Exploiter inserted gear into my game, exploded characters with it

Help and Feedback Scripting Support
#22

I have these plugins:

image
image1797×113 23.4 KB

I have searched about them and have never been able to conclude that some of them don’t leave a backdoor

#23

There is only 3 developers, 2 of them who do not script and the last being me. I am the only one that has the full knowledge of how to insert gears. The people who exploited my game (who I know the usernames of) said they used RoXploit, which I found out was a website that sells exploits.

#24

no, RoXploit is an exploiting gui, and old classic used by many exploiters, developed by TeamKrystal I think.

image

#25

Please tell me your game is filtering enabled.

#26

You can’t have a game that isn’t filteringenabled anymore unless it is 13+, I’m not sure why people ask this question.

4 Likes
#27

could you send me the usernames? if you dont want to leak them, send them in DMs.

#28

Sure, roxxanemilan and headinthec1ouds. There is multiple pictures on social media of them with the gear, and multiple threats from their accounts to “bomb” the event.

#29

Can you link the game please this happened?

#30
#31

well if you got enought evidence, you could hit roblox up with an email and get all of those accounts involved banned and locked.

and, there is a possibillity that one of the other developers are assisting with ruining the event, basically by giving the exploiters a backdoor gui.

#32 
for i,v in pairs(game:GetDescendants()) do
    if not v.RobloxLocked and v:IsA("LuaSourceContainer") and v.ClassName ~= "LocalScript" then
        print(v:GetFullName(),"-",v.ClassName)
    end
end

Run this in the studio command bar and look for anything suspicious, i.e. a script under JointsService.

1 Like
#33

commandbar doesn’t have high enough contextlevel

2 Likes
#34

Weird, I could’ve sword I used RobloxLocked with it in the past. I guess wrap it in a pcall then:

for i,v in pairs(game:GetDescendants()) do
    pcall(function()
        if v:IsA("LuaSourceContainer") and v.ClassName ~= "LocalScript" then
            print(v:GetFullName(),"-",v.ClassName)
        end
    end)
end
#35

This isn’t an option. All games are filtering enabled.

All games are filtering enabled. Being a “13+ game” isn’t a thing.

1 Like
#36

Take a picture of who created the plugins. You might be using a fake copied plugin that looks identical to the original but contains malicious code. If your plugins are fine, it’s a backdoor in your game.

#37

I found out that this was actually a result of admin abuse, yet it was never logged. Thanks for the help however, will take all of this into account for my newer games.

#38

This should go without saying, but give your partners only the privileges they need to do their jobs, regardless of how close or trustworthy they are to you. This may mean revoking privileges from some friends, but it’s a necessary evil in reducing the chances of this happening again.

For security reasons, I also suggest you either try to disable all the features in that admin you don’t need for your game, or find a less complex admin. I understand you might not have the time to make your own admin system, so this is the best I can suggest. Heck, how are Adonis donor features useful?

I’m sorry your event got messed up. I hope things go better from this point on. :frowning:

#39

Make sure to mark a post as a solution.