vurv78 / safety

Secure your gmod experience

Safety

This is a plugin for Autorun-rs to make your experience safer by preventing crashes and disallowing common malicious behaviors like file spam and deletion.

☑️ Features

• ⚙️ Easy to configure (See plugin.toml)
• 📈 Blacklisting net messages, concommands
  • +voicerecord, etc
• 📁 Restricting access to filesystem
• 💣 Patches >15 easy ways to crash your game
  • Issues pulled straight from the garrysmod-issues facepunch won't fix.
• 🔍 Being mostly undetectable
  • Haven't tested against specific anticheats (Make an issue!).
• 📋 HTTP Whitelist
  • Avoid leaking your IP thanks to shitty addons like PAC and Streamcore.

🤔 Usage

This is meant to be used with Autorun's plugin system.
Drag this repo (as a folder) into your C:/Users/<NAME>/autorun/plugins folder!

Minimum Supported Garry's Mod Version

Current minimum supported version is whichever removed debug.getregistry(), as the detours for that have now been removed. If you keep up to date, you shouldn't have to worry about this.

safety's Issues

Hands are hidden

I tested outside of the video if safety was the issue (it is). I was using autorun that was built locally from the 1.0.0 release, and the safety source as of 499abe1. https://youtu.be/ODcz6wOpyN8

jit safety

Need to make sure the jit library can't be used to detect our detours.

debug.getregistry() is no longer usable, Safety broken

Garry's Mod received an update a few months ago which made debug.getregistry() return nothing. This breaks the entirety of Safety.

Fixed issues

Hall of Fame of issues patched here that Facepunch finally fixed
Checkmark is if they've been removed from the repo (Won't be removed for a while til the updates are common and rolled out)

• (crash) tostring on invalid CSoundPatch
• (security) +voicerecord is blocked

Add an option to disable executing on a specifc gamemode or ip.

Latest works fine in sandbox, tried to hop in a zombie survival server and COMPLETELY busted the game as result as this blocked the base gamemode.

I wouldn't doubt this may happen for other gamemodes, too? I also trust some servers so this should probably be a neccessary option.

cam detour has a nil value

url whitelist

Hook Detours

Concommand Detours

Compat with creating custom concommands and hiding them

Make this modular

Autorun-rs 1.2.0-beta finally made Autorun.require able to include files local to the currently running one. So this can be split up into several files rather than a single one.

Hashing Detours

crc, sha256, sha1 & md5 get laggy after ~10 million chars input.

Finish File Detours

Missing a detour for
file.Find
file.Time
Probably others

Safety has something that detours the base gamemode, DarkRP was the example in this.

Safety breaks E2 tabs because of metatables

DHTML Detours

DHTML can be used for websockets, to lag your game, etc..

Implement checktype

A lot of functions use LUA->Check<Type> / luaL_check<type> which raise errors when you give the incorrect type to a function. Our detours don't do that.

Need to make sure it doesn't mess up the stack trace as well

(debug.)setmetatable detours aren't 1:1 with vanilla

They don't return the first arg in case of it being a protected metatable. Could be detected by just trying to set _G's metatable to something and comparing the result to nil

Just make the function not return log (nil) and instead return the first arg.