Help.. Code Executor Plugin

Help and Feedback Scripting Support
#1

Hello DevForum
I am trying to make a code executor for myself, but I dont want to use loadstring to achieve it
Oh and this executor is a plugin,
Any idea how to run scripts in Edit Mode WITHOUT LOADSTRING?
image
I have tried to use TestService:Run(), but it always lags me out.

Thanks, In Advance

#2

I don’t think there are any alternatives for compiling lua code at all. Why are you trying to avoid loadstring anyways?

#3

It has warnings that exploiters can use it.
I dont want to endanger my game’s security

#4

There is this magical thing called the command bar. It lets you run scripts while editing or testing with a higher security level than normal scripts or localscripts. It should be at the bottom of your screen already. If it’s not, View > Command Bar

1 Like
#5

vLua 5.1 (improved VM) - Roblox is a way to run code without using loadstring nor TestService:Run()

#6

A plugin using loadstring wont affect your games security whatsoever
Even if the game itself used loadstring, you would have to do this to make it dangerous

--client
superUnsafeEvent:FireServer("workspace:ClearAllChildren()")

--server
superUnsafeEvent.OnServerEvent:Connect(function(plr,code)
    loadstring(code)()
end)
#7

so basically
roblox is overexaggerating loadstring’s potential exploit danger?

1 Like
#8

Exploiters can use loadstring no matter what, they have a way higher identity level than default roblox localscripts

#9

The warning may refer to backdoors using loadstring to run code.

2 Likes
#10

Most backdoors manually import a “loadstring” library to run code nowadays

#11

How do I use vLua, can you give me an example please?
edit: nvm i got it to work, thanks!

#12

Thanks to you guys, I have been able to create my master piece with peace of mind… (vLua)

image

#13

they can use loadString even if it’s disabled

#14

That’s quite a necrobump there. And you’re wrong, the code which compiles scripts is intentionally missing from the client, so native loadstring won’t work regardless of what hacks they are in possession of.

#15

idk as knowing a former exploiter that used Synapse he could use LoadString even if it was disabled

#16

That’s not loadstring, it’s some other form of code execution. They might call it loadstring because it does the same thing, and of course a skid wouldn’t know better.