GMod: Security has been breached

[Karl]

This is a quote from an announcement made to the Steam group.

Hey,

It has come to our attention that our Garry's Mod server's security has been breached by a hacker, and as such proceeded with adding other admins (most likely his friends). After going through some logs, we've discovered that these hackers has been banning quite a few people (and the number isn't low either). If you have been banned by abusive or unknown administrators, please post a reply to this announcement, including your Steam ID and we'll have you unbanned.

Sorry for the inconvenience, but the hackers did some damage and we're doing our best to get these issues resolved.

Thanks.

Comments can be viewed here.

Admins: You hereby have the permission to unban players that have been banned during this episode - you do not need consult either me or Dave.

[Karl]

[08:48:25](ADMIN) moose slayed moose
[08:48:25]moose suicided!
[08:48:27][FXP]Kccool2: Or any other prop you want
[08:48:30][FXP]Kccool2: Please stop that
[08:48:45][FXP]Kccool2: What's the point, is your tiny penis getting that much bigger from slaying us?
[08:48:49]Client "[JokerIce]->JunkZ<-Rollin'Bitch" connected (78.82.206.7:27005).
[08:48:58][G3R] Schnitzeltier<STEAM_0:1:15512969> spawned model models/props_c17/gravestone002a.mdl
[08:49:00](ADMIN) moose added user [G3R] Schnitzeltier to group "admin"
[08:49:06][FXP]Kccool2: Then get a simple wire explosiv
[08:49:06][G3R] Schnitzeltier<STEAM_0:1:15512969> spawned model models/props_c17/gravestone002a.mdl
[08:49:14]moose: I hacked this server and I am giving you admin
[08:49:38][G3R] Schnitzeltier: lolz
[08:49:39]xCore: where can i download PHX3?
[08:49:41][FXP]Kccool2: How in gods name do you hack a server? lol
[08:49:49]moose: Anything else you want me to do
[08:49:55][G3R] Schnitzeltier: garrysmod.org
[08:49:57][FXP]Kccool2: No thankyou
[08:49:57]moose: I have complete control over the server
[08:50:19][G3R] Schnitzeltier: huge base of shit
[08:50:21]moose: You guys wanna be superadmins?
[08:50:28][G3R] Schnitzeltier<STEAM_0:1:15512969> spawned model models/props_junk/garbage_glassbottle002a.mdl
[08:51:46][FXP]Kccool2: Omg, they don't have the wire screens...
[08:51:54][FXP]Kccool2: Or I don;'t seem to for some reason
[08:52:07][G3R] Schnitzeltier<STEAM_0:1:15512969> spawned model models/props_interiors/refrigeratordoor01a.mdl
[08:52:10][G3R] Schnitzeltier<STEAM_0:1:15512969> spawned model models/props_interiors/refrigeratordoor01a.mdl
[08:52:38]Dropped "moose" from server

HAI GAIS, U GAIS WANNA BE SUPAR ADMINS CUS I HAKED DIS SERVAR? :D:D:D

[Ocfos88]

Moose is STOOPID! STOOPID! STOOPID!

[Karl]

Look what I found!

for _,v in pairs( player.GetAll() ) do
if v and v:IsValid() and v:IsPlayer() then
v:SendLua([[hook.Add("HUDPaint","SDFDSFSDF",function() surface.SetDrawColor(math.random(255),math.random(255),math.random(255),255) surface.DrawRect(0,0,ScrW(),ScrH()) end)]])
v:SendLua([[vgui.Create("HTML"):OpenURL("http://www.youtube.com/watch?v=S3zCewONLls")]])
//v:SetUserGroup( "admin" )
//v:Ban(0, v:Nick()..", YOU GOT FUCKING PWNT!")
//v:Kick(v:Nick()..", YOU GOT FUCKING PWNT!")
end
end

[darkmessenger84]

For fucks sake

[Karl]

Everything should be ok now.

* Updated Wire + PHX.
* Fixed Wire Thrusters that were broken due to a script conflict.
* Lowered in-game permissions for the superadmin group.
* Removed suspicious scripts.

Please report suspicious behaviour!

[darkmessenger84]

Everything should be ok now.

* Updated Wire + PHX.
* Fixed Wire Thrusters that were broken due to a script conflict.
* Lowered in-game permissions for the superadmin group.
* Removed suspicious scripts.

Please report suspicious behaviour!

Good job Karl, keep up the good work and we will too. I have a keen eye for suspicious activity.

[Conor]

Fucking retards.
I hate hackers.

[Gobo]

Interesting.

Any idea how they managed to upload lua scripts to the server?

[Jamza]

Interesting.

Any idea how they managed to upload lua scripts to the server?

Probably with an exploit, theres several that would allow lua uploads that are around at the moment and that garry has yet to patch.

Last edited by Jamza on 03 Dec 2009, 19:53, edited 1 time in total.

[Karl]

Interesting.

Any idea how they managed to upload lua scripts to the server?

Probably with an exploit, theres server that would allow lua uploads that are around at the moment and that garry has yet to patch.

This.

[Super]

Sucks, ah well its sorted now.

[Goose]

moose eh? sounds like an evil twin of mine or something.

[ManIAc]

moose eh? sounds like an evil twin of mine or something.

Or just another one of your accounts... HAAAAXXX!

[Ocfos88]

moose eh? sounds like an evil twin of mine or something.

TIME PARDOX | XODRAP EMIT