NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Oct 25, 2013@asofold
Im using groupmanager, I want one of my rank such as headadmin has "*" commands, but i want NOcheat to treat him like a normal player
-
View User Profile
-
Send Message
Posted Oct 25, 2013@kevinator0122
How to tackle wildcard permissions really depends on your permissions plugin, especially to do it efficiently and not to have to negate every single permission node.
@nizarch22
Not entirely sure which one :p
-
View User Profile
-
Send Message
Posted Oct 25, 2013How do you un-exempt "*'" command perms. Is there a negation permission i can use? I don't want the "*" command group to have been exempted from no cheat
-
View User Profile
-
Send Message
Posted Oct 24, 2013thanks for hax XD
-
View User Profile
-
Send Message
Posted Oct 21, 2013@dotapurex1
It's scheduled - can't tell about soon or not, certainly some time close to "next".
You can already make some checks less strict. For nearby combat it would be reach/direction checks for most (strict flag).
We will have to implement new mechanisms for tracking players recent positions and also for cancelling schemes that let through an attack now and then (the latter is meant for speed mostly, but could also be used for special situations on other checks).
-
View User Profile
-
Send Message
Posted Oct 20, 2013Hello,
I was wondering if you guys are planning to fix the "Hit detection" for players anytime soon? It makes is so that you have to be like standing on the same block as the player you're trying to attack. Sort of a troublesome thing for pvp servers.
Thanks
-
View User Profile
-
Send Message
Posted Oct 20, 2013@Bodyash
Supporting items with "attributes" might still take some time, since there are other pressing issues. Also i am not yet sure if that many servers are using those already, and with 1.7 somewhere near the doorstep, it is not clear that the amount of testing needed to bring in such a feature really pays to do before 1.7. We will bring another bug fix release some time soon and then decide what/if something can be done with this.
Still on schedule are things like:
All those are pretty important, so adding something new means it will have to compare to those items, also considering how many servers are affected. If something (simple) can be done quickly i might consider doing it right after the next bug-fix release, before the above listed.
-
View User Profile
-
Send Message
Posted Oct 19, 2013how long we must wait for Item Stats check?
-
View User Profile
-
Send Message
Posted Oct 18, 2013@Tyzun
Anything specific?
-
View User Profile
-
Send Message
Posted Oct 18, 2013@GoldenEagle1995
Did you check the worldedit and command logs?
@teamlegend
Yes you can stop receiving messages in various ways, however one should note that different checks have different VL-behavior, you can't compare survivalfly to wrongblock for instance.
Apart form turning off all ingame logging (configuration), you can also turn off all notifications in-game with "/ncp notify off". To just prevent notifications for lower levels, you have to alter the actions for the check in question (no global switch). You can remove the "i" part of the last part from the log action, e.g. change a "log:flyshort:0:5:if" to "log:flyshort:0:5:f".
If the low level notifcations are just happening too often you could also increase delay and/or repeat value for the log action, to still get it logged. "log:flyshort:0:5:if" to "log:flyshort:0:15:if" to only show it every 15 seconds instead of 5, or "log:flyshort:0:5:if" to "log:flyshort:5:5:if" to only show it after 5 times. Of course all sorts of combinations are possible in general.
-
View User Profile
-
Send Message
Posted Oct 18, 2013Maybe you must update your plugins, I think cheaters has found way to cheat for 17 days, I am warrying :)
-
View User Profile
-
Send Message
Posted Oct 18, 2013Is there anyway I can stop the VL notifications I & my Staff get that are under like 500VL or something? So only VLs over 500 show?
Thanks
-
View User Profile
-
Send Message
Posted Oct 16, 2013I downloaded right now the lattest 1.6.4 version I used the other 1.6.4 v 3.10.4 but no my permissions are good and my staff dind't do anything it was pretty weird the wait it was griefed it looks like it was someone flying or maybe walking and making holes at the same time look here a picture of a example that happend here and in the spawn this are like roads of huge holes :P
http://i.imgur.com/VftJ26x.png
-
View User Profile
-
Send Message
Posted Oct 16, 2013@GoldenEagle1995
If your spawn is protected properly then no "nuke" hack will work on it, because a "nuker" hack is nothing more then a cheat which break blocks faster.
There was a duplicated handshake exploit in Minecraft actually which allowed bad guys to login as any player they wanted to (got fixed in the latest 1.6.4) so be sure to be up to date.
Other then that it could be a poor or wrong permissions setup, staff abuse, broken block breaking protection plugin or anything else which might give strangers permission to break blocks in your protected spawn area.
Please provide at least your CraftBukkit and NoCheatPlus version.
-
View User Profile
-
Send Message
Posted Oct 16, 2013Hey my server spawn got recently griefed I don't know if it some sort of hack I just saw huge holse on my spawn and my server isn't noob does force op works ? something happend that i found all my spawn griefed and that is weird maybe some kind of nuke? that nocheat wont protect?
-
View User Profile
-
Send Message
Posted Oct 16, 2013@Bodyash
Ticket 628 already concerns attributes. Now we have two people interested in it (at least).
-
View User Profile
-
Send Message
Posted Oct 15, 2013@MyPictures
Emmm.. U know, in 1.6 u can find some tags on items
e.g. Swods - they have damage tag. Diamond sword - +7dmg
with EpicBoss Gold Edition i can create diamond sword (loot from boss) with +10 dmg tag. And it`s working. Also i can add speed, reduce speed, health, etc.
http://cs312327.vk.me/v312327094/578a/lsLL8rKQjlc.jpg
How u can see - if i`m keep in hand this head or put in on - i`m taking bonuses.
e.g. - no armor, no items and only this head on my helmet slot - i will deal 2 dmg from each hit from hand. O_o
This bonuses can be added with:
https://github.com/ThaH3lper/EpicBossGoldEdition/blob/master/src/me/ThaH3lper/com/Items/ItemHandler.java
AttributeHandler.addHealth(stack, ei.health);
http://www.minecraftforum.net/topic/1819508-snapshot-13w21a-item-attributes-modifiers/
And sorry for my English. I`m russian guy D:
-
View User Profile
-
Send Message
Posted Oct 15, 2013@Bodyash
I do not understand fully. I guess that enchanted head causes SurvivalFly false alerts for you? How is the speed boost set on those items? Version of NoCheatPlus and CraftBukkit? The later NoCheatPlus versions provide support for set.walkspeed in the BukkitAPI.
EDIT: Never mind you made a ticket. Lets discuss it there.
-
View User Profile
-
Send Message
Posted Oct 14, 2013@asofold
http://cs312327.vk.me/v312327094/5781/IqTRgpO-2wY.jpg
http://cs312327.vk.me/v312327094/578a/lsLL8rKQjlc.jpg
NCP-Plus Blocking item-stats (runspeed - backin time)
-
View User Profile
-
Send Message
Posted Oct 14, 2013@chickenputty
@Nickbbeezy
Development build 634 contains a fix attempt, not sure it catches all cases, but it should be an improvement.