How to remove backdoors

Here is an easy backdoor finder called CPE it usually works effectively for servers, and its free.

Hey there, you can use CPE, ananti-backdoor that gets the job done

11-03-2022, 03:25 AM

baratoxis200 Wrote: Use this:

https://github.com/ProtoGrace/Gmod-Backdoor-Scanner

I usually use it on my servers

---

Nomanlua works as well though

as a developer, a lot of these can be easily bypassed so there's no point in detours it's only to catch low level backdoors

11-03-2022, 03:25 AM

baratoxis200 Wrote: Use this:

https://github.com/ProtoGrace/Gmod-Backdoor-Scanner

I usually use it on my servers

---

Nomanlua works as well though

Didnt even know these excisted

09-03-2022, 07:44 PM

ZhingBao Wrote: It completely depends how the backdoor works, you cant just give a step-by-step tutorial... But usually if you find the backdoor you just remove it. The hard part about removing a backdoor is finding it...

Backdoors are really hard to find, you could easily just do keyword searches: _G, RunString, RunStringEx, CompileString, http.fetch, http.post, 104, 24, 116, 67, 68 and much more

Its best to look at the lua code and search for RunStrings or SteamIDs (and sometimes for HTTP when youre suspicious, but not all HTTP are backdoors). I use Visual Studio Code (free) for this. It has a function to search through an entire folder/addon. When you have found the backdoor, just remove the line(s) of code. Most of the time its just a single line of obfuscated code at the back of a file with a RunString in front. But keep in mind that not all RunStrings and SteamIDs are backdoors. But if it looks long and weird and you cant figure out what it does, just remove it.

Its pretty simple but easily avoidable so there is no reason to ask. And trust nobody that helps alot.

Alternatively to downloading shit that might not even be necessary, you can just run gmod open console and type out lua_find and look for specific keywords like if you plan on running a server with ULX, then some keywords would be "ULX", "Adduser", "SteamID" etc etc. nomalua can also be used but in my experience that shit just crashes the game and doesn't work.

Some other tags like HTTP, HTTPGET etc are also a good idea to look for.

If you want it to be easy and simple then go ahead and download one of the backdoor finders that are posted here but I wouldn't count on them yet alone trust.

use vscode, CTRL + SHIFT + F and search what Vectivus said. also the ulx commands if you use it
To be 100% sure just use something like this:
https://github.com/Xalalau/backdoor-shield