We all know that ClickDetector and ProximityPrompt are triggered by clicking on the object, or holding/pressing a key, and then events are fired to run functions that are connected and listening to the event.
But, fundamentally, how and in which form does Roblox send such an event happening to listeners?
If it’s possible, how would a client be able to manually trigger events with purpose through a script, manipulating network packets… etc?
Plus, is it possible for a client to intercept or view every event themselves triggering?
This would help me have a better understanding of exploiters, and seek prevention for such vulnerability!
In general, just assume that anything happening on a client can be altered and exploited. That’s why its important to enforce security on the server by verifying events and remote calls from clients.
That’s right, but what I want to know is, how they’re completed. Most exploiters run scripts at their ends - but the functions they use seem to be impossible in Roblox’s LuaU API. What I’m curious about is how could they create and manipulate custom functions that don’t exist in LuaU? Also, how does Roblox send these signals to the server to inform the server that the client has fired these events?