Just bought a script

[Zor]

Hello I just bought a custom script, is there anything that could be in the code (ip snatcher, or rat, ect) if so how could i look through the code.

[nvrsince]

If you've bought it from someone whos vouched i highly doubt it, if not you should probably ask someone like apaecc to take a look at the code when they have the time.

Edited February 9, 2018 by torvah111

[Zor]

  On 2/9/2018 at 4:02 PM, nvrsince said:

If you've bought it from someone whos vouched i highly doubt it, if not you should probably ask someone like apaecc to take a look at the code when they have the time.

Expand  

i can look through it myself im just figuring out how to open and see the actual code i dont see any

 

[tyoui]

If it's a jar you have to decompile it

[Zor]

  On 2/9/2018 at 4:12 PM, tyoui said:

If it's a jar you have to decompile it

Expand  

how would i go about doing that?

[scriptersteve]

google java decompiler

download it

open .jar in it

look at code

see if it's safe

[Zor]

  On 2/9/2018 at 4:15 PM, scriptersteve said:

google java decompiler

download it

open .jar in it

look at code

see if it's safe

Expand  

ok thanks

[Apaec]

If you're (rightfully) concerned about this stuff, i'd suggest:

• Asking for the source code, perhaps in the form of an online repo (github/gitlab/bitbucket/...)
• Perhaps build your own jars from said source code if you're confident you know how 
• Decompiling the built jars that are sent to you before running them 
  • There are plenty of free decompilers available online, or alternatively you can install IDE plugins if that is your thing.
• Running the code by a scripter on here to double check

GL!

Apa

[Signatures]

Why buy a script from somebody you dont trust in the first place? 

[Shudsy]

  On 2/9/2018 at 4:33 PM, Signatures said:

Why buy a script from somebody you dont trust in the first place? 

Expand  

cheap

[Zor]

  On 2/9/2018 at 4:28 PM, Apaec said:

If you're (rightfully) concerned about this stuff, i'd suggest:

• Asking for the source code, perhaps in the form of an online repo (github/gitlab/bitbucket/...)
• Perhaps build your own jars from said source code if you're confident you know how 
• Decompiling the built jars that are sent to you before running them 
  • There are plenty of free decompilers available online, or alternatively you can install IDE plugins if that is your thing.
• Running the code by a scripter on here to double check

GL!

Apa

Expand  

Thanks so much for the advice I will decompile and look through myself

 

  On 2/9/2018 at 4:33 PM, Signatures said:

Why buy a script from somebody you dont trust in the first place? 

Expand  

Cheap yes, I do trust him but I would still like to be safe, and I’m just interested In what the code looks like

[Deceiver]

  On 2/9/2018 at 7:08 PM, Zor said:

Thanks so much for the advice I will decompile and look through myself

 

Cheap yes, I do trust him but I would still like to be safe, and I’m just interested In what the code looks like

Expand  

http://www.javadecompilers.com/

upload the jar, and select procyon decompiler

 

code might be obfuscated tho

 

[dreameo]

Don't buy a script unless source is being provided. 

[Zor]

I asked him for source he said he’d send it to me. I should’ve started there 

[Maldesto]

  On 2/9/2018 at 4:07 PM, Zor said:

i can look through it myself im just figuring out how to open and see the actual code i dont see any

 

Expand  

 

  On 2/9/2018 at 4:14 PM, Zor said:

how would i go about doing that?

Expand  

I would ask someone else to help if you didn't know how to decompile it, i doubt you can check for malicious content.