whats the best way to remove backdoor gmod addons

I know the danger when installing leaked addons on nulledbb or anywhere in diaper, its my fault
but haha it was kinda weird and funny at the same time, I installed an addon i dont know which exactly and then a french guy popped up in my server and tried to execute scripts (i assume) and then later i permaban him cuz I was smart enough to identify him but not smart enough to stop downloading leaked addons. Well how sad it is, he then talked in console: J'arrive ; this scared me so I stopped my server and deleted some addons.. but still no work.
This happend today btw.

Whats the best way to remove backdoor?
Should I reinstall my gmod and do everything to new? I dont care cuz I didnt start to make jobs and configure addons.

Or should I look in scripts? Thank you for any advices. And as I told my friend yesterday, I don't trust french people when it comes to leaked addons.

ps: pls just help no blame no insults, thus not good for my heart
pss: as u see on my reputation, i have got -2 rep for leaking backdoor addon, tho i was sure that there wasnt any backdoor

You can unfortunately never fully ensure that the addons you use aren't backdoored.

02-10-2019, 10:17 PM

TopHaxor Wrote: You can unfortunately never fully ensure that the addons you use aren't backdoored.

Bullshit.


Download file, CTRL + F

CompileString
string.byte / string.char
RunString
SendLua
BroadcastLua

Well written addons will not be using any of these for anything valid.

04-10-2019, 03:05 PM

Hellprotection Wrote: Backdoor won't always use these functions and most of them are obfuscated so you won't find anything. Useless method.

Obfuscated with string.char / string.byte and localized at the top of the file, therefore obvious.

If you're looking at something obfuscated, why the fuck are you leaving it there, doesn't that in itself scream backdoor? Just delete it.

It's VERY easy to ensure you have no backdoors on your server, "useless method" aka fastest.
Scaremongering lol

A good prayer, better hope they didnt use Enigma. Or you are fucked

Like everyone else said just avoid downloading leaked addons. I would just recommend reinstalling your server if you're not sure which addon is backdoored. If you're hosting a DarkRP server then you could back up the darkrpmodification folder so you don't lose that data, as I find it some of the tedious to set up jobs, shipments, door groups and all that stuff.

You could also run it thorugh a gmod website know as gvacdoor this is a way to create backdoors and find back doors in servers as it obfuscates them it self and can also un do it to find backdoors easier

Checking The code of the addon, seeing if there is any command out of place or something like <!setgroup superadmin *" or anything like that that would break your server

just use a anti-backdoor addon it do anything you want