Exploiters crashing my servers, cause unknown

I have removed the script and I currently have placed it back, and it seems that the script that I have does help and it does apparently stop the server crashing for my games, although this might not help everyone, the script is not mine I just made slight modifications.

– Goes into ServerScriptService

	local lastchat = ""
	local repeated = 0
	local started = 0
	
	p.Chatted:connect(function(msg)
		if msg:sub(1, 2) == "/e" then return nil end
		
		if lastchat == msg then
			repeated = repeated + 1
			if (tick()-started) > 30 then
				repeated = 0
			end
		else
			lastchat = msg
			repeated = 0
			started = tick()
		end
		
		if repeated >= 4 then -- The 4 Represents the amount of times the message is repeat if you want, change it to any number you want, but I recommend 3-4.
			p:Kick("Your Message Here")
		end
	end)
end)

game.Players.PlayerAdded:connect(function(plr)
    plr.ChildAdded:connect(function(c)
        if c:IsA('LocalScript') and c.Parent == plr then
            print(plr.Name .. ' was caught exploiting, kicking...')
            plr:Kick('Kick: Do not Exploit')
        end
    end)
end)
6 Likes

Hi, I was just wondering if I was right about exploiters spamming ClickDetectors to get the server to do an excessive amount of work. Did rate-limiting the ClickDetectors fix the problem for you?

1 Like

I hadn’t been able to test this yet because none of the servers I’ve put the change into are being targeted with a fake click detector in the map and watching all click detector use yet. The person who used to lag my game probably is wanting to stay away from me now to avoid this from being patched.

1 Like

How long are you in the server before it crashes?
Also could it be a bot crashing the servers?

1 Like

Through scripts like that it’s usually like a ROBLOX error, it will be fixed once ROBLOX finds out the situation happens with ever crash script, there was the one where it would go into the CORE and delete all files roblox fixed same with the “!clean” situation so just let ROBLOX fix the situation, or if you’d want to figure it out yourself stay in-game and check the activities of the person crashing it, seeing it it’s a chat-lag or a game issue.
Edit: If it’s the chat script it’s because the admin system has a clean request the only admin to fix it is cmdR NHC and other big games use and it’s secure.

1 Like

Is hacker in any of your game servers when the servers crash?

1 Like

This issue isn’t occurring anymore and its unknown to me if it will again, however none of the replies in this topic has solved the issue or revealed any clues leading me to believe its a private crashing method without any trace and has to be patched in the engine, but again without any traces I don’t have any information to give engineers.

Remember that several avid and professional programmers have worked on this issue and have been as equally stumped as myself, having alot of experience in programming too.

4 Likes

This is a wild guess, but do you use HttpService or webhooks at all for your game? If it is clear that nothing within the game itself is causing these crashes that the exploiter can take advantage of, then it leads me to believe that your game could possibly be tied to something external from Roblox, and the exploiter found the vulnerability there.

Yes we use webhooks to communicate in-game bans, warns, and moderation history to a channel in a discord server but the client wouldn’t have access to said webhooks or their URLs, but I could always try and scramble them and get a new URL perhaps.

Yes, that might be your best bet. If you want to take the conspiracy theory route, someone who does have access to that stuff could have possibly given it to the exploiter, but I’ll give the benefit of the doubt and say you have a trustworthy team, considering that the game has amassed a fairly large player-base and this is the first time something like this has happened.

I would definitely give it a shot, although as you said, you disabled all scripts, which means the game didn’t communicate with the webhook. We obviously can’t trial and error what is happening, now that the exploiter has stopped his attacks, but if it happens again I would suggest uploading Club Iris also to a proxy-place, and see if the problem persists. If it does, then it can’t be a DDoS issue as the exploiter has managed to do it through multiple games. From there, try turning of HttpService in the game settings and check if the issue still continues.

1 Like

I did a basic google search, and on v3rmillion (the hacking forum for roblox), I found the a script called “The universal server crasher.”

Your game shows up as their “verified tested” games.
Mind trying this out?

while true do                
wait()
while true do            
wait()
for i=1, 100 do
local msg = "/e "..string.rep("do the same with this put whatever you want.   ",301056)
game:GetService("RunService").RenderStepped:Connect(function()
game:GetService("ReplicatedStorage").DefaultChatSystemChatEvents.SayMessageRequest:FireServer(msg,"All")
end)
end

So it seems as if it spams the chat logs. Wouldn’t a player running the script need to be in the server though to do this?

@Krestiin This is already proven to not be the cause and we’ve tested this exact script already. Not to mention all the servers instantaneously crash signifying a bot or distributed attack. We have countermeasures in place in the game which work to prevent this script also.

Well then, HttpService seems to be like the only reasonable culprit. Unless somehow a few teenagers managed to repeatedly infiltrate Roblox’s IP Address & servers because of the fact that they were mad from being banned, there’s probably a vulnerability with your webhook.

Getting a new URL is the best bet and from there just hope nothing else happens, if something does happen even then later down the road, it’s time to contact roblox and make it clear that there is an urgent issue with exploiters having the ability to repeatedly breach and shut down a game.

I doubt it will still happen though, you guys might have accidentally fixed the issue and didn’t notice it.

QUICK EDIT: I’m assuming you aren’t the only person with access to edit this game, since it is owned by a group. Have you had all developers also check their plugins for anything sketch?

2 Likes

Yes both me and the owner SoulJem have had a look at our plugins and didn’t see anything sus, we are the sole developers for the game which rules out any possibility of a rogue developer or human cause.

I’ll for sure take a look at the webhook URL, I appreciate the advice and I’ll keep this thread updated if anything occurs in the future.

Thank you!

2 Likes

This one isn’t the crash issue that I’ve been experiencing because I’ve modified the version of ChatService to use a differently named remoteevent than ‘SayMessageRequest’.

If the crashing result is similar as to the server being unresponsive for up to 5 minutes, that’s the “crash” issue I’m having right now.

I hear a lot of people calling this a crash just because a lot of people are thinking they’re “lagging” a lot and leaves the game regardless of how many times we tell people that it’s just you being frozen, not lagging.

I’ve dumped a few microprofillers, showing a lot of physicsStepped > worldStep being used a lot.

1 Like

This is probably not related, and I didn’t have enough time to read most of the posts here, but I found a person who spammed a long string of code into chat repeatedly in a 2-3 second timespan. It lagged the server a lot for around 10 seconds. This probably isn’t related to what is happening to the games above, but I thought I’d contribute.

The thread posted a bug fixed quite a while ago.

The bug wasn’t fixed after both patches for both RightGrip and Instance.new(“Player”) the crashing persisted after but the person causing the crashes seemed to have gotten bored with the game.

1 Like

The crash occurs though for every server, even private servers or a server that only Radiakk was in, signaling that it is a game-wide issue and they must be exploiting something that every server accesses.

1 Like