search

Vurv78 / Autorun-rs

Modern scripthook with lua execution and filesteal. Replacement for gluasteal and most lua executors
Apache License 2.0
104 stars 11 forks source link

Exploit #57

Closed ugskv closed 2 years ago

ugskv commented 2 years ago

When using the second argument in (RunString, RunStringEx, CompileString) filesteal allows you to create files in any directory on disk

Example

lua_run RunString([[print("wtf")]], "../../autorun.lua")
lua_run RunString([[print("wtf")]], "../../../../../../Program Files (x86)/Steam/steamapps/common/GarrysMod/garrysmod/lua/autorun/autorun.lua")
Vurv78 commented 2 years ago

Thought I dealt with this in 1.1 at least, god rust paths are annoying to sandbox