Hello, recently I’ve seen a lot of backdoor, exploit, and hack related posts on the DevForum. A couple of people asked me to release my method of removing backdoors because I usually respond to these posts with a help offering, and fix their games. I’m gonna list steps, strings, and ways to prevent getting your game backdoored.
The main question of all is : “What is a backdoor?”
A backdoor is something that exploiters use to gain server-sided (fully-replicated) access to your games. It is impossible to read Server-Sided scripts with a backdoor however exploiters use backdoors to ruin your game with things such as “Troll Maps”, “Grab Knifes”, “SS Guis”, and so on. Everyone can see replicated items that were added using that backdoor. This is why backdooring is such a problem.
I’m going to provide some steps below.
Step 1 : Check your plugins!
The second most common way to get your game backdoored is by downloading fake or botted plugins. There are 3 indicators to seeing if a plugin is fake
1 : Their Username & Join Date
2 : The amount of sales will look like a crazy amount, but look at the creation date.
3 : The creation date.
Below is a fake plugin.
Step 2 : Free models are placeholders, not for publishing!
The biggest way games gets viruses are through free models. Fake models will bot themselves usually with highly spammed names or real names but tons of sales. There are 2 steps to checking for free models that are fake and filled with backdoors
Step 1 : Check the creator! Usually the creator has a bot-like name or is a new user.
Step 2 : Look for scripts in the model after insertion and remove them! (this doesn’t apply for tools.)
Hopefully this removes those pesky backdoors. Make sure not to use free models for anything other than placeholders and make sure to replace them with your own!
Step 3 : Use CTRL + Shift + F to check for these strings!
Here I’m going to list a bunch of strings to check for using the script finder tool. Always check where the Module ID leads to if you can find the ID of the module causing the backdoor.
List of strings : math. , require , luraph, synapse, string. , I , loadstring, getfenv , setfenv, IsStudio
Those strings are some of the most used strings with backdoors.
Here’s what that palm tree model lead to. There will usually be a “:run” type of function after it in order to activate the model.
Hopefully this solved your virus-related problems. I wish you all a backdoor-free day!
I just wanted to add, backdoors aren’t the same thing as server-side access remotes. Those have the same base functionality, but they are caused by different properties.
~ Sudden_Demise
.