so i had [URL="http://steamcommunity.com/profiles/76561198030113356/"]Various [ Mother Of Lua ][/URL] add me on steam asking how to exploit the net library.
here is the transcript:
[QUOTE]
Never tell your password to anyone.
Wednesday, June 18, 2014
21:46 - Gambit: if you are going to ask me for lua help im going to laugh at you
16:21 - Various [ Mother Of Lua ] is now Online.
16:33 - Gambit: did you need help with something?
16:33 - Various [ Mother Of Lua ]: Yes
16:33 - Various [ Mother Of Lua ]: are you good with lua?
16:33 - Gambit: maybe
16:33 - Gambit: what do you need help with
16:33 - Various [ Mother Of Lua ]: dont tell me maybe
16:34 - Various [ Mother Of Lua ]: I need help with exploting some net.Start willing to pay 5-10$ for the Help
16:35 - Gambit: what sort of exploiting
16:36 - Gambit: are you there?
16:36 - Various [ Mother Of Lua ]: Yep
16:36 - Various [ Mother Of Lua ]: sec
16:36 - Various [ Mother Of Lua ]: I will show you
16:36 - Gambit: no worries
16:37 - Various [ Mother Of Lua ]: [url]http://pastebin.com/raw.php?i=0RSZFW8H[/url]
16:37 - Various [ Mother Of Lua ]: I think about fining my self with like -999999
16:38 - Various [ Mother Of Lua ]: the farest i could do is name not found error
16:38 - Gambit: so is this for some sort of role play?
16:39 - Various [ Mother Of Lua ]: DarkRP
16:39 - Gambit: i see
16:39 - Gambit: so did someone recommend me or something?
16:39 - Various [ Mother Of Lua ]: Facepunch
16:39 - Various [ Mother Of Lua ]: Saw you answering something
16:40 - Various [ Mother Of Lua ]: so i thought maybe you know something
16:40 - Gambit: well ill see what i can do
16:40 - Various [ Mother Of Lua ]: okay
16:41 - Various [ Mother Of Lua ]: you cant test it on any sever
16:41 - Various [ Mother Of Lua ]: you know that right?
16:41 - Gambit: what do you mean
16:46 - Gambit: ??
16:46 - Various [ Mother Of Lua ]: wow
16:46 - Various [ Mother Of Lua ]: are you sure you know what you doing?
16:46 - Gambit: well i dont know what you mean
16:46 - Gambit: you said i cant test it
16:46 - Various [ Mother Of Lua ]: Because it dosnt have
16:46 - Various [ Mother Of Lua ]: the ADDON
16:46 - Various [ Mother Of Lua ]: OFCUORSE
16:46 - Various [ Mother Of Lua ]: OFCOURSE
16:46 - Gambit: well what addon do i need so i can test it
16:47 - Various [ Mother Of Lua ]: leave it.
16:47 - Various [ Mother Of Lua ]: If you knew how to exploit net.starts you could do it without testing.
16:48 - Gambit: oh :(
[/QUOTE]
in case the paste bin link is down its mirrored [URL="http://gambit.net.au/code.lua"]here[/URL]
im not sure if this is an actual exploit or if this person doesnt know what exploit means but this is just a heads up.
[QUOTE=G4MB!T;45153311]so i had [URL="http://steamcommunity.com/profiles/76561198030113356/"]Various [ Mother Of Lua ][/URL] add me on steam asking how to exploit the net library.
here is the transcript:
in case the paste bin link is down its mirrored [URL="http://gambit.net.au/code.lua"]here[/URL]
im not sure if this is an actual exploit or if this person doesnt know what exploit means but this is just a heads up.[/QUOTE]
Why didn't you just help the guy out. Everyone knows the net.start exploit, and you don't even need the addon.
Is it bad I don't know the exploit?
[QUOTE=adamdburton;45153336]Why didn't you just help the guy out. Everyone knows the net.start exploit, and you don't even need the addon.[/QUOTE]
oh :(
[QUOTE=Nookyava;45153346]Is it bad I don't know the exploit?[/QUOTE]
It's just running a net message on the client that isn't protected serverside that allows you to do whatever you want.
Happened before with servers who didn't know why they had random admins that they never promoted which was being done with a RunString code, it's nothing new.
Aaaaaaaah. It's that exploit. Got it.
i stll have no idea what this exploit is
[QUOTE=G4MB!T;45153458]i stll have no idea what this exploit is[/QUOTE]
I have no idea what the serverside code looks like but I'm assuming you can do this to give yourself money.
[lua]
local moneyToGiveMe = 99999999
local sMoneyToGiveMe = tostring(moneyToGiveMe)
net.Start("RP_Fine_Player")
net.WriteString(LocalPlayer():Nick())
net.WriteString(sMoneyToGiveMe)
net.WriteDouble(-moneyToGiveMe)
net.WriteString(sMoneyToGiveMe)
net.SendToServer()
[/lua]
This is what the person you were talking to was asking about.
hmm well security isnt my specialty but on the server wouldnt it just check the amount?
[QUOTE=G4MB!T;45153514]hmm well security isnt my specialty but on the server wouldnt it just check the amount?[/QUOTE]
I have no idea, I'm not the creator of the addon. If the person who made it didn't know what they were doing, or if they made it like that on purpose, then I don't see why they would bother checking the amount. It's not the first time something like this has been released anyway. This script is actually from [URL="http://pastebin.com/i5EJBRR1"]2013[/URL].
Sorry, you need to Log In to post a reply to this thread.
