NoCheatPlus

NoLogo

NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!

Main Features Permissions Commands Configuration Jenkins

Introduction

NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.

NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.

Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).

NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.

The following plugins might be useful to have a look at.

CompatNoCheatPlus (cncp)

Make plugins like mcMMO, Citizens, MagicSpells or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or ticket request for cncp.

Orebfuscator

Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have".

Downloads and History of Changes

  • Download officially approved versions on the Files page at BukkitDev.
  • Development builds have been moved over to the Jenkins at EcoCityCraft.
  • Do not download from any other source, do not use jars other people send you.
  • Changes by build number can be examined in the Jenkins changes list.
  • All commits can be seen in the GitHub commit history.
  • Plugin statistics are no longer reported to mcstats.org.

Support

Documentation Resources

Contact us

  • Quick questions can be asked on this page,
    or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC)
  • For real issues or feature requests please create a new ticket or add to an existing ticket.
  • To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.

Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).

You must login to post a comment. Don't have an account? Register to get one!

  • Avatar of marubal21 marubal21 May 19, 2014 at 00:30 UTC - 0 likes

    I looked but i couldn't find it, but does this plugin have a feature to prevent players from reaching the roof of the nether?

    Legends of Talaria

  • Avatar of Gr0up115 Gr0up115 May 18, 2014 at 21:06 UTC - 0 likes

    @asofold: Go

    They're not cheating, it's part of one of the games so I didn't want to remove it. I'll turn off the fastheal check

  • Avatar of asofold asofold May 18, 2014 at 19:59 UTC - 0 likes

    @plchevellepl: Go

    You see the discussion below? It's about that very data. I would not recommend banning in general. The data is slightly suspicous, but in my opinion banning without further evidence is too much, also because one needs to know how long it took to collect those violations.

    What fighting did you do since last server restart (how many minutes, vs. players, vs.mobs, arenas)?

    @Gr0up115: Go

    Why do they heal quickly? It's the fastheal check that is monitoring fast healing, it can be turned off,. I can't tell if it is it false positives or cheating or a plugin incompatibility...

    BFAK:asofold,90573112,4305cd44b773216e4e4b4865b3831dcc3c507c15087fb5cfeebd9392050724fc

    NoCheatPlus
    Latest release (1.7.2-1.7.10, approved) NoCheatPlus 3.11.1-RC-sMD5NET-b743
    (Development builds: Jenkins)

  • Avatar of Gr0up115 Gr0up115 May 18, 2014 at 18:04 UTC - 0 likes

    When players play MobArena on my server and heal quickly I get checks come up in chat. It flood my chat all the time so is there a way I can disable the check or disable it telling me about the player?

    ([Player] failed FastHeal. Regenerates health faster than usual.)

  • Avatar of plchevellepl plchevellepl May 18, 2014 at 15:00 UTC - 0 likes

    Hi. I have to register here, because admin of Minecraft server where i play banned me for that: http://screenshooter.net/1181291/tpmumtw Please help me prove him wrong. I never using any cheats.

  • Avatar of asofold asofold May 17, 2014 at 14:50 UTC - 0 likes

    @bananoke: Go

    1. You would add a cmd:... action to the actions list, like appending " vl>5000 cancel cmd:ban_fight_angle", then you introduce to NCP what ban_fight_angle means, by adding an entry to the strings section of the configuration, e.g. "ban_fight_angle: ban [uuid]" or "ban_fight: ban [player]" for using the name. Might also add a log action, but usually banning should get logged on the console.

    Note that the accumulated sum of levels in "ncp info" is not the violation level a player reaches during playing.

    2. Violation levels differ a lot amongst checks. In my opinion the only valid way to add banning is to test cheat clients and see what levels you reach (not recommending running cheat clients at all - might need to reinstall the machine afterwards :p). Some checks can have rare pretty big false positives, e.g. survivalfly for the case of extreme latency, though some NCP has to prevent, because the result from strange Minecraft/CraftBukkit behavior, resulting in extreme moves on rare occasions. In fact many cheats produce occasional small violation levels rather, so with banning the big ones one might catch the false positives - in general moving of players is a very unreliable thing, i would not ban there. Candidates could be fight.angle, but i can't tell a level for which it pays to ban.

    3. His info getting removed? You mean the violation history? I don't think that would be much relevant, concerning memory consumption or so, because data would be kept until shutdown only.

    Banning has the problem that cheat clients adapt to us, in order to create as few as possible violations, thus you would tend to ban players who suffer a bug or a regular false positive or some other networking oddity.

    @SaDb0y: Go

    Most of the time cheat clients adapt to the limits plugins like NoCheatPlus set, thus people can still activate the cheats, but the gain from it is limited.

    Now the questions is what can they really do...

    • Anti knockback: Known issue, we can't force players to move, but we might be able to detect such. No quick fix to be expected.
    • Kill Aura: They are clearly limited in what they can do, but we can't prevent them from auto fighting, probably neither from fighting better than the average player. I hope we limit it enough, such that normal players stand a chance in active fighting. This is an always present topic, so there will be advances from our side, but we can't promise a new world here. Officially fight checks are in focus, just a little delayed due to the current changes coming with 1.8, which need a lot of attention on side of other plugins and servers.
    • Speed hacks: Also an all-time problem, because Minecraft does not really allow for precise checking, similar to fight checks this will be in focus as one of the next things. They should be limited to some amount (30% max on ground?) of speeding, but we will try to limit it further.

    @bananoke: Go

    With lagging players hopping about in circles around each other, some things could accumulate, als regarding that the info command does not show how long the player needed to collect all the violations - a minute of a cheater can match a day of a fighter.

    If the player reaches that quickly, it could well be cheating. Don't be blinded by the vl sum (16000 for angle), the whole system needs a rework to allow for auto-judgment better - look at the values in brackets:

    • n number of violations
    • a average violation level reached
    • m maximal violation level reached

    Edit: the violation levels relate to the added amounts of violation level, not to the total level, that could also be misleading, because the actions for a check relate to the level noted in log actions with [violations].

    So a high n probably is a better indicator than the VL sum. Best compare to trusted players. An indicator for cheats can be the amount of fight checks that triggered with somewhat significant numbers n (provided it's not a full day in an arena or so) and also because the improbable check kicked in. Still even with these stats you can't be 100% sure, because you need to relate them at least to the time that the player needed to reach those. Likely cheating, slight chance of rare fast-clicking + lagging player fighting a lot, would not ban, unless you get more specific input.

    Last edited May 17, 2014 by asofold
  • Avatar of bananoke bananoke May 17, 2014 at 14:20 UTC - 0 likes

    I have one more question -

    http://screenshooter.net/1181291/tpmumtw

    this player using some kind of cheats right? i can be 100% sure of that?

  • Avatar of SaDb0y SaDb0y May 17, 2014 at 12:12 UTC - 0 likes

    Hello, I got some problems here, Now there is some hacks that has an option to bypass NoCheatPlus like WeepCraft, and most of the players in my server can use Anti Knockback, Kill Aura, Speed hacks. and I'm using the latest version of NoCheatPlus.

  • Avatar of bananoke bananoke May 17, 2014 at 09:05 UTC - 0 likes

    guys i have 3 questions

    1. fight: canceldead: true yawrate: active: true angle: active: true threshold: 50 actions: cancel vl>100 log:angle:3:5:f cancel vl>250 log:angle:0:5:cif cancel

    How should i edit this to make auto ban players with lvl 5000+ fight.angle?

    2. That would be ok if i ban every player who get 5000lvl or + in fight.angle, moving.speed or fly? I know that autoban mode is not the best idea, but with lag getting lvl 5000 is almost not possible right? that config would be ok?

    3. When player get autoban for cheats, then his ncp info can be removed automicaly?

  • Avatar of asofold asofold May 17, 2014 at 08:51 UTC - 0 likes

    @MyPictures: Go

    Can you reproduce it either way?

    @mcmonkey4eva: Go

    Usually problems with interact.visible are related to running a server version for which NCP does not have access to the block shapes that the server would use.

    I am not 100% sure what's up with snow, because the height level is calculated by NCP anyway, though the interact.visible check might be slightly different than the on-ground checking.

    We ask for the output of the "ncp version" command usually, or at least the add the server version to reporting something, in order to be able to relate it to known issues on either side.

    So does "ncp version" tell that the bukkit-api-only module is in use? If so, we'd recommend to update - note that the current dev-build branch will be pushed as release this weekend, unless there is any sever issues reported within "no time".

Facts

Date created
Apr 02, 2012
Categories
Last update
Sep 21, 2014
Development stage
Release
License
GNU General Public License version 3 (GPLv3)
Curse link
NoCheatPlus
Downloads
1,046,051
Recent files

Authors