Garry's Mod

Can you remove backdoors from an addon?

Submitted by kvarts, , Thread ID: 268006

RE: Can you remove backdoors from an addon?

Papich
Junior Member
Level:
7
Reputation:
0
Posts:
98
Likes:
11
Credits:
257
26-07-2023, 05:26 AM
#6
27-06-2023, 11:24 PM
kvarts Wrote:
Can you remove backdoors from an addon?

Yeah, it's possible, but there's a couple of things that
1.Find that backdoor in the addon and just cut it out
2.There are backdoors that block the addon itself and encrypt part of the working code so that when you cut the malicious code the script itself is disabled.
Here are a couple of malicious scripts and their hidden files

["RunString", "HELPER_INFO", "HELPER_ISFUNC", "HELPER_READ_DATA", "HELPER_MAT", "HELPER_INFO", "CALL[",
            "STEAM_0:", "[U:", "RunningDRMe()", "DRM", "\"Run\"..\"St\"..\"ri\"..\"ng\", "File: ?.lua",
            "Annoying pirates to death", "SendLua", "CompileString", "kvac", "=_G", "(_G)", ",_G,", "_G[", "_G.", "_R[", "_R.", "]()", "0x", "\\\x", "RunStringEx",
            "CompileFile", "BroadcastLua", "setfenv"]

Format of hidden malicious files
["npc_help.lua", "grubesto.lua", "help.vtf"].
1

Users browsing this thread: 1 Guest(s)