Tired of remote-spoofers? Lets fix it!

[memeason]

@VSCPlays

also i have seen your bad history in the forum, I even made a reply that tells the bad history

cuh chill out on the calling out that shi not kool.

On a serious note tho, I’m intrestred into why would an exploiter modify an argument if they can just :FireServer("money", 1000) (sorry for my old fashioned scripting thinking)

[VSCPlays]

@memeason

cuh chill out on the calling out that shi not kool.

Bro that was back when NotBugle was actually considered a bad guy

[Nightfall_Intuition]

It’s a nice idea, but the client/exploiter can undo all of your work here. You’ll find sanity checks to be one of the most effective security measures to prevent remote spoofing.

[nvthane (snapnat)]

Genuinely curious… why would an exploiter use hookmetamethod instead of firing the found RemoteEvent through RSPY which is much more simpler? Is this topic really made to make you look smart? Honesty is appreciated.

In addition, if it’s on client, then it’s dead. If you detect instantly on ReplicatedFirst whether UWP or a client that’s likely to be for bad use, then you won’t have to do all this. An exploiter could also just bypass these.

I do want to say that the efforts are more for background checks that delays the exploiters and is better than doing nothing, but I think this way is a waste of performance.

@NotBugle

LocalArgumentCopys[ID] = {
			[1] = ID, -- ... We use an ID system to not mitch match arguments.
			[2] = "SPRINT_ADD", -- ... This is the PacketType, you can change how this works on the server.
			[3] = 32, -- ... This is the PacketValie, this value is just there walkspeed.
		}

Why would a sane developer allow clients to adjust the speed on its own?

This does not fully prevent as said in the introduction and is too broad. What are you really achieving in your simulation if these factors and outcomes are really likely? (Watch the edits turn into 3 or more)

[memeason]

Alright, but who is NotBungle?

[itsDenDenn (Den)]

@NotBugle

Imagine if I sent a message to the game server pretending to be the game creator or an admin. I could potentially trick the server into doing things it shouldn’t, like giving me special privileges or items.

This cannot happen if you have the right checks on the server, when you fire a RemoteEvent or RemoteFunction the first argument on the server is the player that fired it, all you have to do is check if this player is an admin or not.

Next time please don’t use ChatGPT to generate text for you because it’s not always right.

[Sinkl0z (sinkZ)]

This is bypassable in so many different ways it’s incredible

Setupvalue of the Guid generated string (should be a upvalue), Hookfunction the CreateId function to return whatever, Hooking GenGuid w mt make it return whatever.