[CRITICAL EXPLOIT] Server Crasher

This is a Roblox vulnerability. Basically, a discord bot is being used and there is a slash command that you use. Afterwards, after five seconds, the bot says resolving and basically crashes the server afterwards.
What you do is you enter either a player’s username or a place ID and job ID.
My friend has access to the tool and we can recreate and game if Roblox staff needs it.

There is randomly 2 server code errors when this happens, either Server Shutdown or the Server Disconnected error

A private message is associated with this bug report

15 Likes

I don’t think this is an engine bug, probably a targeted DOS attack. This has been reported like 50 times lol

1 Like

its most likely not a ddos because the raknet bandwith goes from like possible number to —> 0 with a ddos but with this it just has a number and instantly shuts down the server rather than disconnecting

4 Likes

this is just a raknet crasher bro

1 Like

doesnt matter what it is, dont you want it fixed?

1 Like

nah there are a ton of server crashers that already exist, if this were to be fixed then 5 more would arise

1 Like

i know, but this crashes the server literally, it shutdowns it, i have more methods that i hope are gonna get patched

1 Like

He doesn’t want it fixed because he’s the one behind the discord bot

4 Likes

There used to be a way to crash servers using certain combinations of avatar head and layered clothing, may be what they are using

1 Like

They were saying a while ago on another post about this it’s somehow related to the MessengingService API, it seams plausible because one person that allegedly created the exploit did say it was because the bot created requests to a very valid endpoint, that Roblox wouldn’t be able to intercept it, apparently you can crash a server with just one (malformed) packet

That being said, me and a few other people in another thread think it’s related to this crashing method with UDMUX a while back:

bingo, its not related to that post but it sends a malformed packet

2 Likes

thats old, its been patched a long time ago

1 Like

I’m dealing with the same issue. Boosting this post for visibility.
Screenshots:

Typically, our Memory Used is around 3,000 MB - 4,000 MB when the server is fully loaded

1 Like

Duplicate of Games are susceptible to repeated DDoS attacks, resulting in >86% playercount decrease in my game .