NoCheatPlus

NoLogo

NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!

Main Features Permissions Commands Configuration Jenkins

Introduction

NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.

NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.

Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).

NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.

The following plugins might be useful to have a look at.

CompatNoCheatPlus (cncp)

Make plugins like mcMMO, Citizens, MagicSpells or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or ticket request for cncp.

Orebfuscator

Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have".

Downloads and History of Changes

  • Download officially approved versions on the Files page at BukkitDev.
  • Development builds have been moved over to the Jenkins at EcoCityCraft.
  • Do not download from any other source, do not use jars other people send you.
  • Changes by build number can be examined in the Jenkins changes list.
  • All commits can be seen in the GitHub commit history.
  • Plugin statistics are no longer reported to mcstats.org.

Support

Documentation Resources

Contact us

  • Quick questions can be asked on this page,
    or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC)
  • For real issues or feature requests please create a new ticket or add to an existing ticket.
  • To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.

Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).

You must login to post a comment. Don't have an account? Register to get one!

  • Avatar of asofold asofold Jan 13, 2014 at 00:24 UTC - 0 likes

    @libraryaddict: Go

    It seems simply the y-dimension is a hard-coded check for players in NCP. However before removing such a security check, i might want to check, if there can be any server crashes in case of actual exploits, because CB first puts the event through and does some similar checks afterwards. I am also not sure what calls still can lead to a crash, probably the native MCAccess.standsOnEntity checks. If using the Bukkit-API for that method removes the crash, i might provide a compatibility switch to remove the bounding box check.

    Have you considered (or are you already) using any metadata for a disguised player, like "disguised" or "boundingbox" or "disguised:enderdragon"?

    BFAK:asofold,90573112,4305cd44b773216e4e4b4865b3831dcc3c507c15087fb5cfeebd9392050724fc

    NoCheatPlus
    Latest release (1.7.2-1.7.10, approved) NoCheatPlus 3.11.1-RC-sMD5NET-b743
    (Development builds: Jenkins)

  • Avatar of asofold asofold Jan 13, 2014 at 00:10 UTC - 0 likes

    @libraryaddict: Go

    I'll check.

    @Red_Jay: Go

    Check first what checks prevent players from fighting. One common problem is latency, the players are just not where they appear to the other players. In situations with a lot of moving this means that one needs to move "smart" in order to actually hit. The alternative is to implement a much more complex system or to allow almost everything.

    You can set some strict flag to false (fight.direction). Maybe setting dynamic distance to 0 could also improve things for you (fight.reach).

    @godgodgodgo: Go

    Thx. Hello :)

    @levisn1: Go

    I assume that can be read from the plugin description (no fly unless allowed) - can you be more specific on what kind of flying/hacking seems to work? How does it look like, any violations in the logs or changes in "ncp info PLAYERNAME" ?

  • Avatar of levisn1 levisn1 Jan 12, 2014 at 15:42 UTC - 0 likes

    Is normal that ncp seems doesn't blocking the fly of some hack? I'm using the 655.

  • Avatar of godgodgodgo godgodgodgo Jan 10, 2014 at 19:24 UTC - 0 likes

    @Wolfy262: Go Yes. "NoCheatPlus 3.10.7-BETA-sMD5NET-b651 for 1.7.2 Dec 09, 2013" The latest build on here is for 1.7.2.

  • Avatar of Wolfy262 Wolfy262 Jan 09, 2014 at 16:35 UTC - 0 likes

    Does this work with 1.7.X yet? If not, when will it?

  • Avatar of Red_Jay Red_Jay Jan 09, 2014 at 02:53 UTC - 0 likes

    Anyway to like... fix hit detection? While preventing people from flying etc etc etc NoCheat also makes hit detection terrible including random spasms where both parties cannot hit each other. The config file is incredibly confusing and I can't seem to find anything that would help.

  • Avatar of libraryaddict libraryaddict Jan 09, 2014 at 01:15 UTC - 0 likes

    @asofold: Go

    I change the bounding box parameters.

    This is the first x, and z. And the second x, y and z.

    https://github.com/libraryaddict/LibsDisguises/blob/master/src/me/libraryaddict/disguise/utilities/ReflectionManager.java#L264

    BFAK:libraryaddict,75154,c9bc87ad599337d3271d3cb02958adc594ab27bb05cc09136881ff0723c8fcb4

  • Avatar of asofold asofold Jan 08, 2014 at 20:47 UTC - 0 likes

    @szebi1999: Go

    Please check out this ticket: Ticket 563

    You could add your issue in more detail, e.g. output of "ncp version" as well as some short description. Hints on how to deal with it might be found in the discussion of the ticket.

    @viper_monster: Go

    No, not yet, but there is a ticket: Ticket 589

    @Phascinate: Go

    Please see Ticket 676 (Edited!).

    @Martinahansen: Go

    Please make a ticket for this. I can not read much from that part. At least add output of "ncp version" and state more of the server log if there is more output. A Paste link to your ncp configuration file would also be very useful.

    Last edited Jan 08, 2014 by asofold
  • Avatar of Martinahansen Martinahansen Jan 08, 2014 at 19:56 UTC - 0 likes

    hi, how an where can i fix that error :

    [20:16:22] [Server thread/INFO]: [NoCheatPlus] BlueII failed WrongBlock: broke another block than clicked. VL 30. [20:16:22] [Server thread/INFO]: BlueII lost connection: Block breaking out of sync! [20:16:25] [Server thread/WARN]: [NoCheatPlus] Failed to execute the command 'ncp kick BlueII Block breaking out of sync!': Unhandled exception executing command 'ncp' in plugin NoCheatPlus v3.10.7-BETA-sMD5NET-b651, please check if everything is setup correct.

    thanks for help

  • Avatar of Phascinate Phascinate Jan 08, 2014 at 18:09 UTC - 0 likes

    Hi, I seem to be having a problem with sprinting in 1.7. In this update, you can use the CTRL Key to toggle sprinting. I use the CTRL key heavily now, and when I try to attack players or mobs while pressing it, it thinks I'm hacking. However, if I let go for a second and double tap W, I can sprint fine again. How can I make it less strict about automatically running with the CTRL key? (This is a feature in default Minecraft now.)

Facts

Date created
Apr 02, 2012
Categories
Last update
Sep 21, 2014
Development stage
Release
License
GNU General Public License version 3 (GPLv3)
Curse link
NoCheatPlus
Downloads
1,042,852
Recent files

Authors