Author Topic: Exploit able to force a player to superadmin!  (Read 2854 times)

0 Members and 1 Guest are viewing this topic.

Offline Chunkminecraft

  • Newbie
  • *
  • Posts: 2
  • Karma: 0
Exploit able to force a player to superadmin!
« on: December 10, 2015, 03:03:02 AM »
So I found on a prop killing guide this link which is for the guy's script. But in his script is a way to bypass ulx to give yourself superadmin!!!

http://pastebin.com/zUbG27Ps

Hope you can fix it if I does work, I myself haven't tried.

Offline Stickly Man!

  • Ulysses Team Member
  • Hero Member
  • *****
  • Posts: 1264
  • Karma: 166
  • open(my $file, "<README") or die;
    • XGUI
Re: Exploit able to force a player to superadmin!
« Reply #1 on: December 10, 2015, 09:46:40 AM »
What a sad script. There's no danger here in regards to ULX- this script just pretends to "hack" it. Here's the relevant de-obfuscated code:

Code: [Select]
local function a5()
if ulx then
MsgC(Color(0, 255, 0, 255), "...ATTEMPTING TO BRUTEFORCE ULX\n")
timer.Simple(2, function()
MsgC(Color(0, 255, 0, 255), "...CALCULATING BRUTEFORCE ALGORITHM\n")
end)
timer.Simple(4, function()
MsgC(Color(0, 255, 0, 255), "...BYPASSING SECURITY PROTOCOLS\n")
end)
timer.Simple(6, function()
MsgC(Color(0, 255, 0, 255), "...HACKING THE MAINFRAME")
end)
timer.Simple(8, function()
MsgC(Color(0, 255, 0, 255), "...\n")
end)
timer.Simple(10, function()
MsgC(Color(0, 255, 0, 255), "...SUCCESS!\n")
end)
timer.Simple(10.5, function()
chat.AddText( Color(0, 0, 0, 255), "(Console) ",
Color(160, 200, 200, 255), "added ",
Color(80, 0, 120, 255), "You ",
Color(160, 200, 200, 255), "to group ",
Color(0, 255, 0, 255), "superadmin")
end)
else
MsgC(Color(0, 255, 0, 255), "SERVER DOESN'T HAVE ULX INSTALLED DICK HEAD\n")
end
end
concommand.Add("ms_forceulxsuper", a5)
"The stupidity of an individual on the Internet is generally matched only the by size of their ego, unless the individual in question is unaware of both." - Me

Offline Megiddo

  • Ulysses Team Member
  • Hero Member
  • *****
  • Posts: 6209
  • Karma: 394
  • Project Lead
Re: Exploit able to force a player to superadmin!
« Reply #2 on: December 10, 2015, 03:09:06 PM »
Hah, that's great. :)
Experiencing God's grace one day at a time.

Offline WispySkies

  • Full Member
  • ***
  • Posts: 144
  • Karma: 0
  • I make random commands and Lua errors.
Re: Exploit able to force a player to superadmin!
« Reply #3 on: December 10, 2015, 06:16:51 PM »
Legit. 1/10 would recommend.

Edit - Sorry 0 key is broken. Does 1o count?

Offline JamminR

  • Ulysses Team Member
  • Hero Member
  • *****
  • Posts: 8016
  • Karma: 380
  • Sertafide Ulysses Jenius
    • Team Ulysses [ULib/ULX, other fine releases]
Re: Exploit able to force a player to superadmin!
« Reply #4 on: December 10, 2015, 07:35:51 PM »
Let me guess...that pastebin was originally charged for on a pay site such as scriptfodder?
Muwhahahaha. Poor souls. I'm normally against charging out right for lua code - but I hope someone actually pays for such deserved 'hack ulx' ideology.
The price one pays for pursuing any profession or calling is an intimate knowledge of its ugly side. - James Baldwin