Remote Security [Other than Checks]

[Amiaa16 (Amia)]

@Sebastian_Wilson

local LogService = game:GetService("LogService") LogService.MessageOut:connect(function(String,Type)
    if Type == Enum.MessageType.MessageOutput and string.find(string.lower(String),"remotespy") ~= nil then
        --kick crash or whatever floats your boat when remote spy is found
    end
end)

This won’t work for obvious reasons. Never have I seen a single remotespy print "remotespy" in the output lol

@Sebastian_Wilson

Well the most common remote spy script prints “remotespy” when it finds a remote being called you can always change the check to find like remote names being printed

Some remotespys have custom guis where they display the remote info and the arguments.

@GreekForge

Local script named “Player Set Up”:

Naming things as plainly as possible to confuse any snoopers

Won’t help you. An exploiter can print the list of all running localscripts ans modules to their output along with their locations, then filter out the common ones like LocalSound. Alternatively they can use an explorer called Dex to look for localscripts, or even save all localscripts at once and browse them in studio.

@GreekForge

--scripted by GreekForge
local access = game.ReplicatedStorage.Remotes.ClientAccess --most important this is a RemoteFunction
local coms = game.ReplicatedStorage.Remotes.ClientEvent
local plr = game.Players.LocalPlayer
local char = workspace:WaitForChild(plr.Name)
local hum = char:WaitForChild("Humanoid")
local noUse = { --for the rest of my script
	Enum.HumanoidStateType.Flying,
	Enum.HumanoidStateType.None,
	Enum.HumanoidStateType.PlatformStanding,
	Enum.HumanoidStateType.Swimming,
	}


local function oof()
	return true --this can be anything, just return something
end

access.OnClientInvoke = oof
--insert the rest of what you need

An exploiter can check what your callback returns and replace it with their own callback.

@GreekForge

Of course, if you really want to obfuscation on client scripts can severely impair any exploiter.

It will greatly impair the performance and FPS aswell.

You shouldn’t primarily focus on a clientsided anti exploit. Instead add some server checks. A remote debounce, a “verification” that the player isn’t afk auto farming, like telling them to stop clicking for a second if they click too fast, etc.

[GreekForge]

My main goal here is to remove any script kiddy who thinks they’re pretty cool. And I do have a server anti-exploit.

@Amiaa16

It will greatly impair the performance and FPS aswell.

I’ve never heard this, can you provide me some evidence?

[Amiaa16 (Amia)]

@GreekForge

I’ve never heard this, can you provide me some evidence?

Due to how VM obfuscators work, if you’re for instance calling an obfuscated function rapidly, your fps can drop from 60 to 3 (personal experience). Knowing that you can guess that it can drop the performance even if you don’t do what I just said.

[pp2w]

Like this idea of telling them to stop clicking, will probably put that into practice. Thanks!