Hi,
This may not fit in Scripting Support but since I’m asking for help in finding bugs, I guess it fits here? This may seem like a release, but it is not and this project is far from ready for release.
I am working on a project that sandboxes a Luau function and logs most of its important instructions, which can be useful in reverse engineering and trying to see what obfuscated scripts do. So far, it logs:
- Changes to properties in any Instance that exists within
game - Attempts to read any property in any Instance
- Any function calls that the sandboxed function makes, including calls to global functions within the global environment (There is an option to exclude some global function calls from being logged due to techniques that script obfuscators use that gets these global functions to be called more than 10 thousand times and with massive arguments being passed into them) and logs any calls to functions within Instances, like
game:GetService("LinkingService")
So far, this has entirely reversed a malicious Luau script that tries to achieve Remote Code Execution in Roblox Executors and is obfuscated with “the best script obfuscator” aka Luraph. This script has fully revealed how the malicious script does what it does.
But, this project is new and has a ton of bugs. Since I am recreating the behaviour of Instances and making Instance proxies, it is prone to errors such as Expected Instance, got userdata when calling functions and many more. If any of you have any random massive Luau scripts (It can be non obfuscated or obfuscated, but preferably obfuscated scripts. Would also help if you have the source code of the obfuscated script!), it would greatly contribute to the development of this project as if anything goes wrong during sandboxing the script you have provided, the stability of this sandbox will be improved as more bugs get fixed!
Thank you so much!