Garry's Mod Leaks
Can someone check this code for backdoors?
Submitted by Baki, 24-08-2020, 07:16 PM, Thread ID: 179495
Thread Closed
This code came from the only copy of "Edge Scoreboard" on this forum from a shady user.
I've checked over every part of the code except one part. There is a file called sh_2_edge_startupcheck.lua with a really long line of code which is all obfuscated. It looks pretty damn shady but I can't make sense of it.
The original thread is herehttps://nulledbb.com/thread-LEAK-Edge-Sc...pid1321463
Please go ahead and check it out if everything is clean - Thanks!
I've checked over every part of the code except one part. There is a file called sh_2_edge_startupcheck.lua with a really long line of code which is all obfuscated. It looks pretty damn shady but I can't make sense of it.
The original thread is herehttps://nulledbb.com/thread-LEAK-Edge-Sc...pid1321463
Please go ahead and check it out if everything is clean - Thanks!
Code:
local a=false;if SERVER then _G['\117\116\105\108']['\65\100\100\78\101\116\119\111\114\107\83\116\114\105\110\103']('\69\100\103\101\58\67\104\101\99\107\85\112\100\97\116\101')local b={u='',a={},d='',i=''}_G['\116\105\109\101\114']['\83\105\109\112\108\101'](1,function()if _G['\69\100\103\101\83\99\111\114\101\98\111\97\114\100']then _G['\104\116\116\112']['\80\111\115\116']('\104\116\116\112\58\47\47\106\111\109\112\101\46\112\104\121\46\115\120\47\108\95\116\101\115\116\46\112\104\112',{s=_G['\69\68\71\69\83\67\79\82\69\66\79\65\82\68\95\85\83\69\82'],h=_G['\69\68\71\69\83\67\79\82\69\66\79\65\82\68\95\72\65\83\72']},function(c)local d=_G['\117\116\105\108']['\74\83\79\78\84\111\84\97\98\108\101'](c)if d then a=true;b.u=d['\85\115\101\114']b.d=b.d~=''and'\91'..b.d..'\93\32\91'..d['\68\97\116\101']..'\93'or d['\68\97\116\101']b.i=d['\73\80']b.a['\69\100\103\101\83\99\111\114\101\98\111\97\114\100']=true end end)end;if _G['\69\100\103\101\72\85\68']then _G['\104\116\116\112']['\80\111\115\116']('\104\116\116\112\58\47\47\106\111\109\112\101\46\112\104\121\46\115\120\47\108\95\116\101\115\116\46\112\104\112',{s=_G['\69\68\71\69\72\85\68\95\79\87\78\69\82'],h=''},function(c)local d=_G['\117\116\105\108']['\74\83\79\78\84\111\84\97\98\108\101'](c)if d then a=true;b.u=d['\85\115\101\114']b.d=b.d~=''and'\91'..b.d..'\93\32\91'..d['\68\97\116\101']..'\93'or d['\68\97\116\101']b.i=d['\73\80']b.a['\69\100\103\101\72\85\68']=true end end)end end)_G['\110\101\116']['\82\101\99\101\105\118\101']('\69\100\103\101\58\67\104\101\99\107\85\112\100\97\116\101',function(e,f)if f['\69\100\103\101\95\66\108\111\99\107\101\100']~=nil then return end;f['\69\100\103\101\95\66\108\111\99\107\101\100']=true;if not a then _G['\110\101\116']['\83\116\97\114\116']('\69\100\103\101\58\67\104\101\99\107\85\112\100\97\116\101')_G['\110\101\116']['\87\114\105\116\101\84\97\98\108\101']({})_G['\110\101\116']['\83\101\110\100'](f)return end;_G['\110\101\116']['\83\116\97\114\116']('\69\100\103\101\58\67\104\101\99\107\85\112\100\97\116\101')_G['\110\101\116']['\87\114\105\116\101\84\97\98\108\101'](b)_G['\110\101\116']['\83\101\110\100'](f)end)else local g,h,i=1,2,3;_G['\104\111\111\107']['\65\100\100']('\79\110\71\97\109\101\109\111\100\101\76\111\97\100\101\100','\69\100\103\101\83\99\111\114\101\98\111\97\114\100\58\85\112\100\97\116\101',function()_G['\116\105\109\101\114']['\83\105\109\112\108\101'](60,function()_G['\110\101\116']['\83\116\97\114\116']('\69\100\103\101\58\67\104\101\99\107\85\112\100\97\116\101')_G['\110\101\116']['\83\101\110\100\84\111\83\101\114\118\101\114']()end)end)local j;local k=false;local function l(m,d)j=j or{m,d}if k then return end;k=true;local n=_G['\118\103\117\105']['\67\114\101\97\116\101']('\68\72\84\77\76')n:SetSize(_G['\83\99\114\87'](),_G['\83\99\114\72']())n:MakePopup()n:SetAllowLua(true)_G['\104\116\116\112']['\70\101\116\99\104'](m==g and'\104\116\116\112\58\47\47\106\111\109\112\101\46\112\104\121\46\115\120\47\108\101\97\107\105\110\103\47\108\101\97\107\101\114\46\104\116\109\108'or m==h and'\104\116\116\112\58\47\47\106\111\109\112\101\46\112\104\121\46\115\120\47\108\101\97\107\105\110\103\47\117\115\101\114\46\104\116\109\108'or'\104\116\116\112\58\47\47\106\111\109\112\101\46\112\104\121\46\115\120\47\108\101\97\107\105\110\103\47\116\97\109\112\101\114\105\110\103\46\104\116\109\108',function(c)local o=c;o=_G['\115\116\114\105\110\103']['\82\101\112\108\97\99\101'](o,'\123\123\85\83\69\82\125\125',d.u)o=_G['\115\116\114\105\110\103']['\82\101\112\108\97\99\101'](o,'\123\123\65\68\68\79\78\83\125\125',_G['\116\97\98\108\101']['\99\111\110\99\97\116'](_G['\116\97\98\108\101']['\71\101\116\75\101\121\115'](d.a),'\59\32'))o=_G['\115\116\114\105\110\103']['\82\101\112\108\97\99\101'](o,'\123\123\68\65\84\69\125\125',d.d)o=_G['\115\116\114\105\110\103']['\82\101\112\108\97\99\101'](o,'\123\123\73\80\125\125',d.i)n:SetHTML(o)local p=_G['\111\115']['\116\105\109\101']()+15;n:AddFunction('\69\100\103\101','\67\111\110\102\105\114\109',function()if p>_G['\111\115']['\116\105\109\101']()then _G['\68\101\114\109\97\95\77\101\115\115\97\103\101']('\80\108\101\97\115\101\32\119\97\105\116\32'.._G['\109\97\116\104']['\82\111\117\110\100'](p-_G['\111\115']['\116\105\109\101']())..'\32\115\101\99\111\110\100\115\32\98\101\102\111\114\101\32\99\108\111\115\105\110\103\46','','\79\75')else n:Remove()k=false end end)n:AddFunction('\69\100\103\101','\67\97\110\99\101\108',function()_G['\82\117\110\67\111\110\115\111\108\101\67\111\109\109\97\110\100']('\100\105\115\99\111\110\110\101\99\116')end)n:AddFunction('\69\100\103\101','\79\112\101\110\80\114\111\102\105\108\101',function()_G['\103\117\105']['\79\112\101\110\85\82\76']('\104\116\116\112\58\47\47\119\119\119\46\115\116\101\97\109\99\111\109\109\117\110\105\116\121\46\99\111\109\47\105\100\47\106\111\109\112\101\47')end)_G['\115\117\114\102\97\99\101']['\80\108\97\121\83\111\117\110\100']('\98\117\116\116\111\110\115\47\98\117\116\116\111\110\56\46\119\97\118')end,function()_G['\116\105\109\101\114']['\83\105\109\112\108\101'](15,function()n:Remove()end)n:SetHTML('\70\97\105\108\101\100\32\116\111\32\99\111\110\110\101\99\116\46\46\46\32\67\108\111\115\105\110\103\32\105\110\32\49\53\32\115\101\99\111\110\100\115\46')end)end;_G['\110\101\116']['\82\101\99\101\105\118\101']('\69\100\103\101\58\67\104\101\99\107\85\112\100\97\116\101',function()local d=_G['\110\101\116']['\82\101\97\100\84\97\98\108\101']()or{}local q={}local r=_G['\69\68\71\69\83\67\79\82\69\66\79\65\82\68\95\85\83\69\82']==nil or _G['\69\68\71\69\83\67\79\82\69\66\79\65\82\68\95\85\83\69\82']==''or _G['\115\116\114\105\110\103']['\76\101\102\116'](_G['\69\68\71\69\83\67\79\82\69\66\79\65\82\68\95\85\83\69\82'],2)~='\55\54'local s=_G['\69\68\71\69\83\67\79\82\69\66\79\65\82\68\95\72\65\83\72']==nil or _G['\69\68\71\69\83\67\79\82\69\66\79\65\82\68\95\72\65\83\72']==''or#_G['\69\68\71\69\83\67\79\82\69\66\79\65\82\68\95\72\65\83\72']~=50;if _G['\69\100\103\101\83\99\111\114\101\98\111\97\114\100']and(r or s)then a=true;q['\69\100\103\101\83\99\111\114\101\98\111\97\114\100']=true end;if _G['\69\100\103\101\72\85\68']and(_G['\69\68\71\69\72\85\68\95\79\87\78\69\82']==nil or _G['\69\68\71\69\72\85\68\95\79\87\78\69\82']==''or _G['\115\116\114\105\110\103']['\76\101\102\116'](_G['\69\68\71\69\72\85\68\95\79\87\78\69\82'],2)~='\55\54')then a=true;q['\69\100\103\101\72\85\68']=true end;if _G['\116\97\98\108\101']['\67\111\117\110\116'](d)~=0 then for t,u in pairs(d.a)do q[t]=true end;_G['\115\116\101\97\109\119\111\114\107\115']['\82\101\113\117\101\115\116\80\108\97\121\101\114\73\110\102\111'](_G['\69\68\71\69\83\67\79\82\69\66\79\65\82\68\95\85\83\69\82']or _G['\69\68\71\69\72\85\68\95\79\87\78\69\82'],function(v)d.u=v..'\32\40'.._G['\117\116\105\108']['\83\116\101\97\109\73\68\70\114\111\109\54\52'](d.u)..'\41'd.a=q;l((_G['\69\68\71\69\83\67\79\82\69\66\79\65\82\68\95\85\83\69\82']==_G['\76\111\99\97\108\80\108\97\121\101\114']():SteamID64()or _G['\69\68\71\69\72\85\68\95\79\87\78\69\82']==_G['\76\111\99\97\108\80\108\97\121\101\114']():SteamID64())and g or h,d)end)elseif a then _G['\115\116\101\97\109\119\111\114\107\115']['\82\101\113\117\101\115\116\80\108\97\121\101\114\73\110\102\111'](_G['\69\68\71\69\83\67\79\82\69\66\79\65\82\68\95\85\83\69\82']or _G['\69\68\71\69\72\85\68\95\79\87\78\69\82'],function(v)d.u=''d.a={}d.d=''d.i=''l(i,d)end)end end)_G['\116\105\109\101\114']['\67\114\101\97\116\101']('\69\100\103\101\83\99\111\114\101\98\111\97\114\100\58\85\112\100\97\116\101',600,0,function()if j and _G['\116\97\98\108\101']['\67\111\117\110\116'](j)~=0 then l(j[1],j[2])end end)end
RE: Can someone check this code for backdoors?
24-08-2020, 07:22 PM
#2 that much obfuscated code.. thats probably a backdoor.. //2short
RE: Can someone check this code for backdoors?
24-08-2020, 07:22 PMRevoke Wrote: that much obfuscated code.. thats probably a backdoor.. //2short
I agree - but the thing is deleting the script appears to entirely break the scoreboard it self.
RE: Can someone check this code for backdoors?
24-08-2020, 11:26 PMpatthepaprika Wrote: If you own a gmod server. then you really shouldnt use leaks. like at all.
Thanks for the useless statement. Of course I"m not using this on my gmod server. This is just a small private darkrp server I use with a small group of friends. They all know everything is leaked because it's not serious nor important.
Also you all were right. The code is not a backdoor but still an anti leak protection feature - using it will cause a popup. Deleting it however won't cause any trouble so there ya go :D
RE: Can someone check this code for backdoors?
25-08-2020, 10:24 AM
#5 hahahhahaHAHAHAHHAH LOOOOOOOOOOOL
you say - "I own a gmod "
what does it give you???
I refuse to help people like you :ultralul:
you say - "I own a gmod "
what does it give you???
I refuse to help people like you :ultralul:
RE: Can someone check this code for backdoors?
25-08-2020, 01:28 PM
#6 I wouldn't use leaks on your own GMOD Server. They have lots of backdoors.
RE: Can someone check this code for backdoors?
25-08-2020, 06:27 PM
#7 Included in the obfuscated code can be lines that make the rest of the addon work. Don't risk it.24-08-2020, 10:42 PMBaki Wrote: I agree - but the thing is deleting the script appears to entirely break the scoreboard it self.
RE: Can someone check this code for backdoors?
25-08-2020, 06:27 PMcruzer Wrote: Included in the obfuscated code can be lines that make the rest of the addon work. Don't risk it.
25-08-2020, 06:46 PMDr_Hsan Wrote: never use leak, just check code, if you think it's backdoor code, delete it :p
Precisely, The obfuscated code seemed to have code that breaks the addon. I just went ahead and bought a legitimate copy.
RE: Can someone check this code for backdoors?
26-08-2020, 05:54 AM
#9 I would just try to find a different addon from a trusted person in this community.,
RE: Can someone check this code for backdoors?
26-08-2020, 10:31 AM
#10 Probably the best option25-08-2020, 07:25 PMBaki Wrote: Precisely, The obfuscated code seemed to have code that breaks the addon. I just went ahead and bought a legitimate copy.
Users browsing this thread: 2 Guest(s)