NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
@agentsix1 If you've given your players the correct permissions (like explained I the Instructions.txt), then it's probably an issue with your permissions plugin.
@Devian50 Can you make a video of the "bug" please?
What you've explained is a little bit unclear to me ATM.
@LordKainzo Yes, thanks Sleaker! I haven't really worked on Heroes compatibility ATM.
@Kane_Hart Just remove the cmd:kick from the options.
Now I realize that I've forgotten the end of my last message.
I wanted to talk about PWN4G3 protection. I had the idea (inspired by NoPwnage), that in order to prevent spam bots from logging into your sever, to display a question and ask the player for the answer instead of a simple Capcha. Of course, the question will only be asked to new players when they log in the first time and they'll be stored in a .txt file on my Dropbox. Also, allowed answers will be hashed to make sure hackers can't grab them automatically.
So, what are your thought about my idea? Any comment? Suggestion?
Wonder if someone has a pure log config only so we can just watch rather then kick/ban cancel etc...
@NeatMonster
Sleaker is a member of our Dev team and knows his stuff! Glad to hear about the fixes!
Though I'm not currently using NC+ yet, I do look forward to it whenever NC eventually breaks :D
Hey, don't know if you meant for this or not but I noticed that using a macro to exploit minecrafts lack of delay between block break and place events I was able to spam breaking blocks and placing them in creative mode. Idk if you meant for it to ignore creative mode or not but I thought I would let you know. :) (PS I changed the delay for the block destruction detection to the same as survival and still no change.)
i cant seem to give my members permissions to fly can some one please help me i am using the permissions supplied but it doesnt seem to be working :\
@nhoclesnar Thanks!
@Squirzy Should be fixed in v3.5.5_1. Thanks for the report!
@deleted_8156133 Thanks! Please read the end of this message.
@Zwing87 Sorry, what do you mean?
@andrewkm You're welcome! :D
@MarioG1 Should be fixed in v3.5.5_1. Thanks for the report! (bis)
@Invicter What isn't working?
@Kalorte Y U NO READ Instructions.txt?!
@MarioG1 Should be fixed in v3.5.5_1. Thanks for the report! (ter)
@agentsix1 Edit: This one.
@antagonistxx I'll try to fix this issue, thanks for the report!
@Drehverschluss Should also be fixed in v3.5.5_1. Thanks for the report! (quater)
@andrewkm I did something wrong, this will be fixed in the next version. Thanks for the report!
@ablac Can you give me more details please?
@Sleaker I'll fix it in the next version, sorry 'bout that. Thanks Sleaker!
Noticing you're kicking players during onPlayerJoin - this causes the player object during the event to freak out. I suggest finding a solution that doesn't invalidate the player object during this event (such as using a timer to trigger after the player is on the server, or by using onPlayerLogin where you can simply deny the connection).
The plugins kicking my users for breaking Planks, and Trees ECT. With Stone tools, or Diamond Tools. I think its the BlockBreak Check.
Hey there NeatMonster. Just here confirming that the new SpamJoin checks work great throughout all of my tests. Great work.
Only problem is it generates a HeroChat error during the kicks in the console. I have reported the issue to the herochat team - however am linking you to the report incase you would like to take a look and incase it may be something on your end: http://mantis.dthielke.com/view.php?id=214
The error generated is as follows: http://pastie.org/3763148
Hello i found a Issue with Vines on a Roof and player are in water...well hard for me to explain here i made a pucture how it looks when the error appears.
http://dl.dropbox.com/u/39281853/Screenshots/2012-04-10_19.32.21.png
Just another fly detection error. If your 'riding' a mob like a pig, it'll false positive! Otherwise, great work on this plugin :D
what is the permission for water walk
why is my plugin randomly kicking people with out a reason ?
I found another but with the flying check.
If you fell out of the world you get kicked for flying.
gg for NoCheat + ! You can disable plugin for some world?
@MarioG1
Me to, it is when people 'bob'.
Please add support for McMMO :D
You get kicked for flying if you swim down or up an waterfall near the air.
Thx for this great plugin!
@deleted_8156133
Yes nopwnage integrated into this plugin would be the ultimate combination!
Cheers on the new Anti SpamJoin :D Thanks alot!
Report cheat mods
http://www.xronize.com/index.html
hackblocks, Xray, server Crash etc...