Can I obfuscate Plugin Code?

[Judgy_Oreo (DisplayName)]

@mc3334

Abstract: I distribute my plugin as an RBXM file ever since roblox updated this dumb guideline, and just check an endpoint in that RBXM to see if the current user is whitelisted to use the plugin.

That actually sounds very similar to a paid Model ownership system called “Parcel”:

Code deobfuscation

Hello! I want deobfuscate this code:

Obfuscated Code

local d=string.byte;local f=string.char;local c=string.sub;local s=table.concat;local r=math.ldexp;local R=getfenv or function()return _ENV end;local l=setmetatable;local h=select;local i=unpack;local V=tonumber;local function B(d)local e,n,t="","",{}local o=256;local a={}for l=0,o-1 do a[l]=f(l)end;local l=1;local function i()local e=V(c(d,l,l),36)l=l+1;local n=V(c(d,l,l+e-1),36)l=l+e;return n end;e=f(i())t[1]=e;while l&lt…

Where’s my 10K

[mc3334]

Showing me you can constant dump some other obfuscated code does not mean you can crack my plugin, lets use some common sense. Heres the file, ill happily give the 10k if you can crack it and use it for free.

EasyLS_PR_Distributable (1).rbxm (427.7 KB)

[Judgy_Oreo (DisplayName)]

Hi, sorry for the delay, I was busy with other stuff.

Anyway, after wasting a bunch of time going a much slower route by accident, I’ve managed to get it to trigger a :UserOwnsGamePassAsync for this Pass:

Not In Use - Roblox

, a StudioService:GetUserId, a message saying “Retrieved EZLS whitelist from gamepass”, and right now I seem to have somehow gotten it to spit out some of the original code as it errors?

So, I guess Luraph doesn’t get rid of variable names? It’s also called DockWidgetPluginGuiInfo.new twice, both with different settings, and called plugin:CreateToolbar. I’m not entirely sure how far I am in the Plugin’s initialization, but I would think I’m post-authentication if it’s trying to create the GUIs? Even if I’m not, I feel like I’m pretty close.

Oh, I’m just looking at the logs and it looks like I found a HttpService:RequestAsync call to the endpoint “https://api.onpointrblx.com/vendr/v2/licences/getlicence/roblox/USER_ID/RH9gSQf0ed/EasyLS Plugin”

, and the warning “EasyLS_VER_B0.7.420” in the Output. I haven’t gotten the actual plugin to work yet though, I haven’t even been running it as a plugin.

UPDATE An hour later, I got a different log, that being “Retrieved EZLS whitelist from vendr”, and it started doing a ton of UI stuff, like connecting to .MouseButton1Click and setting a version textlabel, as well as requireing a “KeyframeCompiler”, so I think the actual plugin has attempted to load. I think I’ll end off here for now though.

To clarify, I haven’t gotten it to actually work yet. From my previous experience with plugins, I think it’ll be very tedious to constantly get an error and have to re-load the plugin, because I’m playing with a blackbox. It’s still obfuscated, it’s just that I’ve tricked the ownership verification part.