I noticed in a lot of Exploits on Roblox, they tend to use a loadstring(), which im confused on how it works, and a function of game thats cald HttpGet(), I noticed this wasn’t even documented in the API, so what is this?
8 Likes
It just loads up the txt file and runs it.
Most of them just lead to a githubrawcontent page.
1 Like
So if I was to send a string like local string = game.Workspace.Gravity = 100 and said loadstring(string), then It will do exactly that?
Why’s that?
And do people use this as a simple gateway of code? And how do they get to the github page?
Yes, most people don’t want to copy and paste a 4000 line obfuscated txt file.
2 Likes
Yes, your code is a bit weird though, it should be like this:
local string = "game.Workspace.Gravity = 100"
loadstring(string)
1 Like
Most exploit developers just paste the code to exectute in their description. To access the github raw content page, just go to the github page, and then press raw.
Yes, here’s an example script for a pretty old admin hub called Infinite Yield:
loadstring(game:HttpGet('https://raw.githubusercontent.com/EdgeIY/infiniteyield/master/source'))()
3 Likes
So would they then copy and paste that into the string and then use loadstring?
And is it possible for them to use HttpGet() to get the github page?
1 Like
And do you know why this isn’t documented on the Roblox Api or new Roblox Api?
2 Likes
Is there a Method to call functions in a load string or…
1 Like
I believe it’s deprecated.
2 Likes
Thats interesting. Why would they deprecate it, is it old?
1 Like
Yes, :GetAsync is now used in favour of it. The documentation page for it was also deleted.
4 Likes
Yea, They deprecate it, and there’s documentation of it:
(DataModel | Roblox API Reference)
But I didn’t really know how it can apply to script that injected via executor
One more thing, they replace it with DataModel:HttpGetAsync() and protected with RobloxScript security thread.
2 Likes
They use the raw content page because it solely returns the code. If they were to use the normal github or pastebin page, it would give the script the HTML code for the website.
1 Like
its now gone
1 Like