Detect every function hooked by exploiters (metamethod hooks included) with this one simple trick!

Resources Community Resources
#78

Script-Ware has no known detections at the moment.

1 Like
#79

haven’t tested this but i am pretty sure this will find sw, at least the mac version

#80

Fluxus (well, Fluxus M) also has no known detections.

It’s had a long history of sloppy mistakes but it’s pretty solid now.

#81

Fluxus M hasn’t existed for almost a year at this point.

I have been able to get confirmation that the successor to Fluxus M (developed by the same person) is vulnerable to this.

#82

SWM uses the exact same code as Fluxus M. It even has the exact same FLUXUS_LOADED variable. It’s the same codebase just rebranded.

The Fluxus M product isn’t being sold anymore, but Fluxus M lives on as SWM.

Prove it.

2 Likes
#83

why your anti-exploit sucks

(no offense of course I’m just linking a post that tells you what you’re doing wrong)

#84

Detecting client-side exploits in and of itself is not doing something wrong. It’s wrong when you use this as your only or main security measure. It’s not wrong to use this in addition to a more robust system to make it extremely annoying for noobs to mess around with your game.

3 Likes
#85

This currently has no chance for false positives, and only uses the Roblox kick popup. While this check can be bypassed by someone who knows what they are doing, the bypass will have to be game specific since there are multiple ways to implement this detection. Most exploiters don’t know how to script, so if your game is relatively small they will have no easy way to bypass this.

While most exploits have worked around this check by now, some haven’t and you can detect them by placing this in a LocalScript in ReplicatedFirst.

#86

Read the entire post I linked properly before responding.

#87

someone knows if this is still working?

#88

I have put this onto toolbox for ppl to easily grab later on and not have to look for this specific post, The code is still the same so the credit to fate is still there and I have credited OP for making the post.

1 Like
#89

It got patched after a few days. Detections like this should stay private and not released to the public. Its just a waste if you release it to the public since Exploits will patch it as soon as they can (Which sadly doesn’t take long at all)

6 Likes
#92

Because Roblox has changed the lua stack limit from 16384 to 20000, __index hooks will no longer be detected by this piece of code. For any future visitors, please replace the integer 16379 with 19995.

Unless you’re a devforum moderator, do not mention to me that the last post was over a year ago. I do not care; this is still relevant today.

12 Likes
#93

wait so it still works??? i would have thought that by now it would be patched

1 Like
#94

Not one exploit on the market as of now is capable and smart enough to know how to patch it out. When this detection was made, there was a whole different market back then

#95

then why are people doubting it???

#96

What exactly do you mean doubting it

#97

if you read up a bit people are saying you probably shouldn’t use this

#98

They aren’t very smart people to criticize it but if you don’t want to use it because it takes up a bit of performance (even though you can throttle the intervals by using modulation) then it’s your loss. Also those comments are 2 years old

#99

This doesn’t make sense when you remember Luau is open source, you don’t need documentation if you know how it works. This isn’t some kind of guess.