Exploits in a few scripts

Last read Never

9 Jun 2018, 06:56 UTC #1

Hey there, I am BluetonicBeats, one of the server owners of Fun-Server.de . Yesterday we had someone online who was able to use Exploits of some GMODSTORE addons.

We managed to get the Lua File, he used but not the Exploits itself.

As we read through some of the lines we could manage to find out a few script’s who have Exploits inside.

We don’t want to support the bad guys, so that we won’t upload the file to prevent others from writing hacks.

We would like to only support dev’s with giving them access to the file.

We would recommend the following devs to contact us ASAP as they have possible exploits inside their scripts.

Code Blue //Edited as I missed that one script wasn't made by Crap-Head

Others who may have developed printers or atm addons as we didn’t managed to find the correct scripts.

9 Jun 2018, 10:12 UTC #2

just report the scripts

oh wait

9 Jun 2018, 10:37 UTC #3

@Lapin , I wont report anything as I want to get it fixed for anyone and not to blame or ruin any dev as it isn't their fault if there are some guys who use their functions to crash or manipulate something.

9 Jun 2018, 10:42 UTC #4

Someone had found a flaw with VCMod security a month ago aswel (spammed a few net messages with useless data). Patched it, done. This is the best course of actions for other addons aswel.

Send a PM to each developer.

9 Jun 2018, 10:44 UTC #5

@freemmaann , There is one in your VCMOD. Will send you a PM

9 Jun 2018, 10:50 UTC #6

ByBluetonicBeatsat 9th of June 2018 10:44:59

@freemmaann , There is one in your VCMOD. Will send you a PM

Thank you, that exploit you've mentioned is one of the ones that were patched. People just need to redownload the addon.

9 Jun 2018, 11:02 UTC #7

Doesn't work on our server. @freemmaann already fixed it. Please just update VCMOD

9 Jun 2018, 11:12 UTC #8

Although a lot of people may look down on you for "exposing addons", I personally think what you're doing is actually good, taking the time to notify the creators and not release the exploit on some site. Good shit dude <3

9 Jun 2018, 11:16 UTC #9

@Owain you've got a message on discord.

9 Jun 2018, 11:18 UTC #10

Yeah, he has helped me aswel, even tho it was already patched.

Its a good point that people need to update their auto updater to not be vulnerable to this.

Managed to get the auto updater to update itself (a bit). http://vcmod.org/changelog/main/

Thanks.

9 Jun 2018, 12:32 UTC #11

Whats the issue? Feel free to pm the script.

There was an exploit that allowed you to do the same as VC mod where you could spam a bit of data, that and the auth table was wrong in bitminers, both were patched a week ago, people just need to update.