NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
@NeatMonster
Great very excited about the new check :)
Regarding my issues here is my nocheat configuration: http://pastie.org/3755568
Server-properties has " allow-flight=true "
Permissions for users added to the flying group look as follows: http://pastie.org/3755578
Flying indeed activates fine with CJB/Zombe and such. However users in and not in the flying group still getting kicked at random times with the message: "flying is not allowed on this server"
Most recent pm'ed bug report to me looks as follows: http://pastie.org/3755586
This includes users with no fly permissions whatsoever getting randomly kicked for climbing ladders sometimes, etc.
Yes my server is in offline mode, beacuse only half of our players bought minecraft. Pls help :(.
@andrewkm I finished this check, it'll be in the next version of NoCheat+.
@Obliviator07 I don't want to use Spout's Jenkins, it's the Bukkit community here.
@andrewkm Donation button added.
@andrewkm That's happening because if the new functionality I added. Can you paste your configuration file on Pastebin please? Also, should your players be allowed to fly?
@rebel24 Yes, by using a configuration file per world. Please read Instructions.txt line 9.
@tomori_peti Name protect is only client side. Maybe your server is in offline mode?
@wlyshas Yes, NoCheat+ replaces NoCheat, but you can keep your old config.yml file (just place it in the right folder).
@wlyshas
yes, this is a replacement.
@xXReVurbXx
I dont get it?
do i need delete original nocheat?
@rebel24
If you use PEX, or perhaps any other permissions manager, you can set per-world permissions.
Have the group you want to be able to fly in that world gain access to the NoCheatPlus permission that lets you fly, in that world.
@andrewkm
http://www.youtube.com/watch?v=TAryFIuRxmQ
Can you make something for Force Name changer hacks?
Can we set it up so that you can switch off flight in a specific world?
Running on version 3.5.4_1 Getting reports of users getting kicked for flying for a bit/climbing ladders, etc.
Edit: Forgot to include that im running off default generated configuration with 3.5.4_1 Perhaps im missing a setting, I will look into it shortly.
Edit2: Nope I do not see anything in configuration that would have an auto kick on this. Any ideas - im assuming it may be a bug with the recent ladder fixes you pushed - etc.
Edit3: If its any help the permissions my users have that can fly are nocheatplus.checks.moving.flying - as well as the mods bypasses. Any other permissions im maybe missing?
Edit4: Apparently the kick message is the standard minecraft flying is not enabled message - yet my server-properties has fly set to allow of course. Hmm this usually happening with ladders and such.
@Obliviator07
Indeed Spout has tons of plugins on that server, maybe give them a shout :P
@NeatMonster
Sounds great! Thanks! Regarding VPS - Get a donation link/list -as old nocheat did- on this page please ;)
A jenkins would be awesome!
@NeatMonster
Have you checked with spout?
It seems like its not only the spout team are using http://ci.getspout.org/ as Jenkins.
@andrewkm I don't have a Jenkins because I don't have a VPS/dedicated server.
Nice suggestion, I'll try to implement it in the next version.
@NeatMonster
Would you happen to have a jenkins that we could follow and test development builds for you?
As well regarding the tons of accounts joining quickly and spamming heres a solution that was brainstormed recently when md_5 was taking care of nocheat...
Basically nocheat would have an option on max new player joins (Going off the player.dat file) - If more then set amount of new players join in set amount of time, an auto kick cooldown would occur.
- In reality you dont get more then 3 new players within say 5 seconds (We run an average 250+ peak player server and almost only experience more then 3 new players in 5 seconds during spam attacks.
So lets say new-player-joins: 3 new-player-time: 5 new-player-cooldown: 5
So by these settings, if 3 (new-player-joins) players join the server within 5 (new-player-time) seconds, the server would auto kick the next new players to join for 5 (new-player-cooldown) seconds.
It would detect new players based on wether a player.dat file already exists for them or not. This would HIGHLY cut down on those spam join exploits, and on organized spam attacks.
Please do consider
PS: Cheers and thanks alot for taking over this great plugin. I look forward to helping out here and testing as much as possible :)
@darkcloud784 Please do your own testing and tell me what is not working with Hereos.
@Dustinduse I'll see what I can do.
@QuantumBaldEagle TMI doesn't work in multiplayer if you're not allowed to give yourself items.
Does It Disable Too Many Items?
NEED HELP ASAP!
100s of accounts are joining saying things and leaving and its happing aagain and again on a mass amount. how can i stop!
@NeatMonster
Does this screw with heroes? NoCheat used to completely screw with it and it was completely unusable.
@MarioG1 Please try to the new version, it should be fixed.
@smokie23 It was a mistake I made while writing the default values. Just delete your config.yml file and a new one will be automatically generated.
@sexysteve865 Thanks! I'm focusing on adding more checks at the moment (and making sure they're working fine), but we (me and Juliui) have also planned some secret and nice features. :)
@deleted_7536780 1. NoCheat+ is a fork of NoCheat so yes it replaces NoCheat. 2. It has all NoCheat's features and also some new ones (please keep in mind they're still experimental). 3. You can even keep your old configuration file (just place it into the NoCheatPlus folder).
@UnitedFactions Hum... Try the new version. If it's still not fixed, post another comment. :)
@skillet_master Like I replied to the previous comment, try the new version and bug me if it's still not working.
To everyone: a new version of NoCheat+ is out with 3 new checks and a lot of bug fixes. If something is still not working has it should be, just leave a comment here.