How to detect backdoors?

Thanks to all, who gave tips how to spot backdoors in addons!

if you are trying to test for backdoors, just go into your config files, and search for them. It's kind of hard, so if you don't know what your doing, i'm not gonna give a whole explination

Well, read the whole code if you know how of course.

if your unsure when getting a leak check the comments chances are somebody will have already looked at it all and will comment if it is backdoored

14-07-2018, 09:42 PM

kasselschaden Wrote: Basicly,
- Read and understand all code you run on your servers.
- Do NOT put workshop add-ons on a server directly, unpack and check them instead
- Override RunString/RunStringEx/CompileString to prevent running remote HTTP payloads.
- maps may have backdoors
- encrypted and/or obfuscated code is encrypted and/or obfuscated for a reason, a very bad reason.

For leaks, begin with searching for encrypted code patterns, like _G[, http, RunString(Ex), CompileString, \12\34\56 (regex \\\d+)

also a lot of backdoor examples: https://github.com/RyanJGray/Backdoor_Busting_2015

p.s. and if you spotted a backdoor in a leak - please share your findings!

I didnt even know maps had backboors.. wow.