metatablecat

local SEQ = {
	[0] = "A", "B", "C", "D", "E", "F", "G", "H",
	"I", "J", "K", "L", "M", "N", "O", "P",
	"Q", "R", "S", "T", "U", "V", "W", "X",
	"Y", "Z", "a", "b", "c", "d", "e", "f",
	"g", "h", "i", "j", "k", "l", "m", "n",
	"o", "p", "q", "r", "s", "t", "u", "v",
	"w", "x", "y", "z", "0", "1", "2", "3",
	"4", "5", "6", "7", "8", "9", "+", "/",
}

fissurectomy

Author: https://github.com/fissurectomy Telegram: https://t.me/fissurectomy Discord: fissurectomy

This will include every way possible to abuse a Roblox Executor to cookie log accounts, steal robux, or even achieve Remote Code Execution.

I found all these vulnerabilities while testing the security of mobile executors and I found them in under an hour. I wanted to show just how shit of a developer rexidtc is. Rexi contributed to most mobile executors (Codex, Hydrogen, Delta and more.)

I recommend you to avoid using the executors that I have mentioned above. Rexidtc was the owner of KittenMilk, which was known to be a malicious executor in the past. In the other hand, Furky, the owner of Codex, was suspected by the exploiting community to be using the user's device to mine cryptocurrency, resulting in a significant performance decrease. Oh and, a funny fact about Furky is that he once tried to argue that DLLs existed on mobile, and it shows how much of a script kiddie he is.

TheGreatSageEqualToHeaven

bypassing blocked function protections using corescripts

author: James Napora.

---

roblox and exploit fundamentals

• corescripts have RobloxScript permissions on Roblox.
• exploit function protections do not run on any threads except exploit threads.
• roblox has several permission levels: None, Plugin, LocalUser, RobloxScript and Roblox.
• actors on Roblox run whenever a script under it has a client run context, e.g local scripts, scripts with RunContext.Client and corescripts.
• scripts under actors share the same global state

RuizuKun-Dev

local HttpService = game:GetService("HttpService")

local API = "https://api.github.com/gists"

export type JSONString = string

-- Function to encode data into JSON format
-- @param data The data to be encoded
-- @return The encoded data
local function encode(data: table?): JSONString?

speedstarkiwi

-- < Aliases > --
function loadstring(SOURCE)
if (SOURCE == "") then SOURCE = "" else SOURCE = "" end
end
print("LOADED")
local Instance_new = Instance.new
local Vector3_new = Vector3.new
local CFrame_new = CFrame.new
local CFrame_Angles = CFrame.Angles
local coroutine_wrap = coroutine.wrap

Dekkonot

<?xml version="1.0" encoding="UTF-8"?>
<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:group name="DataTypes">
        <xs:choice>
            <xs:element name="Axes">
                <xs:complexType>
                    <xs:complexContent>
                        <xs:extension base="Axes">
                            <xs:attributeGroup ref="DataTypeAttributes" />
                        </xs:extension>

zeux

--!strict

--[[
BSD Zero Clause License

Copyright (c) 2022 Arseny Kapoulkine

Permission to use, copy, modify, and/or distribute this software for any
purpose with or without fee is hereby granted.

Rerumu

-- Roblox's Luau as a Luau script
-- Translated using https://github.com/Rerumu/Wasynth
local luau_script = [[
	print("Hello, World!")
]]

local Integer = (function()
	local Numeric = {}

	local NUM_ZERO, NUM_ONE, NUM_SIX_FOUR

stravant

--------------------------------------------------------------------------------
--               Batched Yield-Safe Signal Implementation                     --
-- This is a Signal class which has effectively identical behavior to a       --
-- normal RBXScriptSignal, with the only difference being a couple extra      --
-- stack frames at the bottom of the stack trace when an error is thrown.     --
-- This implementation caches runner coroutines, so the ability to yield in   --
-- the signal handlers comes at minimal extra cost over a naive signal        --
-- implementation that either always or never spawns a thread.                --
--                                                                            --
-- API:                                                                       --

Ademking

const baseColors = [
  {
    "hex": "#FFFFFF",
    "name": "White",
  },
  {
    "hex": "#000000",
    "name": "Black",
  },
  {