NoCheatPlus

NoLogo

NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!

Main Features Permissions Commands Configuration Jenkins

Introduction

NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.

NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.

Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).

NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.

The following plugins might be useful to have a look at.

CompatNoCheatPlus (cncp)

Make plugins like mcMMO, Citizens, MagicSpells or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or ticket request for cncp.

Orebfuscator

Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have".

Downloads and History of Changes

  • Download officially approved versions on the Files page at BukkitDev.
  • Development builds have been moved over to the Jenkins at EcoCityCraft.
  • Do not download from any other source, do not use jars other people send you.
  • Changes by build number can be examined in the Jenkins changes list.
  • All commits can be seen in the GitHub commit history.
  • Plugin statistics are no longer reported to mcstats.org.

Support

Documentation Resources

Contact us

  • Quick questions can be asked on this page,
    or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC)
  • For real issues or feature requests please create a new ticket or add to an existing ticket.
  • To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.

Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).

You must login to post a comment. Don't have an account? Register to get one!

  • Avatar of asofold asofold May 03, 2014 at 06:03 UTC - 0 likes

    @ssrock101: Go

    That's where we need more information:

    • Full output of "ncp version".
    • Are there any moving-related plugins (skills, special items tht make people faster)?

    BFAK:asofold,90573112,4305cd44b773216e4e4b4865b3831dcc3c507c15087fb5cfeebd9392050724fc

    NoCheatPlus
    Latest release (1.7.2-1.7.10, approved) NoCheatPlus 3.11.0-RC-sMD5NET-b739
    (Development builds: Jenkins)

  • Avatar of ssrock101 ssrock101 May 03, 2014 at 03:31 UTC - 0 likes

    @asofold: Go

    Thank you a lot for the reply! 1 More question, My players currently tped back when they are sprinting and attacking someone. What would I change in the config to fix this? Thanks!

    http://i.imgur.com/0Ecn8zu.gif

  • Avatar of asofold asofold May 02, 2014 at 15:29 UTC - 1 like

    @sjoerdtim: Go

    Assuming the code of the instantbow check does not have serious bugs in it, then it should not be possible to bypass it with a special event-sequence, so i have to assume that events are not firing from the CraftBukkit side - it could be a bug on Minecraft side or CraftBukkit. Thus i also assume that we can't do much from the plugin side. Of course packet-level checking might allow preventing this, but we don't do such at present.
    (Edit 1: I will re-check code on either side, to make sure once more.)

    @ssrock101: Go

    The one with vehicles should be blocked. The one with the first moving event (vclip) can't be blocked fully (except with packet level checks), but NCP should detect it and teleport the player back (Edit 2: on the next move, or some actions).

    @Favorlock: Go

    Yes and no. The violation history and player data are kept in memory, thus provide a spot where memory gets consumed with players joining the server. 214 is not a high number. You can set NCP to erase both player data and history a certain amount of time after player-logout, so the data could get erased. I would not bother unless you have 10000s of players joining per day/hour - even then you might be running on a lot of memory and might prefer to keep log-out positions and violation history in memory for checking. If your server is running for weeks without restart, then you might need it, at least for big servers. The maximum amount of memory for player data and violation history should be about constant per player.

    @LordKainzo: Go

    Server bugs i say! Do you have more exceptions of similar kind ? Is there some "failed to handle packet" or similar exception right before/afterwards?

    This seems to be related to a world being null for a player, which should not happen, as it would kill all plugins that use player locations on login.

    Output of "ncp version" can help us to state something like "please update the server software" :p.

    Related tickets:

    Last edited May 02, 2014 by asofold
  • Avatar of LordKainzo LordKainzo May 02, 2014 at 05:12 UTC - 0 likes

    <<reply 2157367>>

    http://pastie.org/private/4nvfchpwzbzcnyz9audk9a

    Any thoughts?

  • Avatar of Favorlock Favorlock May 02, 2014 at 03:28 UTC - 0 likes

    Not sure if this is truly a memory leak, but figured I would share since Plumbr happens to believe it is. And yes, plumbr is pretty good at detecting leaks ;P

    http://puu.sh/8vFH7.png

  • Avatar of ssrock101 ssrock101 May 02, 2014 at 03:25 UTC - 0 likes

    Does this block the tp hack from tping to any cords you want?

    Thanks - SSR

  • Avatar of sjoerdtim sjoerdtim May 01, 2014 at 10:31 UTC - 0 likes

    We're running NoCheatPlus, yet there are still people using this hack. It seems to be a new kind, as none of the protections stop it currently, could something for it be added?

    The hack: http://youtu.be/9bXI3Hva4wk?t=21s

    Owner of the Empire War Network
    Join us at http://www.empirewar.org/

  • Avatar of MyPictures MyPictures Apr 29, 2014 at 19:37 UTC - 0 likes

    @dannob123: Go

    Disable all NoSwing checks temporary. Currently there is a bug if you use one of the development versions of CraftBukkit with NoCheatPlus.

    BFAK:MyPictures,68804,4095b7e13e1842a5c6922a5b3a9094d1f7dbb5f4e7e36f133280ab58fa2882b0

  • Avatar of dannob123 dannob123 Apr 29, 2014 at 18:36 UTC - 0 likes

    My NoCheatPlus blocks players from lighting nether portals! I know it is this plugin for disabling the plugin and testing it for myself and it is this plugin that does this! Can anyone help me? on how to fix this issue

  • Avatar of Gr0up115 Gr0up115 Apr 29, 2014 at 15:49 UTC - 0 likes

    @asofold: Go

    Tried adding the effect manually and NCP still acted the same if they tried jumping 10+ blocks.

Facts

Date created
Apr 02, 2012
Categories
Last update
Aug 01, 2014
Development stage
Release
License
GNU General Public License version 3 (GPLv3)
Curse link
NoCheatPlus
Downloads
1,023,793
Recent files

Authors