Error 501

[toxic skiff]

Hi guys, one of my ‘Developers’ in a game added something that, when he was playtesting, showed an Error 501 message telling him to run a command, and he ‘accidentally’ ran it. What should I do with the game? Is this dangerous outside the game, like is my account at risk, or only inside it? I should mention that I reverted the game to a version from a few hours before, but I just want to know if there’s any risk of getting infected by this kind of thing.

[quasi musk]

Usually it's a backdoor script

[toxic skiff]

I've already seen that, I just want to know if it does anything sketchy outside Roblox Studio or with my Roblox account."

[quasi musk]

I don’t think your roblox account is at risk. Honestly, I don’t know much about this, but usually it just involves sending data or giving users special permissions. You should ask @dusty bloom - maybe he knows more about this. (Sorry for the ping)

[toxic skiff]

I don't know why but it was more advanced than the ones on google or youtube

[north wedge]

** You are now Level 1! **

[toxic skiff]

That's why I was asking this

[stuck prawn]

There's nothing a Roblox script can do to compromise your account or anything

The MOST that can possibly happen is that your game gets stolen bc the malicious script sends your game data to some server or that they give themselves special permissions in your game like admin

[quasi musk]

Can you check #1466825997688246418 please

[stuck prawn]

But it can't spread outside the game if that's what you're asking

[toxic skiff]

Yeah that's what I was asking, but if I revert the game version, would it be better?

[stuck prawn]

Well yeah unless you're fine with having a virus

You could also try to find every single one of the malicious scripts

But judging off your post neither you nor your developer have the coding experience

[toxic skiff]

yeah mostly

I've just reverted the game a couple of version behind just to make sure there isn't anything with that related

Do you know how to deobfuscate? If so I could give you the thingy the script had if you would like

Maybe we can look much more into it

[rough maple]

it was this error?

[toxic skiff]

yeah but a bit more complex

it had a different gui

[rough maple]

probably still do the same thing

[quasi musk]

Try looking for scripts named "Core"

[toxic skiff]

I've already got rid of it

[rough maple]

mostly of them

just do this

to hide a module and a script

[toxic skiff]

yeah that was the exact thing it had

[rough maple]

yea

at the end of this

there is a module

obfuscated

and another script

obfuscated too

they will just execute another and another modules

they are backdoors for incase your game get famous

i dont think there is a way to know what they exactly do

[toxic skiff]

I've look in the comments in the asset id, someone deobfuscate it and was spamming his weebook or something

maybe if someone knows how to do it we could see what's inside really

[quasi musk]

You can deobfuscate them, but I doubt he have enough knowledge to do this

[rough maple]

probably to get the games information

[rough maple]

yea but i also think it is not worth the time

just remove it

also

for some reason

i saw that almost any model that has emoji on it is a virus

[toxic skiff]

Yeah well thanks for helping me

[rough maple]

found this

[toxic skiff]

and that does

[north wedge]

** You are now Level 2! **

[rough maple]

gets the game info

server id

player count

so incase the game get famous they can execute more malicious code on the server side

and this one too

[toxic skiff]

so it's better to just make a new one?

[rough maple]

if you deleted it

there is no problem

everything happens with 1 script

the one you got

[toxic skiff]

I've just downgraded the game version a couple of them back

[rough maple]

try pressing ctrl + shift + f

and search for require

just to confirm

everything is okay

[toxic skiff]

I have some but I'm pretty sure this ones are legit

[rough maple]

if you recognize all of them

its okay

just be more careful when getting free models from toolbox

[toxic skiff]

It wasn't me

[rough maple]

if you use it just for decorations and props just delete all the scripts inside

[toxic skiff]

I don't usually use toolbox

[rough maple]

tell them

anyone that is in your game

[toxic skiff]

Yeah I will

[rough maple]

for example

i dont think a tree needs to have a script

roblox always warns when there is a script inside

[quasi musk]

I would instantly fire the guy who inserted malicious file 🤣

[toxic skiff]

I've asked them, they said they haven't got any script pop out thing when that happend

[rough maple]

same

[quasi musk]

without further discussion

[rough maple]

his knowledge needs to be very big to execute a unknown script on a command bar

[toxic skiff]

😂

[quasi musk]

even if he didn't want to do this

[toxic skiff]

if it didn't got the game assets then I don't really mind

[rough maple]

even when you hover over a toolbox model, it shows under the name "has scripts"

[toxic skiff]

yeah I know that, he said it didn't had any

[rough maple]

he is lying

[toxic skiff]

maybe he was lying

[rough maple]

bad guy

what if he wanted to do this propositally 🤔

[toxic skiff]

Wait let me find the gui it was saying

But I know that it wasn't looking like the one you've sent

[toxic skiff]

what if HE made it

😂

[rough maple]

lemme see what this one does

huh

[toxic skiff]

what

[rough maple]

nvm

looks like

the same

but lemme see the content inside all scripts

[toxic skiff]

alright

[rough maple]

well

[north wedge]

** You are now Level 13! **

[rough maple]

it is pretty different

id say

[toxic skiff]

oh damn

[rough maple]

my pc cried

this one you sent is pretty different

the way it executes

at the end there is this

[toxic skiff]

so it may be more harmful?

[rough maple]

and the module script got that

this guy think he is farming aura doing that

[rough maple]

i cant really see what is inside

it crashes my roblox studio because it has many lines

my pc is already weak

[quasi musk]

You can move code to vsc

[rough maple]

this require has that script

and it requires another one

[toxic skiff]

this looks promising

[north wedge]

** You are now Level 3! **

[rough maple]

man

after 7 requires i found somethign

i'll just see what it does

[rough maple]

do you know someone called garfield?

[toxic skiff]

no

have you found something else?

[rough maple]

kinda

after all of this

i found this number

8154872098

it is a asset id

but it is private

[toxic skiff]

it's something Roact UI Framework Crash Course

Or probably it's fake

[muted nexus]

most modern backdoors will require an api to get the correct ids for requires

cuz most of the modules get deleted

u could try to find those

[dusty bloom]

you were right the first time; they compromise a project but not your account (unless it does something like insert inappropriate material into your game so they can report it and get you moderated, but most of the time its just a backdoor)

[dusty bloom]

if the developer is a scripter, fire them immediately. scripters in particular should know better than this

[dusty bloom]

the payload of these things is quite interesting, they hook into broad networks of these malicious scripts often across many accounts.

[dusty bloom]

usually they also prompt you to enable http services so they can send web requests from your project, such as sending over a copy of the project, and advertising servers to cheater websites so your game gets listed among other games that are also backdoored, so that kids who pay for this shit know which servers they can cheat on.

on top of this, there's usually a cheat menu / admin menu

but ya don't be fooled, the only reason this shit is so prevalent is because kids pay for it

there's money to be made, so this is just supply meeting demand. cheaters gonna cheat

Nothing stokes my ire like a cheater. Deception, duplicity, murder — these are merely tools in a toolbox one can use to ensure a job done well. But cheating? I cannot even wrap my head around the point of it. Wouldn't you know you had cheated? How on Earth could you maintain crisp certainty of your superiority to all others? And if you're unable to do that, what's the point of anything?
— The Administrator

[smoky birch]

if it's a backdoor, some ppl hides the code with encryption and use like httpservice to send info to them hoping u wouldn't notice it and publish ur game and someone plays it and then they got the info but idk what info man

could be like they're trying to steal ur stuff

or just make an exploit with encrypted username and then decrypt it afterward in the script and give them power at ur game but that sounds like super duper dumb idk

the power is like, they can have full server control and datastores control or smth and crash ppl and do smth bad to ur game that is against tos and bans u||that's like the worse case I think||

[toxic skiff]

It’s not, he is a builder

[toxic skiff]

Well, in the end I just reverted the game version a couple of versions back, where the pop-out wasn’t appearing. That shouldn’t be a problem, right?

[muted nexus]

there's an old type of malicious code that the only intention is to harm the game

by breaking it