[PLUGIN] Kronos - Backdoor / Virus Scanner

Hello there!

About Kronos
Kronos is a plugin that scans your whole game for infections.

The current source is a bit messed up however I will rewrite it, again, for a better performance. A full scan should take like 10 seconds if the game is big.

It now scans your models (in your inventory) and plugins (installed plugins)!
Kronos currently warns the backdoor info (such as full parent, what it got detected for) in output however you can make a Folder in ServerStorage called ‘Backdoors’ to see the backdoors source.

False positives shouldn’t be happening at all.
You can take a copy here!

Stay safe!

70 Likes

Good job! Works perfectly for me.

7 Likes

Thanks !
Tomorrow I will make this better and will make a way to see if the scripts or modules are using require. I will also remove some useless things I forgot to remove (2 things to be exact).

1 Like

This seems great! You should turn this into a plugin so it would be easier than copy and pasting the code all the time.

Thanks! I will think of your idea because it would be easier for everyone, including me. I won’t have to modify the pastebin all the time like that.

Otherwise, you could have the source pulled from Pastebin then ran in a LVM. Although that would require HttpService to be enabled :confused:

Updated!
Now a plugin :stuck_out_tongue:

1 Like

Nice plugin name,

If you don’t mind me asking, how exactly does it find these backdoors?

I like. Works pretty well. I’m curious to what methods you use to locate the backdoors.

Thanks! :slight_smile:

It finds the backdoors by checking all scripts / modules if they have require(id) or getfenv()["…"] (in their source). I am trying to work on better/new ways to find them and will work on this more.

Haven’t tried the plugin yet, but does the plugin detect obfuscated scripts?

Yes!

Most of them are detected.
If you find any obfuscated script that isn’t detected and it’s a backdoor/virus, leave a link here.

Thanks!

1 Like

image

Looks like you got an extra ) here.

Yeah, currently not home so I can’t fix it.
I tried to release an update before I left the home and I couldn’t check for errors.

That’s an oof, I just reuploaded and it to work. First experience is a lot of false positives with the require checker. Other than that, looks good so far.

Thanks!

Removed the require checker for now.
Fixed the error.

1 Like

Why does this not work on tycoon game?

How does your plugin determine that my game is a tycoon?

I already edited the post. It does work on tycoon games now.

All cool, but my question is, why did you whitelist a (now deleted) backdoor with id 306895131 in your plugin here:

local WhitelistedIDs = {359948692,306895131,2373505175,2373501710}
2 Likes

I am pretty sure it was an admin script …
Not Sure tho