Prometheus icon indicating copy to clipboard operation
Prometheus copied to clipboard

[BUG] Script obfuscated with strong preset is always failing to execute inside Roblox environment!

Open Infraction7 opened this issue 2 years ago • 5 comments

So the bug is pretty weird so when trying to run obfuscated with strong preset script in roblox env it fails with error: attempt to call a nil value

Steps to reproduce:

  1. Obfuscate anything to run in roblox using strong preset (i used CLI)
  2. Place obtained script to a script in roblox studio and publish place then go to roblox serer
  3. Open console and you shall see an error

Screenshot: [Host]

Source script that is being obfuscated: (don't mind im obfuscating random things that shouldn't be obfuscated im just playing around)

local Scripts = game:GetService("ServerScriptService")["Server"]

for _, module in pairs(Scripts:GetChildren()) do
	if module:IsA("ModuleScript") then
		task.spawn(require(module))
	end
end

Infraction7 avatar Feb 24 '24 22:02 Infraction7

me when vm antitamper

SpinnySpiwal avatar Feb 25 '24 14:02 SpinnySpiwal

To be specific, the AntiTamper step (this has nothing to do with the VM) relies on debug.getinfo, which doesn't exist in the LuaU library. LuaU does have debug.info, which works slightly differently. I might make a PR soon to support this difference

9382 avatar Apr 22 '24 07:04 9382

Turns out fixing this is harder than I thought, since AntiTamper will avoid hard erroring if debug.sethook doesn't exist, but requires it to exist so that we don't become invalid anwyays. We should probably either just not try specific anti tamper logic if missing the functions it depends on or check beforehand and give a clear error message if missing stuff to avoid future issues like these

9382 avatar Apr 22 '24 10:04 9382

no because that opens a loophole to bypass it

SpinnySpiwal avatar Jul 29 '24 17:07 SpinnySpiwal

Adding the --LuaU command line option should in theory disable the parts of anti-tamper, that are not compatible with Roblox LuaU.

levno-710 avatar Aug 12 '24 11:08 levno-710