EVIL AXE Studios – Free Lua Obfuscation Tool

EVIL AXE Studios – Free Lua Obfuscation Tool

EVIL AXE Studios is proud to announce our 100% FREE Lua Obfuscation Tool.

If you’re developing a game and want to protect your Lua scripts from being copied, injected, or stolen, give our obfuscator a try:

https://dev.eaxe.net/

From this Original Code

To this without using Beautify

And with Beautify enabled, it looks like this

Built for Security & Trust,
We know developers are cautious when it comes to online obfuscators. That’s why we’ve built our service with complete transparency.

How It Works,
EVIL AXE Obfuscator uses the Prometheus Lua Obfuscation Engine—an industry-standard, open-source project trusted by thousands of developers worldwide.

This is not a backdoored script, malware, or code-stealing service.

Why You Can Trust EVIL AXE,
Open-Source Engine – Powered by the publicly available Prometheus obfuscation engine.,
No Hidden Code – We never inject backdoors, loggers, or malicious code into your scripts.,
Developer-Focused – Built by developers who understand the importance of protecting your work.,
Private Dashboard – Your projects, scripts, and obfuscated files are private and accessible only by you.,
Transparent Process – Obfuscation is performed server-side using the official Prometheus CLI.,

Why Choose EVIL AXE?,
Unlike many sketchy online obfuscators that inject malware or secretly collect your code, EVIL AXE Studios is a legitimate game development studio committed to providing a professional and trustworthy service.

Our platform also includes:

Optional Salt Encryption for additional protection,
Code History & Vault to manage your previous obfuscations.,
A clean, transparent workflow with no hidden surprises.,

Try It Free
You can test the obfuscator without creating an account.

Creating a free account unlocks advanced features such as:

Salt Protection,
Code Vault & History,
Project Management,
Additional security features

Over the past few weeks, I’ve tested several online Lua obfuscation tools, both free and paid. One thing I quickly noticed is that many paid services only allow a single free obfuscation before requiring a subscription or payment.

I also tested a number of free web-based obfuscators. During my testing, I discovered that some of these tools were injecting their own code into the obfuscated output.

For example, one tool inserted product IDs into my scripts. While testing my game with a friend, we started receiving random in-game purchase prompts encouraging us to buy products such as a flying carpet and other developer items that had absolutely nothing to do with my game.

At first, I couldn’t work out what was causing it.

Everything was working perfectly while I was testing in demo mode. However, after obfuscating my main game scripts and publishing the update, both my friend and I began seeing these unexpected purchase pop-ups. None of these products were part of my original game.

As soon as I reverted to my original, unobfuscated scripts and republished the game, the pop-ups disappeared completely.

This was a huge red flag.

While free tools may seem tempting, especially those shared by other developers, you should always be extremely careful about what you’re publishing. You should never blindly trust an obfuscator with your game’s source code without knowing exactly what it’s doing. A malicious or poorly written obfuscator could potentially damage your game’s reputation, frustrate your players, and even cost you part of your player base.

After spending far too much time downloading and testing tools that either weren’t suitable or injected unwanted code, I decided to build my own solution instead.

My project is based on the well-known Prometheus Lua Obfuscator, which is open source and fully available to inspect:

Because it’s open source, anyone can review exactly how it works, which gives me far more confidence than using closed-source online obfuscators.

Rather than simply packaging Prometheus, I’ve completely redesigned and modernised the user interface to make it much cleaner and easier to use. I’ve also started adding a number of new features.

Some of the improvements include:

  • A modern, more user-friendly interface.
  • Code beautification, allowing formatted and readable output instead of one extremely long line of code.
  • Additional quality-of-life features that make working with Lua scripts much easier.

The user panel is still under active development, and I have plenty more features planned before it’s finished.

The main website is now ready for public testing, and I’d really appreciate any feedback, suggestions, or feature requests you may have.

Thanks for taking the time to read this! For any suggestions or feedback, please respond here or PM me.

Thank you and enjoy

:rocket: Major System Update – v1.3.0 Live!

We are excited to announce that the system has been fully updated and stabilized!

What’s New & Improved:

  • Full Modern Lua Compatibility: Since Prometheus lacked support for the latest Lua versions, we completely rewrote the engine from scratch to ensure seamless compatibility with modern Lua syntax.
  • Automatic Smart Configuration: The system now automatically detects code complexity and dynamically applies optimal settings, guaranteeing 100% execution stability without extra setup.
  • Custom Salt Protection: You can now inject custom characters as an added salt layer, giving your code an extra tier of security directly from the Obfuscate tab.
  • Dashboard & Engine Overhaul: The entire user dashboard has been revamped with a cleaner look, expanded statistics tracking, reliable avatar saving, and smart file naming.
  • Bug Fixes: A massive batch of minor bugs and engine issues have been resolved across the platform.

Please give the new update a test and share your feedback or report any edge-case issues in our feedback channel. Thank you for your continued support!

3 Likes

how much does obfuscating your code affact performance?

I tested and did not notice any decrease in performance at all.

This was tested with a maximum of 5 people on the server, and it was smooth.

If you do see any decrease in performance, please let me know so I can investigate further.

Because for extra security, I added salt which randomly changes with each obfuscation, so it’s never the same. In the user panel I’m currently working on, there will be options to add your own salt for extra security.

I hope this helps

Thanks

1 Like

Why would you ever do that?
Using it in a game is just deoptimization, and the client only receives bytecode anyway, so it’s already not quite original code
Using it in plugins on the marketplace is prohibited
What valuable thing in a code would you have to obfuscate anyway?
If someone actually steals your work, it’s better to use proper ways to take it down rather than obfuscation cope and shooting your own and user’s foot

2 Likes

Hey, I appreciate the feedback! I totally get where you’re coming from, and you raise some fair points, but I want to clarify the intent behind offering this tool.

Nobody is forcing anyone to use obfuscation it’s completely optional. Obfuscation isn’t a silver bullet, and it definitely isn’t necessary for every project, but it serves a specific purpose for developers who want an extra layer of defense for their intellectual property.

To address a few of your points:

  • Bytecode & Decompilation: While Roblox clients receive bytecode, modern decompilers (like Luau decompilers built into popular exploit executors) easily convert bytecode back into readable Luau code. For developers distributing server-side scripts, external modules, white-label systems, or custom commission work, obfuscation deters low-effort script stealing and reverse-engineering.

  • Performance Impact: Yes, aggressive obfuscation can add overhead, which is why developers shouldn’t blindly obfuscate performance-critical loops. However, for licensing checks, proprietary algorithms, or specific sensitive logic, the performance trade-off is often negligible compared to the added protection.

  • Marketplace & Plugins: You’re right that obfuscated code is prohibited on the official Roblox Plugin Marketplace. This tool isn’t meant for plugin marketplace submissions; it’s designed for developers selling or sharing assets privately, managing off-platform commissions, or protecting custom backend logic.

  • DMCA vs. Prevention: DMCA and legal takedowns work after your intellectual property has already leaked or been stolen and taking down re-uploaded assets on offshore or exploit sites can be a massive headache. Obfuscation acts as a preventative gatekeeper so you don’t end up playing whack-a-mole with leaks in the first place.

At the end of the day, it’s just another tool in the developer toolkit. If you don’t need it or prefer to rely purely on DMCA process, that’s totally valid! We built this for the developers who do want an extra layer of protection without worrying about shady, backdoored third-party obfuscators.

I hope this explains bit better

Thank you

2 Likes

If it’s open-source, wouldn’t the exploiters be able to see how it works and deobfuscate it? (Correct me if i’m wrong. I don’t know anything about obfuscation).

Website is down right now, I can’t test it.

It’s not that easy, because the way the promtheus obfuscation works, it generates encrypted variables and constants that only get decrypted at runtime, still never showing the original script, knowing how it does it helps a little but not by very much.

3 Likes

If your logged in it completely fails.

Should be working fine now thank you :slightly_smiling_face:

If you’re logged in it fails to obfuscate code.

I did say I’m currently updating the member panel and it’s under construction. I’m trying to get this done ASAP; only the front end is working.

Sorry for any inconvenience caused.

It will be resolved next few days :blush:

1 Like

Hi, I have been working hard, and the user panel is mostly finished now. The obfuscator should work with all the settings. Some side navigation might not function still, but the main panel in the user dashboard should be fully working. If you need further help please let me know..

DevTools Console Output all requests of every type fail, I notice you are using an API, maybe add an API key system and an API docs to obfuscate stuff.

I tried to use ur support ticket system, got locked out bc 2fa is bugged :confused:

also the profile picture is bugged

The only thing I fixed in the profile is the obfuscator; all other navigation is currently still under construction. Only obfuscation works there; all the rest are being worked on.

you’re violating the Prometheus license with your vibe-coded website

additionally, the site itself isn’t working for me - seems the API is running the prometheus CLI on a temporary file, but the machine hosting it doesn’t have lua installed (??)

1 Like

As mentioned before, the dashboard is not finished. Once it is finished, correct attribution will be added. Regarding the error, it will be fixed over the weekend. I was working on some functions, and this has caused issues with obfuscators.

Thanks for your feedback.


Looking promising.