All about exploits #1 - Filtering Enabled Vulnerabilities

[@Vexeronix]

Exploiters can do many things, such as repeating/firing events that either are supposed to happen (example : You reload a weapon, sending an event to the server to change your ammo data) once or twice, and is not supposed to be tampered with by the user of the client or device. Exploiters can also Replicate their own lag, basically making it so that the sever takes 1 second to send info from you or you to the server, as in artificial ping.

[@ozymandeez]

I wouldnt really call fps unlocker exploiting... Because then half of the obby community are exploiters.

[@CopperCogStudio]

all of the things you said depend on a game's programming, so I won't talk about them for now. My game doesnt has those flaws because I dont trust the client with anything except inputs.

[@Vexeronix]

@@ozymandeez What do you mean FPS Unlocker?

[@chibisayori20]

​@@ozymandeez Any program injecting into the roblox process is automatically an exploit. Thus making half the obby community "exploiters", altrough unintentionally unlike malicious exploiters.

[@aoqia]

By that definition, a simple overlay such as MSI/RivaTuner would be classified as an exploit. That is not the case. @@chibisayori20

[@Idiskjsjsjjsjsjsbhshshshsh]

I've recently started working on a game that has almost 1000 players at any time, this of course was a new experience for me and was struggling to fend off the huge amount of exploiters storming at the game. Each time I patched an exploit one of them would just find a fix and share it to the others. It eventually got so bad that exploits were being made to crash servers, we had to pay them to find out how they were doing it. You have been of great help to help me fend of these zombies.

[@IndependentProgramD]

Thanks for the video, almost no other video on youtube actually properly explains FilteringEnabled and how exploiters bypass it.

[@dande3208]

Holy shit that intro is so good!

[@Likeable_Emmec]

cant wait for part 2, ill have my notify on for that! fantastic tutorial and i think you had a smart use of visual elements because it kept me very engaged, good luck on anything you do in the future!

[@CopperCogStudio]

gotta put those graphics for those ADHD kids

[@Raykiv]

I believe this is important and you should've brought it up! Exploiters can only play Animations made by Roblox or the game's creator (which could also be tied to a group)! Exploiters can only play malicious animations for themselves using joints and tweens! (Unless of course you have a backdoor from a free model)

[@SomeDudeCauseYes]

Theres was way to use animations without needing to be from creator.

[@Raykiv]

@@SomeDudeCauseYes That still exists but its only on client.

[@AgentThat]

Before its was Cframe animation

[@alt_baconxd]

exploiters can use CFrame animations and play anything

[@Raykiv]

@alt_baconxd Only IF the can manipulate parts initially. Otherwise no.

[@Mielesplayz]

it has been years since I've seen someone use an intro, I was surprised to see one, it looks so good!

[@CopperCogStudio]

Yeah i miss the yt era with intros

[@DSYNC-RONIZED]

​@@CopperCogStudioepic tpot intro btw

[@blocky074]

Great video, you always fail to disappoint!

[@Redstoniste]

My brain stopped working twice while reading that.

[@MarkedThing]

That's a very informative video for beginners, you compressed the details nicely and made it understandable!

[@dortuff]

Oh hell ye, as a dev I always wondered how most exploits work, like definitely not just how I'd imagen it goes about. Great work.

[@TryingMyName]

WAIT THATS THE TPOT INTRO RRRRAAHHHHH I LOVE BFDI

[@ComunPaixnator]

This video helped stop my intrusive thoughts from unplugging my grand auntie’s life support since she would not give me her cranberry pie recipe 😭

[@NexusVGM]

WHAT THE FUCK

[@john_bloxia]

Amazing video! You really explained stuff, and now Roblox makes so much sense now. Thank you! :)

[@wssoup]

Nice, a deeper dive into this with things like remotes and such would be cool

[@r50142]

They're essentially the same thing. Client sends a signal to the server, the server trusts the signal is legit and then it'll replicate whatever is happening to the other clients.

[@wssoup]

@@r50142 I know, im not talking about the basic stuff

[@krokach9386]

Bro i love your videos. I always wanted to know how do exploits work in roblox. Gotta love the simple and useful videos you do! Keep up the good job my guy!

[@vermamaerodriguez96]

I just got here for the first time and... YOU HAVE A BFDI:TPOT LIKE INTRO??? SUBSCRIBED WITH BELLS!!!!

[@CopperCogStudio]

Me and Kuko are working on a new intro with an original soundtrack.

[@nfroizey]

dang bro you pumping out so much content thats dedication congrats 👏

[@explodinghammeronthe17thof36]

Dude that intro was cool as heck eith awesome transitions

[@yesman7825]

Loved the video!!! As an exploiter i understood everything so easily, It would be great if you would talk about rejectcharacterdeleting being added on roblox meaning you cant do cool tricks with your hats anymore

[@kristopher3623]

Damn so you ruin fun for other people?

[@yesman7825]

@@kristopher3623 nah i dont use scripts like autofarms and those shit and even if i do i use it in vip servers, i mostly use like hat scripts to look cool and paid hubs for that

[@fitmotheyap]

​@@kristopher3623 why assume ruin fun? 99% are just to do cool stuff or ignore boring parts of a game

[@kristopher3623]

@@fitmotheyap I agree, there are some people (Decaying winter exploiters) Who can make the game more fun, but sometimes it's just not fun, specially in pvp focused games.

[@happyispoetic]

Bro FE era exploiting was crazy, exploiters could do ANYTHING they wanted to the game, like yes exactly the what ur thinking about rn, and that traumatized a bunch of kids for life so compared to current roblox alot of stuff were toned down

[@v_vuu]

I can tell you're a skid. It's not FE. FE is what stoped people from controlling games.

[@leogaitsgorypiano8870]

i think you mean the pre-FE era that was before roblox starting giving trust in only the players movements. people could just do anything they want since the server just trusted the client

[@tord5363]

My friend was forced to give head on Roblox super hero tycoon 💀💀

[@chibisayori20]

@@leogaitsgorypiano8870 why did they even trust client, it's not even a peer-to-peer game there was still a game server yet roblox thought it would be genius to fully trust the client and have any value the client changes be blindly accepted by server.

[@leogaitsgorypiano8870]

@@chibisayori20 cause roblox was small at the time and they didn't know what to do about exploiters, eventually they figured it out

[@Vastralix]

5:46 I need to learn how to do that I'm struggling to understand why other players can't see my building parts This video helps a lot for my exploits

[@12Duckz]

Really nice video, keep up the good work

[@Dlc1312]

What about reject character deletions ? 4:55

[@Aphr0D1si1ac]

honestly, this helped a lot Thanks for teaching something that I didn't know New Sub and I liked :D

[@MayhemDev]

So technically we are playing alone, but it just seems as we are playing with others?

[@santixio1987]

The intro looks like the tpot intro

[@CopperCogStudio]

it is!

[@danieldelgadillo9461]

keep growing my pal

[@Jake-wl2ol]

Love the intro man Will you discuss remote events next video?

[@Bulborb7]

i was definitely there, surely, probably, maybe, and seemingly.

[@_3XP]

nice new intro, also great vid!

[@hehecat72]

Best 7 minute of my life

[@v_vuu]

because you're a skid

[@ooftimestop4119]

You could (maybe) fix the invincibility thing (the deletion of the humanoid) by making the game kick you if it doesnt detect a humanoid in the player model.

[@b3c8143]

You can't because of Reject Character Deletions, because of that the humanoid will get deleted only on the client, if you disable it you will have a huge vulnerability to hat scripts (which are patched)

[@alexskorpik11play79]

DANG THE TPOT INTRO HITS HARD

[@Pulse-GG]

Quick information, destroying descendant of ur local player's character no longer replicates to the server

[@yarik_superpro]

Thank you roblox Now I waste like 4 weeks patching this things in my game!

[@doinic09]

There are 2 types of people who watch this video: exploiters and people looking to prevent them

[@Hexie094]

people who make explots already know all this stuff, its not hidden info or anything. Most people who use exploits are just script kiddies who have no idea how the stuff works anyway, they just push button on the GUI

[@dogeball2628]

me whos both:

[@NobaraPlushy]

nice job i didn't expect this to blow up as i expected ALSO IS THE BAD BUSIENSS FURRY GOIGN OT BE A BOSS

[@harsiscool]

tpot intro goes harddd

[@MuhammandRiyan]

LOVE THE INTRO MAN

[@BrokenDiskStudios961]

The tpot intro was pretty cool I guess

[@Nickhergamingdementia]

Guys should I also make a video about developing and how they make anticheats and show some vulnerabilities?

[@Karnate_]

Ayo 💀

[@brainset4619]

Sure make that shitty vid

[@yarik_superpro]

Oh bro you really helped me a lot to know how replication works so i can secure my game better.

[@dietz7390]

On another note, floormaterial no longer replicates from client to server. Youc an use that to make a flight anticheat

[@CopperCogStudio]

Real men dont use anticheats, we use server authoritative movement.

[@valiki5]

whyd i get recommened this i dont even know what the title means, great vid anyways

[@mausdaebom2457]

0:20 Sounds very familiar, WAIT THATS THE TPOT INTR-

[@Ashtri]

I was thinking about making my own server-sided anti-cheat, that can patch alot of exploits, thanks this video helps alot.

[@dddddd9225]

there are also raknet exploits, which let you disable any physics packets replicating from your client to the server.

[@utc_3]

raknet is just fancy word for networking aka: Disabling some replication to server

[@basteless]

Really well made video

[@Ultamite]

0:35 Ayo that’s the tpot intro

[@Gruhbb]

As a former exploiter, this is a very informative video.

[@stvr3s]

fr same

[@budotsbyopluuk9021]

U know how to make ur script too? :D I can

[@budotsbyopluuk9021]

​@@stvr3slol

[@ItzpoomAV1]

I already know this, but that is also enjoyable!

[@ITS_N00DLZ]

really well explained ! i love your content, really simple and straight to the point

[@skyracerz5074]

1:38 if it detects collision how do people with ping differences work? Why do I get hit by other people far away if my client did not have it?

[@Idiskjsjsjjsjsjsbhshshshsh]

He made another video for that.

[@rodricbr]

cheat engine times were the good old times of real exploiting

[@edgarzomboss7185]

now cover the topic of remote vulnerabilities, getrenv, getgc, changing modules, breaking data stores by executing remotes with arguments such as "\255" etc

[@CopperCogStudio]

this is specific to a game's programming so i wont cover it for now.

[@edgarzomboss7185]

@@CopperCogStudio btw, for now you can cancel this because currently, uwp roblox has byfron sooo

[@sheeppro1463]

bfdi: the power of two intro lol

[@therealorangemangoes]

another great vid bro

[@zTKL.]

that intro goes hard tho

[@apple_ilev5s]

since i know: the intro music is tpot gibberish

[@amalgat-lol]

The accessory scripts were fixed and are no longer exploitable (i mean i'm pretty sure)

[@Raishee]

bro has a whole anime intro

[@criticalprocessdied]

If the Server replicates anything that is happening within the client ( character model ) 5:03 does that mean when i move a part into my character will it automatically replicate onto the server? So if i move a part into my character and then delete it it will replicate onto server?

[@514komeiji5]

Wow please do more of this I want to learn how to prevent these things

[@opm_a-ngo2903]

congrats on hitt ing 3k bro

[@jynz_l]

Intro must have a reference

[@alepalex8343]

great intro inspired by the power of two!

[@AngusReallyKai]

Bro almost hit 3k rn good job 👍

[@Sansman888.]

I'm damn sure the reason why death on client replicates to server IS DUE TO RESET CHARACTER. You indeed need an local script to turn it on/off...reset char gui is local, as well as leave

[@sqk000]

what an epic intro

[@lancegoh301]

You used the tpot intro very well

[@alexroblox9745]

my face when new cc video:

[@exotic42069]

very useful for beginner exploiters

[@Dj_531]

Veery interesting, I'd love to hear you talk about actions occurring on the client but not the server next

[@CopperCogStudio]

The issue with this is that a client can do anything with the data in its world state so there's not really a point on talking about that.

[@deniedprosperity4144]

Roblox Studio: Why??

[@bsteg]

Underrated 🙏

[@leogaitsgorypiano8870]

in part 2 please say the difference between hacking and exploiting exploiting is changing your client and hacking is hacking into a game and doing whatever you want (or just hacking in general)

[@bowxd]

btw characters cant delete their client parts anymore

[@truestbluu]

haha i love the tpot reference!!!

[@Not1bacon]

Fun fact: Most f3x are cilent only

[@BruneBrickStudios]

soo underated :( + 1 sub and like!

[@Karnate_]

I have one words for all the developers "truly sucks to suck"

[@CopperCogStudio]

Good thing im imune to all exploits because i use server authoritative netcode!

[@Karnate_]

@@CopperCogStudio 🤯

[@Karnate_]

@@CopperCogStudio dam but it is still possible to bypass cuz exploiters and developers is like a cat and mouse game

[@CopperCogStudio]

@@Karnate_ not in this case, exploits rely on an existing vulnerability, but here there are none, skill based cheats will be unpatchable, but stuff like changing your character physics and stuff arr just not possible.

[@Karnate_]

@@CopperCogStudio dam you guys really be going great well exploiting just trying to keep up with you guys

[@tord5363]

Thanks for this video now I know how to use dark dex I’m very bad at LUA

[@zk7874]

I like the new intro 👍

[@hjanatlatl5699]

its just the TPOT intro what is a anmited film (on youtube edit)

[@vsrzar]

holy sh(wahwahwah) you are underrated

[@Cr0s5H34D]

synapse x is down, why even mention it as a part in the start? (0:13- 0:21)

[@nfroizey]

because it's literally the most popular roblox executor out there lol

[@erikas2272]

you should cover sanity checks next

[@kidkovak140]

Absolute W vid

[@SKYPORF]

Ayy tpot intro

[@tinpotstupid73]

filter enabled exploiters

[@Alexboi2391]

TPOT intro music bro

[@aayanscreativelab1786]

I will pretend to have understood

[@veerskL]

Have you heard of the glitch that freezes your game and makes you sometimes invincible,

[@CopperCogStudio]

yes, You hold the X cross on the window of the roblox client and it pauses all processes on the client.

[@mpollono]

mm yes give me more content to consume

[@EtherealLuna]

Damn That intro is mad goofy

[@The_Eggz]

Thanks for this information I can now make my own exploi-

[@Faab.]

thats facts bro

[@FoolishBugle]

some information that you might not know!!! - hackers dont actually noclip they just removed walls on their client Edit: not all hackers i forgot to add (thanks replies)

[@edgarzomboss7185]

note to other people: this is false

[@leogaitsgorypiano8870]

that works but most exploiters can just turn off collision on their charactor or delete humanoid

[@joeschmoe6287]

@@leogaitsgorypiano8870 no they dont? where did you hear that from

[@k1ng0f]

I like this

[@b_mbyz]

bro +2k in 13 days 🔥

[@clixis]

TPOT intro!!