WhitexHat
(endriu)
January 13, 2019, 5:49pm
#1
Kronos is a plugin that scans your game for backdoors or viruses.
This plugin is outdated. False positives are possible - especially admin scripts.
If you want to quarantine backdoors, make a folder in ServerStorage called Backdoors .
Link for Kronos .
This project has been discontinued and will no longer be worked on any soon.
148 Likes
TheFuzi
(TheFuzi)
January 13, 2019, 8:29pm
#2
Good job! Works perfectly for me.
11 Likes
WhitexHat
(endriu)
January 13, 2019, 9:39pm
#3
Thanks !
Tomorrow I will make this better and will make a way to see if the scripts or modules are using require. I will also remove some useless things I forgot to remove (2 things to be exact).
2 Likes
This seems great! You should turn this into a plugin so it would be easier than copy and pasting the code all the time.
1 Like
WhitexHat
(endriu)
January 13, 2019, 9:52pm
#5
Thanks! I will think of your idea because it would be easier for everyone, including me. I won’t have to modify the pastebin all the time like that.
3 Likes
Otherwise, you could have the source pulled from Pastebin then ran in a LVM. Although that would require HttpService to be enabled
3 Likes
Nice plugin name,
If you don’t mind me asking, how exactly does it find these backdoors?
2 Likes
I like. Works pretty well. I’m curious to what methods you use to locate the backdoors.
1 Like
WhitexHat
(endriu)
January 14, 2019, 4:26pm
#11
Thanks!
It finds the backdoors by checking all scripts / modules if they have require(id) or getfenv()[“…”] (in their source). I am trying to work on better/new ways to find them and will work on this more.
2 Likes
Haven’t tried the plugin yet, but does the plugin detect obfuscated scripts?
1 Like
WhitexHat
(endriu)
January 14, 2019, 5:57pm
#13
Yes!
Most of them are detected.
If you find any obfuscated script that isn’t detected and it’s a backdoor/virus, leave a link here.
Thanks!
2 Likes
t1dtony
(tony)
January 14, 2019, 8:28pm
#14
Looks like you got an extra ) here.
3 Likes
WhitexHat
(endriu)
January 14, 2019, 8:36pm
#15
Yeah, currently not home so I can’t fix it.
I tried to release an update before I left the home and I couldn’t check for errors.
1 Like
t1dtony
(tony)
January 14, 2019, 8:37pm
#16
That’s an oof, I just reuploaded and it to work. First experience is a lot of false positives with the require checker. Other than that, looks good so far.
2 Likes
WhitexHat
(endriu)
January 15, 2019, 6:34am
#17
Thanks!
Removed the require checker for now.
Fixed the error.
4 Likes
Why does this not work on tycoon game?
How does your plugin determine that my game is a tycoon?
WhitexHat
(endriu)
January 17, 2019, 8:18pm
#19
I already edited the post. It does work on tycoon games now.
Amiaa16
(Amia)
January 17, 2019, 9:49pm
#20
All cool, but my question is, why did you whitelist a (now deleted) backdoor with id 306895131
in your plugin here:
local WhitelistedIDs = {359948692,306895131,2373505175,2373501710}
7 Likes
WhitexHat
(endriu)
January 17, 2019, 10:01pm
#21
I am pretty sure it was an admin script …
Not Sure tho
4 Likes