NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
It's sad to see Evenprime left his job. I respect NoCheat, because its only one plugin that could avoid these pesky hackers away. Thanks NeatMonster and Juliui taking this plugin up and helping Evenprime. Hopefully we will work nice and support each other. From now ill look in to the glitches and bugs with might happen in NoCheat+ and will report right away. Thank you guys again to taking this plugin over. Keep it up with new changes and support.
@NeatMonster: The Rei's Minimap codes are used to ENABLE those features on a server. They are automatically disabled by default when a user connects to a server unless those strings are present.
@np98765 All the checks I'm adding are tested under the Nodus client.
Hum... NameProtect is a client side feature, isn't it?
@Folas1337 @JustinFatalx Thank you guys!
@Hopium Donate to Evenprime instead, he is the one who needs to be thanked.
Todo: donation link
Thanks for the update!
That one sounds promising, I guess I've gotta have a look at it later and thanks for the great work by the way :D
I'm glad to see someone took the old one over and keep developing + improving it.
Could you block the Nodus client? This is a very destructive client.
Also, would it be possible to block all nameprotects (where a user can have a different username)? These are extremely annoying to deal with. I'm not sure how it works, though...
Thanks!
@x8105 Good suggestion! Even if it's not high on my TODO list, I'll try to implement it.
@bigscary @thernztrom Thank you both!
To everyone: NoCheat+ v2.5.2 is out with two 2 new checks! If you find any issue with them, do not hesitate to leave a comment.
Thanks for continuing on this plugin!
Thank you SO much for continuing the NoCheat project. I won't run any survival or survival/pvp server without this feature set..
Would it be a huge request to implement a nocheat permissions configuration allowing a variation in speeds depending on Rank / group?
@XenoBen NoCheat+ can't block all cheats but can limit them. You should read the Instructions.txt file.
@Dinastya We will never beat them, but at least we can try. ;)
@smokie23 It's impossible to know if an user is using a modified version of Minecraft (which can be an harmless client or a client dedicated to griefing).
@selfservice0 Instructions.txt, line 550.
@selfservice0 You can even mod Spout. :D
@mrmag518 Thanks! :p
Thanks for continuing this, long live NoCheat.
@smokie23
Its called "require spout client"
One thing I can't figure out with nocheat is how to set a fly speed limit. I want my users to be allowed to fly but not over a certain speed. Is it possible to limit speed of flight?
Yes there is a surge of hacked modded clients coming out. The powers they give the hacker are game breaking. The problem is that if you block one modded client then they just tweak it to bypass that and its a never ending game going back and forth. So what xeno has asked would be the best way to combat all hacking is to just not allow modded clients on the server or only allow zombe's fly, cheat and block everything else. Because I've been following some of the hacked clients blogs/forums and they just update the client mod everytime a patch comes out or is blocked by nocheat and can bypass most checks. So if there was a way to completely block modded clients THAT would be amazing. Im not sure that would be possible since i'm sure majority of players use modded client one way or another.
Wow amazing :) Thanks a lot neat for picking this up and even add new features to it! And the things you added work great already so really promising for the feature :) Can't wait for more features so we can finally beat the hackers ^_^
Are you able to get NoCheat+ to block modded clients? I've had numerous people joining my server with Platinum Client and Nodus Client and they are Bypassing NoCheat+
@meowcat64646 They might have found a way to bypass NoCheat, but to fix it I need to know how. Anyways, thanks for your information, I'll see what I can do but no promises.
@NeatMonster
I will read it, because I actually don't know how each works.
And the checks for the hacks I seem to be having trouble with are ones that are messing with player's health and damage. I never have issues with the ones you mentioned that check the direction they are facing and the distance. I am constantly getting messages about how someone was blocked from attacking something out of range.
But just earlier today I was watching someone who I have had multiple players on my server accuse of hacking. I watched him while he was killing someone, and I was watching his health mainly. It was going back up to full a few seconds after he would take damage. I'm 100% sure he wasn't using a potion of any sort because i was spying on his inventory and watching him the whole time. I also had an issue int he past where a guy was managing to hit players in full diamond armor for 3-5 hearts consistently ( I know this cause i had him attack me as well) while under the effect of no potions and with nothing on him at all. In both instances the player who was hacking was managing to take on 3-5 players at a time as well.
I'm not sure if either of those are controllable, and i suppose there is a chance that one of them may not have been hacking, but based on the information I was seeing, I'm pretty sure they were hacks. Neither sent me any cheat messages though so I suppose No-cheat couldn't pick up on them if they were really hacks.