NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Are you developing NoPwnage as a separate plugin? or integrating it into NoCheat+?
@NeatMonster
Btw sent you a 50 to get you started on the VPS. (If its too little let me know - pm me if your looking for a bigger monthly plan or something of the sort)
More information.
Okay now confirming 3.5.5_2 indeed doesnt let old players join. Reverting back to 3.5.5_1 works fine.
Another observation. 3.5.5_1 on SpamJoin check limit, causes errors with herochat, while 3.5.5_2 put out the correct console message showing the SpamJoin kick message as defined by nocheatplus config.
However the problem is 3.5.5_2 detects everyone as a new player - thus using it is mayhem.
@NeatMonster
3.5.5_2 is now completely messed up. Reverted back and set my SpamJoin to 10 users to prevent the check from coming into play.
Basically on 3.5.5_2 ... it detects old player.dat - not just new ones anymore. Just restarted to test 3.5.5_2 while 250~ online, no one could join, all I saw in console was spam bot message, and it was all old players.
Hoping this could be worked out. Reverted back to 3.5.5_1 for now with SpamJoin amount of players at 10 to prevent check.
PS: Sorry for the tons of reports, (evenprime probably remembers me as the guy who tests dev builds out as soon as available lol ;))
Oops just noticed you pushed another build out... Gonna throw it on and check it out.
@NeatMonster
I believe nocheat is badly messing with herochat whenever the SpamJoin checks come into play.. Everyone suddenly sees all channels with it...etc...
Any news on a possible fix?
Prevent players from cheating the server's time (works also with vehicles)
What is this and how does it work?
@deleted_8156133 I've started working on this.
@Wolfdogmp Probably an issue with your permissions, NoCheat+ is working fine with PermissionsEx.
@oleerik Thank you!
@ntscape I'll see what I can do, thanks for the comment!
@endercraft Thank you!
@sirvyper4580 OK, thanks for the comment!
@agentsix1 Probably an issue with your permissions setup.
i have added zombe mod permissions and fly permissions but still wont let my memberts fly can some one help me is there something im doing wrong
@ntscape
I also notice this problem on my server. People get kicked after login when Authme teleport's them to their quit location
Water walking might be a tad bit too sensitive. Had a couple people kicked while swimming, I know they don't have any mods on, but I assume this is a latency issue. I had to disable this portion of NCP so it wouldn't happen. Just figured I'd let you know.
@Wolfdogmp
Do you have flight enabled in the server.properties?
Thank you for continuing NoCheat and for the new features! Love it! Thanks!
Plug-in there is a problem between The NoCheatPlus and The AuthMeReloaded.
During Login user is Kicking with "Do not fly!" message.
@andrewkm
You should pastebin your server log up here, so we can see how it worked :D
@Wolfdogmp
What permissions are you giving them and what does your config look like? I am running the same setup as you and have absolutely no issues giving users fly.
More information is usually required when reporting these kinds of things. Permissions nodes given to users, etc. Also what build of PEX are you running? (Im using 1.19.2: http://webbukkit.org:8080/job/PermissionsEx/350/)
@deleted_8156133
Cleaning out your player.dat files that have a last modified date of 30 days should help with this (So old validated spammers dont decide to "return" in the future)
On a side note: the new SpamJoin works great and i have actually seen it in full force earlier today during another massive attack :) Worked amazingly; spammers gave up too fast.
Hey, I'd just like to leave a huge thank you for this. It's simply amazing :)
@agentsix1
@NeatMonster
I'm also having this same issue, no matter what I do, I can not give a user permissions to fly.
Using: NoCheatPlus v3.5.5_1 [1.1 - 1.2.5]
Using: PermissionsEx v1.19.1
I do know how to use permissions, I do understand and read the instructions.txt. This seems to be a bug.
@NeatMonster
Nice idea :D
Only one problem... the user could manually log in with about 20 of these, and validate them all. Then later spam with them.
UNLESS the anti-bot was to ask them on every log in :O
But I think questions or captcha's are the way to go, it requires a human to do it, so it's the most safe
EDIT: Oh yeah we also need some kind of "relog" protection. I have a leached version of Worlds End, if you want to test it with this plugin. (some guy released it on hack forums, idk)