NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Nov 3, 2013@therennon
OP? Flare has no OP features or similar. There was a security hole for this which allowed you to login as any user you want on an online-mode= true server but this one got fixed in Minecraft 1.6.4 and higher (pleases update!). The GodMode of flare is basically NoClipping in the floor to avoid taking damage, which also got fixed in NoCheatPlus some time ago (You can check that by doing /ncp info <PlayerName> and see if that cheater has Passable violations in his log). I know Flare myself and couldn't reproduce any of those issues you are having there (CraftBukkit 2919 and NoCheatPlus 637 [Fresh generated configuration file]).
Which version of NoCheatPlus and CraftBukkit/Spigot are you currently running on? Which version does your NoCheatPlus configuration file have? Did you change anything in it?
Are permissions set up properly? Do you use Spout or CompatNoCheatPlus? Feel free to create a ticket for this issue to provide us with all the information's we need.
-
View User Profile
-
Send Message
Posted Nov 3, 2013@therennon
To me that sounds like "just another cheat client" right now. Maybe it has some aspects bypassed, but given this information i rather suspect people gave their accounts passwords away or people advertising their new client the usual way, rather than this client doing anything that much special. The op thing could be the authentication bypass exploit which has been fixed in CraftBukkit, recently. In the past usually those "op-hacks" had been password-stealers that were based on curious server owners trying to check what the client can do.
Do you base those claims like "undetected" on actual testing or just on rumors? What is the effect of which Cheat, what can they do more than vanilla? (We don't want to waste too much time on placebo cheats.) We have this topic each and every time a new cheat client is introduced, so we need something to grip and compare to already known issues.
-
View User Profile
-
Send Message
Posted Nov 3, 2013@asofold
It does everything: God mode, op, etc ... I'm breaking my head.
Search "Flares mod Minecraft" on google
-
View User Profile
-
Send Message
Posted Nov 2, 2013@therennon
What does it do?
-
View User Profile
-
Send Message
Posted Nov 2, 2013@Sirse
If they are a specific player class, it is possible to configure CompatNoCheatPlus to prevent actions handling for fake players with the player-class hook. It is not elegant, probably not 100% complete and would not play well with fake players with the same name as normal players. Might be an option for the time being.
-
View User Profile
-
Send Message
Posted Nov 2, 2013There is a new hack: "Flare" and unfortunately does not detects NoCheatPlus. 100% functional.
-
View User Profile
-
Send Message
Posted Nov 2, 2013And one feature request - fully ignoring for MCPC+ fakeplayers (za\co\mcportcentral\entity\CraftFakePlayer)
-
View User Profile
-
Send Message
Posted Nov 2, 2013@MyPictures
@Sirse
We do not hook packets at present. Such features are a bit on the edge of things, but once we add packet features (future...) this might be a good add-on feature for pvp servers.
-
View User Profile
-
Send Message
Posted Nov 2, 2013@MyPictures
I'm say about this plugin functionality - http://www.spigotmc.org/resources/anti-damage-indicators.194/
This plugin uses ProtocolLib for block packet's with information about entity's HP that prevent many cheats and mods - Nodus, DamageIndicator's, etc.
-
View User Profile
-
Send Message
Posted Nov 1, 2013@Sirse
Packets about mob health? What packet exactly is that? NoCheatPlus uses events instead of packets to block cheats, so packets aren't touched by it in theory. You can use /ncp info <PlayerName> to find out if NoCheatPlus did any actions on that one or not.
-
View User Profile
-
Send Message
Posted Nov 1, 2013And one more question: NCP blocks packet's with information about mobs health?
-
View User Profile
-
Send Message
Posted Oct 31, 2013@Sirse
It is a bit of a left-behind feature without real use for most users - setting to true will let NCP manage its listeners internally and only register one listener per event with the Bukkit API. In theory this allows to "wrap" the core listeners by compatibility hooks and such. I don't recommend to set it unless you really need it for a custom coded hook.
@Chikaze
NCP does not prevent tab completion for '/', however it can be configured for individual commands to be changed such that players need a certain permission to see them on tab completion (and use them) and won't get the permission by default, unless they are op.
-
View User Profile
-
Send Message
Posted Oct 31, 2013I hope it will prevent players from input /[Tab]
sorry, my english.
-
View User Profile
-
Send Message
Posted Oct 31, 2013What does the boolean managelisteners in config?
-
View User Profile
-
Send Message
Posted Oct 29, 2013@Livid_C0ffee
Please fill in a ticket rather, we need more information such as output of "ncp version" and the level of the speed effects.
@Luherico
Very general question - NCP should greatly limit what hack clients can do, but it can't prevent them from connecting and also can't prevent adaptive features, though they should be limited.
-
View User Profile
-
Send Message
Posted Oct 28, 2013Hi, this plugin can prevent the kinky hack?
-
View User Profile
-
Send Message
Posted Oct 28, 2013Please add Quake Support. It tells me they are using survival fly, but they are actually not hacking, just have speed XD
-
View User Profile
-
Send Message
Posted Oct 28, 2013@craftik7
@MyPictures
It is not related to NMS access, so setting that will not achieve anything.
I will push another build.
-
View User Profile
-
Send Message
Posted Oct 27, 2013@craftik7
Please try setting bukkitapionly: true (Disable NMS access for NCP) in your NoCheatPlus config (compatibility section) and see if that fixes it. Support for NoCheatPlus with that protocol patched 1.7.2 Spigot build cant be provided from us yet, because the Spigot team marked it as "experimental" and they don't support it fully at the moment.
-
View User Profile
-
Send Message
Posted Oct 27, 2013On 1.7.2 Spigot and #636 NCP:
http://pastebin.com/TcXvRSxe