Exploring Backdoors

Tutorial
1

Hello, Cookie Tech!

Today, I will be exploring backdoors, to try and find who made them!

image
image1498×550 7.93 KB

First, @luke noticed that there was a backdoor in our game!

Very kindly, they removed it!

But… who made it?

First of all, I had to go to roblox.com. I went to the Creator Library (or whatever it’s called) and found a random model.

Then I pasted the ID of the module that it inserted. And I found this:

image
image2224×466 67.5 KB

Yeah, a throwaway account made it. But I noticed it was following someone…

image
image2224×601 61.3 KB

So, I thought this was the person who made the virus, no?

Upon searching their account, I noticed there were a handful of accounts named similar:

image
image1920×1173 112 KB

So, did they have any relation? None of them made “Modules”

I guess it’s forever a mystery.

Tips to prevent backdoors:

  1. Deny script injection to untrustworthy plug-ins.

  2. Download plug-ins with some popularity, not just ones with 0 upvotes.

  3. Don’t use free models. They are meant to have a rough idea of what the finished product will look like.

How to remove backdoors:

  1. Upon noticing the virus, disable script injection for all plug-ins.

  2. Remove free-models

  3. Now, go into the virus.

  4. Viruses are often hidden by notes, such as this;

- - Do not delete this script! We need it to render trees properly!




require:(12334589282)
  1. Delete the script

You’re clear!

Hope this helped!

2 Likes
2

Why change the code? You are simply flooding the developer console with “Hello World”. And if anything, the function require is used to insert an animation or something into your game, even Basic Admin Essentials uses require to insert the actual admin into the game.

1 Like
3

Hm, alright,

You could delete the script.

Search up the ID, if it’s something suspicious, probably a virus.

4

As to changing the code which wont help, that code is incorrect:

It would be print("Hello world!")

5

Apologies, if I’m wrong.

This is how me and @HayHay dewlt with it.

6

This code is incorrect though, it wouldn’t work.

7

Oh, sorry. I don’t script much.

8

I believe @Noah once mentioned a long time back (by a long time, I mean months ago) about some trustworthy plugin that can detect “require” scripts called GameGuard Plugin

9

It’s pretty much easy to make a plug-in like that.

Plugins can get access to Script.Source, which basically is just text of the code. (Example: if we added print(“hi”) to the script, it will return that.) You aren’t able to get or change the source through a regular script though. It checks if the source contains require() and can delete it.

This can be abused though, as a plugin can claim to be friendly, but can add a script which contains malicious code.

10

I have seen these in my games why are they bad

11

They can still your games, lag your game & just ruin your game in general.

12

This seems pretty inefficient. That code would just flood output.

13

Yeah, just delete the script. I got to fix that.