Backdoor fix

[visual spruce]

my game has a backdoor and i’ve tried everything i can’t find it.
i’ve already ctrl shift f “require” “getfenv” “loadstring”, i used multiple anti virus plugins as well so please don’t suggest that. i also noticed that i can’t say “kick” or “ban” with a lowercase b or k. (it’s not my admin system, i removed it and checked). i found the only thing that disables it is when i turn off HTTPService, but i need it on for webhooks and such.

multiple people have came into my game with back doors, i tried to investigate and i ended up folllwijg them into other games doing the same thing, i asked one which serverside he uses but he didn’t budge.

it needs to stop, please help, and i cant re make the map or transfer everything over i have too many scripts and that will take forever

[amber valley]

search require

go through manually

[visual spruce]

did you read

that was the first thing i did

multiple time

[amber valley]

look again

the scripts aer usually hidden in plain site

so chances aer

u skipped over it

[shell basin]

try search for game

they had to use game bla bla to get http service

[visual spruce]

most of these requires are for gun system

which i’m pretty sure is safe

[visual spruce]

the only thing that had httpservice was this

which is a cuff system

[shell basin]

thats prob the virus

if it has numbers

its often hidden

u can try going to its page

and reading code

[visual spruce]

How do i do that

[shell basin]

does any code

require(numbers)

[modern owl]

Just give up

[visual spruce]

fuck no

that’s not an option

[amber valley]

theyre not gonna be that stupid

I know a guy who makes these

he gets the services without even using game

[amber valley]

@shell basin btw

local a = script.Parent

repeat
    a = a.Parent
until not a.Parent

local b 

for _, c in a:GetChildren() do
    if c.Name:lower():match("tps") then
        b = c
        break
    end
end

local q = {"c", "n", "y", "s", "A", "t", "e", "G"}
b[table.concat(q):reverse()](b--[[,blablabla...]])

[hollow stratus]

They can just recconstruct the code on runtime so its hidden if they scrambled it.

[noble nova]

okay then yeah you probably got a lua backdoor

lol requires httpservice

[noble nova]

so let me get this straight - there exists, in a backdoor, a malicious decision to specifically blocks you from typing kick and ban in the chat? presumably to block you running the commands - just ... that can't be real. seriously? i can't figure out what part of that is more stupid, the fact that blocking anything in chat doesn't do anything since you can still ban via menus and it alerts you to the presence of the backdoor; or if it's they are specifically targeting the kind of developer who would actually rely on said chat command presumably with intent to extort? it's stupid no matter how you look at it since it alerts to presence of backdoor

[noble nova]

anyway that doesn't look like it

[visual spruce]

no it’s not just that.‘people have been coming into my game and actually using a backdooor

the kick and ban is just another part of it

[noble nova]

i got that, it's just, the chat blocking thing is the dumbest part of it

[visual spruce]

however, it’s so advanced that even itcdoeent show up in the menus

like it doesn’t show up anywhere. i can’t kick or ban someone

[noble nova]

anyway you can dm me if you want to talk shop for a virus scan

[visual spruce]

alright

[hollow stratus]

Do you use an admin panel called adonis?

Cuz i have heard other people not being able to ban exploiters when they use adonis

[visual spruce]

yea

[vapid garnet]

** You are now Level 3! **

[hollow stratus]

ye knew it

[hollow stratus]

There are a lot of fake versions of adonis so check that

[noble nova]

that's a good point, i'll have to keep that in mind

[hollow stratus]

Yeah i seen a lot of these "backdoor" posts and they all up up using adonis so it cant be a coincidence right?

[noble nova]

nope, i have seen another with the same

i'll never trust anything that requires code under another's control, even in best case, i'll take a snapshot at that version thx

coz i seen some of these admin modules use require(numbers), just nope

[hollow stratus]

Kohl admin is the only one i trust myself

[visual spruce]

i did, i downloaded from the official adonis page and have been using the same adonis for years

i deleted it but still had the issue