I want a Local Script to fire a RemoteEvent via ServerStorage because I heard that exploiters can access and fire events in ReplicatedStorage. Is there anyway to do that?
Basically no. Clients can’t see remotes inside ServerStorage.
The problem is that anything you can do with a local script, exploiters can do also. You can’t prevent this. It’s basically because they can run whatever code they want on their computer which allows them to run custom local scripts pretty much. The location of the remote event doesn’t matter because it’s used for the client to talk to the server. If the client can talk to the server at all, it can be abused. Your best bet is to put in some checks on the server to make sure the data you are receiving makes sense (like if they claimed to hit something with a sword, check that they were actually near it on the server before accepting it).
basically exploiters get to write their own local scripts to put in your game and delete or use yours
ServerStorage and ServerScriptService are only for the server, and cannot be seen by players.
In fact, these two services are completely invisible in the client’s side, because they are not replicated, and shouldn’t be.
You should use RemoteEvents for ReplicatedStorage, but add guard clauses to prevent malicious arguments being sent over to the server.