xAPI - A Powerful Pentesting and Debugging Tool

You’re can be banned for that text, because you wrote “Learn more about exploiting”

Learn more about exploiting… to understand what exploiters can do with vulnerabilities in your game.

Also, it is not actually exploiting. It is only what is possible within Roblox’s environment, as it is 100% pure Luau and doesn’t interfere with the Roblox client in any way.

*wrote, *You

1 Like

Progress update to the drawing library, I’ve got basic line drawing and a Font drawing.
Here are the fonts its gonna use:
image
and here’s the original UNC image:
image
Although, if anyone can find a better font for Plex, reply to me! I dont really have the time to search for better fonts on roblox.

Maybe try Roboto Mono? It is the most realistic of them all.

yeah, but im already using Roboto Mono for Monospace

Maybe you can try Inconsolata for Monospace

2 Likes

hiii i found ur xAPI very useful and you it must have taken ages for you to make it congrats, however i did as it stood and wrote the require line at the top and it just prints out loaded 71 globals without giving me an ui or soemthing, is there something else i gotta do that I missed?

If you want an execution GUI, you will need to do that yourself.
xAPI only handles the scripting engine.

1 Like

Krnl executor from wish.com :sob: : :pray:

3 Likes

@SQLanguage Hi, the behavior of the xApi loadstring and just a normal script with xApi loaded is different, for example, if I do “loadstring(UNCTESTHERE)()” it doesn’t work, however if I just put the UNC test in the script it works completely fine, any ideas how I could fix that?

This seems to be an issue on the (now deprecated) loadstring engine, vLuau.
The next patch (v4.0.1a) will feature the updated engine LuauCeption.

1 Like

Nevermind, LuauCeption doesn’t work.

1 Like

:pensive: sad, is there no way I can run infinity yield or even better, dex in studio? (l know i can modify the script but that takes too long)

Sadly, you have to modify the script for IY or Dex to run on Roblox Studio.

It also doesn’t help that v3.5 - 3.7.2 has broken wrapping, meaning that even interacting with instances inside of xAPI is extremely buggy.

v4.0+ has no wrapping so that it actually does stuff instead of pretending to do stuff. This also means however that things like game.CoreGui cannot be controlled.

Got it to work but now its stuck on the logo and I cant see the textbox :pray: atleast I can execute the commands

1 Like

Version 4.0 has been released!

Changes in this update:

  • added getrunningscripts
  • added getscripthash
  • added getclipboard, setclipboard, executeclipboard
  • added emulate_call (secure_call, securecall)
  • added Hydrogen/Delta aliases (for example: hookfunction = hookfunc = replacefunction = replacefunc = …)
  • improved function decompiler
  • and more!

Go here to install v4.0 from GitHub!

2 Likes

How exactly does getclipboard work? Or any other clipboard related stuff.

basically checks if your doing control v

1 Like

Got infinity yield to work with xAPI


Here’s the source if anyone wants to use it : StudioScripts/InfinityYield.lua at main · lambarini/StudioScripts (github.com)

2 Likes

The LuauCeption VM currently does not work, I suggest you just use the compiler with a Luau vm implemented in Luau

Also, if you’re trying to implement this with the LuauCeption VM, you’re going to need to somehow bridge Roblox types and objects to the lua state