could be. would I be able to find this script manually though? I’ve run the antivirus in both and they found nothing.
If the other methods haven’t brought up anything, then that’s the next step. It may take a while, but it’s the best way to locate these problems.
The antivirus plugins aren’t perfect, just a nice place to start before going deeper.
That’s fair, I’ll start with the small one because it’s only got those 2 scripts, unless anyone added something without me. Also any reason why these are only rarely teleporting instead of doing it constantly? Avoiding Detection?
Possibly, yes.
I looked into the error you got earlier, it seems that service finally got it’s security raised. Looks like Roblox is beginning to work towards a solution for scripts getting inserted into these hidden classes.
Alright. I looked again and it’s teleported me to 2 different places. Some piggy game rip and some random soviet border game. Both are the same games from both. I tried to dislike and it left a like and won’t let me change it lol
Have you found anything?
If you’d like, I could look through a copy of your small place file with all your assets removed to see what I could find. Completely up to you, I understand if you’d rather not.
I haven’t. I can send you a copy though. How would you like it sent?
Whatever works for you, we should probably move to dms so we don’t clutter the thread.
Just block any teleportation to another games in settings, I’ve seen this option few days ago, it may be roblox beta option but make sure to check it!
It is a backdoor for sure.
Just make sure to delete suspicious scripts and, usually something with require(a number) is something to be concerned about.
Just use caution when searching for scripts in the toolbox. I DO NOT recommend using free modeled scripts because they could introduce a TON of backdoors into the game if the creator of the script has bad intentions.
Instead, make sure to hire a reliable scripted who you know has a good reputation to script for you.
And like @grzegoslaw said there is a feature where you can disable third party teleports. Go into Game Settings > Security > Uncheck the Third Party Teleports option like in the image below.
@FlexyNick but what if they needed a teleport for a certain game they wanted? Im currently making a horror game and I wouldn’t want third party teleports to be disabled.
Only turn it off if you don’t want people to be teleported. If you just have a straight game, you should turn it off just in case you have malicious scripts.
Is the teleporting game made by you? If so then it’s ok because it will still teleport your players.
Hey there, I made a plugin which helps scan for all scripts in a game, it can be useful for finding backdoors and hidden scripts in your places, check it out here!
Wow, thanks! I’ll check this out later! Awesome resource you provided!
May have found the source of the teleport.
Note:
Once you click “Play”, you might notice that ServerScriptService is empty, despite the fact that you might have scripts in there during a non-testing instance of Studio.
Steps
- Click “Play” or “Play Here” in Studio,
- Click “Current: Client” next to Play to test it in ~Server mode,
- Navigate to ServerScriptService
- Within MainServer, there is an array of Scripts, the most questionable one being called “Blacklist”.
- Navigate into Blacklist and you will see a range of Place Ids and UserIds
Me too, when I went to the game, it teleports me in here
When I got there I panicked and leave immediately, and I checked if my password is working, and guess what. It’s not working. I paniked and changed my password immediately, I used Forgot Password, and then changed my password. Please remove this game. I feel like they are stealing some accounts.
It’s impossible for a Roblox game to retrieve your password. Please don’t spread misleading information as it is unnecessary.
Even if this game did in fact steal your password, you shouldn’t publically post it. Instead, you can contact @Exploit_Reports.
I think z0_ru meant like one of those fake games where you have to enter your login credientials, but if you have some common sense, you won’t lose your account by that.