Lets say theres a hacker and he backdoored a game
would he be able to use MessagingService to do stuff to all servers?
Depends. It’s certainly been done before by users that Roblox won’t allow me to label.
3 Likes
Assuming we are talking about a full backdoor, it would allow full access to any server-side function, meaning that they could run anything, including MessagingService. This depends on what code the backdoor contains though.
4 Likes
If the exploiter’s backdoor is able to execute server-sided scripts - he could potentially execute every piece of code that you would be able to. And yes this included APIs and services such as MessagingService HttpService and more (obviously depending whether you enabled them in the game’s security options). But you could simply avoid this by not inserting any scripts from people you don’t trust, free-models from the toolbox and such. Also if you’re hiring developers to help you with your game - make sure you review their code to make sure they don’t use this for malicious purposes. Hope this helps!
4 Likes
To backdoor a game there has to be a vulnerability to backdoor in the first place, if you have a vulnerability like a remote that can somehow call server functions to use messagingservice then your problem is how you wrote your code without any sanity checks, not exploiters. There’s no feasible way for this to be possible without leaving some vulnerability in your code.
1 Like