Here is a script someone wrote that checks for back doors in plugins. I haven't tested it, but I skimmed the code and it looks safe to use.
You would need to create a filed called scan.lua and paste the below code into it. Save that file to your server under: garrysmod/lua/autorun/server
Then restart your server. When it restarts, run the following console command from your server console: braxscan
This might help.. It's not the end-all-be-all though. Even if it doesn't find something, it doesn't mean someone doesn't have something else in a plugin that you downloaded that is doing something else that this script doesn't find.
-- Not optimized at all. Use at your own risk.
BraxScan = BraxScan or {}
BraxScan.Trigger = {
-- external sources
"http\\.",
"HTTP",
"HTML",
"OpenURL",
"sound.PlayURL",
-- people don't use this for legit purposes
"CompileString",
"CompileFile",
"RunString",
"RunStringEx",
"%(_G%)",
"setmetatable",
-- databases
"sql",
"MySQLite",
"mysqloo",
"tmysql",
-- encryption
"Base64Encode",
"Base64Decode",
"CRC",
-- superiority complex
":Ban\\(",
":Kick\\(",
-- players
"player.GetByUniqueID",
"SetUserGroup",
"setroot",
"setrank",
-- workshop
"steamworks.Subscribe",
"steamworks.ViewFile",
"steamworks.OpenWorkshop",
"resource.AddWorkshop",
-- screen
"render.Capture",
"render.CapturePixels",
"render.ReadPixel",
-- configs and cheats
"hostip",
"hostname",
"server.cfg",
"autoexec.cfg",
"\\.dll",
"\\.exe",
"bind\\ ",
"connect\\ ",
"point_servercommand",
"lua_run",
"\"rcon",
"\"rcon_password",
"\"sv_password",
"\"sv_cheats"
}
BraxScan.Version = 0.2
print("? BraxScan initialized on ".. (SERVER and "server" or "client") ..". Use 'braxscan' to scan.")
local LogBuffer = "\n"
function BraxScan.Print(color, text)
if(type(color) == "table") then
MsgC(color,text.."\n")
BraxScan.LogAdd(text)
else
MsgN(color)
BraxScan.LogAdd(color)
end
end
function BraxScan.LogNew()
LogBuffer = ""
end
function BraxScan.LogAdd(text)
LogBuffer = LogBuffer .. text .. "\n"
end
function BraxScan.LogSave()
file.Write("braxscan/scan_"..os.date("%y-%m-%d_%H-%M-%S")..".txt", LogBuffer)
end
file.CreateDir("braxscan")
function BraxScan.ScanAddon(addon)
BraxScan.Print(Color(0,255,255), "? "..addon.title.." ?")
BraxScan.Print(Color(200,200,200), "File: "..addon.file)
BraxScan.Print(Color(200,200,200), "ID: "..addon.wsid)
MsgN("")
local luafiles = 0
local found = 0
Files = {}
local function Recurs(f,a)
local files, folders = file.Find(f .. "*", a)
for k,v in pairs(files) do
local s = string.Split(v,".")
if s[#s] == "dll" then
BraxScan.Print(Color(255,0,0), "\n\n!!! Found DLL file in addon "..a.." !!!\n")
end
if s[#s] == "lua" then
table.insert(Files,f..v) -- add file to list
local luafile = file.Read(f..v, "GAME")
if not luafile then print("cannot read lua file") continue end
local lines = string.Split(luafile,"\n")
if not lines then continue end
if #lines == 1 then
BraxScan.Print(Color(255,0,0), "+-- Only one line in "..f..v.." --")
BraxScan.Print(Color(0,255,0), "| 1 | "..lines[1].."\n")
found = found + 1
end
for linenr, line in pairs(lines) do
-- find trigger words
for _, w in pairs(BraxScan.Trigger) do
if string.find(line, w, 0, false) then
BraxScan.Print(Color(255,0,0), "??? Found '"..w.."' in "..f..v.." on line "..linenr.." ??")
for i=math.Clamp(linenr-3,0,9999),math.Clamp(linenr+3,0,#lines) do
if not lines[i] then continue end
BraxScan.Print(i == linenr and Color(0,255,0) or Color(255,255,0), "? "..i.." | "..lines[i])
end
BraxScan.Print(Color(255,0,0), "?????")
BraxScan.Print("\n")
found = found + 1
end
end
-- find steamids in plain text
local steamid = string.match(line, "(STEAM_[0-9]:[0-9]:[0-9]+)")
if steamid then
BraxScan.Print(Color(255,0,0), "??? Found SteamID "..steamid.." at line "..linenr.." in "..f..v.." ??")
for i=math.Clamp(linenr-3,0,9999),math.Clamp(linenr+3,0,#lines) do
BraxScan.Print(i == linenr and Color(0,255,0) or Color(255,255,0), "? "..i.." | "..lines[i])
end
BraxScan.Print(Color(255,0,0), "?????")
BraxScan.Print("\n")
found = found + 1
end
end
luafiles = luafiles + 1
end
end
for k,v in pairs(folders) do
Recurs(f..v.."/",a)
end
end
Recurs("",addon.title)
BraxScan.Print(Color(200,200,128), "? Lua files: "..luafiles)
BraxScan.Print(Color(200,200,128), "? Suspicious things: "..found)
BraxScan.Print("")
end
concommand.Add("braxscan", function(ply,com,arg)
if not arg[1] then
print("\n---------- BraxScan "..BraxScan.Version.." ----------\n")
print("To search all addons: braxscan all 1")
print("To search a specific addon: braxscan *ID* 1")
print("Last argument is whether to save log or not.")
print("\n----------------------------------")
return
end
local savelog = arg[2] == "1" and true or false
local addons = engine.GetAddons()
print("\n---------- BraxScan "..BraxScan.Version.." ----------\n")
print("Addons installed: "..#addons)
print("\nStarting search...\n")
if not BraxScan.Trigger then
MsgC(Color(255,0,0), "No definitions file, odd.\n")
return
end
if arg[1] == "all" then
BraxScan.LogNew()
for anum, addon in pairs(addons) do
BraxScan.ScanAddon(addon)
end
if savelog then BraxScan.LogSave() end
else
BraxScan.LogNew()
print("Specific search for ID "..arg[1].."...")
local found = false
for anum, addon in pairs(addons) do
if addon.wsid == arg[1] then
BraxScan.ScanAddon(addon)
found = true
break
end
end
if savelog then BraxScan.LogSave() end
if not found then MsgC(Color(255,0,0), "No addon with that ID installed.\n\n") end
end
MsgC(Color(0,255,0), "All done.")
if savelog then MsgC(Color(0,255,0), "\nLog file saved to data directory.") end
print("\n\n----------------------------------")
end)
