Exploit able to shutdown server immediately upon connecting, without a character

Our game is getting hit aswell, is the user in question joining on what appears to be the same account in multiple servers?

The guy crashing our servers is this guy right here, even though we permanently banned him:
image

3 Likes

Yeah, the person is able to join and crash regardless of any checks or moderation systems that kick them upon joining. So we end up getting the same account going around to all of the servers and crashing them.

4 Likes

I’ve outlined symptoms similar to this situation in this post here, however I feel as though the exact situation is unrelated. Crashing exploits like this one are virtually undetectable and you can’t even connect long enough to analyze the server or client.

Just like you’ve stated in your OP, his character doesn’t even load in and immediately crashes the server. This is the exact symptoms we’re experiencing and he can join regardless of ban status. Let me try and hard ban his account and see if it does anything.

2 Likes

Update:

I was able to track him joining but immediately as it showed up that he joined it crashed, despite the fact that it immediately kicks him from the game:

image

This is the code I used to kick him and it does nothing but it still does detect him joining…
image

Note: He is permanently banned on my admin system as well.

6 Likes

8 posts were merged out

This is not ROBLOXCRITICAL according to the guidelines.

Please discuss here if you think otherwise: Broaden the spectrum of ROBLOXCRITICAL posts

I looked at the exploiter’s bio and it says ‘Cheat Engine can do godly things,’ which i’m assuming is a hint that he is using an external program like Cheat Engine, just a guess though

3 Likes

I went ahead and disabled every single server script and also cleared my ReplicatedStorage (deleted all of my remote events) and the crashing still persists, leading me to believe this is in fact a deeper engine issue rather than a game specific issue.

I can’t stay connected long enough to even log what happens when he joins as it just immediately crashes with no trace. The only running script is the ChatServiceRunner, which even then has no interruption or spike in activity before or after crashing.

Edit: Could this possibly be abuse of the default chat scripts? I’ve seen a few scripts abusing game.Players:Chat() before with extremely long messages and it’s been proven to take down servers but again, ChatServiceRunner has no spikes in activity which is strange… this could be an unrelated issue.

11 Likes

Yeah I tried logging .Chatted (game.Players:Chat() triggers it) in my OP screenshot of the server output and you can’t see anything. I also looked at the ChatServiceRunner activity after the crash and didn’t see a spike.

5 Likes

The exploiter in question is targeting multiple games at once and completely crashing all of their servers. Club Iris (my game), the OP’s game, Custom Duels, and Group Recruiting Plaza are all confirmed to be experiencing total crashes. Relatively popular games with big and small server sizes which rules out server size as a potential cause.

Proof that once again, he appears to be using one account or identical accounts crashing all my servers:

Attempting to join any of the games listed above immediately freezes on the loading screen and doesn’t let you connect:

Custom duels closed their place but experienced the same symptoms upon joining as these two games had. Freezing on the loading screen and not able to join any servers.

9 Likes

This looks like a big issue. If roblox events can’t detect him fast I don’t know what will.

3 Likes

Set up a lobby that handles joining. Kick them from that server if they’re banned before redirecting them to another server via the universe system. They’ll end up crashing the other server instead of the actual one. That way they can’t do a crash on join unless they crashed on join for the other server.
Temporary fix, but it should stop on-join crashing if they are banned.

10 Likes

This is possibly some next level exploit that can be extremely malicious. Bug bounty might be needed to check what the exploiter is abusing in order to crash the servers.

7 Likes

The root cause here seems to be RCC crashing and thus kicking players, which implies logs are being sent to Roblox each time this happens. The more they do this, the easier it is for Roblox to track down the issue. For now, this is internal behavior that doesnt seem preventable.

I’ve been having problems with my game - Getting this result:

I figured ROBLOX is having a major engine bug currently seeing I went to other games like British Army’s “Army Simulator” and “Fishing Simulator” and they’ve had the same exact sort of crashed.

So I’m not sure if this relates to this, but if that’s going on along with a major engine bug - some serious fixes need to be worked on immediately.

This is my game - we usually have 60-100 players in game consistently, now we’re seeing a lot less with all of these frequent crashes.

1 Like

The exploiter doesn’t appear to be crashing your game. You’ll notice a purple guy repeatedly joining your servers and crashing them rather than them crashing on their own.

Well then there appears to be a huge bug with ROBLOX servers crashing in general. Been going on for the past couple hours. I submitted an “Engine Bug” report - but as usual, my post has not been approved.

I also reported a bubble chat bug where people’s bubble chat will often glitch and not disappear, that was also not approved.

Not to bash on community moderators / volunteers, but I really wish they’d be more on top of approving these post’s to help get them solved much faster.

1 Like

I can confirm this method works and matches our use case almost exactly. How do we alert Roblox to this issue? This does appear to be the script the user is using.

1 Like

There’s no other way to alert ROBLOX besides via email support, however support isn’t fast on responding back via Email, so nothing we can do about it…

1 Like

What about the Exploit Reports group? should I send a ticket in with this code snippet?

No, I don’t trust those type of groups even if they claim they’re “Anti-Exploit”, most models on ROBLOX are virus or fake anti exploits anyways. However, you can go to the ROBLOX Unofficial server that’s big, and probably get help from there onward??