXrobber @colgatiN Thanks guys!
@whistlelblower I tough the message in red letters at the top of the page was big enough.
@asofold Definitely a good suggestion: added on my TODO!
@deleted_8156133 @deleted_8156133 I'll wait for the stacktrace.
@shukamu What's your big problem with "logged in from another location"?
-
View User Profile
-
Send Message
Posted Apr 19, 2012@shukamu This can only happen when you are running on a cracked server or someone logged in/hacked your account.
Use a login plugin like AuthMe or xAuth or AuthDB to prevent others kicking you.
-
View User Profile
-
Send Message
Posted Apr 18, 2012hey i have BIG poblem with LOGGED IN FROM ANOTHER LOCATION...
maybe this code fix this poblem? , if fix put it on NO CHEAT PLUS!
@Override public void onPlayerKick(PlayerKickEvent event) { if (event.getReason() == "Logged in from another location.") { event.setCancelled(true); } }
@Override public void onPlayerLogin(PlayerLoginEvent event) { for (Player p : plugin.getServer().getOnlinePlayers()) { if (p != event.getPlayer() && p.getName().equalsIgnoreCase(event.getPlayer().getName())) { event.setResult(Result.KICK_OTHER); event.setKickMessage("Another player with your name is already on this server!"); break; } } }
-
View User Profile
-
Send Message
Posted Apr 18, 2012@ProjectInfinity
Yeah I will, I have my computer in for repair, and using a iPad atm. I can get to the server log better when I get my computer back in a few days.
-
View User Profile
-
Send Message
Posted Apr 18, 2012@deleted_8156133
What about posting the stacktrace on pastebin.com and then showing us? ;)
-
View User Profile
-
Send Message
Posted Apr 18, 2012And so begins the ruin of the Nodus. Thank you!
-
View User Profile
-
Send Message
Posted Apr 18, 2012When nopwnage bans someone it always says that it can't pass the event player chat to nocheatplus. And then there is one more message prefixed with ()
-
View User Profile
-
Send Message
Posted Apr 18, 2012@whistlelblower
No offense, but would you read? At the top of the page in big red letters it says:
Warning: Some guys on HF have released a modified version of NoCheat+ which allow them to op themselves. Only download NoCheat+ from this BukkitDev page and nowhere else!
So, yes he does know about it.
-
View User Profile
-
Send Message
Posted Apr 18, 2012@NeatMonster
I think letting NoCheat have an API for other plugins to hook into is way better than trying to get other plugins to work, one by one. Though it would need a bit of consideration on how to do it...
For block breaks one thing could be simply "allowBlockBreakRate( Player/playerName, rate, expiration timestamp)", similar to other things... this would be called by other plugins on skill activation. I assume those checks will be much faster than any extrnal checking, and also i see the other plugins developers in dept to register with the protection plugin rather than the other way round.
If you find a very generic way to allow temporary adjustment of configuration values by API calls - that could be nice too, and would leave much of the thinking to the other plugin developers :) - not sure it is "nice to code" , though.
And: i would find it very rewarding if you could somehow integrate the Violation level approach to the spam checks, to be configured the same way as with the other checks, to be able to do temp kicks first and ban if it gets too much.
We had a lot of bannings for virtually almost nothing in the first days of nopwnge, back then.
-
View User Profile
-
Send Message
Posted Apr 18, 2012Are you aware of the modified version of NoCheatPlus being distributed on a certain notorious forum? It's using the nocheat name to spread an infected copy that includes this:
PM me if you want to see what I'm talking about, but if you google, you can find it as well.
-
View User Profile
-
Send Message
Posted Apr 18, 2012Loving the updates :) keep up the great work.
-
View User Profile
-
Send Message
Posted Apr 18, 2012Hey just want to say thanks to you guys for picking up this plugin, really appreciate the work you guys do!
-
View User Profile
-
Send Message
Posted Apr 18, 2012Thanks for the super fast response and fix.
Problem is solved with /openinv now.
Thanks
-
View User Profile
-
Send Message
Posted Apr 18, 2012@Djrowling I haven't worked on McMMO support yet.
@tremor77 Yes, simple type /nocheatplus to see the list of the commands.
@Spiritwo13 Zombe's mods are disabled when the player logs in. Maybe you're having an issue with your permissions...
@deleted_8156133 Thanks!
@Dinastya Thanks!
@HighlifeTTU Using Nodus, Criticals only does knockbacks on my server.
@MyPictures The author of the plugin has already left a comment on this page. :p
@ArticHood @deleted_7554077 NoCheat+ doesn't edit any block. It's another plugin's fault.
@cyclo666 @deleted_7554077 @CrazyGhostRider @deleted_7554077 @ProjectInfinity Fixed! Thanks for the report!
New version released: more bug fixes and a new anti-Unpushable check.
-
View User Profile
-
Send Message
Posted Apr 18, 2012@CrazyGhostRider I don't use this plugin yet, but from reading the change log, an option was added to "OP only by console", it seems like this blocks all commands starting with /op for some reason.
Look for that option and change it.
-
View User Profile
-
Send Message
Posted Apr 18, 2012Update!
Seems that when trying to use /openinv it checks permissions for /give command.
Why is that?