NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
It fixed on build 890? > http://pastebin.com/NDFGwnA1
@rpenrod22
https://github.com/NoCheatPlus/Docs/wiki/Notable-Builds
Basically the current version of NCP could run with anything from 1.4.5-R1.0 to 1.9.4. There could be issues with past versions of Minecraft, but we'll still respond to requests: https://github.com/NoCheatPlus/Issues/issues
1.7.x - 1.9.x are still most used versions, so these are within focus of support still.
@rpenrod22
NCP runs from 1.5.x to 1.9 (if you are using the latest development build for 1.9, which hasn't been approved by the bukkit staff). Running any build above roughly 750, I'm guessing, will work just fine on a 1.7 server.
Am I blind or is there no approved version for 1.7.10? My server runs 1.7.10
@asofold
Fantastic, thank you :) I've added that permission and it now works. Really appreciate the quick reply! Was driving me insane haha.
@Sitmobedaf
Interesting. I suggest not kicking for a too low vl then for now. The check will certainly be recoded later, but currently it's not on the top of the lists. Perhaps having a GitHub issue for this would be best, in order to follow it easier over time.
@Vivi_Coral
It's a very old "check", that just allows control via a permission. I'll make it configurable, but for now you'd need this permission: nocheatplus.checks.blockplace.boatsanywhere
Hi all.
I've found out on Spigot 1.9.4 with NoCheatPlus build 983 (27/05/2016) that you cannot place boats on land as a non-OP player.
I found this out by disabling NCP, boats as non-OP work, enabling NCP, boats as non-OP don't work. This was the message with NCP enabled:
16-06-03 02:44:53 [INFO] [VL] [BLOCKPLACE_NOSWING] [Zippyduda] VL=1(+1) health=20.0/20.0
Any advice on how to work around this?
I tried setting placeblock and noswing to false but this didn't allow me to place them still.
I found this out using NoCheatPlus debug + WorldGuard's /wg debug testinteract PlayerName and then /wg debug testplace PlayerName
I was a little mistake, no semiblock, as stairs.https://youtu.be/tjmwyUMUlVE
I reduced lv for Criticals checker. On semiblock i have false trigger, on full block, i do not have false triggers
Sorry for my English. 986 build
@MCFeelBoyYT
I'd suggest to open a GitHub issue: https://github.com/NoCheatPlus/Issues/issues
It'll be easier to follow and might reach more people.
Regardless where - we'd need the output of the 'ncp version' command to know the details of used versions (server + ncp + ....).
Also need to clarify:
What is 'Worldvide Back'? A player gets teleported back to where they started from (on ground)?
What is 'new chunk'? A chunk that is just generated or just being generated?
@Sitmobedaf
Could you post the 'ncp version' output as well? NCP ground detection is very precise in general, but it could be a compatibility/version issue or something else/related, need more details.
asofold, i set high sensibility for Criticals, and i fond that if player jumping on semiblock, Criticals trigged 2 times faster. It is wrong, NCP not must do see difference player from block or semiblock.
I have a problem. I have the newest version of the jenkins page downloaded for 1.9 but who you're flying with the elytra you but always Worldvide Back soon as you enter a new chunk.
Sorry for my bad english.
@MarkElf2204
I mixed up what i already did :p - i did read the log and wondered. Edit: The log looks like they're constantly blocking, which would indicate server and client being de-synced concerning blocking state somehow. So there it would be very rewarding if it could be reproduced. If it can't be reproduced, it also won't be rated as severe. Could also be a plugin playing around with packets or setting player states otherwise. Perhaps i'll have a closer look at the log, if i can find anything interesting for the transition between no blocking and blocking, if it's in there at all.
Please don't link sites that might contain downloads of any CraftBukkit derivative, because it'll be illegal for most people anyway. I've now tested with PaperSpigot 1.9.4 and couldn't find anything.
@MasterMithrandir
Build 983 might be the next 'mostly stable' one, unless it has very nasty bugs inside :p. The following builds will elaborate on the base for new fight checking methods, though i might keep it (almost) a infrastructurel/placebo change, until the hopefully very soon taking place release. Now with glitching on 1.9.4, a release perhaps would need to wait for having sorted this out somehow.
@asofold
It's normal Spigot. I don't have time to open a ticket right now.
All I can say is that all the latest builds cause some major lag & movement glitching and rollbacks, specially with slabs.
I'll try to provide more info...
@asofold
As I left in the original response: http://pastebin.com/EYwCQp04
Edit:To be fairly honest: it isn't quite worth my own time to open a ticket as I'm not personally experiencing the issue and it is the first time I've seen the issue occur - if I happen to see it reported to me through another user (as this issue seems to be unique to the user who informed me of this issue), I'll open a ticket.
Additionally, I would check -removed link upon request- site in regards to PaperSpigot as it contains a download for both the latest build(s) and the api.
I personally haven't ran into any errors running with PaperSpigot and NCP through the coarse of over two years, I assume MasterMithrandir ran Build 973 which had a null error.
@MarkElf2204
The video is interesting and should be reproduced and debug logged. If possible to produce with vanilla client, i assume they somehow manage de-synchronize server and client states concerning blocking . Can't tell if it's like near-permanent (static) or due to wild clicking. If this isn't a cheat, then we will have a little bit of trouble keeping up any speed checking for blocking, because we would have to manually alter the server side state on detecting fake blocking, provided that's detectable at all (possibly by interaction). My suggestion: open an Issue on GitHub, so others notice. A debug log would be great too, if you can reproduce it.
Edit: the blocking speed bypass permission should help, provided it's legit. (nocheatplus.checks.moving.survivalfly.blocking)
The bunny stuff will be lower priority, unless it's been a misunderstanding and the speed gain is significant over what we have been assuming to be possible anyway. There will be attempts to tackle it, but fight checks are also an interesting area of higher priority to continue with.
@MasterMithrandir
PaperSpigot? There are no known issues with default spigot - if you don't throw some of the exceptions at us, how are we supposed to notice? I would like to test with PaperSpigot too, but i need an openjdk8 (??) in the repo first, in order to run their tools thing, and that version doesn't exist. I don't feel like installing java 8 (non open) just for that. On the other hand i need java 8 also for latest eclipse (neon), and thats slightly better than than mars.2, because the git staging dialog can be used for committing by default, and the mars.2 commit dialog doesnt show the file names (don't ask me how they manage to achieve that). So don't read this, unless you have to :p, for such 'errors' you could just make a ticket each, even if you can't come back, just make it like an info notice a) this versions etc. b) these exceptions/issues + 'rolled back' and/or similar.
1.9.4 builds are the latest ones on jenkins currently , soon to release - if you have real issues with those on PaperSpigot (or whichever), i'd love to see exceptions / descriptions (+ versions if possible).
Hello. Could someone be so kind as to indicate me to a stable build? I've tried the latest release, and various last dev builds, but they all give some pretty big bugs & or errors which are laging my server.
I don't know which to choose, they all seem unstable lately.
Looks like it may be 1.9.4 causing these issues.
This is more so on the behalf of someone else: Can anything be done regarding the following issue?
Supposedly this occures when 'left and right clicking a player", I haven't been able to recreate this issue myself but supposedly it occured with just NCP running. I had him provide the output of /ncp debug player (name) which can be found below. Video of issue occuring: here. "I removed all plugins expect NoCheatPlus and we still got the bug.
Here is the NCP log info: http://pastebin.com/EYwCQp04"
This was taken with the latest development build at the time with the default configuration.
Onward to my own question, has any progress been done in reguards to bunny hopping? I have had a number of people bring up that it still isn't blocked with NCP.
@MasterMithrandir
That's like i indicated below.
You might switch to build 960, which we might mark as 'mostly stable' soon-ish (possibly release as beta or alpha). If you don't trust that build for other reasons, set checks.fight.pvp.knockbackvelocity to true instead of default.
@MarkElf2204
http://i.imgur.com/nQTyKAV.png