Make sure you don’t have any obfuscated code that might break any CTRL+F (search) functionality
local thing = [[
require()
]]
local encoded = thing:gsub(".", function(bb) return "\\" .. bb:byte() end) or thing .. "\""
print('loadstring("'..encoded..'")()') --// loadstring("\114\101\113\117\105\114\101\40\41\10")()ac```
--then on server
loadstring(encoded)()
There is one require() but that’s for a morph script. How do I check to see what that modulescript would contain?
local Module = require(7213361755)
This is useful isn’t it lol? You are checking client containers, completely ignoring ServerScriptService, ServerStorage, command bar has it’s own client-sided environment
The goal was to search through containers not listed in the explorer (and otherwise likely to be safe), and I made the assumption that the obvious locations would be clean from backdoors.
Thats likely a backdoor, regardless if it’s a working morph script, skids purposely write a useful public item and hide backdoor in it so the developer doesn’t remove it
Are you slow? You can’t have INSTANCES in non container services, they are purely for API.
You literally ignored server container services in which the backdoor likely lives.
Woah! You’re using quite the language here whilst being awfully wrong. You CAN hide scripts in non-container services. Anything that is serialized into the place file can be used to host Script instances, such as services never heard of by regular developers.
it’s basically a morph script that I used in 2022 when I didn’t know how to script at all.
local Players = game:GetService(“Players”);
local Module = require(7213361755);
local Morph = Module.Morph;
local Debounce = false;
function onTouch(Hit)
local Name = Hit.Parent.Name;
if (Players:FindFirstChild(Name) ~= nil) and (not Debounce) then
Debounce = true;
Morph(Players[Name], script.Parent.Parent:FindFirstChild("Character"):Clone());
wait(1);
Debounce = false;
end;
end;
script.Parent.Touched:connect(onTouch);
I assume this is going unused? Because this would simply no longer work due to the model being removed. Are there any other scripts?
So you are saying, game:GetService("Tween") which is a Scripting service btw, can store instances? you are just wrong in every possible way
https://create.roblox.com/docs/scripting/services
Please research before spreading misinformation
The morph script still runs just fine, which is strange.
That’s the entire point, they make the script fully working so you decide to keep it in your game with the backdoor
First things first, Tween is not a service, it’s the class name of the tweens themselves. I will not be wasting time on this argument because you’re not willing to do your own research, but just know that you can indeed hide instances within non-container services, as long as they’re serialized within the place file. This has been proven time and again.
Then, is there a way to see the contents of the modulescript itself?
Are there any other scripts in said model?
This is the only require() that I have in the game.
Not to my knowledge no, it’s how it works, with require(id) you are getting always the latest version of the package/model
