Join Date: Aug 2013
GTA Mod Security Hole.
Hello ladies and gentlemen. Today I have realised (not discovered, I'm sure all developers know of this) a very simple but potentially threatening security hole that can be introduced into any GTA mod.
The ability to download & execute a file without the user's permission or knowledge.
Here's an example to hopefully help you understand.
The script is loaded, and all seems fine. But when the user presses U an executable file is downloaded onto their pc, executed, and deleted so that it can't be traced.
As you can see, the script is loaded, executed, and then downloads "DELETEME" into the C drive.
Here's the script so you can see for yourself (Note: This one only downloads a PICTURE of GTA, rather than an executable file): https://dl.dropboxusercontent.com/u/...fernus.net.dll
Hopefully this can be detected sooner or later.
Thank you for your time.
The purpose of this thread was to make everyone aware of such dangers, I mean in no way to cause any damage, nor do I condone or motivate this kind of rubbish.
|Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)|