NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Nov 16, 2013Hey i need help . at first sorry for my bad english. When a player starts flying at pvp he freezes and nobody cant hit him and the cheater teleports to his home because of this bug many people leave my server.. How can i fix it?
-
View User Profile
-
Send Message
Posted Nov 16, 2013@MadeBySaints
Thanks :)
@kin61
I am very sure that this is neither fake nor a client. Be sure to only download from BukkitDev or sources that have a similar code review system in place, to have (most) malicious code be found before it gets shown as a download. In the open of the net there may be found download links to plugins with the same name just with exploit code inside, so just download from "trusted" sources.
If you have heard about NCP enabling cheats that are not possible in vanilla: this can be partly true at times, until we fix it. However these kind of problems usually would concern all plugins that use a similar processing technique - removing the check that leads to the exploit also means to allow other exploits, which can be even worse.
If you want people to check out AntiCheat, it is here: AntiCheat on BukkitDev
For those who bet on how many letters i would put here about this issue, my count is exactly at 512 including this very statement.
-
View User Profile
-
Send Message
Posted Nov 16, 2013@kin61
did you really just let that foolishness fall out of your mouth? You make no sense, and show no evidence to support your claim, except that you 'heard'. Do everyone a favor and dont spam.
-
View User Profile
-
Send Message
Posted Nov 15, 2013I heard that this may be a fake client to make people hack more.... dont trust this one.... use anticheat!
-
View User Profile
-
Send Message
Posted Nov 12, 2013@MyPictures
@Sirse
Actually in this case it would be preferable to use temporary exemption (CheckType.BLOCKBREAK_BREAK, for just "testing" better CheckType.BLOCKBREAK), if using the static exemption api of NCP is possible. Exemption should work with breaking water.
-
View User Profile
-
Send Message
Posted Nov 12, 2013@Sirse
Yea NoCheatPlus blocks breaking of liquids because its impossible to break liquids without using a hack client and creative gamemode. You can either use the the NoCheatPlus API Or the nocheatplus.checks.blockbreak.break.liquid permission: "Allows the player to break liquids such as water or lava (source blocks) by using a hack in creative gamemode."
-
View User Profile
-
Send Message
Posted Nov 12, 2013NCP blocks breaking of water/lava blocks? I'm try use BlockBreakEvent in my mod for check permission to area, and my event blocked by other plugin (i'm think this plugin - NCP). If yes, how i can disable this check, i'm not found permission for that check.
Sorry me my bad english.
-
View User Profile
-
Send Message
Posted Nov 11, 2013@FadeAwayXD
Depends slightly on if there is any time limit to the freezing. With time limit you could just increase the hover ticks. If there is no time limit (in theory), then you might have to remove the kick action from survivalfly. The middle way might be to set the hover-violation to something clearly smaller, buying time, so it would not matter practically (500 is very high, set it to 50 probably) - drawback of a low violation is that one can't really get kicked, but one still gets set back.
-
View User Profile
-
Send Message
Posted Nov 11, 2013I'm wondering how to disable it kicking players for hovering, I run a plugin that freezes players (sometimes in midair) when the get hit and then nocheat will kick the for "Flying". Any way to disable this without giving them permission for survival fly?
-
View User Profile
-
Send Message
Posted Nov 10, 2013@asofold
100% Problems with run speed tag and maybe knockback resist
-
View User Profile
-
Send Message
Posted Nov 10, 2013@Bodyash
There is already a ticket for this: Ticket 628.
There is no ETA for this, because some other things are scheduled to be done first. Testing such takes a good bit of time, if people provide us with more precise information which kind of attributes pose problems, it might speed up the process of fixing, once it is in focus.
-
View User Profile
-
Send Message
Posted Nov 9, 2013Hi, again.
When u start develop item tags compatibility? (speed tag is blocking)
-
View User Profile
-
Send Message
Posted Nov 8, 2013@MyPictures
@GoldenEagle1995
Riding horses?
It is not impossible to do something, though i would probably tend to add raytracing for entity-interaction rather, which then would be more work.
-
View User Profile
-
Send Message
Posted Nov 7, 2013@Jyystin1337
Thanks.
@GoldenEagle1995
NoCheatPlus already implements a check called Interact_Visible which prevents block breaking/placing in spots that "aren't visible", so you cant modify blocks trough walls. However this check does not cover entities (minecart=entity). We had some ideas for a new check which should cover this exploit but its probably a lot harder to do and we also wont implement a bleeding edge check without proper testing. Minecraft itself has a little protection mech. according to this problem: If a player tries to interact with an entity thought a wall then his/her reach distance will be reduced 50%. Please make a ticket for this issue so we get all information's we need and please be aware that this issue cant get fixed instantly since it requires a new check or big addition to the already existing visible check.
-
View User Profile
-
Send Message
Posted Nov 7, 2013hello I saw people getting into riding under the base and when you sit on it, they can pierce the wall fix this please
-
View User Profile
-
Send Message
Posted Nov 7, 2013@MyPictures
Done :) I also posted a bug report there.
-
View User Profile
-
Send Message
Posted Nov 7, 2013@Jyystin1337
O wow. So you can force reduce the portal enter cooldown by spamming packets? Will try to reproduce this. Could you create a new ticket for us? So we can keep track of this issue more easy.
-
View User Profile
-
Send Message
Posted Nov 7, 2013@asofold
What I've seen is someone used the portal faster but not instantly. When normal players need to wait in the portal for 4 seconds to get the teleport request sended or to be teleported by the server, hackers need to wait only a ½ of a second or even less.
-
View User Profile
-
Send Message
Posted Nov 6, 2013@Jyystin1337
Such is not tracked by NCP (yet). A simplistic check could be added.
Is the portal use instant? Can it be estimated how much they gain (seconds)?
-
View User Profile
-
Send Message
Posted Nov 6, 2013Does NCP prevent almost instant Nether Portal usage? Hackers can speed the time to be able to send the teleportation request faster than normal players.