NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Apr 8, 2012@mrchasez The issue with people flying being detected by the WaterWalk check should be fixed in the next version.
Rei's Minimap isn't disabled by NoCheat+, only its cave mode and radar are disabled.
-
View User Profile
-
Send Message
Posted Apr 8, 2012@NeatMonster If people have fly permissions and fly above water, they will get frozen or it will send off errors about WaterWalking.
Also, For REI's minimap you have permissions to use the cave feature but not the Minimap itself?
-
View User Profile
-
Send Message
Posted Apr 8, 2012@predawnia We can't prevent auto-aim but at least we can limit it. Please read the Fight subsection of the Instructions.txt.
@imilkywayz Hum... I did some testings and vines are working fine with NoCheat+. Can you record a video of the issue please?
@LordKainzo Thanks, if I need help I'll PM you.
@Ahellhound Try Orebfuscator.
@np98765 I did my own testing and name protect is only client side. It'll replace the username1 by the username2 when you receive a message in the chat. That's all!
-
View User Profile
-
Send Message
Posted Apr 8, 2012@np98765
I'm sorry but, are you stupid? Name protect is 110% client side. If you are on a cracked server, then you can change your name so everyone can see. But "name protect" all that does is make it so you can hide your name on your client. Everyone else would see it as normal.
-
View User Profile
-
Send Message
Posted Apr 7, 2012@NeatMonster
Oh good! That's why these are so effective.
Regarding name protect, it is not client side (to the best of my knowledge). The nameprotect does not show up in the console, BUT shows up to everything else: including players and block loggers. You cannot ban these fake names since they're... Fake.
For example, I could make myself "Notch" (-nameprotect add np98765 Notch). Then I would show up as notch to everyone on the server, as well as to BlockLog or LogBlock or whatever.
If someone caught me, they could roll me back. But they would be banning "Notch".
(All of this is based on my own quick testing... You seem to know what you're doing, so you can quickly test it as well to see if I'm hallucinating? :P)
-
View User Profile
-
Send Message
Posted Apr 7, 2012Is there a way to have it prevent XRay? I know probably not, but is there a way to have the plugin catch players trying to recieve data, like only ores and nothing else, then have the ability to kick them?
-
View User Profile
-
Send Message
Posted Apr 7, 2012@NeatMonster
Let me know if you need help - we're more than happy to supply how we do things... a lot of it does through potion effects. Others are granting players the ability to do direct damage but thats only after they fire an event for the skill.
-
View User Profile
-
Send Message
Posted Apr 7, 2012@Djrowling
Its not this plugin, its mojang and their server issue crap.
-
View User Profile
-
Send Message
Posted Apr 7, 2012I'm having issues with logging in. This is the only plugin i have added today and this error appeared. I deleted it and it's still happening. Latest reccomended 1.2.5.
-
View User Profile
-
Send Message
Posted Apr 7, 2012I don't know if you fixed this already but the old nocheat doesn't let players who can't fly, climb vines.
-
View User Profile
-
Send Message
Posted Apr 7, 2012Is it possible to prevent auto-aim?
-
View User Profile
-
Send Message
Posted Apr 7, 2012@godgodgodgo Sounds like a real plan. :)
@HOUSEMASTERR Hum... I never noticed it was also in Bukkit, it's probably disabled by default. Anyways, I'm pretty sure they can work together.
@Switch0r Thanks for the report! As I said previously, I haven't had the time to fix the conflict with McMMO/Heroes, I'll fix it tomorrow.
-
View User Profile
-
Send Message
Posted Apr 7, 2012Great plugin but NoCheatPlus v3.5.3 conflicts with superbreaker (mcmmo)
It kicks all players mining :p
-
View User Profile
-
Send Message
Posted Apr 7, 2012Thanks a lot for adding the boat check, it works perfectly in-game. How till the respawn trick check work with bukkits built in use-exact-login-location: true/false? I have mine set to true at the moment to prevent the same thing respawn trick check is supposed to prevent. Should I disable it or will they work ok together?
-
View User Profile
-
Send Message
Posted Apr 7, 2012This looks like it's making lots of progress! I'll be swapping the old nocheat for this after more people have tested and fixed bugs :D
-
View User Profile
-
Send Message
Posted Apr 7, 2012@pixelbat OK, glad to hear it wasn't NoCheat+. :)
-
View User Profile
-
Send Message
Posted Apr 7, 2012@HOUSEMASTERR
Wow, you're totally right. I just loaded up a copy of my server and set it to online-mode:false and I loaded right in. I guess it is just MC auth server.
-
View User Profile
-
Send Message
Posted Apr 7, 2012Well rolled back to both the previous version of CB and disabled NCP and still having stalled logins. Very weird. Maybe the computer just needs a reboot or maybe remount the ramdisk.
-
View User Profile
-
Send Message
Posted Apr 7, 2012@pixelbat
This is entirely coincidental, minecraft.net is having a bad time right now. I also thought of this first, but it happens without this too and on any version of server software.
-
View User Profile
-
Send Message
Posted Apr 7, 2012@Neatmonster
I'm only assuming it is. Everything loaded fine today, then I made two changes to the server. I updated to craftbukkit build #2150 and added NCP because we've been having a lot of people fly hacking with something other than Zombe/CJB, so SBC just isn't working for us now. I love the mod, I just noticed logins much longer. I'll disable the mod here in a few and see if its the mod or maybe its the new CB? idk :>