DiscussionEdit cached lua?

Posts 17 of 7 · Page 1 of 1
Edit cached lua?
Hey guys, been looking around here for a while, but never posted anything. I noticed that the server sends the client LUA scripts to run, and they are stored in the cahced/lua folder (as most of you probably know already). What if someone where to try to decrypt, edit, and re-encrypt some of these scripts before joining a server, to change prices of items, or w/e? Does GMOD do any sort of MD5 verification on the scripts in your cache folder? Or are these scripts even run client side.
You can't just edit the price of stuff, because that would be held server sided. Its not hard to decrypt lua files from the cache though.
Quote Originally Posted by Trollaux View Post
You can't just edit the price of stuff, because that would be held server sided. Its not hard to decrypt lua files from the cache though.
Can you edit the client side code though and then re encrypt? Does Garry do any integrity checks, like cross check MD5s of server side files and client side files?

If not, you could possibly bypass tons of anti cheats by simply embedding an aimbot, etc, into one of them?
Quote Originally Posted by Seegee View Post
Can you edit the client side code though and then re encrypt? Does Garry do any integrity checks, like cross check MD5s of server side files and client side files?

If not, you could possibly bypass tons of anti cheats by simply embedding an aimbot, etc, into one of them?
good anticheats don't run everything clientside
Quote Originally Posted by Seegee View Post
Can you edit the client side code though and then re encrypt? Does Garry do any integrity checks, like cross check MD5s of server side files and client side files?

If not, you could possibly bypass tons of anti cheats by simply embedding an aimbot, etc, into one of them?
That's an interesting question. I made a Java lua cache decrypter (open source somewhere in this section). It would be easy to make it re-encode. It's worth a shot I guess.
Quote Originally Posted by fiireoxen View Post
That's an interesting question. I made a Java lua cache decrypter (open source somewhere in this section). It would be easy to make it re-encode. It's worth a shot I guess.
iirc it does check for crc checks, theoretically you could test for collisions and have it work but that just seems like a lot of extra work
You could check when the code goes through runstring and extend the code with your aimbot.
Posts 17 of 7 · Page 1 of 1

Post a Reply

Similar Threads

Tags for this Thread

None

Need help?