Client Core Patches

Resources Community Resources
#1

I heard there is an Exploit that players can fake other players, and mess up the admin system for there game or group.

Roblox needs to patch it now this is way too far for it not to be patched.

You will need the following

  • Script in the server script storage
  • A Discord Webhook

How to make discord webhooks: https://support.discord.com/hc/en-us/articles/228383668-Intro-to-Webhooks
Once you put that script in the ServerScriptStorage, here’s the code

--MUST HAVE HTTP SERVICE ENABLED!
local Configuration = {
	DiscordWebhook_Id = "", -- Your discord webhook id.
}

local HttpService = game:GetService('HttpService')
local PlayerService = game:GetService('Players')


local function SendData(ExploiterUserId,ExploiterName,ExploitUsed)
	local Data = {
		["embeds"] = {{
			["description"] =  "**__Exploiter Information__**\nUserId: "..ExploiterUserId.."\nUsername: "..ExploiterName.."\n**__Exploit Information__**\nExploit Used: "..ExploitUsed,
      		["color"] = 14357010,
      		["author"] = {
        		["name"] = "AE - Exploit Found"
      		},
      		["footer"] = {
       		 	["text"] = game.Name.." - Anti Exploit System"
      		},
      		["timestamp"] = os.date()
  			["avatar_url"] "https://t7.rbxcdn.com/326a40e527e065680ef9727b8db631f1"
		}}
	}
	HttpService:PostAsync(Configuration.DiscordWebhook_Id,HttpService:JSONEncode(Data))
end


PlayerService.PlayerAdded:Connect(function(Player)
	local UserData
	local GotData,Error = pcall(function()
		UserData = HttpService:JSONDecode(HttpService:GetAsync('https://api.rprxy.xyz/users/'..Player.UserId))
	end)
	if GotData and UserData then
		local RealId = UserData.Id
		local RealName = UserData.Username
		if Player.UserId ~= RealId then
			SendData(RealId,RealName,'Changed there UserId')
			Player:Kick('why are you always crying why are you always crying why are you always crying')
		elseif Player.Name ~= RealName then
			SendData(RealId,RealName,'Changed there Username')
			Player:Kick('why are you always trying to bully my game')
		elseif Player.DisplayName ~= RealName then
			SendData(RealId,RealName,'Changed there DisplayName')
			Player:Kick('never going to give you up never going to give you do never going to turn around and diserve you never going to let you cry never say goodbye never going to turn around and hurt you')
		elseif Player.CharacterAppearanceId ~= RealId then
			SendData(RealId,RealName,'Changed there DisplayName')
			Player:Kick('do u know what 9-2 is or -9-2*2x1*/9')
		end
	end
end)

Also, Since Roblox does not let us use there API for some reason we have to use another website.

3 Likes
#2

Roblox patched this exploit yesterday.

4 Likes
#3

If exploiters bypass it this is good

#4

What I mean this is good, the script I provided to patch this.

#5

That check will never really do anything as you are already querying the API with the UserId that the player joined with.

#6

I love the little kick messages lol

#8
#9